This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qGkR241OYxWBo21uVRHI-ea25e0.roa File: qGkR241OYxWBo21uVRHI-ea25e0.roa (raw, json) Hash identifier: AtvTZ+wBRkXxrwU1iK+kCBU69MtlaAAKu2j6yZhrIog= Subject key identifier: A8:69:11:DB:8D:4E:63:15:81:A3:6D:6E:55:11:C8:F9:E6:B6:E5:ED Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A9682803ADEDDC70C40B195548F10 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qGkR241OYxWBo21uVRHI-ea25e0.roa Signing time: Fri 02 Jan 2026 06:17:27 +0000 ROA not before: Fri 02 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15611 IP address blocks: 62.60.136.0/24 maxlen: 24 62.60.137.0/24 maxlen: 24 62.60.139.0/24 maxlen: 24 62.60.140.0/24 maxlen: 24 62.60.142.0/24 maxlen: 24 62.60.145.0/24 maxlen: 24 62.60.168.0/22 maxlen: 24 213.176.3.0/24 maxlen: 24 213.176.4.0/24 maxlen: 24 213.176.5.0/24 maxlen: 24 213.176.96.0/24 maxlen: 24 213.176.122.0/24 maxlen: 24 213.176.123.0/24 maxlen: 24 213.176.124.0/24 maxlen: 24 213.176.125.0/24 maxlen: 24 2001:790::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:96:82:80:3a:de:dd:c7:0c:40:b1:95:54:8f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a86911db8d4e631581a36d6e5511c8f9e6b6e5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:63:9e:c6:41:38:c6:39:89:c6:6d:63:d9:2e: 94:cc:7d:fd:a4:e0:eb:39:db:e7:d0:6d:7c:e3:2a: 68:58:a5:58:81:73:86:8e:7b:28:a8:b4:7b:45:00: ac:2c:35:c0:43:eb:0f:69:16:25:d1:f2:5d:a7:4b: e6:e4:0c:77:0f:26:b9:bd:a0:bb:c0:16:52:3f:5c: a0:a2:57:9f:3d:2f:a7:ac:05:33:22:75:ea:74:52: f4:20:b6:2c:24:63:16:20:70:10:7e:e2:1d:e1:0a: 57:e6:38:27:f8:a0:f3:7d:a1:fc:32:c3:54:93:e4: 69:04:fa:0d:50:8a:5e:08:9f:ee:96:7c:a4:39:3d: c9:e6:b3:e0:f2:cb:81:68:93:b9:a5:9f:f0:b7:b7: 21:e9:40:23:eb:36:bb:aa:83:a7:c9:f2:16:a3:32: e3:dd:7c:12:5d:3e:7d:0e:a1:ad:cc:d5:8d:97:a5: 20:b7:58:25:e7:f8:1d:57:47:a2:da:9f:d3:c6:32: 7c:fd:1e:84:08:c3:fc:4e:6a:64:f5:33:4c:78:df: ee:b8:4b:d9:49:b5:5d:8a:20:77:f0:12:f1:b2:5b: 90:17:bc:ec:55:22:60:82:2e:d3:5a:8f:b4:d9:69: 5d:88:25:1a:58:15:5b:7f:47:87:cf:13:57:bd:4b: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:69:11:DB:8D:4E:63:15:81:A3:6D:6E:55:11:C8:F9:E6:B6:E5:ED X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qGkR241OYxWBo21uVRHI-ea25e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.136.0/23 62.60.139.0-62.60.140.255 62.60.142.0/24 