This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/2cmX08_0V60RWF0NslF7i3pXlAo.roa File: 2cmX08_0V60RWF0NslF7i3pXlAo.roa (raw, json) Hash identifier: nfPNJ+jZk0+vBMF+SJPszNxsUeIOP8xR0alKK3Fgjiw= Subject key identifier: D9:C9:97:D3:CF:F4:57:AD:11:58:5D:0D:B2:51:7B:8B:7A:57:94:0A Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B7EA67354A84DE0E8FBB1C33427EA19FE Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/2cmX08_0V60RWF0NslF7i3pXlAo.roa Signing time: Fri 02 Jan 2026 12:19:56 +0000 ROA not before: Fri 02 Jan 2026 12:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197333 IP address blocks: 62.33.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 23:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:73:54:a8:4d:e0:e8:fb:b1:c3:34:27:ea:19:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 2 12:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9c997d3cff457ad11585d0db2517b8b7a57940a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:16:db:77:06:1a:9d:a7:cc:f0:ce:a1:f9: bf:72:b3:c7:da:04:87:9a:ab:cf:28:78:c1:b3:4a: a5:40:28:c8:27:79:16:d3:d9:53:13:84:12:fd:48: 22:6c:3f:7c:3e:4e:96:09:83:10:99:cb:f0:69:99: 7e:0e:34:dd:3a:d6:3f:67:3b:31:dc:e7:2e:85:51: 0c:5e:9d:e1:e3:c3:aa:76:c3:61:e8:4e:fb:80:ef: 30:b4:64:ae:d2:d2:b2:35:64:28:9a:35:b5:c9:64: 40:04:6f:88:46:0e:a8:ee:25:d4:e2:e8:61:bf:2c: 59:5c:42:2b:45:95:9e:1c:89:e0:9c:e4:1e:be:04: f9:87:7d:37:4e:87:f1:03:da:ab:22:2a:b4:fb:0b: 7a:af:ac:b9:b4:98:3e:00:62:33:f7:e2:72:aa:17: 1d:17:4b:a3:56:52:67:68:77:0d:08:b8:e4:5e:d8: 8d:9f:ad:58:ae:d4:23:6c:ab:e0:12:7d:87:90:fe: 4e:32:9b:e3:12:6a:bd:d0:24:77:b1:da:94:2d:ec: 53:8e:e3:93:3a:74:68:c2:a7:e8:23:3a:3c:fe:80: 45:b4:0d:c5:51:80:29:f6:1d:b8:75:56:09:98:61: ae:cf:db:36:26:aa:ea:05:43:33:68:56:40:d0:ac: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C9:97:D3:CF:F4:57:AD:11:58:5D:0D:B2:51:7B:8B:7A:57:94:0A X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/2cmX08_0V60RWF0NslF7i3pXlAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.33.24.0/24 Signature Algorithm: sha256WithRSAEncryption 69:cc:86:de:62:54:90:d9:2d:fa:f5:6d:47:0a:34:fc:e3:54: 12:5c:b0:36:aa:5f:1e:66:33:fd:62:12:59:c6:5a:ab:97:fa: a9:85:33:21:47:84:bb:4e:7e:67:b4:d6:4a:8c:36:2d:99:f1: 2f:30:4c:a9:f9:51:1a:e4:04:dd:69:c0:d2:7e:48:a7:17:50: 0e:7d:d2:9a:eb:df:05:d7:1d:79:92:a7:36:12:ff:18:4c:36: 2c:03:18:07:32:a6:b6:87:b2:ba:73:7f:8b:34:89:5b:ce:ec: 9b:92:0b:24:0c:65:d0:a6:4b:22:74:45:14:a0:0f:95:d3:59: 96:31:02:67:02:3f:03:5f:c9:b4:1f:96:90:bf:31:73:aa:3f: 28:34:cc:de:8b:8c:f2:9e:0d:fc:50:9e:a9:de:1c:89:f0:27: 3c:ec:e4:4d:a5:ca:18:f6:c7:be:ad:78:6c:22:f8:11:9d:c0: 59:a2:e6:ae:45:1d:7c:68:33:60:30:f6:2c:89:30:fc:98:cc: c3:66:49:ad:1b:49:8f:6f:36:8a:5f:b7:d8:e6:dd:48:e2:64: 84:66:7a:2c:c0:c7:2a:31:7d:75:5d:cb:85:52:5c:6a:41:da: 16:1d:97:88:50:11:2f:6f:ee:4d:35:7c:c0:6f:89:b5:f4:65: 84:ed:bc:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pnNUqE3g6PuxwzQn6hn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjYwMTAyMTIxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWM5OTdkM2NmZjQ1N2FkMTE1ODVkMGRiMjUxN2I4YjdhNTc5NDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLEW23cGGp2nzPDOofm/crPH2gSH mqvPKHjBs0qlQCjIJ3kW09lTE4QS/UgibD98Pk6WCYMQmcvwaZl+DjTdOtY/Zzsx 3OcuhVEMXp3h48OqdsNh6E77gO8wtGSu0tKyNWQomjW1yWRABG+IRg6o7iXU4uhh vyxZXEIrRZWeHIngnOQevgT5h303TofxA9qrIiq0+wt6r6y5tJg+AGIz9+Jyqhcd F0ujVlJnaHcNCLjkXtiNn61YrtQjbKvgEn2HkP5OMpvjEmq90CR3sdqULexTjuOT OnRowqfoIzo8/oBFtA3FUYAp9h24dVYJmGGuz9s2JqrqBUMzaFZA0Kw0VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnJl9PP9FetEVhdDbJRe4t6V5QKMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvMmNtWDA4XzBWNjBSV0YwTnNsRjdpM3BYbEFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPiEYMA0G CSqGSIb3DQEBCwUAA4IBAQBpzIbeYlSQ2S369W1HCjT841QSXLA2ql8eZjP9YhJZ xlqrl/qphTMhR4S7Tn5ntNZKjDYtmfEvMEyp+VEa5ATdacDSfkinF1AOfdKa698F 1x15kqc2Ev8YTDYsAxgHMqa2h7K6c3+LNIlbzuybkgskDGXQpksidEUUoA+V01mW MQJnAj8DX8m0H5aQvzFzqj8oNMzei4zyng38UJ6p3hyJ8Cc87ORNpcoY9se+rXhs IvgRncBZouauRR18aDNgMPYsiTD8mMzDZkmtG0mPbzaKX7fY5t1I4mSEZnoswMcq MX11XcuFUlxqQdoWHZeIUBEvb+5NNXzAb4m19GWE7bxG -----END CERTIFICATE-----Generated at Sat Jan 31 07:24:44 2026 by rpki-client