This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JhGoTHTgK9uAvxousdDy2yvkdOY.roa File: JhGoTHTgK9uAvxousdDy2yvkdOY.roa (raw, json) Hash identifier: ubdVpnMArrjYf1nMWCk8EuktMarmyzQgj3fZ2Jr6JaU= Subject key identifier: 26:11:A8:4C:74:E0:2B:DB:80:BF:1A:2E:B1:D0:F2:DB:2B:E4:74:E6 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019AB6604D06C07A6ADD42059548F304E578 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JhGoTHTgK9uAvxousdDy2yvkdOY.roa Signing time: Mon 24 Nov 2025 14:59:15 +0000 ROA not before: Mon 24 Nov 2025 14:59:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8368 IP address blocks: 62.192.102.0/23 maxlen: 23 62.192.114.0/23 maxlen: 23 62.192.126.0/23 maxlen: 23 213.169.204.0/23 maxlen: 23 213.169.240.0/23 maxlen: 23 217.8.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:60:4d:06:c0:7a:6a:dd:42:05:95:48:f3:04:e5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 24 14:59:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2611a84c74e02bdb80bf1a2eb1d0f2db2be474e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:af:d9:95:10:21:a1:cc:02:f5:ed:80:bf: 69:78:85:c6:18:fb:7c:33:05:f1:9e:56:2c:b6:f2: 02:84:56:06:b8:b5:0b:54:83:22:d0:91:d0:56:21: 5e:77:c5:0d:e7:a7:a9:45:cc:c5:20:2c:dc:f1:15: 3b:57:e9:c1:b5:11:c1:7c:48:cf:c0:95:bc:ec:5d: ec:50:ff:29:c6:bc:59:9c:ea:53:92:51:bb:46:9b: 91:9d:7b:ba:53:31:ff:d3:c1:72:9a:a4:72:7f:6b: b2:74:f9:83:cb:1b:f5:92:54:ec:13:bc:44:1b:e9: f8:ba:e6:b1:bb:fe:a8:4b:c2:31:d7:db:b3:46:eb: fc:f3:3d:19:c1:86:05:99:c8:2f:5f:c9:cd:ff:a1: 02:22:b0:cc:70:49:75:7f:c2:8b:70:64:1d:b9:55: 22:9e:2d:a4:15:17:ed:57:7e:ca:95:90:66:6c:c0: cd:90:19:50:34:e6:2f:f3:98:c7:d5:e5:32:b3:78: 57:fb:12:cc:73:21:36:ac:d0:68:be:18:db:b6:2b: 84:26:66:88:8a:f4:49:2b:63:c6:79:22:a0:e0:28: 5f:20:ef:8c:be:cf:43:de:46:4f:31:50:2b:d6:a2: 73:db:96:06:d4:d7:5b:7e:4f:f1:8d:bf:f8:d8:22: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:11:A8:4C:74:E0:2B:DB:80:BF:1A:2E:B1:D0:F2:DB:2B:E4:74:E6 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/JhGoTHTgK9uAvxousdDy2yvkdOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.102.0/23 62.192.114.0/23 62.192.126.0/23 213.169.204.0/23 213.169.240.0/23 217.8.222.0/23 Signature Algorithm: sha256WithRSAEncryption cf:7c:31:f7:49:7d:48:3a:a0:77:ee:b3:7b:f3:aa:33:40:3b: e0:8e:18:09:c8:e0:76:77:ec:a1:bf:c8:32:7d:fa:fb:6a:f0: f5:46:02:8b:06:a4:fa:1d:48:ce:61:41:28:e1:b3:8d:02:18: f7:c9:25:85:b7:08:9c:e3:60:35:11:1d:16:44:1f:9c:8c:07: 84:11:af:4a:2f:06:de:e6:c3:61:92:07:36:91:62:38:64:dd: 91:b1:75:5c:b9:d1:11:da:a1:fb:b0:d8:e4:b6:47:e1:4c:0c: ec:ab:79:23:a6:f9:9f:f0:13:80:8d:8b:f7:29:ad:a6:f7:0f: b6:da:a6:07:a7:8a:09:37:df:d1:4f:7a:4b:5f:2d:b3:40:86: 61:fa:6e:9c:39:b9:df:c6:70:ff:37:48:41:24:55:8d:16:3f: 25:d3:53:59:ab:56:78:89:aa:df:6d:50:bc:a0:c0:b9:20:eb: a6:6a:1a:d5:73:6a:a7:4d:43:a2:fe:31:ff:e5:df:3c:cd:73: 4f:36:c6:99:d4:b6:bc:63:28:57:05:92:61:0d:f0:c4:d1:24: 50:a7:bb:67:96:11:8c:de:09:bf:88:46:33:30:96:2e:15:98: af:34:11:73:5c:eb:dc:d7:70:35:0c:ac:7c:9f:e0:69:7b:2f: b0:08:f2:99 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZq2YE0GwHpq3UIFlUjzBOV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTI0MTQ1OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjExYTg0Yzc0ZTAyYmRiODBiZjFhMmViMWQwZjJkYjJiZTQ3NGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wqv2ZUQIaHMAvXtgL9peIXGGPt8 MwXxnlYstvIChFYGuLULVIMi0JHQViFed8UN56epRczFICzc8RU7V+nBtRHBfEjP wJW87F3sUP8pxrxZnOpTklG7RpuRnXu6UzH/08FymqRyf2uydPmDyxv1klTsE7xE G+n4uuaxu/6oS8Ix19uzRuv88z0ZwYYFmcgvX8nN/6ECIrDMcEl1f8KLcGQduVUi ni2kFRftV37KlZBmbMDNkBlQNOYv85jH1eUys3hX+xLMcyE2rNBovhjbtiuEJmaI ivRJK2PGeSKg4ChfIO+Mvs9D3kZPMVAr1qJz25YG1Ndbfk/xjb/42CJ0YwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFCYRqEx04CvbgL8aLrHQ8tsr5HTmMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvSmhHb1RIVGdLOXVBdnhvdXNkRHkyeXZrZE9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBPsBmAwQB PsByAwQBPsB+AwQB1anMAwQB1anwAwQB2QjeMA0GCSqGSIb3DQEBCwUAA4IBAQDP fDH3SX1IOqB37rN786ozQDvgjhgJyOB2d+yhv8gyffr7avD1RgKLBqT6HUjOYUEo 4bONAhj3ySWFtwic42A1ER0WRB+cjAeEEa9KLwbe5sNhkgc2kWI4ZN2RsXVcudER 2qH7sNjktkfhTAzsq3kjpvmf8BOAjYv3Ka2m9w+22qYHp4oJN9/RT3pLXy2zQIZh +m6cObnfxnD/N0hBJFWNFj8l01NZq1Z4iarfbVC8oMC5IOumahrVc2qnTUOi/jH/ 5d88zXNPNsaZ1La8YyhXBZJhDfDE0SRQp7tnlhGM3gm/iEYzMJYuFZivNBFzXOvc 13A1DKx8n+Bpey+wCPKZ -----END CERTIFICATE-----Generated at Thu Dec 4 07:45:39 2025 by rpki-client