This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/O84TiktUTDmqp9HPKq_a4s9Lzuk.roa File: O84TiktUTDmqp9HPKq_a4s9Lzuk.roa (raw, json) Hash identifier: Jhfzc6xhP7JnVN+M5+svL9R9y4LbxwfuXDo/44kDQ1o= Subject key identifier: 3B:CE:13:8A:4B:54:4C:39:AA:A7:D1:CF:2A:AF:DA:E2:CF:4B:CE:E9 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019ABA4D8D2224012770D204BCAA6AE87F9C Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/O84TiktUTDmqp9HPKq_a4s9Lzuk.roa Signing time: Tue 25 Nov 2025 09:17:15 +0000 ROA not before: Tue 25 Nov 2025 09:17:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19695 IP address blocks: 62.105.192.0/21 maxlen: 24 217.8.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 09:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:4d:8d:22:24:01:27:70:d2:04:bc:aa:6a:e8:7f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 25 09:17:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3bce138a4b544c39aaa7d1cf2aafdae2cf4bcee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:74:eb:bb:42:61:2f:53:aa:79:6e:39:25: d5:25:7f:27:e4:e1:4c:7d:14:fa:1b:74:19:24:1d: 9d:17:6d:87:a9:7e:48:07:b8:dd:39:41:fd:28:22: 6e:13:1f:bb:1c:fe:8c:55:40:c8:04:7c:fa:ab:2f: 93:c2:28:f6:1a:c4:b9:c1:6c:92:96:bd:bf:40:a7: 6c:39:1d:1d:78:3f:82:64:c6:d0:f3:80:2d:52:ba: c5:9c:b4:a0:c5:2a:8e:1e:d9:9a:b0:90:f1:37:17: 7c:fd:52:06:1c:27:1f:90:d5:fb:bb:0a:9f:92:32: 02:59:c1:c1:6d:3b:86:81:23:90:bf:69:a8:89:ed: 1a:77:ca:cf:99:c4:f3:65:7a:bf:2c:05:98:61:8d: 92:81:50:b5:c5:6c:1f:48:c9:4e:92:e0:4b:2d:3d: 83:64:73:f2:ae:76:fb:20:9f:50:3d:90:d4:46:85: 73:ef:76:38:85:f7:71:d2:5e:0c:a3:b3:95:80:64: 6d:3e:d1:65:89:fb:f2:d7:19:68:80:da:77:44:41: 3d:38:44:71:6a:b0:dc:37:92:88:18:df:d9:ae:fb: 16:a9:45:c3:3b:3c:67:fd:58:ed:88:eb:d6:84:cb: af:fe:6a:05:f9:bf:dd:4e:7e:fe:53:71:0e:ef:6a: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CE:13:8A:4B:54:4C:39:AA:A7:D1:CF:2A:AF:DA:E2:CF:4B:CE:E9 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/O84TiktUTDmqp9HPKq_a4s9Lzuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.105.192.0/21 217.8.208.0/21 Signature Algorithm: sha256WithRSAEncryption 41:e2:10:ba:6a:f0:77:28:44:d5:e9:5b:7f:32:d4:2a:a9:3d: 0e:b6:f3:60:7d:d4:3d:8c:fa:c8:03:92:f9:ef:eb:2d:a3:6c: a9:c9:0c:d5:cc:2d:f5:5e:dd:37:0d:a3:cb:fe:7a:a2:cd:4e: a9:1e:0f:5b:a0:16:5b:f9:a4:63:8a:43:a3:4e:ea:f1:5d:b3: 27:37:4b:95:a5:ee:50:94:cc:06:d1:8d:5b:af:23:2e:06:16: 9e:78:64:5b:52:ab:e5:cb:3e:51:70:c4:23:4b:8e:7b:3c:63: 0d:b0:4a:04:95:0a:e6:78:00:72:9a:03:6a:d0:6e:b9:fc:05: 30:f9:ff:e4:bb:ab:74:58:af:78:dc:df:cc:35:3e:24:5a:4b: 0c:4d:9e:c1:8a:9d:e7:45:85:cd:ee:78:67:0d:c4:ec:d8:69: 98:a0:31:d9:19:2e:d0:53:5d:87:2d:c0:73:1d:90:00:39:05: fc:b2:90:f7:f7:c2:27:8a:5d:8f:92:b8:8c:cd:58:06:6d:21: fb:46:61:3e:c4:b2:b3:3a:6e:02:0b:d7:9a:c0:a4:7d:0d:1e: 23:64:f8:c9:0a:be:d8:e0:1b:c6:1a:85:06:3e:ac:9f:5b:8f: cd:0b:5b:70:91:f3:c7:5d:ff:85:98:6c:1e:0a:35:32:cb:df: 27:b1:d4:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq6TY0iJAEncNIEvKpq6H+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTI1MDkxNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmNlMTM4YTRiNTQ0YzM5YWFhN2QxY2YyYWFmZGFlMmNmNGJjZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoV067tCYS9TqnluOSXVJX8n5OFM fRT6G3QZJB2dF22HqX5IB7jdOUH9KCJuEx+7HP6MVUDIBHz6qy+Twij2GsS5wWyS lr2/QKdsOR0deD+CZMbQ84AtUrrFnLSgxSqOHtmasJDxNxd8/VIGHCcfkNX7uwqf kjICWcHBbTuGgSOQv2moie0ad8rPmcTzZXq/LAWYYY2SgVC1xWwfSMlOkuBLLT2D ZHPyrnb7IJ9QPZDURoVz73Y4hfdx0l4Mo7OVgGRtPtFlifvy1xlogNp3REE9OERx arDcN5KIGN/ZrvsWqUXDOzxn/VjtiOvWhMuv/moF+b/dTn7+U3EO72p6CQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDvOE4pLVEw5qqfRzyqv2uLPS87pMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvTzg0VGlrdFVURG1xcDlIUEtxX2E0czlMenVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDPmnAAwQD 2QjQMA0GCSqGSIb3DQEBCwUAA4IBAQBB4hC6avB3KETV6Vt/MtQqqT0OtvNgfdQ9 jPrIA5L57+sto2ypyQzVzC31Xt03DaPL/nqizU6pHg9boBZb+aRjikOjTurxXbMn N0uVpe5QlMwG0Y1bryMuBhaeeGRbUqvlyz5RcMQjS457PGMNsEoElQrmeABymgNq 0G65/AUw+f/ku6t0WK943N/MNT4kWksMTZ7Bip3nRYXN7nhnDcTs2GmYoDHZGS7Q U12HLcBzHZAAOQX8spD398Inil2PkriMzVgGbSH7RmE+xLKzOm4CC9eawKR9DR4j ZPjJCr7Y4BvGGoUGPqyfW4/NC1twkfPHXf+FmGweCjUyy98nsdT3 -----END CERTIFICATE-----Generated at Tue Nov 25 12:55:48 2025 by rpki-client