This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jwLZoY1l9QraxwasgyAPNL-Lmi0.roa File: jwLZoY1l9QraxwasgyAPNL-Lmi0.roa (raw, json) Hash identifier: jB+O1Mki2gVeU0ChD+Q4PPmvQH8u/BH5X6sQaqc9dwI= Subject key identifier: 8F:02:D9:A1:8D:65:F5:0A:DA:C7:06:AC:83:20:0F:34:BF:8B:9A:2D Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AAC305CBA58062F1F07A2B577E494 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jwLZoY1l9QraxwasgyAPNL-Lmi0.roa Signing time: Fri 02 Jan 2026 06:17:32 +0000 ROA not before: Fri 02 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216061 IP address blocks: 62.60.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ac:30:5c:ba:58:06:2f:1f:07:a2:b5:77:e4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f02d9a18d65f50adac706ac83200f34bf8b9a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d5:76:28:c0:eb:69:8c:18:c0:ae:ee:d2:98: 9c:cd:14:9e:09:b4:80:44:76:57:7a:33:75:a5:7a: ee:7f:19:fa:74:d2:3a:d3:5e:1e:d4:6d:86:90:44: 8f:74:07:ce:30:8e:40:fe:6b:1e:2a:41:50:3e:81: 11:f2:be:c0:a0:4a:02:38:1c:fa:bb:de:34:33:0a: 32:2b:e8:fd:6e:7f:ef:6d:61:e1:17:fd:d2:17:5c: 9c:eb:ab:60:b7:73:bb:ca:03:9e:d3:77:16:86:c8: 7b:ea:a3:4f:68:8b:eb:0d:fe:89:3a:39:db:3c:db: e6:28:2b:cd:20:64:b5:46:de:b4:bf:2b:e0:c6:e8: e3:03:14:ad:49:1d:4b:81:1a:c6:fc:61:9e:fb:c6: f3:e0:57:f1:98:45:25:77:2f:d7:c4:42:63:6d:9f: c2:cf:fa:33:c3:86:18:ef:f8:bf:ff:e0:e8:6f:40: 3f:02:66:6e:5e:57:c5:e0:21:df:85:2c:11:25:76: e1:bd:0e:a0:fb:2c:58:a6:7a:75:84:0f:1a:e0:8e: 4a:ef:5f:39:12:30:d7:fe:cc:27:7c:70:64:5f:1d: 9c:5c:fb:82:ab:4c:d4:bd:73:d3:88:39:d7:6e:01: 0f:46:5d:d7:47:ed:9e:e7:a8:77:3e:ff:da:54:26: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:02:D9:A1:8D:65:F5:0A:DA:C7:06:AC:83:20:0F:34:BF:8B:9A:2D X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/jwLZoY1l9QraxwasgyAPNL-Lmi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.191.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:96:0e:b8:cd:85:64:10:7a:11:cb:cf:8b:d8:d9:37:9a:5a: aa:49:1d:85:4c:c0:2c:2a:f0:e3:27:43:1b:3a:67:e6:11:2f: 3e:50:75:57:18:43:a4:c5:eb:52:50:4d:2d:ce:cf:b3:20:91: b5:3a:c4:88:c7:4d:b7:0e:28:e4:03:84:c6:71:aa:7b:73:b0: 77:9a:fd:21:d3:99:a9:20:47:88:11:93:ef:24:a2:2d:ca:cc: 66:bb:03:0d:01:f0:c4:7d:c2:47:26:55:dd:94:00:58:e5:55: 56:4f:61:48:f0:76:0e:49:f4:d7:9b:9a:0b:b6:c8:4e:eb:b3: 20:e7:c8:20:8a:6a:bf:33:04:03:d7:5f:37:81:12:c7:13:a5: 7f:6c:79:99:a1:94:9c:7a:39:df:6c:98:9e:2a:68:af:56:f7: f0:91:e4:2c:00:8c:fa:55:ff:ab:8a:fe:26:43:b8:2c:ac:d6: 75:fd:71:69:c4:cf:cb:75:a6:bc:0c:83:3f:fd:d1:dd:66:a6: 16:19:74:20:9c:bc:4e:1b:80:17:cc:c6:a3:ea:f0:42:df:c7: 88:5d:77:fc:55:9d:02:d6:1b:fa:56:79:f8:3c:01:1d:b5:6d: e9:fc:4b:81:c2:de:73:21:25:00:1e:7c:cc:5c:e4:0d:91:6c: fe:e0:b0:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WqwwXLpYBi8fB6K1d+SUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjAyZDlhMThkNjVmNTBhZGFjNzA2YWM4MzIwMGYzNGJmOGI5YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9V2KMDraYwYwK7u0piczRSeCbSA RHZXejN1pXrufxn6dNI6014e1G2GkESPdAfOMI5A/mseKkFQPoER8r7AoEoCOBz6 u940MwoyK+j9bn/vbWHhF/3SF1yc66tgt3O7ygOe03cWhsh76qNPaIvrDf6JOjnb PNvmKCvNIGS1Rt60vyvgxujjAxStSR1LgRrG/GGe+8bz4FfxmEUldy/XxEJjbZ/C z/ozw4YY7/i//+Dob0A/AmZuXlfF4CHfhSwRJXbhvQ6g+yxYpnp1hA8a4I5K7185 EjDX/swnfHBkXx2cXPuCq0zUvXPTiDnXbgEPRl3XR+2e56h3Pv/aVCa17wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI8C2aGNZfUK2scGrIMgDzS/i5otMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvandMWm9ZMWw5UXJheHdhc2d5QVBOTC1MbWkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjy/MA0G CSqGSIb3DQEBCwUAA4IBAQAflg64zYVkEHoRy8+L2Nk3mlqqSR2FTMAsKvDjJ0Mb OmfmES8+UHVXGEOkxetSUE0tzs+zIJG1OsSIx023DijkA4TGcap7c7B3mv0h05mp IEeIEZPvJKItysxmuwMNAfDEfcJHJlXdlABY5VVWT2FI8HYOSfTXm5oLtshO67Mg 58ggimq/MwQD1183gRLHE6V/bHmZoZScejnfbJieKmivVvfwkeQsAIz6Vf+riv4m Q7gsrNZ1/XFpxM/Ldaa8DIM//dHdZqYWGXQgnLxOG4AXzMaj6vBC38eIXXf8VZ0C 1hv6Vnn4PAEdtW3p/EuBwt5zISUAHnzMXOQNkWz+4LCX -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:43 2026 by rpki-client