62.60.145.0/24 62.60.168.0/22 213.176.3.0-213.176.5.255 213.176.96.0/24 213.176.122.0-213.176.125.255 IPv6: 2001:790::/32 Signature Algorithm: sha256WithRSAEncryption a2:b3:58:63:5d:02:4e:af:8c:5a:05:bc:d9:eb:85:8e:93:01: dc:7b:9c:ff:15:38:55:ca:4b:4f:53:09:04:e8:43:f4:59:93: 3e:ba:1b:49:0c:31:1d:ec:34:b7:84:9a:9a:1f:f5:96:d5:20: 34:20:2e:a5:c0:fb:39:11:aa:3b:3d:e9:61:7e:ef:44:0c:c1: 26:15:81:90:e1:88:4e:50:e6:b5:09:62:24:f7:75:d6:28:43: fa:75:aa:52:86:25:99:3c:5c:cf:bb:0c:87:85:bc:af:50:0b: 5a:95:44:ca:d8:d0:f9:60:16:d9:ed:5c:80:22:c0:2e:06:81: 23:00:75:62:00:1f:93:eb:89:71:e9:6a:60:bd:4e:3d:d0:86: 27:45:51:a3:d9:8a:b6:19:d6:22:42:c6:90:41:ed:76:15:66: c6:bb:86:45:e3:da:0a:d2:81:d4:df:68:79:8c:17:61:94:9a: 96:09:5d:28:b3:ef:8b:62:27:85:da:96:7f:83:77:56:d7:5f: fb:74:87:9e:c4:aa:78:06:00:e7:ee:46:fb:61:b9:37:9f:df: c9:e2:0f:e9:45:28:a8:fa:ee:93:64:c2:72:19:f2:fd:db:b5: 75:6e:2f:d8:61:92:ea:01:e2:9e:cb:68:2d:00:38:52:c0:6b: 26:98:a4:51 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZt9WpaCgDre3ccMQLGVVI8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODY5MTFkYjhkNGU2MzE1ODFhMzZkNmU1NTExYzhmOWU2YjZlNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WOexkE4xjmJxm1j2S6UzH39pODr Odvn0G184ypoWKVYgXOGjnsoqLR7RQCsLDXAQ+sPaRYl0fJdp0vm5Ax3Dya5vaC7 wBZSP1ygolefPS+nrAUzInXqdFL0ILYsJGMWIHAQfuId4QpX5jgn+KDzfaH8MsNU k+RpBPoNUIpeCJ/ulnykOT3J5rPg8suBaJO5pZ/wt7ch6UAj6za7qoOnyfIWozLj 3XwSXT59DqGtzNWNl6Ugt1gl5/gdV0ei2p/TxjJ8/R6ECMP8Tmpk9TNMeN/uuEvZ SbVdiiB38BLxsluQF7zsVSJggi7TWo+02WldiCUaWBVbf0eHzxNXvUtVNwIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFKhpEduNTmMVgaNtblURyPnmtuXtMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvcUdrUjI0MU9ZeFdCbzIxdVZSSEktZWEyNWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQBPjyIMAwD BAA+PIsDBAA+PIwDBAA+PI4DBAA+PJEDBAI+PKgwDAMEANWwAwMEAdWwBAMEANWw YDAMAwQB1bB6AwQB1bB8MA0EAgACMAcDBQAgAQeQMA0GCSqGSIb3DQEBCwUAA4IB AQCis1hjXQJOr4xaBbzZ64WOkwHce5z/FThVyktPUwkE6EP0WZM+uhtJDDEd7DS3 hJqaH/WW1SA0IC6lwPs5Eao7Pelhfu9EDMEmFYGQ4YhOUOa1CWIk93XWKEP6dapS hiWZPFzPuwyHhbyvUAtalUTK2ND5YBbZ7VyAIsAuBoEjAHViAB+T64lx6WpgvU49 0IYnRVGj2Yq2GdYiQsaQQe12FWbGu4ZF49oK0oHU32h5jBdhlJqWCV0os++LYieF 2pZ/g3dW11/7dIeexKp4BgDn7kb7Ybk3n9/J4g/pRSio+u6TZMJyGfL927V1bi/Y YZLqAeKey2gtADhSwGsmmKRR -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:45 2026 by rpki-client