This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/YJW2E58R8TGTMYcVtuV2rsRxaO8.roa File: YJW2E58R8TGTMYcVtuV2rsRxaO8.roa (raw, json) Hash identifier: YBA/qYhpHhNFXspw03XsXcvb6WMdqj9LTQkg1z/GYUk= Subject key identifier: 60:95:B6:13:9F:11:F1:31:93:31:87:15:B6:E5:76:AE:C4:71:68:EF Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24 Certificate serial: 019B78A33CBB2AA1A83D20325486CEAF9197 Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/YJW2E58R8TGTMYcVtuV2rsRxaO8.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15541 IP address blocks: 62.121.128.0/24 maxlen: 24 62.121.129.0/24 maxlen: 24 62.121.130.0/24 maxlen: 24 62.121.131.0/24 maxlen: 24 62.121.132.0/24 maxlen: 24 62.121.133.0/24 maxlen: 24 62.121.135.0/24 maxlen: 24 62.121.136.0/24 maxlen: 24 62.121.138.0/24 maxlen: 24 62.121.141.0/24 maxlen: 24 62.121.142.0/24 maxlen: 24 62.121.143.0/24 maxlen: 24 62.121.144.0/24 maxlen: 24 62.121.145.0/24 maxlen: 24 62.121.146.0/24 maxlen: 24 62.121.148.0/24 maxlen: 24 62.121.150.0/24 maxlen: 24 62.121.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3c:bb:2a:a1:a8:3d:20:32:54:86:ce:af:91:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6095b6139f11f13193318715b6e576aec47168ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7d:4e:21:bd:7f:3a:9b:6f:32:57:32:26:ab: c0:04:f6:0b:b8:e2:ab:05:ec:85:80:1f:b8:b4:02: 0d:1b:cf:18:ab:11:c8:ff:eb:b3:72:db:4d:9e:4a: ed:70:f9:61:a1:71:7f:7b:63:0d:69:cf:8c:23:87: c7:73:63:86:df:45:33:6e:76:9b:42:1f:d8:d8:95: 69:e8:c9:38:42:24:4d:92:f2:02:f5:5c:7d:bf:bb: 0f:2f:d3:fa:fa:2e:41:ca:d3:65:6f:3e:9f:a3:f3: dd:81:67:80:e2:2c:03:40:4b:8c:f2:6c:72:7c:dc: af:29:68:85:eb:f4:97:4c:a2:46:13:8b:32:25:0f: b3:a6:26:b2:9b:e6:72:86:df:b6:df:77:83:d0:17: 38:2b:64:0d:59:c1:7c:54:37:b6:6c:91:a2:0e:8e: a4:e2:75:1b:b4:39:1b:c8:dc:ab:87:9c:8a:26:a7: f3:b9:55:a1:45:c2:e4:af:19:5e:c1:1a:cd:6f:74: 04:f2:5d:ee:87:c9:fe:8a:a8:9c:6d:4c:78:2e:59: 99:d6:3f:c6:09:2c:d7:95:bd:d4:e3:2d:5c:0b:fd: 49:c4:c4:92:28:f8:f6:c8:37:80:37:41:bf:98:ac: e8:e4:3f:3f:28:9b:61:5e:77:cd:ee:12:8d:eb:02: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:95:B6:13:9F:11:F1:31:93:31:87:15:B6:E5:76:AE:C4:71:68:EF X509v3 Authority Key Identifier: keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/YJW2E58R8TGTMYcVtuV2rsRxaO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.121.128.0-62.121.133.255 62.121.135.0-62.121.136.255 62.121.138.0/24 62.121.141.0-62.121.146.255 62.121.148.0/24 62.121.150.0/24 62.121.152.