This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/li5HoUVSmo7SxY8wWanis12vItY.roa File: li5HoUVSmo7SxY8wWanis12vItY.roa (raw, json) Hash identifier: uSUGVF9Bh/Ykq1ZvctiDJEhf7TWar+RbbU9ypNYA66c= Subject key identifier: 96:2E:47:A1:45:52:9A:8E:D2:C5:8F:30:59:A9:E2:B3:5D:AF:22:D6 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AA304BF12B475C157A798CD883573 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/li5HoUVSmo7SxY8wWanis12vItY.roa Signing time: Fri 02 Jan 2026 06:17:30 +0000 ROA not before: Fri 02 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211522 IP address blocks: 62.60.152.0/23 maxlen: 24 62.60.172.0/22 maxlen: 24 62.60.216.0/23 maxlen: 24 62.60.244.0/22 maxlen: 24 62.60.248.0/23 maxlen: 24 62.60.250.0/24 maxlen: 24 62.60.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:a3:04:bf:12:b4:75:c1:57:a7:98:cd:88:35:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=962e47a145529a8ed2c58f3059a9e2b35daf22d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:8f:e4:e9:ab:f6:8f:40:d1:ee:b6:59:1d: 37:c5:38:be:89:54:09:e5:7c:c5:dd:d1:b5:e1:03: b1:1c:a9:8a:17:6f:9b:00:6f:a0:a2:e5:2e:d1:4e: 7c:73:01:7a:2e:97:64:0f:95:6c:5f:4a:ac:fb:e7: f9:d6:e7:21:d7:e9:b1:64:de:43:5c:2e:5d:7e:b1: 0b:65:cc:f4:41:ea:cd:d8:fb:ce:4b:94:70:d6:6b: 02:15:13:18:0f:bc:8e:4a:80:e0:80:6e:99:80:9c: 61:1d:b7:8f:16:79:88:aa:82:49:b8:a3:0c:e9:24: 5f:fd:0f:49:62:f1:ca:79:4f:0c:ba:08:b6:09:3d: 54:37:97:8d:c8:43:3f:6a:2f:db:8d:77:9c:ef:29: 59:f2:91:49:41:7b:f8:14:b5:d7:e5:a8:6d:e4:7e: 70:45:d2:6a:83:af:eb:49:68:7c:bf:59:46:09:05: 30:2e:1e:74:46:ce:05:b6:39:79:1b:f8:46:4f:2a: 4d:c3:03:99:6b:dc:7d:f6:d0:b5:d7:57:03:28:cc: 69:fe:be:e2:43:a5:11:a2:28:50:86:07:1d:41:5a: d0:99:50:33:82:12:f5:32:eb:01:0f:74:6b:01:8e: 85:8e:69:9e:d9:b3:ab:b1:c0:69:c4:0d:c8:ba:94: d1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2E:47:A1:45:52:9A:8E:D2:C5:8F:30:59:A9:E2:B3:5D:AF:22:D6 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/li5HoUVSmo7SxY8wWanis12vItY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.152.0/23 62.60.172.0/22 62.60.216.0/23 62.60.244.0-62.60.251.255 Signature Algorithm: sha256WithRSAEncryption b0:97:9b:06:05:21:46:af:a5:86:a0:fc:5e:f9:bc:43:2e:19: c5:a9:76:7e:ac:d0:29:1d:4c:7c:5d:4a:0c:58:3e:ba:8f:b5: 1c:59:38:ea:6a:96:fd:8c:4b:a5:27:d8:39:7c:93:51:9e:18: 5f:09:ca:b1:01:32:c6:a8:a9:38:d8:a9:b0:2d:c8:1b:74:f1: 0e:ea:56:2b:c8:e3:66:f4:2f:84:3b:47:2e:8f:2a:fe:ec:3f: 13:e7:89:a1:ec:3f:d5:cc:9f:80:98:aa:de:47:51:de:31:47: 66:cf:30:f5:d2:4c:53:d2:f1:34:be:5b:cb:0b:d8:2f:0d:cb: 50:e6:34:7c:bc:61:a8:1b:74:0c:d9:bd:a2:25:a4:65:51:04: db:0f:01:b0:ac:08:de:87:e1:59:74:59:f3:a1:e9:33:03:d6: da:f9:62:bc:09:54:49:5c:7b:b5:c3:20:46:e5:97:b4:33:4f: e5:3a:17:98:25:7b:9f:35:2b:11:87:3e:e6:8c:8e:cc:f4:6f: 20:97:d3:12:a6:59:10:eb:b6:21:b6:4b:23:46:51:7f:6f:d4: 4b:e0:17:1d:b1:a4:35:3a:49:49:c3:cf:a8:15:27:2f:2d:93: ee:e0:68:75:85:9a:4c:6c:79:ec:4a:94:f9:19:ed:1f:29:85: 78:5e:a1:4d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9WqMEvxK0dcFXp5jNiDVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NjJlNDdhMTQ1NTI5YThlZDJjNThmMzA1OWE5ZTJiMzVkYWYyMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulOP5Omr9o9A0e62WR03xTi+iVQJ 5XzF3dG14QOxHKmKF2+bAG+gouUu0U58cwF6LpdkD5VsX0qs++f51uch1+mxZN5D XC5dfrELZcz0QerN2PvOS5Rw1msCFRMYD7yOSoDggG6ZgJxhHbePFnmIqoJJuKMM 6SRf/Q9JYvHKeU8Mugi2CT1UN5eNyEM/ai/bjXec7ylZ8pFJQXv4FLXX5aht5H5w RdJqg6/rSWh8v1lGCQUwLh50Rs4Ftjl5G/hGTypNwwOZa9x99tC111cDKMxp/r7i Q6URoihQhgcdQVrQmVAzghL1MusBD3RrAY6Fjmme2bOrscBpxA3IupTRKQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFJYuR6FFUpqO0sWPMFmp4rNdryLWMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvbGk1SG9VVlNtbzdTeFk4d1dhbmlzMTJ2SXRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBPjyYAwQC PjysAwQBPjzYMAwDBAI+PPQDBAI+PPgwDQYJKoZIhvcNAQELBQADggEBALCXmwYF IUavpYag/F75vEMuGcWpdn6s0CkdTHxdSgxYPrqPtRxZOOpqlv2MS6Un2Dl8k1Ge GF8JyrEBMsaoqTjYqbAtyBt08Q7qVivI42b0L4Q7Ry6PKv7sPxPniaHsP9XMn4CY qt5HUd4xR2bPMPXSTFPS8TS+W8sL2C8Ny1DmNHy8YagbdAzZvaIlpGVRBNsPAbCs CN6H4Vl0WfOh6TMD1tr5YrwJVElce7XDIEbll7QzT+U6F5gle581KxGHPuaMjsz0 byCX0xKmWRDrtiG2SyNGUX9v1EvgFx2xpDU6SUnDz6gVJy8tk+7gaHWFmkxseexK lPkZ7R8phXheoU0= -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:14 2026 by rpki-client