This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/E3Zj5fHmcTI-exCkQn-_uJcUdMI.roa File: E3Zj5fHmcTI-exCkQn-_uJcUdMI.roa (raw, json) Hash identifier: bIj2Xc2XKCsJfzUcbvZ5kW4+OYzoOdbLVfr+TNdbU8c= Subject key identifier: 13:76:63:E5:F1:E6:71:32:3E:7B:10:A4:42:7F:BF:B8:97:14:74:C2 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AA50FB00B3519D407091EBDCD2218 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/E3Zj5fHmcTI-exCkQn-_uJcUdMI.roa Signing time: Fri 02 Jan 2026 06:17:30 +0000 ROA not before: Fri 02 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213456 IP address blocks: 62.60.131.0/24 maxlen: 24 62.60.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:a5:0f:b0:0b:35:19:d4:07:09:1e:bd:cd:22:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=137663e5f1e671323e7b10a4427fbfb8971474c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:8b:d6:d0:f6:ad:8b:6d:9d:95:92:df:85: b4:bf:a6:cb:2f:aa:83:79:f2:07:92:03:2b:91:45: 41:3b:fa:00:70:75:e8:1f:bf:70:66:26:91:bd:b7: c0:a0:5c:cb:67:7a:3a:fb:de:ea:23:92:f4:c2:9c: de:a8:6c:59:5c:a0:b5:38:fe:fb:0c:d3:a0:81:0d: 62:78:c8:50:8e:ca:09:84:fa:e0:46:77:86:35:e2: 33:09:99:fa:dc:f9:b9:7a:4a:a3:1b:b7:65:2d:a2: f5:e1:45:c1:63:01:46:d5:7c:af:9d:96:80:bd:45: 27:d9:6b:84:6f:23:16:73:2f:f6:07:c9:03:29:a3: 84:be:03:a4:c6:21:f3:dd:a1:cc:42:5c:93:5c:ec: 3d:05:0a:74:df:ab:ae:15:64:d2:b1:b9:2f:94:76: c7:28:a5:1c:86:37:4c:7a:91:a8:5b:6e:90:09:46: b1:f2:62:20:de:ab:dc:65:5a:9d:56:9c:13:87:14: cd:33:47:af:65:2a:30:c5:32:b9:3b:40:74:86:37: a3:eb:4f:87:d1:65:de:b0:e8:25:27:a0:58:7a:dd: 7f:95:2c:4f:eb:9a:7d:a8:7f:73:4f:84:e9:52:8b: 3a:cc:df:70:6f:79:a0:c0:b0:60:6d:12:17:03:fd: c2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:76:63:E5:F1:E6:71:32:3E:7B:10:A4:42:7F:BF:B8:97:14:74:C2 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/E3Zj5fHmcTI-exCkQn-_uJcUdMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.131.0/24 62.60.134.0/24 Signature Algorithm: sha256WithRSAEncryption a6:5c:11:9a:34:78:5e:0e:e0:20:fd:ec:90:77:82:c8:db:76: 74:24:07:ae:3f:9c:1f:dc:93:ae:21:45:32:24:40:44:83:e3: 25:aa:cd:58:be:f3:10:b5:54:e3:fd:8b:b6:56:b6:9c:93:2f: d5:47:cb:da:ec:0e:80:b9:c1:ec:b4:d8:90:08:f0:a9:91:7e: c1:13:fb:61:33:08:d0:b1:5e:9d:92:5d:d2:81:5c:aa:af:4f: a6:26:59:60:6b:4e:a5:2d:f4:28:b6:7d:a2:2e:b8:c9:c6:50: 71:ac:d7:da:45:82:2a:39:a4:38:78:1c:42:96:88:27:83:0d: 7d:6f:55:90:72:25:f3:69:43:52:0c:fd:33:3c:60:68:83:95: 66:63:03:31:bd:db:45:71:83:01:70:a5:fc:69:03:cc:52:10: a2:d1:fd:ab:c2:81:4a:d1:0d:24:f8:f0:94:01:f7:64:ae:eb: c3:30:45:cf:ec:9f:4e:49:c6:00:ae:b5:a2:80:62:0c:ec:b5: 19:15:00:a0:b1:c4:05:ad:22:1d:7a:75:74:6d:eb:c3:7a:10: 4b:91:7c:d3:21:d4:1d:02:fa:bd:5e:81:29:c8:cf:70:a6:3a: b3:52:fc:8d:1b:23:2e:48:3f:d4:72:f9:1e:d1:9c:bd:bc:a5: 6c:7c:01:cd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WqUPsAs1GdQHCR69zSIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzc2NjNlNWYxZTY3MTMyM2U3YjEwYTQ0MjdmYmZiODk3MTQ3NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SCL1tD2rYttnZWS34W0v6bLL6qD efIHkgMrkUVBO/oAcHXoH79wZiaRvbfAoFzLZ3o6+97qI5L0wpzeqGxZXKC1OP77 DNOggQ1ieMhQjsoJhPrgRneGNeIzCZn63Pm5ekqjG7dlLaL14UXBYwFG1XyvnZaA vUUn2WuEbyMWcy/2B8kDKaOEvgOkxiHz3aHMQlyTXOw9BQp036uuFWTSsbkvlHbH KKUchjdMepGoW26QCUax8mIg3qvcZVqdVpwThxTNM0evZSowxTK5O0B0hjej60+H 0WXesOglJ6BYet1/lSxP65p9qH9zT4TpUos6zN9wb3mgwLBgbRIXA/3C3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBN2Y+Xx5nEyPnsQpEJ/v7iXFHTCMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvRTNaajVmSG1jVEktZXhDa1FuLV91SmNVZE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPjyDAwQA PjyGMA0GCSqGSIb3DQEBCwUAA4IBAQCmXBGaNHheDuAg/eyQd4LI23Z0JAeuP5wf 3JOuIUUyJEBEg+Mlqs1YvvMQtVTj/Yu2Vracky/VR8va7A6AucHstNiQCPCpkX7B E/thMwjQsV6dkl3SgVyqr0+mJllga06lLfQotn2iLrjJxlBxrNfaRYIqOaQ4eBxC logngw19b1WQciXzaUNSDP0zPGBog5VmYwMxvdtFcYMBcKX8aQPMUhCi0f2rwoFK 0Q0k+PCUAfdkruvDMEXP7J9OScYArrWigGIM7LUZFQCgscQFrSIdenV0bevDehBL kXzTIdQdAvq9XoEpyM9wpjqzUvyNGyMuSD/Ucvke0Zy9vKVsfAHN -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:33 2026 by rpki-client