This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/jW2Kd8f2Y-5PTueI923nik1n0Jw.roa File: jW2Kd8f2Y-5PTueI923nik1n0Jw.roa (raw, json) Hash identifier: /La4N20ywy5Sq3GPdObU0wHV90I37vBf0FTBSDxouTU= Subject key identifier: 8D:6D:8A:77:C7:F6:63:EE:4F:4E:E7:88:F7:6D:E7:8A:4D:67:D0:9C Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1 Certificate serial: 019B79ED0529D1364311F98323997B14A127 Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/jW2Kd8f2Y-5PTueI923nik1n0Jw.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214461 IP address blocks: 62.113.59.0/24 maxlen: 24 111.88.134.0/24 maxlen: 24 128.0.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:05:29:d1:36:43:11:f9:83:23:99:7b:14:a1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d6d8a77c7f663ee4f4ee788f76de78a4d67d09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:27:3d:d6:11:1a:e8:e8:ee:d7:92:ef:15:2f: 6f:93:4c:5d:b0:be:a6:ed:20:be:ed:d9:56:7e:f9: d4:5a:5a:f5:0e:24:6f:33:3f:61:e7:b9:9b:f1:df: fa:72:f8:b7:b7:23:3c:c6:27:e9:4c:1b:5b:ae:5d: 14:17:88:0f:ea:4e:8f:82:e1:9a:c0:3f:01:69:ec: 22:14:d4:98:e5:e2:e0:75:2a:46:eb:fa:84:b9:1a: 16:4a:b6:c0:51:e0:3d:2d:ec:9c:79:06:3d:0b:a2: 05:f5:02:a9:36:3b:0f:e4:89:6b:18:d6:71:46:19: 62:dd:40:8d:67:fe:45:36:46:61:ba:f5:73:a8:f3: ff:31:9c:5d:09:9b:4c:7b:c9:19:dc:86:17:59:06: 89:99:4c:6a:c0:ac:f1:44:b7:b6:0f:60:ef:ea:9e: ad:3f:14:fe:d2:4c:38:74:da:1d:18:bb:0e:1d:01: a6:22:11:6a:a8:32:e4:35:0c:24:bf:28:a5:db:36: a1:ed:f8:f2:d9:93:2e:2f:42:90:80:3d:22:6c:a9: a6:bd:4a:b3:a6:08:91:b2:df:0c:a8:60:26:01:57: 42:a8:05:60:7e:7d:b7:6d:53:8f:b4:2a:0e:8e:a7: 6a:86:59:51:d8:51:e9:49:a5:fd:7e:16:69:0f:79: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6D:8A:77:C7:F6:63:EE:4F:4E:E7:88:F7:6D:E7:8A:4D:67:D0:9C X509v3 Authority Key Identifier: keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/jW2Kd8f2Y-5PTueI923nik1n0Jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.59.0/24 111.88.134.0/24 128.0.67.0/24 Signature Algorithm: sha256WithRSAEncryption 41:15:5c:bf:2f:44:a9:86:f2:81:61:48:68:76:90:1b:60:19: 89:14:ac:5a:36:cd:11:01:b3:43:ae:6d:86:59:93:77:a0:c0: cc:e2:87:88:b1:10:d3:29:fe:ef:fb:b7:ca:1c:1d:40:57:c5: 08:c3:52:1d:96:ce:a7:3b:72:b2:48:b5:81:d8:16:b0:58:00: 07:88:44:1f:2d:28:cf:ab:70:3d:ef:65:b9:1f:13:5e:e8:31: 73:db:fd:bf:17:0e:32:ca:89:72:f2:86:6d:5c:b6:02:3e:d3: 85:b7:4c:44:65:df:4a:31:f4:7e:5e:0c:f0:4b:15:33:27:4f: b5:8b:7b:0c:95:83:ce:71:6f:15:6e:3b:46:87:c8:63:5c:a8: 27:a1:56:b7:a2:33:bd:03:51:55:60:47:da:3e:2a:a8:d1:7a: 59:af:b6:84:b5:32:ff:03:ab:fd:46:6c:56:40:cd:f4:0a:a0: 13:64:a0:58:73:ad:3a:49:dc:9d:21:36:b5:67:3e:ad:41:d0: 49:f6:78:59:c6:ca:f3:42:e3:86:7a:e0:53:57:76:cd:c5:53: 57:13:3f:12:47:a5:eb:c7:cc:7c:db:3d:2f:90:fd:8a:44:ad: a7:c5:43:f1:05:e1:76:a3:ba:84:28:db:99:19:68:d3:03:46: 41:6e:8c:99 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57QUp0TZDEfmDI5l7FKEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2 ODc2YTEwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDZkOGE3N2M3ZjY2M2VlNGY0ZWU3ODhmNzZkZTc4YTRkNjdkMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyc91hEa6Oju15LvFS9vk0xdsL6m 7SC+7dlWfvnUWlr1DiRvMz9h57mb8d/6cvi3tyM8xifpTBtbrl0UF4gP6k6PguGa wD8BaewiFNSY5eLgdSpG6/qEuRoWSrbAUeA9LeyceQY9C6IF9QKpNjsP5IlrGNZx Rhli3UCNZ/5FNkZhuvVzqPP/MZxdCZtMe8kZ3IYXWQaJmUxqwKzxRLe2D2Dv6p6t PxT+0kw4dNodGLsOHQGmIhFqqDLkNQwkvyil2zah7fjy2ZMuL0KQgD0ibKmmvUqz pgiRst8MqGAmAVdCqAVgfn23bVOPtCoOjqdqhllR2FHpSaX9fhZpD3lDLQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI1tinfH9mPuT07niPdt54pNZ9CcMB8GA1UdIwQY MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt ZWVjNDg4NWM0ZjhkLzEvalcyS2Q4ZjJZLTVQVHVlSTkyM25pazFuMEp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPnE7AwQA b1iGAwQAgABDMA0GCSqGSIb3DQEBCwUAA4IBAQBBFVy/L0SphvKBYUhodpAbYBmJ FKxaNs0RAbNDrm2GWZN3oMDM4oeIsRDTKf7v+7fKHB1AV8UIw1Idls6nO3KySLWB 2BawWAAHiEQfLSjPq3A972W5HxNe6DFz2/2/Fw4yyoly8oZtXLYCPtOFt0xEZd9K MfR+XgzwSxUzJ0+1i3sMlYPOcW8VbjtGh8hjXKgnoVa3ojO9A1FVYEfaPiqo0XpZ r7aEtTL/A6v9RmxWQM30CqATZKBYc606SdydITa1Zz6tQdBJ9nhZxsrzQuOGeuBT V3bNxVNXEz8SR6Xrx8x82z0vkP2KRK2nxUPxBeF2o7qEKNuZGWjTA0ZBboyZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:32 2026 by rpki-client