This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kSt24U3dMGrK_eeNFUJ0VKDNcmA.roa File: kSt24U3dMGrK_eeNFUJ0VKDNcmA.roa (raw, json) Hash identifier: KdvanUmTfifS1E7RiGOchWirNpaIWYJ9mP4hoPbCkcI= Subject key identifier: 91:2B:76:E1:4D:DD:30:6A:CA:FD:E7:8D:15:42:74:54:A0:CD:72:60 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AAA0C70E853AD20A0EEADBAE4937A Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kSt24U3dMGrK_eeNFUJ0VKDNcmA.roa Signing time: Fri 02 Jan 2026 06:17:32 +0000 ROA not before: Fri 02 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215633 IP address blocks: 62.60.141.0/24 maxlen: 24 62.60.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:aa:0c:70:e8:53:ad:20:a0:ee:ad:ba:e4:93:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=912b76e14ddd306acafde78d15427454a0cd7260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:bb:8b:dd:fe:21:51:e2:71:1a:fb:52:12: 13:1b:aa:52:1b:d8:e5:32:6c:a3:60:b2:0d:c3:3b: 28:b4:8c:34:57:b9:e8:a0:c9:89:d4:6a:f3:37:2e: a9:4a:6f:b3:9a:6c:fb:d4:ce:16:41:eb:52:a0:61: 7f:b4:16:c6:d1:6d:ab:5b:5b:d1:f1:f6:c6:08:db: b8:b8:88:dc:ef:b3:aa:a3:69:9c:16:79:a5:f2:6c: 3e:63:a5:dd:5a:7e:ae:b0:5f:37:5b:f7:99:de:bb: 9e:a3:65:13:ea:3f:cd:c6:a2:97:b9:8a:eb:ab:88: 86:ba:d0:c6:a3:70:99:d5:69:0c:2f:5e:51:f9:70: 07:fc:d8:f7:26:b2:2b:0b:48:2f:05:57:64:f7:81: 73:09:c3:51:62:ab:b2:e7:18:c8:8f:03:18:30:c0: 0d:3c:ae:3e:62:14:71:b4:00:1b:af:df:f4:67:5d: 20:3d:5c:4e:f6:95:8b:d8:5f:a9:38:e7:2b:39:17: ee:26:39:c6:55:ff:04:97:15:09:ee:94:d5:2d:02: 3a:9d:da:48:82:d2:90:f8:ae:38:1a:66:10:4b:0a: 60:bf:41:e7:53:81:64:80:4b:cf:b7:95:df:26:e5: f9:11:a1:e1:d7:52:30:3b:cb:e4:d7:5b:89:f8:e8: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2B:76:E1:4D:DD:30:6A:CA:FD:E7:8D:15:42:74:54:A0:CD:72:60 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/kSt24U3dMGrK_eeNFUJ0VKDNcmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.141.0/24 62.60.146.0/24 Signature Algorithm: sha256WithRSAEncryption 79:08:21:9a:34:ec:7f:0d:50:2c:ab:aa:39:8e:8b:a2:b3:7a: da:a4:fa:d4:86:7f:cb:78:f2:4a:ef:b3:ae:50:4f:e6:16:a7: 2c:69:d5:49:7b:25:d5:41:bf:59:07:c0:ad:3d:cb:e8:95:8f: 81:d9:50:73:23:ef:c4:a0:b9:ea:a3:d7:f2:56:72:b6:9b:46: 6c:57:ce:db:ac:12:d6:e8:5e:da:94:94:7d:63:96:70:2b:1c: da:94:dd:07:eb:65:a7:ee:41:da:27:7c:08:7f:b8:4c:ef:ad: 1f:7e:e9:95:1e:c3:cf:bc:e2:c0:56:a0:f0:eb:a8:7a:12:83: 54:dc:0f:a9:6b:d6:20:5b:57:76:27:81:54:03:68:0b:ae:bc: e2:96:b2:c8:7d:e2:3f:c3:02:77:a9:0f:5b:fc:ad:7a:25:40: 76:ac:d8:25:10:1a:31:82:73:d7:0c:e8:57:9b:70:d9:15:ca: 76:a6:21:0e:6b:b7:04:fd:66:e3:b7:60:52:57:bb:1e:b7:29: 83:19:da:3e:9d:d8:0c:fc:f4:54:84:8e:48:ea:e7:29:67:00: 85:86:18:94:34:a1:94:ba:d8:75:a3:f2:06:50:18:95:ed:82: b3:bc:56:1d:f2:ca:e8:99:d8:fb:f7:57:dc:ea:7c:1c:fd:ef: f5:9f:d0:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WqoMcOhTrSCg7q265JN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTJiNzZlMTRkZGQzMDZhY2FmZGU3OGQxNTQyNzQ1NGEwY2Q3MjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXS7i93+IVHicRr7UhITG6pSG9jl MmyjYLINwzsotIw0V7nooMmJ1GrzNy6pSm+zmmz71M4WQetSoGF/tBbG0W2rW1vR 8fbGCNu4uIjc77Oqo2mcFnml8mw+Y6XdWn6usF83W/eZ3rueo2UT6j/NxqKXuYrr q4iGutDGo3CZ1WkML15R+XAH/Nj3JrIrC0gvBVdk94FzCcNRYquy5xjIjwMYMMAN PK4+YhRxtAAbr9/0Z10gPVxO9pWL2F+pOOcrORfuJjnGVf8ElxUJ7pTVLQI6ndpI gtKQ+K44GmYQSwpgv0HnU4FkgEvPt5XfJuX5EaHh11IwO8vk11uJ+OhmmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJErduFN3TBqyv3njRVCdFSgzXJgMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEva1N0MjRVM2RNR3JLX2VlTkZVSjBWS0ROY21BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPjyNAwQA PjySMA0GCSqGSIb3DQEBCwUAA4IBAQB5CCGaNOx/DVAsq6o5jouis3rapPrUhn/L ePJK77OuUE/mFqcsadVJeyXVQb9ZB8CtPcvolY+B2VBzI+/EoLnqo9fyVnK2m0Zs V87brBLW6F7alJR9Y5ZwKxzalN0H62Wn7kHaJ3wIf7hM760ffumVHsPPvOLAVqDw 66h6EoNU3A+pa9YgW1d2J4FUA2gLrrzilrLIfeI/wwJ3qQ9b/K16JUB2rNglEBox gnPXDOhXm3DZFcp2piEOa7cE/Wbjt2BSV7setymDGdo+ndgM/PRUhI5I6ucpZwCF hhiUNKGUuth1o/IGUBiV7YKzvFYd8sromdj791fc6nwc/e/1n9DX -----END CERTIFICATE-----Generated at Wed Jan 21 10:46:56 2026 by rpki-client