This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/82BMAWWYub9fBzrJnQqF5wO_zCI.roa File: 82BMAWWYub9fBzrJnQqF5wO_zCI.roa (raw, json) Hash identifier: 9yVCOd4C26dTbc8k/UH3xEGlu74j5hdx/tzhXDnnuiE= Subject key identifier: F3:60:4C:01:65:98:B9:BF:5F:07:3A:C9:9D:0A:85:E7:03:BF:CC:22 Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a Certificate serial: 019B7C1245809820B4FDA1F01769E2FC0CA4 Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/82BMAWWYub9fBzrJnQqF5wO_zCI.roa Signing time: Fri 02 Jan 2026 00:18:50 +0000 ROA not before: Fri 02 Jan 2026 00:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41032 IP address blocks: 62.201.192.0/24 maxlen: 24 62.201.199.0/24 maxlen: 24 62.201.200.0/22 maxlen: 22 62.201.200.0/24 maxlen: 24 62.201.201.0/24 maxlen: 24 62.201.203.0/24 maxlen: 24 62.201.204.0/24 maxlen: 24 62.201.205.0/24 maxlen: 24 62.201.207.0/24 maxlen: 24 62.201.208.0/24 maxlen: 24 62.201.210.0/24 maxlen: 24 62.201.237.0/24 maxlen: 24 62.201.248.0/24 maxlen: 24 62.201.250.0/24 maxlen: 24 2a02:b60:1::/48 maxlen: 48 2a02:b60:2::/48 maxlen: 48 2a02:b60:3::/48 maxlen: 48 2a02:b60:4::/48 maxlen: 48 2a02:b60:5::/48 maxlen: 48 2a02:b60:6::/48 maxlen: 48 2a02:b60:7::/48 maxlen: 48 2a02:b60:8::/48 maxlen: 48 2a02:b60:9::/48 maxlen: 48 2a02:b60:a::/48 maxlen: 48 2a02:b60:b::/48 maxlen: 48 2a02:b60:c::/48 maxlen: 48 2a02:b60:d::/48 maxlen: 48 2a02:b60:e::/48 maxlen: 48 2a02:b60:f::/48 maxlen: 48 2a02:b60:10::/48 maxlen: 48 2a02:b60:11::/48 maxlen: 48 2a02:b60:2000::/35 maxlen: 35 2a02:b60:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:45:80:98:20:b4:fd:a1:f0:17:69:e2:fc:0c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3604c016598b9bf5f073ac99d0a85e703bfcc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:3f:53:63:a3:94:ae:96:97:c8:b4:10:48: 3a:9d:e9:8f:bf:19:ae:16:0b:c5:33:c2:0d:d1:e1: 7e:fb:8d:14:56:b8:bf:1e:f3:09:0a:6e:ac:90:42: 9a:96:70:1d:51:4f:84:3d:ad:bf:bf:4a:27:ba:3f: e6:42:fc:99:1e:b6:3e:ea:81:ff:c5:2c:3c:c5:a4: a4:52:c8:ce:92:9d:44:ab:22:72:14:bc:69:28:29: 04:ce:ac:ab:ba:90:9e:ac:97:b5:37:65:30:e0:e7: 07:8a:6b:7d:f5:93:1b:ad:55:1b:c6:50:6c:75:fb: c8:38:86:df:90:4b:4d:02:30:53:cf:9c:8c:8c:94: 91:4c:d5:07:d1:28:48:57:77:7a:39:f6:08:fc:bd: 0b:8f:0c:f3:81:fd:49:89:f4:0b:17:aa:d8:f3:ce: b8:6b:ee:7f:f7:58:5d:01:80:0e:82:4c:a5:e3:36: a2:32:03:88:70:0f:01:98:7d:df:1c:88:b0:a5:36: 69:7c:8d:ff:69:54:bd:58:cb:85:68:07:6b:92:1f: 4e:32:93:e2:12:fb:b0:6a:a3:3a:2a:a0:69:21:3e: 69:2c:a5:4a:b0:cb:46:66:c0:8c:12:82:43:b9:e6: 10:70:5e:44:41:96:a9:8d:86:e7:8a:88:e2:11:7e: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:60:4C:01:65:98:B9:BF:5F:07:3A:C9:9D:0A:85:E7:03:BF:CC:22 X509v3 Authority