This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fXHqIe8G8E4ZKfdExzFWmzsrRYg.roa File: fXHqIe8G8E4ZKfdExzFWmzsrRYg.roa (raw, json) Hash identifier: af28/JwPkzFCKGPsJvfI+ROXTDoYTg0k5gqFd5X9E1E= Subject key identifier: 7D:71:EA:21:EF:06:F0:4E:19:29:F7:44:C7:31:56:9B:3B:2B:45:88 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14AE1D44CE4AEE8220AD928C0F8316 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fXHqIe8G8E4ZKfdExzFWmzsrRYg.roa Signing time: Fri 02 Jan 2026 14:20:20 +0000 ROA not before: Fri 02 Jan 2026 14:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 62.192.98.0/23 maxlen: 23 62.192.104.0/23 maxlen: 23 62.192.116.0/23 maxlen: 23 62.192.118.0/23 maxlen: 23 213.169.216.0/23 maxlen: 23 213.169.246.0/23 maxlen: 23 213.169.250.0/23 maxlen: 23 213.169.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ae:1d:44:ce:4a:ee:82:20:ad:92:8c:0f:83:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d71ea21ef06f04e1929f744c731569b3b2b4588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f5:f9:7c:4b:3e:e6:90:c1:d9:05:ee:ba:1b: ee:f5:53:dc:2c:c2:4b:3f:06:db:fc:cd:de:38:44: 8c:25:47:94:a5:92:b4:71:28:0b:03:2f:16:97:29: 7f:6e:47:83:eb:f1:d6:77:6a:c1:d2:9b:4c:45:29: 06:68:08:64:2e:7b:93:86:86:3c:91:50:99:e5:d4: a6:aa:43:77:2d:9d:d8:4a:db:04:12:21:eb:34:13: 23:31:67:d7:f4:6f:83:07:41:24:36:80:89:3b:87: 0e:14:a4:cc:5e:16:a4:c5:33:4d:95:51:aa:34:68: 88:fe:f4:a8:92:ce:c6:5c:3a:06:2c:93:d7:55:94: d9:ae:99:f9:04:3a:d7:1d:1e:8d:72:85:ac:f2:a7: c7:06:23:25:ba:01:b7:09:69:6e:b9:de:2c:b7:ff: e2:1e:a3:35:17:50:26:3a:9e:8d:e4:23:bc:fd:08: 8e:37:62:89:ab:b3:53:d3:66:e5:a9:45:41:5a:7e: 8f:17:36:35:74:b4:d1:37:fb:b2:54:ec:26:ef:df: bc:28:67:46:b6:3e:a2:a7:9f:1f:34:62:75:8c:49: 84:56:5a:61:88:ad:bc:30:a3:e4:12:b1:9d:2d:3c: 00:c1:ba:fc:39:88:af:65:f8:86:6c:6a:54:14:67: 34:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:71:EA:21:EF:06:F0:4E:19:29:F7:44:C7:31:56:9B:3B:2B:45:88 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fXHqIe8G8E4ZKfdExzFWmzsrRYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.98.0/23 62.192.104.0/23 62.192.116.0/22 213.169.216.0/23 213.169.246.0/23 213.169.250.0-213.169.253.255 Signature Algorithm: sha256WithRSAEncryption c7:94:9c:a1:24:bb:d0:75:0b:0a:19:90:42:cf:92:01:8b:3a: 35:57:e9:6e:01:7c:5a:9d:10:a1:67:ef:11:65:ad:28:28:fe: 67:94:41:87:06:6e:6f:5d:0d:d4:06:b3:66:fa:68:6f:74:9b: ce:37:46:41:5b:6d:2d:80:34:af:a1:84:b1:22:40:e5:69:12: b3:ea:03:5d:ca:d5:d8:f4:6e:26:df:a1:cd:94:7d:e6:42:e8: 3d:c6:0c:35:82:0a:bb:07:ab:1b:f0:25:e3:cd:fa:39:94:ac: 73:aa:86:b5:61:ea:a3:a6:7a:61:bd:d9:66:6b:66:0d:99:a9: 77:bb:e1:21:00:aa:cb:d2:34:d6:e6:d7:2e:45:78:6a:4b:a6: 62:a4:34:21:11:b7:f0:e6:bd:bf:ec:ea:6a:34:ff:e8:75:12: aa:a2:87:07:11:30:f9:94:f7:50:8b:8b:c9:89:3e:06:35:f8: d4:5a:1c:5e:9c:9d:2f:b8:2c:19:bc:d0:58:4d:eb:23:ca:80: 6c:02:07:16:08:83:f5:41:28:ae:9d:3a:b5:d9:e1:8f:13:d1: fd:59:78:34:f9:dd:e5:f6:37:30:26:2c:d1:8f:62:09:3a:31: f3:68:91:cd:3d:b0:da:b1:28:21:25:66:d6:00:77:64:a5:68: 5d:db:0b:73 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt/FK4dRM5K7oIgrZKMD4MWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDcxZWEyMWVmMDZmMDRlMTkyOWY3NDRjNzMxNTY5YjNiMmI0NTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/X5fEs+5pDB2QXuuhvu9VPcLMJL Pwbb/M3eOESMJUeUpZK0cSgLAy8Wlyl/bkeD6/HWd2rB0ptMRSkGaAhkLnuThoY8 kVCZ5dSmqkN3LZ3YStsEEiHrNBMjMWfX9G+DB0EkNoCJO4cOFKTMXhakxTNNlVGq NGiI/vSoks7GXDoGLJPXVZTZrpn5BDrXHR6NcoWs8qfHBiMlugG3CWluud4st//i HqM1F1AmOp6N5CO8/QiON2KJq7NT02blqUVBWn6PFzY1dLTRN/uyVOwm79+8KGdG tj6ip58fNGJ1jEmEVlphiK28MKPkErGdLTwAwbr8OYivZfiGbGpUFGc00wIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFH1x6iHvBvBOGSn3RMcxVps7K0WIMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvZlhIcUllOEc4RTRaS2ZkRXh6RldtenNyUllnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBPsBiAwQB PsBoAwQCPsB0AwQB1anYAwQB1an2MAwDBAHVqfoDBAHVqfwwDQYJKoZIhvcNAQEL BQADggEBAMeUnKEku9B1CwoZkELPkgGLOjVX6W4BfFqdEKFn7xFlrSgo/meUQYcG bm9dDdQGs2b6aG90m843RkFbbS2ANK+hhLEiQOVpErPqA13K1dj0bibfoc2UfeZC 6D3GDDWCCrsHqxvwJePN+jmUrHOqhrVh6qOmemG92WZrZg2ZqXe74SEAqsvSNNbm 1y5FeGpLpmKkNCERt/Dmvb/s6mo0/+h1EqqihwcRMPmU91CLi8mJPgY1+NRaHF6c nS+4LBm80FhN6yPKgGwCBxYIg/VBKK6dOrXZ4Y8T0f1ZeDT53eX2NzAmLNGPYgk6 MfNokc09sNqxKCElZtYAd2SlaF3bC3M= -----END CERTIFICATE-----Generated at Tue Jan 20 12:46:20 2026 by rpki-client