This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HgYzdglRXxT98vBw_2jl4fGfGgM.roa File: HgYzdglRXxT98vBw_2jl4fGfGgM.roa (raw, json) Hash identifier: rW2tGQ6uGGjjMGhHArWLEYqHd0OtdfCSNepGzx7ntnI= Subject key identifier: 1E:06:33:76:09:51:5F:14:FD:F2:F0:70:FF:68:E5:E1:F1:9F:1A:03 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B0DCE6A496041A94F2D01DB6549E22E89 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HgYzdglRXxT98vBw_2jl4fGfGgM.roa Signing time: Thu 11 Dec 2025 14:26:30 +0000 ROA not before: Thu 11 Dec 2025 14:26:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10753 IP address blocks: 62.192.120.0/23 maxlen: 23 62.192.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ce:6a:49:60:41:a9:4f:2d:01:db:65:49:e2:2e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 11 14:26:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1e06337609515f14fdf2f070ff68e5e1f19f1a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:9b:5d:6d:fb:86:23:39:6b:6f:e3:a3:0b: 17:74:d3:e1:64:de:0b:92:4c:09:5f:8f:92:3b:0e: dc:7e:b3:08:e7:97:d7:97:32:db:92:e3:67:e5:7a: 17:77:d6:7a:0c:df:08:93:38:b8:68:b0:98:69:1f: 74:43:56:b2:1d:a2:9f:eb:e7:68:09:57:c2:8e:e5: d8:06:05:f3:d9:f3:53:13:5d:20:f3:8c:c9:69:b5: c2:27:b2:91:2a:a7:b9:26:c2:e6:a0:3e:3d:93:8b: db:9c:fb:1b:c7:91:26:82:03:3c:c7:b1:3a:14:e7: 07:24:5e:16:92:a8:4e:94:b3:26:ba:2a:d2:1d:89: 79:d0:a9:59:39:36:de:6e:65:d1:b0:47:a1:33:95: eb:24:90:93:8f:c9:d6:26:0e:32:13:23:ec:e1:35: d7:6c:ac:eb:da:88:3e:f7:ef:41:5b:7e:43:c6:42: ff:c4:2e:1d:8d:a4:4b:55:d1:ce:59:17:47:40:7d: 39:62:db:b4:58:57:74:6d:f9:7d:7f:26:a5:14:8b: aa:14:d8:be:9d:90:c5:83:53:7f:2d:1c:4a:d9:70: e3:22:e5:0e:7e:df:b1:bb:ea:81:a5:74:76:28:3a: c3:86:90:08:2d:fe:2c:cc:59:8f:14:e9:2f:7d:5f: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:06:33:76:09:51:5F:14:FD:F2:F0:70:FF:68:E5:E1:F1:9F:1A:03 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/HgYzdglRXxT98vBw_2jl4fGfGgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.120.0/22 Signature Algorithm: sha256WithRSAEncryption 26:d3:56:46:96:00:20:80:a5:72:fd:a8:c0:a1:cc:23:7b:cd: 0c:29:5d:db:02:0d:ed:4d:2e:8c:04:63:24:5b:17:1b:c3:ac: 0b:86:ca:0a:82:e0:f5:ea:93:82:31:0f:0f:90:94:74:a3:07: f0:fe:79:76:bc:3d:fd:d7:e1:e2:47:77:5c:f9:33:18:ee:dd: 9d:21:04:1e:e8:73:20:80:b4:60:df:b0:d7:49:3a:a5:cd:10: 0a:0d:92:ea:ff:20:6d:1a:8a:ea:a7:30:19:7a:6e:f2:d2:25: 9a:17:b9:fc:22:d0:90:27:53:25:ec:ad:b0:c4:5d:d0:4d:eb: f6:0f:f9:76:c1:a8:19:bb:91:b8:9d:53:27:f0:ff:53:7e:eb: 9d:66:c5:8d:a9:be:bb:f4:ac:7c:42:2a:a9:70:ad:02:32:d3: 76:2b:97:a2:17:38:07:e8:c9:b5:ce:6f:df:0b:0d:28:cb:36: 11:76:fe:09:02:db:49:31:60:1a:6d:a8:23:d0:f3:25:39:ea: 12:ac:ac:f7:6e:61:10:08:53:bd:45:ac:30:b8:7d:1b:d2:0d: 9e:84:61:d6:1b:f0:dc:f4:fc:79:af:c6:7d:54:06:db:97:e4: 1c:ef:67:ce:2a:7f:7c:a2:33:0d:22:45:ed:a8:d2:95:83:4b: 39:c4:45:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsNzmpJYEGpTy0B22VJ4i6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjExMTQyNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTA2MzM3NjA5NTE1ZjE0ZmRmMmYwNzBmZjY4ZTVlMWYxOWYxYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdubXW37hiM5a2/jowsXdNPhZN4L kkwJX4+SOw7cfrMI55fXlzLbkuNn5XoXd9Z6DN8Ikzi4aLCYaR90Q1ayHaKf6+do CVfCjuXYBgXz2fNTE10g84zJabXCJ7KRKqe5JsLmoD49k4vbnPsbx5EmggM8x7E6 FOcHJF4WkqhOlLMmuirSHYl50KlZOTbebmXRsEehM5XrJJCTj8nWJg4yEyPs4TXX bKzr2og+9+9BW35DxkL/xC4djaRLVdHOWRdHQH05Ytu0WFd0bfl9fyalFIuqFNi+ nZDFg1N/LRxK2XDjIuUOft+xu+qBpXR2KDrDhpAILf4szFmPFOkvfV8bEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4GM3YJUV8U/fLwcP9o5eHxnxoDMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvSGdZemRnbFJYeFQ5OHZCd18yamw0ZkdmR2dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPsB4MA0G CSqGSIb3DQEBCwUAA4IBAQAm01ZGlgAggKVy/ajAocwje80MKV3bAg3tTS6MBGMk Wxcbw6wLhsoKguD16pOCMQ8PkJR0owfw/nl2vD391+HiR3dc+TMY7t2dIQQe6HMg gLRg37DXSTqlzRAKDZLq/yBtGorqpzAZem7y0iWaF7n8ItCQJ1Ml7K2wxF3QTev2 D/l2wagZu5G4nVMn8P9TfuudZsWNqb679Kx8QiqpcK0CMtN2K5eiFzgH6Mm1zm/f Cw0oyzYRdv4JAttJMWAabagj0PMlOeoSrKz3bmEQCFO9RawwuH0b0g2ehGHWG/Dc 9Px5r8Z9VAbbl+Qc72fOKn98ojMNIkXtqNKVg0s5xEVF -----END CERTIFICATE-----Generated at Sat Dec 13 02:32:58 2025 by rpki-client