Key Identifier: keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/82BMAWWYub9fBzrJnQqF5wO_zCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.201.192.0/24 62.201.199.0-62.201.205.255 62.201.207.0-62.201.208.255 62.201.210.0/24 62.201.237.0/24 62.201.248.0/24 62.201.250.0/24 IPv6: 2a02:b60:1::-2a02:b60:11:ffff:ffff:ffff:ffff:ffff 2a02:b60:2000::/35 Signature Algorithm: sha256WithRSAEncryption 83:54:51:79:a0:d2:02:42:ee:ca:5b:1e:d7:1c:be:ce:73:cf: 8d:a3:53:3e:45:e3:11:0b:82:98:2b:72:54:66:c9:84:46:f0: a7:e3:29:3f:98:58:a4:a5:1a:74:53:e5:78:60:17:3f:03:36: 96:8c:b2:6f:4f:fa:7a:3d:f5:94:b7:ba:5c:8a:d3:52:2b:f0: c2:cd:59:a7:9c:44:57:b0:4d:1f:e3:2d:82:55:13:1b:02:b8: 1e:0e:09:68:e4:d2:cd:c8:bc:43:54:58:fc:24:c0:0f:8e:3f: dd:20:84:e0:08:a0:34:d1:cd:ce:a8:aa:64:47:a8:26:0c:fc: b2:ac:fc:06:19:1a:c7:a4:7d:63:28:74:47:f6:3c:bb:63:8c: 74:40:64:c8:e9:26:5a:f2:44:d5:c2:8b:65:cd:48:26:e2:e3: c6:1f:0c:81:5c:49:e6:8f:25:0c:97:98:1e:90:95:f6:e1:32: 47:5c:55:b7:18:c6:12:37:cf:07:cb:47:e7:0b:96:25:d7:e9: 4e:8d:40:52:ce:4b:f5:dd:49:c0:b1:88:53:f7:5f:08:f5:49: 0a:84:9c:67:b7:43:fb:c4:0f:46:5e:bd:11:b0:a6:2e:57:36: aa:c0:e0:eb:d9:e4:54:e8:4f:4f:e8:41:1c:c0:a5:3d:b2:8a: eb:9d:94:32 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgISAZt8EkWAmCC0/aHwF2ni/AykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh MTI4MmEwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzYwNGMwMTY1OThiOWJmNWYwNzNhYzk5ZDBhODVlNzAzYmZjYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmU/U2OjlK6Wl8i0EEg6nemPvxmu FgvFM8IN0eF++40UVri/HvMJCm6skEKalnAdUU+EPa2/v0onuj/mQvyZHrY+6oH/ xSw8xaSkUsjOkp1EqyJyFLxpKCkEzqyrupCerJe1N2Uw4OcHimt99ZMbrVUbxlBs dfvIOIbfkEtNAjBTz5yMjJSRTNUH0ShIV3d6OfYI/L0Ljwzzgf1JifQLF6rY8864 a+5/91hdAYAOgkyl4zaiMgOIcA8BmH3fHIiwpTZpfI3/aVS9WMuFaAdrkh9OMpPi EvuwaqM6KqBpIT5pLKVKsMtGZsCMEoJDueYQcF5EQZapjYbniojiEX7j2QIDAQAB o4ICYTCCAl0wHQYDVR0OBBYEFPNgTAFlmLm/Xwc6yZ0KhecDv8wiMB8GA1UdIwQY MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt ZTdiZTVlMzBhZDJkLzEvODJCTUFXV1l1YjlmQnpySm5RcUY1d09fekNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBABAIAATA6AwQAPsnAMAwD BAA+yccDBAE+ycwwDAMEAD7JzwMEAD7J0AMEAD7J0gMEAD7J7QMEAD7J+AMEAD7J +jAiBAIAAjAcMBIDBwAqAgtgAAEDBwEqAgtgABADBgUqAgtgIDANBgkqhkiG9w0B AQsFAAOCAQEAg1RReaDSAkLuylse1xy+znPPjaNTPkXjEQuCmCtyVGbJhEbwp+Mp P5hYpKUadFPleGAXPwM2loyyb0/6ej31lLe6XIrTUivwws1Zp5xEV7BNH+MtglUT GwK4Hg4JaOTSzci8Q1RY/CTAD44/3SCE4AigNNHNzqiqZEeoJgz8sqz8Bhkax6R9 Yyh0R/Y8u2OMdEBkyOkmWvJE1cKLZc1IJuLjxh8MgVxJ5o8lDJeYHpCV9uEyR1xV txjGEjfPB8tH5wuWJdfpTo1AUs5L9d1JwLGIU/dfCPVJCoScZ7dD+8QPRl69EbCm Llc2qsDg69nkVOhPT+hBHMClPbKK652UMg== -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:45 2026 by rpki-client