This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/BEH90d6zQbJ4eDize9s1J5EyeTE.roa File: BEH90d6zQbJ4eDize9s1J5EyeTE.roa (raw, json) Hash identifier: EK9TNZzONEw9jYK8/crzldxboXKDJ83HjpaPnCQRvUw= Subject key identifier: 04:41:FD:D1:DE:B3:41:B2:78:78:38:B3:7B:DB:35:27:91:32:79:31 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A9DC424823F0DB53E51B235361A75 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/BEH90d6zQbJ4eDize9s1J5EyeTE.roa Signing time: Fri 02 Jan 2026 06:17:29 +0000 ROA not before: Fri 02 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204203 IP address blocks: 62.60.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:9d:c4:24:82:3f:0d:b5:3e:51:b2:35:36:1a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0441fdd1deb341b2787838b37bdb352791327931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:e5:47:66:df:8e:52:fc:5c:27:06:a1:b5: c0:3f:74:04:3a:77:e3:f3:90:87:64:0e:d3:94:09: 54:00:5a:99:52:fa:59:a3:25:c5:76:c6:cf:12:8f: 8f:3e:e3:d4:7a:10:cd:73:ea:51:cb:d3:bf:f5:58: 72:c6:84:a0:d0:7c:5f:6d:91:e9:d8:58:78:b5:dc: c0:0b:ed:c5:b4:f4:ba:81:4a:94:6c:7a:7c:96:8d: 3d:4b:6e:c8:a5:8a:1c:e7:64:46:2c:90:78:38:95: 7f:a1:05:81:d1:e0:cf:2f:54:b0:f4:d0:fc:d4:1b: 6c:11:85:68:28:ff:40:96:82:bf:35:b2:90:df:72: 16:4e:4b:ff:26:d0:be:cd:df:35:fc:65:df:a7:60: a4:24:e1:b6:93:ad:46:c8:71:22:d3:23:a0:55:aa: 09:4c:9e:4e:ec:87:0b:a0:27:b8:70:51:19:9c:09: 53:e1:99:7e:bc:57:74:f5:cd:ce:63:93:a9:32:aa: 7b:ea:d7:96:e4:28:34:6a:c4:de:0e:a9:a2:a1:3c: c3:45:fc:97:be:01:b8:54:8e:ea:68:7d:c4:09:d2: e5:b6:cb:a9:78:31:3b:d1:d7:91:7d:bf:4b:c4:70: f6:3e:8a:2c:07:d5:de:74:08:40:d4:81:b5:5b:eb: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:41:FD:D1:DE:B3:41:B2:78:78:38:B3:7B:DB:35:27:91:32:79:31 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/BEH90d6zQbJ4eDize9s1J5EyeTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.141.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:0f:a9:09:d9:2f:71:7d:38:c1:13:ad:f0:85:2c:bf:c6:d3: 20:b8:f3:6a:f5:07:dd:4c:b4:d0:4c:7e:10:7b:b1:04:79:cf: ff:3a:07:0b:2f:2f:a5:13:be:43:d1:96:1c:8f:30:bf:fc:2a: f9:dc:f1:3e:5a:da:b0:6d:ba:0a:53:04:44:14:90:f2:00:2d: 7d:99:4b:51:8e:32:08:d3:dc:13:ce:3e:77:d4:df:09:de:04: 34:78:fd:01:12:52:db:96:f4:0a:47:0f:27:b6:3f:7b:b8:73: 7d:fc:cd:ea:5c:1f:42:81:b4:6c:34:91:ef:be:09:0d:c5:2e: 4c:33:98:68:bb:9e:05:de:bc:fc:ad:44:9a:8a:4e:35:96:7e: 8a:2e:b1:d1:55:53:53:48:c3:d9:ed:48:a6:a3:df:75:16:ac: b8:86:e9:0f:68:84:fd:16:f9:5b:0c:ba:a0:a7:ee:80:b9:04: 6b:23:7e:a9:d4:d9:bf:b1:10:14:76:28:18:d7:9d:02:5a:30: a4:c4:96:b5:9a:e5:f7:26:3c:98:ed:ba:b9:39:c5:e1:63:cc: 72:71:46:a4:62:23:31:bc:80:e5:d1:df:18:b1:cb:bc:70:0c: 43:ca:c8:ce:d0:7b:38:46:28:11:b8:54:79:f3:c9:3e:d0:d2: f6:70:0d:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wp3EJII/DbU+UbI1Nhp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDQxZmRkMWRlYjM0MWIyNzg3ODM4YjM3YmRiMzUyNzkxMzI3OTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrLlR2bfjlL8XCcGobXAP3QEOnfj 85CHZA7TlAlUAFqZUvpZoyXFdsbPEo+PPuPUehDNc+pRy9O/9VhyxoSg0HxfbZHp 2Fh4tdzAC+3FtPS6gUqUbHp8lo09S27IpYoc52RGLJB4OJV/oQWB0eDPL1Sw9ND8 1BtsEYVoKP9AloK/NbKQ33IWTkv/JtC+zd81/GXfp2CkJOG2k61GyHEi0yOgVaoJ TJ5O7IcLoCe4cFEZnAlT4Zl+vFd09c3OY5OpMqp76teW5Cg0asTeDqmioTzDRfyX vgG4VI7qaH3ECdLltsupeDE70deRfb9LxHD2PoosB9XedAhA1IG1W+sB5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFARB/dHes0GyeHg4s3vbNSeRMnkxMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvQkVIOTBkNnpRYko0ZURpemU5czFKNUV5ZVRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjyNMA0G CSqGSIb3DQEBCwUAA4IBAQAdD6kJ2S9xfTjBE63whSy/xtMguPNq9QfdTLTQTH4Q e7EEec//OgcLLy+lE75D0ZYcjzC//Cr53PE+WtqwbboKUwREFJDyAC19mUtRjjII 09wTzj531N8J3gQ0eP0BElLblvQKRw8ntj97uHN9/M3qXB9CgbRsNJHvvgkNxS5M M5hou54F3rz8rUSaik41ln6KLrHRVVNTSMPZ7Uimo991Fqy4hukPaIT9FvlbDLqg p+6AuQRrI36p1Nm/sRAUdigY150CWjCkxJa1muX3JjyY7bq5OcXhY8xycUakYiMx vIDl0d8Yscu8cAxDysjO0Hs4RigRuFR588k+0NL2cA1E -----END CERTIFICATE-----Generated at Wed Jan 21 10:46:56 2026 by rpki-client