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:d2:4f:a8:20:1b:26:15:06:4f:00:80:10:0e:bc:86:03:2a: 2c:d6:24:ed:6c:2e:5b:ad:e5:0d:00:a4:5d:2e:10:d0:5c:dc: 9d:f4:fa:ce:70:98:c2:ab:ee:78:0c:13:b4:aa:32:59:e9:15: cf:7f:1b:2e:b8:89:4b:e4:02:9d:7f:ec:9b:53:3e:eb:5f:09: 59:d0:72:a6:13:76:4a:b3:ee:ea:37:90:e0:61:22:ff:b0:00: b6:47:33:1a:1b:bf:83:65:33:88:15:02:18:b4:21:d4:a2:69: d5:6b:da:9f:62:47:23:a0:4b:71:88:a5:07:3e:e8:51:ae:26: 34:c4:bd:72:5a:85:d5:f5:32:4c:3c:c1:96:ec:ab:62:16:76: b8:6b:1f:1d:44:81:9a:d0:41:d9:53:4e:0a:54:e9:1a:bf:8d: 64:60:51:96:d0:5d:88:28:31:4e:0a:03:96:53:88:44:39:42: ee:9d:88:89:25:31:bc:23:e9:a8:47:36:37:4c:3a:69:b0:e1: 96:e7:09:c5:6a:69:c1:e5:de:03:bc:b2:ba:4a:d9:4f:12:2a: 39:e1:f2:7d:1b:cb:5f:21:ec:82:5a:5d:1f:d8:e9:d8:80:03: 2b:dd:b7:6f:36:0e:83:ca:87:f4:4e:21:e7:d1:f6:8d:5a:b8: 41:ab:b0:05 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt4ozy7KqGoPSAyVIbOr5GXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWMxMDUwZDNhOTMyMGFiOWYwY2UyYjM2NWEwOTdlZTQx MzRiMjQwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDk1YjYxMzlmMTFmMTMxOTMzMTg3MTViNmU1NzZhZWM0NzE2OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8X1OIb1/OptvMlcyJqvABPYLuOKr BeyFgB+4tAING88YqxHI/+uzcttNnkrtcPlhoXF/e2MNac+MI4fHc2OG30Uzbnab Qh/Y2JVp6Mk4QiRNkvIC9Vx9v7sPL9P6+i5BytNlbz6fo/PdgWeA4iwDQEuM8mxy fNyvKWiF6/SXTKJGE4syJQ+zpiaym+Zyht+233eD0Bc4K2QNWcF8VDe2bJGiDo6k 4nUbtDkbyNyrh5yKJqfzuVWhRcLkrxlewRrNb3QE8l3uh8n+iqicbUx4LlmZ1j/G CSzXlb3U4y1cC/1JxMSSKPj2yDeAN0G/mKzo5D8/KJthXnfN7hKN6wIU6wIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFGCVthOfEfExkzGHFbbldq7EcWjvMB8GA1UdIwQY MBaAFJLsEFDTqTIKufDOKzZaCX7kE0skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjIt YWJkNGM1YzliMzc0LzEvWUpXMkU1OFI4VEdUTVljVnR1VjJyc1J4YU84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mNTE2ZjYtZDVhMC00MDg2LTk0ZjItYWJkNGM1YzliMzc0 LzEva3V3UVVOT3BNZ3E1OE00ck5sb0pmdVFUU3lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBAc+eYAD BAE+eYQwDAMEAD55hwMEAD55iAMEAD55ijAMAwQAPnmNAwQAPnmSAwQAPnmUAwQA PnmWAwQAPnmYMA0GCSqGSIb3DQEBCwUAA4IBAQAd0k+oIBsmFQZPAIAQDryGAyos 1iTtbC5breUNAKRdLhDQXNyd9PrOcJjCq+54DBO0qjJZ6RXPfxsuuIlL5AKdf+yb Uz7rXwlZ0HKmE3ZKs+7qN5DgYSL/sAC2RzMaG7+DZTOIFQIYtCHUomnVa9qfYkcj oEtxiKUHPuhRriY0xL1yWoXV9TJMPMGW7KtiFna4ax8dRIGa0EHZU04KVOkav41k YFGW0F2IKDFOCgOWU4hEOULunYiJJTG8I+moRzY3TDppsOGW5wnFamnB5d4DvLK6 StlPEio54fJ9G8tfIeyCWl0f2OnYgAMr3bdvNg6Dyof0TiHn0faNWrhBq7AF -----END CERTIFICATE-----Generated at Sun Jan 11 20:15:54 2026 by rpki-client