This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8XeqfvxqsXgdysjU-9W650wqKTs.roa File: 8XeqfvxqsXgdysjU-9W650wqKTs.roa (raw, json) Hash identifier: szX18MI8KdO2HxCCwKOzPc7IqcQnVX6xcDefp10+jWE= Subject key identifier: F1:77:AA:7E:FC:6A:B1:78:1D:CA:C8:D4:FB:D5:BA:E7:4C:2A:29:3B Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AA4279EBB94F21F226C62586D665D Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8XeqfvxqsXgdysjU-9W650wqKTs.roa Signing time: Fri 02 Jan 2026 06:17:30 +0000 ROA not before: Fri 02 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212036 IP address blocks: 62.60.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:a4:27:9e:bb:94:f2:1f:22:6c:62:58:6d:66:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f177aa7efc6ab1781dcac8d4fbd5bae74c2a293b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b5:cb:8a:c1:ae:d7:b3:fd:45:97:ae:31:01: 33:5b:20:20:4b:d5:28:97:cc:5e:fd:49:d2:d5:93: c4:11:d9:f9:ca:20:f6:70:59:7c:62:fc:7e:d9:5b: 72:72:09:a0:a0:49:e7:03:31:b4:9e:18:ab:7b:9b: b6:a6:ec:4d:02:03:96:2f:4e:5c:a6:88:9c:61:21: 22:be:36:ec:50:e5:8e:a0:f9:c9:88:03:fb:9d:9a: fb:87:04:16:fc:ad:11:b5:47:41:aa:c0:51:c2:52: a5:5e:37:bf:63:0a:5e:89:fb:68:40:cb:b3:ef:70: ed:72:27:fe:40:b9:5f:08:98:35:ea:8c:10:9a:84: b8:3b:61:71:60:9b:99:0b:0c:ef:3b:38:9e:2a:31: d3:de:7a:13:9d:d0:db:6e:ed:96:bc:e9:eb:8f:62: 5f:32:45:e0:c7:3e:67:bb:43:c1:31:a0:9e:ba:ab: 9f:4c:d6:7b:dc:c3:c4:65:17:07:e3:00:1c:83:26: dd:82:3c:be:9c:7b:a4:87:38:fd:68:0a:e6:6b:3a: 96:2d:9d:fd:38:4d:ec:d8:82:36:9a:ea:51:a1:c1: 04:5a:7a:7b:f9:a0:d9:20:78:e7:67:ec:db:eb:50: f0:2b:86:f8:85:b7:25:ca:de:e6:97:29:fd:96:b3: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:77:AA:7E:FC:6A:B1:78:1D:CA:C8:D4:FB:D5:BA:E7:4C:2A:29:3B X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/8XeqfvxqsXgdysjU-9W650wqKTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.143.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:0b:89:6d:62:38:31:aa:04:b4:f1:6e:5e:51:68:c9:c7:e6: 9e:de:5c:54:0e:7a:a9:48:9a:63:02:0f:e4:f7:ad:68:61:59: 7a:8c:b7:1d:bf:0c:e3:cb:df:e4:d0:e1:37:aa:26:e6:f1:5c: da:10:3e:7e:29:aa:cc:a8:43:fc:21:04:62:1d:5c:c4:1b:7d: 53:9e:61:e3:0e:c1:25:f7:aa:e2:9c:54:59:a3:f8:75:05:65: 31:cd:9a:43:99:ae:e0:0c:81:ae:88:c0:47:88:18:76:c6:d2: d9:0b:1b:db:a6:d0:b5:1c:67:41:55:59:21:9d:e9:8b:0e:cd: 49:31:b0:54:59:ed:d4:22:02:eb:40:40:27:e4:23:b9:37:dd: ae:8e:56:1d:d6:4f:d6:28:00:2c:b3:3a:c9:f6:04:df:28:4f: 34:72:fe:ea:6c:62:7a:63:9d:90:ee:13:20:6a:01:f0:cf:98: 95:30:9e:8d:12:93:60:62:5f:01:99:2a:5d:5e:89:46:16:f4: 62:7e:b8:f2:dd:22:21:79:0d:01:7b:86:00:f9:e2:ca:de:d6: 17:96:74:36:67:d4:9e:9b:42:f6:6e:c1:c4:c8:4e:72:8a:15: 9f:8f:7f:aa:a1:ca:60:1e:8f:ef:5e:c9:66:00:5b:48:bd:d7: 71:67:46:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WqQnnruU8h8ibGJYbWZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTc3YWE3ZWZjNmFiMTc4MWRjYWM4ZDRmYmQ1YmFlNzRjMmEyOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrXLisGu17P9RZeuMQEzWyAgS9Uo l8xe/UnS1ZPEEdn5yiD2cFl8Yvx+2VtycgmgoEnnAzG0nhire5u2puxNAgOWL05c poicYSEivjbsUOWOoPnJiAP7nZr7hwQW/K0RtUdBqsBRwlKlXje/YwpeiftoQMuz 73Dtcif+QLlfCJg16owQmoS4O2FxYJuZCwzvOzieKjHT3noTndDbbu2WvOnrj2Jf MkXgxz5nu0PBMaCeuqufTNZ73MPEZRcH4wAcgybdgjy+nHukhzj9aArmazqWLZ39 OE3s2II2mupRocEEWnp7+aDZIHjnZ+zb61DwK4b4hbclyt7mlyn9lrOp9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPF3qn78arF4HcrI1PvVuudMKik7MB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvOFhlcWZ2eHFzWGdkeXNqVS05VzY1MHdxS1RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjyPMA0G CSqGSIb3DQEBCwUAA4IBAQAbC4ltYjgxqgS08W5eUWjJx+ae3lxUDnqpSJpjAg/k 961oYVl6jLcdvwzjy9/k0OE3qibm8VzaED5+KarMqEP8IQRiHVzEG31TnmHjDsEl 96rinFRZo/h1BWUxzZpDma7gDIGuiMBHiBh2xtLZCxvbptC1HGdBVVkhnemLDs1J MbBUWe3UIgLrQEAn5CO5N92ujlYd1k/WKAAsszrJ9gTfKE80cv7qbGJ6Y52Q7hMg agHwz5iVMJ6NEpNgYl8BmSpdXolGFvRifrjy3SIheQ0Be4YA+eLK3tYXlnQ2Z9Se m0L2bsHEyE5yihWfj3+qocpgHo/vXslmAFtIvddxZ0bB -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:43 2026 by rpki-client