This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_lh_Oe5m9FUy9BKseJBhf9aZQrU.roa File: _lh_Oe5m9FUy9BKseJBhf9aZQrU.roa (raw, json) Hash identifier: zM1qhk6aB8z6txTn3H+76h1ChiMosQjdL7CXnLWE7uo= Subject key identifier: FE:58:7F:39:EE:66:F4:55:32:F4:12:AC:78:90:61:7F:D6:99:42:B5 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A98AFF990328D5588F8F7D32488C4 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_lh_Oe5m9FUy9BKseJBhf9aZQrU.roa Signing time: Fri 02 Jan 2026 06:17:27 +0000 ROA not before: Fri 02 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44090 IP address blocks: 62.60.147.0/24 maxlen: 24 213.176.7.0/24 maxlen: 24 213.176.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:98:af:f9:90:32:8d:55:88:f8:f7:d3:24:88:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe587f39ee66f45532f412ac7890617fd69942b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cb:ac:9a:08:62:5e:df:6d:6f:9d:57:64:9f: 5c:f5:82:2c:73:df:3b:ae:11:4e:64:cb:80:63:ef: 7f:ac:10:76:38:63:bf:1b:fe:b6:c8:21:33:0d:75: be:27:7d:e3:82:13:53:7e:8e:26:f3:bf:cc:fb:80: a2:34:d5:31:29:4f:12:40:85:7d:ab:23:97:e9:14: 01:b8:61:1c:df:b6:b7:50:25:b4:85:87:7a:54:95: 3b:27:0b:ef:df:b6:1d:54:1a:bc:73:81:06:f5:56: d5:b4:01:53:c3:07:b0:48:80:30:6c:70:6d:7c:9b: c4:f6:bd:77:71:70:80:70:a3:6d:dc:2b:d6:b9:a1: d4:22:45:4f:7e:07:84:48:62:4b:fa:39:34:8a:11: 27:58:1b:a2:7f:03:c6:29:ef:c8:37:83:a4:b9:37: d0:b4:46:41:4a:e8:ae:da:12:9b:7b:3c:d7:ec:4e: 78:28:ec:2c:c0:91:af:fc:ef:c2:aa:90:01:06:4f: 4f:d9:9f:06:5f:31:12:2a:56:3d:02:4c:9f:3b:86: d2:ed:b1:10:be:ac:b0:db:22:46:66:dd:9b:56:83: f8:16:3d:ec:03:1a:be:76:f1:4a:9c:36:dd:e4:1f: 95:c6:cd:76:4f:30:a4:8f:8c:9a:00:f4:aa:58:ae: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:58:7F:39:EE:66:F4:55:32:F4:12:AC:78:90:61:7F:D6:99:42:B5 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_lh_Oe5m9FUy9BKseJBhf9aZQrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.147.0/24 213.176.7.0/24 213.176.127.0/24 Signature Algorithm: sha256WithRSAEncryption c4:c5:5d:26:8c:88:55:3a:7f:a1:6c:f6:e2:c3:be:60:f8:f5: 72:30:60:c5:8a:1d:76:9f:7a:d8:a8:ca:6c:b8:01:e0:fd:39: 21:da:10:29:1f:1a:89:7f:ec:71:56:62:1c:43:1b:03:59:3a: c5:94:e3:cc:53:1c:c0:07:14:af:68:35:7d:01:a7:99:a0:5e: 58:1d:ab:31:3f:04:0f:3c:00:4f:4f:15:9a:9a:6c:1d:01:06: a2:59:cd:1c:9a:5a:72:45:64:d0:b0:43:2f:b6:26:8c:1a:cb: d3:0c:e5:33:b5:32:c6:85:bf:bb:a9:26:e9:f4:d0:ca:5b:5d: ef:ad:9d:ca:7d:9f:6d:3f:dc:99:1c:35:97:3f:55:e8:4c:24: 52:28:12:95:e5:a0:d2:a7:db:ea:8c:79:14:a7:ef:76:92:87: 01:db:e8:d1:69:2d:7d:ac:c9:48:1d:c8:8a:85:a2:7e:42:8f: 13:cb:c5:71:e4:c4:24:74:12:46:48:11:32:c5:d2:29:5d:7a: 76:00:98:b6:ef:a4:55:e4:8b:89:51:e4:8f:3c:9c:da:18:81: dd:ce:3b:4b:b2:3d:8a:26:73:49:db:a9:90:a1:da:a3:c5:c9: 9a:90:41:8f:9a:6b:2d:21:93:c4:58:12:9e:c0:8c:21:ee:a9: 59:e2:d5:49 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9Wpiv+ZAyjVWI+PfTJIjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTU4N2YzOWVlNjZmNDU1MzJmNDEyYWM3ODkwNjE3ZmQ2OTk0MmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0susmghiXt9tb51XZJ9c9YIsc987 rhFOZMuAY+9/rBB2OGO/G/62yCEzDXW+J33jghNTfo4m87/M+4CiNNUxKU8SQIV9 qyOX6RQBuGEc37a3UCW0hYd6VJU7Jwvv37YdVBq8c4EG9VbVtAFTwwewSIAwbHBt fJvE9r13cXCAcKNt3CvWuaHUIkVPfgeESGJL+jk0ihEnWBuifwPGKe/IN4OkuTfQ tEZBSuiu2hKbezzX7E54KOwswJGv/O/CqpABBk9P2Z8GXzESKlY9AkyfO4bS7bEQ vqyw2yJGZt2bVoP4Fj3sAxq+dvFKnDbd5B+Vxs12TzCkj4yaAPSqWK5HvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP5YfznuZvRVMvQSrHiQYX/WmUK1MB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvX2xoX09lNW05RlV5OUJLc2VKQmhmOWFaUXJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPjyTAwQA 1bAHAwQA1bB/MA0GCSqGSIb3DQEBCwUAA4IBAQDExV0mjIhVOn+hbPbiw75g+PVy MGDFih12n3rYqMpsuAHg/Tkh2hApHxqJf+xxVmIcQxsDWTrFlOPMUxzABxSvaDV9 AaeZoF5YHasxPwQPPABPTxWammwdAQaiWc0cmlpyRWTQsEMvtiaMGsvTDOUztTLG hb+7qSbp9NDKW13vrZ3KfZ9tP9yZHDWXP1XoTCRSKBKV5aDSp9vqjHkUp+92kocB 2+jRaS19rMlIHciKhaJ+Qo8Ty8Vx5MQkdBJGSBEyxdIpXXp2AJi276RV5IuJUeSP PJzaGIHdzjtLsj2KJnNJ26mQodqjxcmakEGPmmstIZPEWBKewIwh7qlZ4tVJ -----END CERTIFICATE-----Generated at Wed Jan 21 10:49:29 2026 by rpki-client