This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/60Xae7Pjw8tJiGdhuUevkCC6lVc.roa File: 60Xae7Pjw8tJiGdhuUevkCC6lVc.roa (raw, json) Hash identifier: P01mqzfXFRGS+b4/1Gz/ryTye0dhzSCQuvvx/eSQDtE= Subject key identifier: EB:45:DA:7B:B3:E3:C3:CB:49:88:67:61:B9:47:AF:90:20:BA:95:57 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019BD0373B1406CE6C91E56D364A1243B4B4 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/60Xae7Pjw8tJiGdhuUevkCC6lVc.roa Signing time: Sun 18 Jan 2026 08:27:19 +0000 ROA not before: Sun 18 Jan 2026 08:27:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.81.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 20:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:37:3b:14:06:ce:6c:91:e5:6d:36:4a:12:43:b4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 18 08:27:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb45da7bb3e3c3cb49886761b947af9020ba9557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:6d:92:08:a3:a6:90:48:81:9d:d0:ed:ef: 66:22:62:5a:b1:1d:cb:11:03:ff:ce:e9:48:74:44: 9c:fa:cb:6b:c0:d3:08:0c:ba:ad:61:24:93:61:8a: 67:92:7b:16:60:0f:8a:b4:2a:7c:2e:1c:5d:ff:ca: cb:b2:e0:7a:a3:13:9a:28:86:c1:35:d0:5e:43:12: 09:98:cb:3a:a1:10:64:9a:b5:5a:bb:14:85:e0:3b: 2b:26:cd:26:66:48:22:4e:4d:08:eb:1a:45:eb:d5: 71:a4:4e:75:fc:8b:e6:8e:55:e5:09:61:ad:fa:5a: c7:21:50:7a:f6:27:9b:89:90:07:d7:40:b4:c4:55: 23:b6:7d:d2:8a:ef:66:cb:8c:f5:b8:75:7b:16:9f: 04:a1:b5:ba:be:b8:bb:b4:07:5a:ec:bc:1d:13:a5: ea:0a:df:0e:0b:ae:c1:5c:31:04:fa:02:36:97:ed: 03:9e:a4:8f:50:47:89:95:e8:cc:e3:61:8c:a9:2c: 3b:a0:8e:b0:2a:84:28:cc:91:63:5c:b8:88:89:15: f0:4f:c0:82:b6:e1:d9:3c:03:9c:48:0a:99:1b:72: d0:b5:ec:45:3f:38:ba:f9:18:92:f0:27:58:44:9a: 22:b3:e1:b1:f8:10:10:e1:d7:42:ae:d5:02:b4:07: 21:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:45:DA:7B:B3:E3:C3:CB:49:88:67:61:B9:47:AF:90:20:BA:95:57 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/60Xae7Pjw8tJiGdhuUevkCC6lVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.112.0/24 Signature Algorithm: sha256WithRSAEncryption a5:5c:f0:6d:63:85:02:23:c9:22:79:e5:b0:cd:64:2f:5f:83: bf:c7:a0:f2:69:1d:b9:a8:23:cd:ac:33:30:85:ed:7d:a4:2a: 7a:4d:65:52:6f:03:7c:f7:0d:56:41:cc:36:9b:07:87:fd:a1: 05:dd:20:d6:c0:52:1b:ca:d2:b0:ac:ac:45:95:2f:27:e1:75: 60:a2:18:6a:52:c4:48:1a:7b:b8:43:36:04:16:93:fb:0f:db: 0f:f4:fd:b6:e5:59:a2:3e:96:77:fb:5f:21:b7:a5:8b:3a:6a: e9:f4:61:fe:1c:3c:07:27:58:b0:93:4f:f5:eb:b3:57:94:b2: f4:55:1f:7d:04:c9:2e:b7:58:df:27:3b:4f:87:29:a2:ed:24: eb:87:79:c1:27:74:4d:70:73:d1:d7:0b:4c:0a:c5:9f:e9:e8: 5e:1c:6e:d9:ea:5a:b9:0e:e4:62:d5:f5:42:2c:90:f7:7d:75: 51:cf:ad:e9:57:75:e2:c4:e6:e6:02:12:ed:80:c9:dc:1e:a1: bb:8e:e1:a5:f0:fb:48:8f:03:6b:c9:d2:d4:c0:61:d8:5c:45: 16:31:c0:8d:3c:10:ee:27:1d:e4:4c:e6:ba:c2:30:5a:91:84: c5:8d:52:19:46:47:12:5c:27:ec:d5:9b:22:e5:4c:f6:62:ba: a4:87:00:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvQNzsUBs5skeVtNkoSQ7S0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTE4MDgyNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjQ1ZGE3YmIzZTNjM2NiNDk4ODY3NjFiOTQ3YWY5MDIwYmE5NTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2ltkgijppBIgZ3Q7e9mImJasR3L EQP/zulIdESc+strwNMIDLqtYSSTYYpnknsWYA+KtCp8Lhxd/8rLsuB6oxOaKIbB NdBeQxIJmMs6oRBkmrVauxSF4DsrJs0mZkgiTk0I6xpF69VxpE51/IvmjlXlCWGt +lrHIVB69iebiZAH10C0xFUjtn3Siu9my4z1uHV7Fp8EobW6vri7tAda7LwdE6Xq Ct8OC67BXDEE+gI2l+0DnqSPUEeJlejM42GMqSw7oI6wKoQozJFjXLiIiRXwT8CC tuHZPAOcSAqZG3LQtexFPzi6+RiS8CdYRJois+Gx+BAQ4ddCrtUCtAchZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtF2nuz48PLSYhnYblHr5AgupVXMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvNjBYYWU3UGp3OHRKaUdkaHVVZXZrQ0M2bFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVFwMA0G CSqGSIb3DQEBCwUAA4IBAQClXPBtY4UCI8kieeWwzWQvX4O/x6DyaR25qCPNrDMw he19pCp6TWVSbwN89w1WQcw2mweH/aEF3SDWwFIbytKwrKxFlS8n4XVgohhqUsRI Gnu4QzYEFpP7D9sP9P225VmiPpZ3+18ht6WLOmrp9GH+HDwHJ1iwk0/167NXlLL0 VR99BMkut1jfJztPhymi7STrh3nBJ3RNcHPR1wtMCsWf6eheHG7Z6lq5DuRi1fVC LJD3fXVRz63pV3XixObmAhLtgMncHqG7juGl8PtIjwNrydLUwGHYXEUWMcCNPBDu Jx3kTOa6wjBakYTFjVIZRkcSXCfs1Zsi5Uz2YrqkhwDF -----END CERTIFICATE-----Generated at Tue Feb 3 05:55:07 2026 by rpki-client