This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa File: _NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa (raw, json) Hash identifier: A5dg0Xvutxsv8l8FnAmzrkKP7Nzjc02FNzL3jsVeDTk= Subject key identifier: FC:DC:23:A4:95:6C:8C:03:CA:FC:39:FC:EF:E4:67:8C:0C:BC:B9:44 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019BFDD234EEDF962E54DC92929204CBD7B1 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa Signing time: Tue 27 Jan 2026 04:59:30 +0000 ROA not before: Tue 27 Jan 2026 04:59:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206336 IP address blocks: 62.60.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d2:34:ee:df:96:2e:54:dc:92:92:92:04:cb:d7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 27 04:59:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcdc23a4956c8c03cafc39fcefe4678c0cbcb944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:b6:3a:8e:ae:0c:13:a7:89:b0:ff:fc:66: e7:f8:a1:64:6d:88:b2:e5:40:24:82:3e:2a:a8:f1: fa:23:de:ac:77:a0:e0:15:5e:a7:d9:5e:b6:53:8c: d1:0f:0e:2b:09:f7:f2:c2:d3:ca:4f:10:77:1a:1d: a5:2c:87:13:53:96:88:93:ab:3d:cb:f8:ba:ae:c4: 63:2d:8a:84:06:5b:c1:e7:60:04:64:8f:62:f1:11: 73:00:bc:a6:ac:43:88:5f:30:26:66:12:2a:98:04: 05:4b:e7:19:01:55:b1:14:aa:32:53:41:02:c3:9f: f3:98:b0:15:c3:80:91:60:0b:b8:a3:ee:11:ed:b5: ed:93:5d:0c:98:04:96:39:6d:66:a9:f4:c0:76:3a: bd:8d:72:30:40:9f:48:ad:8f:a1:50:b2:de:55:50: dc:41:19:d5:f0:c5:16:61:bf:21:e5:aa:ae:46:90: 64:a4:70:2f:3a:ec:1e:0d:2a:f5:57:23:0c:d5:2d: 52:7a:7c:c3:29:74:46:8b:6e:13:23:7c:93:0c:d5: df:24:34:84:58:fd:3b:c7:e3:8f:35:b9:9f:65:70: e5:12:59:08:9d:66:6f:cd:3a:1a:0b:3d:a9:82:c7: c3:9a:89:9c:eb:c0:4f:e5:3b:ad:10:14:0d:98:e9: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DC:23:A4:95:6C:8C:03:CA:FC:39:FC:EF:E4:67:8C:0C:BC:B9:44 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_NwjpJVsjAPK_Dn87-RnjAy8uUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.176.0/22 Signature Algorithm: sha256WithRSAEncryption 53:da:87:08:ad:a8:49:be:02:49:3a:2b:75:44:c4:ae:ef:98: 38:9e:1f:7d:13:76:ba:1a:de:92:69:36:20:fc:81:af:0d:32: 01:0f:c9:05:4b:f0:39:f5:ad:65:b2:4a:44:64:e2:aa:31:a7: b9:d0:af:79:c9:44:25:93:d2:26:ba:65:8c:b5:f4:69:27:11: e5:7d:d2:09:f0:fb:1c:c1:4a:96:b8:74:e1:5b:48:aa:46:fd: e8:41:2a:a3:3c:0f:06:55:71:b4:56:d6:11:7c:77:3d:c9:ca: 13:a6:02:e7:a8:e1:0e:c5:c0:a6:eb:78:3b:25:44:4c:03:d5: 93:39:5e:07:4e:f4:1f:8a:c3:40:43:d0:a7:82:37:04:ca:a0: fa:c5:23:ea:ad:0f:93:e7:8c:e9:e4:cc:37:8a:ab:60:43:c5: 90:ef:e0:fb:73:3e:e5:02:08:49:f7:43:f8:31:64:d0:11:ea: d4:1b:d6:46:75:92:8d:b2:a2:b4:31:e5:dd:0e:92:96:d8:a3: 92:de:d0:4d:8f:41:a4:7e:1b:8a:3c:08:db:05:f4:c7:32:64: 9d:77:ec:b0:1f:53:ab:65:fb:e8:e0:b2:a1:da:95:63:1c:db: 0a:9b:ae:3c:ee:2f:52:d4:00:92:db:67:d4:51:5a:a5:0a:88: 6f:a0:7e:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv90jTu35YuVNySkpIEy9exMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTI3MDQ1OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2RjMjNhNDk1NmM4YzAzY2FmYzM5ZmNlZmU0Njc4YzBjYmNiOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLi2Oo6uDBOnibD//Gbn+KFkbYiy 5UAkgj4qqPH6I96sd6DgFV6n2V62U4zRDw4rCffywtPKTxB3Gh2lLIcTU5aIk6s9 y/i6rsRjLYqEBlvB52AEZI9i8RFzALymrEOIXzAmZhIqmAQFS+cZAVWxFKoyU0EC w5/zmLAVw4CRYAu4o+4R7bXtk10MmASWOW1mqfTAdjq9jXIwQJ9IrY+hULLeVVDc QRnV8MUWYb8h5aquRpBkpHAvOuweDSr1VyMM1S1SenzDKXRGi24TI3yTDNXfJDSE WP07x+OPNbmfZXDlElkInWZvzToaCz2pgsfDmomc68BP5TutEBQNmOk8HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPzcI6SVbIwDyvw5/O/kZ4wMvLlEMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvX053anBKVnNqQVBLX0RuODctUm5qQXk4dVVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPjywMA0G CSqGSIb3DQEBCwUAA4IBAQBT2ocIrahJvgJJOit1RMSu75g4nh99E3a6Gt6SaTYg /IGvDTIBD8kFS/A59a1lskpEZOKqMae50K95yUQlk9ImumWMtfRpJxHlfdIJ8Psc wUqWuHThW0iqRv3oQSqjPA8GVXG0VtYRfHc9ycoTpgLnqOEOxcCm63g7JURMA9WT OV4HTvQfisNAQ9CngjcEyqD6xSPqrQ+T54zp5Mw3iqtgQ8WQ7+D7cz7lAghJ90P4 MWTQEerUG9ZGdZKNsqK0MeXdDpKW2KOS3tBNj0GkfhuKPAjbBfTHMmSdd+ywH1Or Zfvo4LKh2pVjHNsKm6487i9S1ACS22fUUVqlCohvoH6e -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:15 2026 by rpki-client