This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/J0gDIkrpboJuRwLiO8mRarT4dVM.roa File: J0gDIkrpboJuRwLiO8mRarT4dVM.roa (raw, json) Hash identifier: KNGfnvH9hN8MLBIB5K0MLNABNs+jOG4jng+kKwDoCrM= Subject key identifier: 27:48:03:22:4A:E9:6E:82:6E:47:02:E2:3B:C9:91:6A:B4:F8:75:53 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AA86E2B901DCCAC211E78C33E8CAC Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/J0gDIkrpboJuRwLiO8mRarT4dVM.roa Signing time: Fri 02 Jan 2026 06:17:31 +0000 ROA not before: Fri 02 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214922 IP address blocks: 62.60.185.0/24 maxlen: 24 62.60.188.0/24 maxlen: 24 62.60.192.0/24 maxlen: 24 62.60.193.0/24 maxlen: 24 62.60.221.0/24 maxlen: 24 62.60.222.0/23 maxlen: 24 62.60.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:a8:6e:2b:90:1d:cc:ac:21:1e:78:c3:3e:8c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=274803224ae96e826e4702e23bc9916ab4f87553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:a1:21:93:47:af:23:6f:5b:61:d8:11:53: f3:83:10:c3:7c:75:dc:67:61:93:9a:bc:f0:56:4a: b7:49:47:39:cc:d7:af:99:39:70:55:37:b0:c2:41: 53:1d:0b:c9:30:03:a9:b0:a7:9d:6b:0f:06:ba:81: 03:a0:b6:19:d5:9e:a4:cb:a3:53:81:51:4c:14:db: b0:df:bf:47:5d:dd:a9:94:3b:51:57:5b:99:7f:9c: 6d:44:4e:66:10:30:ac:c5:d0:9f:4a:4c:3f:39:34: 06:ca:7b:6d:5b:0b:02:99:d7:51:2b:0a:03:78:b2: 12:72:af:a3:1c:0d:66:f1:b2:41:b3:a3:95:a5:a0: cf:ad:74:e5:a3:0e:5c:72:85:64:98:9d:55:38:39: 3a:7f:f7:f1:14:98:12:21:74:4f:f3:7c:1d:42:24: b6:1a:64:d6:8c:46:e6:94:a0:d0:a6:b3:c5:c5:87: 4c:01:e1:79:4b:6b:3e:02:0a:69:67:f8:7b:1f:98: e4:c6:fb:67:28:31:67:8c:d5:04:be:6a:e4:c5:a1: 4b:86:6d:43:ff:35:6a:f7:0a:b4:df:41:ad:b9:a6: 3b:5a:3e:5b:2a:2d:dc:91:b9:32:75:76:3d:10:44: 11:2c:a6:a2:4f:74:c4:4f:26:8b:fd:7f:b3:5e:5b: 64:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:48:03:22:4A:E9:6E:82:6E:47:02:E2:3B:C9:91:6A:B4:F8:75:53 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/J0gDIkrpboJuRwLiO8mRarT4dVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.185.0/24 62.60.188.0/24 62.60.192.0/23 62.60.221.0-62.60.223.255 Signature Algorithm: sha256WithRSAEncryption 7c:f6:b4:55:14:10:e7:54:54:c5:83:62:2a:1e:c6:5c:8f:84: e2:cd:88:dd:59:e7:36:d0:b5:77:7d:1e:c7:22:45:b9:f8:32: 8d:99:8c:79:af:10:e9:d2:df:1f:b9:b8:7c:8e:2d:ba:b1:55: bd:62:ff:bd:bf:ee:94:f4:a7:1a:1e:8b:25:3e:d9:58:5f:59: 8d:ee:6c:fc:c7:81:6b:9e:0d:af:18:b9:35:6b:91:69:64:76: f4:36:60:38:ec:50:8e:9b:8b:7d:ab:cf:b9:22:21:6c:dd:18: 25:80:63:d0:d4:31:65:79:80:d1:54:71:9c:e8:12:1f:b1:49: 28:4f:3b:6b:47:41:3c:10:89:35:56:c1:b4:31:18:a3:d0:da: aa:9d:f6:1b:e3:ed:eb:a5:22:8c:f6:6d:35:80:28:f7:f9:0f: 69:fb:26:81:3b:f3:07:b0:9d:a2:67:07:fa:6d:e5:4f:34:cb: 22:e4:4e:23:e3:a8:81:f0:54:20:6c:8a:21:4a:67:b3:e6:c9: 3c:ad:fa:eb:e5:7f:11:ee:58:4a:e5:5d:4b:44:49:a8:cd:b2: c6:a4:ca:f7:34:f3:2b:85:27:53:ce:13:d8:fd:4b:73:c7:c6: 27:ce:22:c9:e5:fb:84:39:97:86:89:4b:9d:65:a1:6c:76:04: ff:78:82:be -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9WqhuK5AdzKwhHnjDPoysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQ4MDMyMjRhZTk2ZTgyNmU0NzAyZTIzYmM5OTE2YWI0Zjg3NTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pyhIZNHryNvW2HYEVPzgxDDfHXc Z2GTmrzwVkq3SUc5zNevmTlwVTewwkFTHQvJMAOpsKedaw8GuoEDoLYZ1Z6ky6NT gVFMFNuw379HXd2plDtRV1uZf5xtRE5mEDCsxdCfSkw/OTQGynttWwsCmddRKwoD eLIScq+jHA1m8bJBs6OVpaDPrXTlow5ccoVkmJ1VODk6f/fxFJgSIXRP83wdQiS2 GmTWjEbmlKDQprPFxYdMAeF5S2s+AgppZ/h7H5jkxvtnKDFnjNUEvmrkxaFLhm1D /zVq9wq030GtuaY7Wj5bKi3ckbkydXY9EEQRLKaiT3TETyaL/X+zXltkxwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFCdIAyJK6W6CbkcC4jvJkWq0+HVTMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvSjBnRElrcnBib0p1UndMaU84bVJhclQ0ZFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAPjy5AwQA Pjy8AwQBPjzAMAwDBAA+PN0DBAU+PMAwDQYJKoZIhvcNAQELBQADggEBAHz2tFUU EOdUVMWDYioexlyPhOLNiN1Z5zbQtXd9HsciRbn4Mo2ZjHmvEOnS3x+5uHyOLbqx Vb1i/72/7pT0pxoeiyU+2VhfWY3ubPzHgWueDa8YuTVrkWlkdvQ2YDjsUI6bi32r z7kiIWzdGCWAY9DUMWV5gNFUcZzoEh+xSShPO2tHQTwQiTVWwbQxGKPQ2qqd9hvj 7eulIoz2bTWAKPf5D2n7JoE78wewnaJnB/pt5U80yyLkTiPjqIHwVCBsiiFKZ7Pm yTyt+uvlfxHuWErlXUtESajNssakyvc08yuFJ1POE9j9S3PHxifOIsnl+4Q5l4aJ S51loWx2BP94gr4= -----END CERTIFICATE-----Generated at Wed Jan 21 10:47:22 2026 by rpki-client