This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Nx4-ije_7PQ5mmq2JqcM0zeFKTM.roa File: Nx4-ije_7PQ5mmq2JqcM0zeFKTM.roa (raw, json) Hash identifier: 0pJ7Rm5zdCq7NF/ib+XQywmax4xkGrLosxc09P9Lhm8= Subject key identifier: 37:1E:3E:8A:37:BF:EC:F4:39:9A:6A:B6:26:A7:0C:D3:37:85:29:33 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A9A800057F9F6DA2858A5C237AB9E Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Nx4-ije_7PQ5mmq2JqcM0zeFKTM.roa Signing time: Fri 02 Jan 2026 06:17:28 +0000 ROA not before: Fri 02 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59441 IP address blocks: 62.60.128.0/21 maxlen: 24 62.60.164.0/22 maxlen: 24 62.60.200.0/22 maxlen: 24 62.60.204.0/22 maxlen: 24 62.60.209.0/24 maxlen: 24 62.60.210.0/23 maxlen: 24 62.60.210.0/24 maxlen: 24 62.60.211.0/24 maxlen: 24 62.60.212.0/22 maxlen: 24 213.176.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:9a:80:00:57:f9:f6:da:28:58:a5:c2:37:ab:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=371e3e8a37bfecf4399a6ab626a70cd337852933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e5:be:9d:02:66:5d:3b:bb:c6:82:34:af:fb: ae:89:1c:5a:81:b4:52:97:37:f9:22:f9:75:4f:0e: c4:cd:67:c3:3c:dc:81:2f:8d:1a:3b:51:10:f1:83: be:a7:32:e9:9e:c2:6c:db:68:d8:43:93:f0:51:2c: 75:68:2f:98:3d:97:74:91:cb:e9:b9:37:ee:48:95: f7:d0:2c:8a:34:51:44:8f:a5:39:bc:12:69:1f:d8: c6:88:e9:1b:2f:70:b1:d9:4f:3b:56:13:5d:e0:ca: 37:72:90:8c:61:10:8c:1c:6b:a5:1c:fd:99:a9:38: fe:db:9a:42:0e:4e:97:b8:fa:c3:6f:95:cb:d4:b6: 73:9f:c8:ad:73:0f:4d:23:57:4b:11:48:32:f0:a6: 2f:52:3d:2d:18:e8:0b:fc:b3:db:02:c6:60:04:0d: 5c:27:d2:50:da:20:17:2c:e9:cd:8d:7e:88:63:72: fb:fc:3f:a4:4f:3c:4e:74:0f:2b:62:7d:5c:87:8f: b9:39:a2:6b:da:2b:ff:00:a2:18:47:b5:78:11:36: 6c:27:9a:8c:07:2f:16:3a:46:f8:80:54:a3:83:a2: 53:33:9d:de:19:dc:55:dc:63:1f:99:65:a6:42:9f: d6:35:3b:53:42:f6:67:70:67:d9:72:db:2a:53:4d: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1E:3E:8A:37:BF:EC:F4:39:9A:6A:B6:26:A7:0C:D3:37:85:29:33 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Nx4-ije_7PQ5mmq2JqcM0zeFKTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.128.0/21 62.60.164.0/22 62.60.200.0/21 62.60.209.0-62.60.215.255 213.176.28.0/22 Signature Algorithm: sha256WithRSAEncryption 26:b7:63:5f:ec:61:37:8a:d3:a1:26:87:9e:c6:b9:97:81:4c: be:be:5a:d4:e5:fb:85:9e:61:7d:74:60:83:e4:6a:2f:3e:15: 50:a3:4f:c9:13:ab:80:8d:89:5d:23:fb:c9:93:e9:52:09:0b: 05:c4:21:84:db:d1:d4:ac:05:17:a7:5c:bd:13:26:32:ec:ae: 70:ac:08:22:73:68:c7:1b:e1:16:46:56:1e:ed:ba:c8:58:fe: 83:fa:9c:f3:2a:74:10:c7:6d:a0:5d:f1:8b:1c:a2:32:38:17: f7:a8:04:1a:c2:91:83:21:67:20:3b:98:11:ba:73:23:5f:d5: 7a:67:73:76:b3:d0:8a:24:48:c0:b9:d5:c7:52:75:e6:62:af: 9a:be:93:96:87:ca:a1:4d:0c:15:22:1d:a6:fc:52:fc:02:5f: d5:a1:1f:54:69:0f:cc:8f:47:28:c7:52:13:e7:5b:23:04:a4: 6c:54:6d:3d:b8:3a:8b:9e:71:2d:07:65:52:d5:e2:b7:a5:bf: e8:81:ae:57:fa:85:3b:10:26:03:d6:d6:b0:3d:4b:f4:d4:18: 37:28:cb:2a:96:01:69:ba:13:50:ee:06:7d:5e:36:86:6d:81: ce:55:f3:0a:69:c8:21:bb:4b:35:16:86:96:d3:bc:77:37:ee: 71:d2:64:ae -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt9WpqAAFf59tooWKXCN6ueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzFlM2U4YTM3YmZlY2Y0Mzk5YTZhYjYyNmE3MGNkMzM3ODUyOTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+W+nQJmXTu7xoI0r/uuiRxagbRS lzf5Ivl1Tw7EzWfDPNyBL40aO1EQ8YO+pzLpnsJs22jYQ5PwUSx1aC+YPZd0kcvp uTfuSJX30CyKNFFEj6U5vBJpH9jGiOkbL3Cx2U87VhNd4Mo3cpCMYRCMHGulHP2Z qTj+25pCDk6XuPrDb5XL1LZzn8itcw9NI1dLEUgy8KYvUj0tGOgL/LPbAsZgBA1c J9JQ2iAXLOnNjX6IY3L7/D+kTzxOdA8rYn1ch4+5OaJr2iv/AKIYR7V4ETZsJ5qM By8WOkb4gFSjg6JTM53eGdxV3GMfmWWmQp/WNTtTQvZncGfZctsqU025SwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFDcePoo3v+z0OZpqtianDNM3hSkzMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvTng0LWlqZV83UFE1bW1xMkpxY00wemVGS1RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQDPjyAAwQC PjykAwQDPjzIMAwDBAA+PNEDBAM+PNADBALVsBwwDQYJKoZIhvcNAQELBQADggEB ACa3Y1/sYTeK06Emh57GuZeBTL6+WtTl+4WeYX10YIPkai8+FVCjT8kTq4CNiV0j +8mT6VIJCwXEIYTb0dSsBRenXL0TJjLsrnCsCCJzaMcb4RZGVh7tushY/oP6nPMq dBDHbaBd8YscojI4F/eoBBrCkYMhZyA7mBG6cyNf1Xpnc3az0IokSMC51cdSdeZi r5q+k5aHyqFNDBUiHab8UvwCX9WhH1RpD8yPRyjHUhPnWyMEpGxUbT24OouecS0H ZVLV4relv+iBrlf6hTsQJgPW1rA9S/TUGDcoyyqWAWm6E1DuBn1eNoZtgc5V8wpp yCG7SzUWhpbTvHc37nHSZK4= -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:34 2026 by rpki-client