This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5TTJKOieKVeblDq4lkt4TJ5yqds.roa
File: 5TTJKOieKVeblDq4lkt4TJ5yqds.roa (raw, json)
Hash identifier: Y9hlxBI9sdFDreAUO9WJxVmtJu8DiKfE9boumMRpOB8=
Subject key identifier: E5:34:C9:28:E8:9E:29:57:9B:94:3A:B8:96:4B:78:4C:9E:72:A9:DB
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019B37CAB4746FA1EDF83F2FF856837B0EEC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5TTJKOieKVeblDq4lkt4TJ5yqds.roa
Signing time: Fri 19 Dec 2025 18:06:29 +0000
ROA not before: Fri 19 Dec 2025 18:06:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213462
IP address blocks: 62.50.140.0/22 maxlen: 24
62.50.140.0/24 maxlen: 24
62.50.141.0/24 maxlen: 24
62.50.142.0/24 maxlen: 24
62.50.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 17:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:ca:b4:74:6f:a1:ed:f8:3f:2f:f8:56:83:7b:0e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Dec 19 18:06:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e534c928e89e29579b943ab8964b784c9e72a9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:f2:f7:d5:ed:b4:6c:76:70:7b:4a:0e:e7:
bf:49:08:4e:7a:a2:6c:4a:15:69:a8:50:c7:36:70:
ef:9e:66:cb:a3:90:ed:c2:ce:21:0e:8d:3f:16:af:
08:c5:b9:05:bf:9d:74:1e:10:dc:85:c0:ce:f7:de:
d6:e5:85:ed:48:14:d1:22:37:07:e0:9e:6a:64:f3:
09:2e:2b:1f:88:e7:c3:65:29:6d:ab:4d:08:8d:f0:
97:84:b9:6e:f8:20:80:24:6d:cd:4f:8a:36:28:6b:
ec:d5:3f:83:a4:8f:74:33:6e:b3:15:90:db:46:fa:
b5:b5:1e:0b:7f:b3:6b:17:c9:ad:ab:5b:96:41:39:
93:cb:53:2f:c6:01:78:09:4e:0c:c7:91:39:a9:96:
9b:da:ff:00:b8:cd:ed:cf:cc:25:99:42:bc:2f:7c:
e9:94:66:67:f9:6b:a7:01:e8:0b:f1:09:a0:ac:04:
7a:48:c2:e0:b1:2b:1d:56:47:86:75:e5:de:17:fe:
55:60:15:fd:7c:df:5f:63:c3:65:f4:f1:9e:71:bc:
0a:5e:89:24:8d:08:0d:70:33:98:7a:fa:ef:3c:71:
0f:25:a1:86:d8:84:a6:97:60:f7:53:e0:69:8f:03:
f7:67:2f:f2:43:3f:00:6d:91:fd:f1:fc:07:21:ab:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:34:C9:28:E8:9E:29:57:9B:94:3A:B8:96:4B:78:4C:9E:72:A9:DB
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/5TTJKOieKVeblDq4lkt4TJ5yqds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.50.140.0/22
Signature Algorithm: sha256WithRSAEncryption
10:09:0c:79:0b:27:c7:e8:e5:93:db:04:ed:8c:b9:96:bc:c6:
e5:5a:40:b8:f5:00:3c:6f:59:7b:37:3f:fd:c5:1c:a8:3d:34:
7c:07:ad:9c:06:bb:ea:86:01:38:a6:d8:c8:7a:fc:12:e0:0f:
5c:40:6d:a9:f5:d1:9a:eb:19:b6:1e:b4:09:24:2b:dd:3e:8f:
ab:d5:d1:82:d1:27:ff:01:38:4a:48:6c:19:6d:53:f2:8c:b1:
50:65:77:5e:f8:ee:6c:50:f0:aa:5d:28:d4:8f:45:b2:d5:3e:
76:5a:4a:70:6f:f1:9a:73:5a:7e:57:e9:b5:6b:ff:b1:62:5d:
ee:e8:5a:fb:9e:71:c7:4a:89:95:e8:47:04:9d:c7:c3:e1:90:
0a:db:79:b0:6d:01:3c:ae:03:92:8e:7a:ff:a0:be:cc:22:71:
c8:d0:9e:d6:5a:45:0c:ab:ab:52:90:68:76:36:34:31:3b:c6:
56:54:7e:7e:63:54:1e:9c:14:ae:5d:10:07:f8:83:c6:90:88:
62:77:24:89:29:81:77:70:66:df:a4:fe:8b:35:86:f3:2a:29:
8f:1b:9b:05:3f:e7:78:d6:5e:ee:27:37:aa:5c:8d:e5:26:dd:
9b:45:f6:3f:4f:cc:e2:b7:58:5f:49:5e:3b:e5:d9:1a:9b:50:
5c:5a:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:20:54 2025 by rpki-client