This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/t_QY2lM7jBaSD55UnlYp2CJKlqw.roa File: t_QY2lM7jBaSD55UnlYp2CJKlqw.roa (raw, json) Hash identifier: KJk9RhNUyjLDjBZyhKz+Gi6pVQ35sT30ueaJl0wPtqY= Subject key identifier: B7:F4:18:DA:53:3B:8C:16:92:0F:9E:54:9E:56:29:D8:22:4A:96:AC Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A9702DF0B65249E17A17D082CBE87 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/t_QY2lM7jBaSD55UnlYp2CJKlqw.roa Signing time: Fri 02 Jan 2026 06:17:27 +0000 ROA not before: Fri 02 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35372 IP address blocks: 62.60.138.0/24 maxlen: 24 62.60.144.0/24 maxlen: 24 62.60.147.0/24 maxlen: 24 62.60.160.0/24 maxlen: 24 62.60.218.0/23 maxlen: 24 213.176.0.0/24 maxlen: 24 213.176.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:97:02:df:0b:65:24:9e:17:a1:7d:08:2c:be:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7f418da533b8c16920f9e549e5629d8224a96ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a0:39:82:0c:31:72:82:f0:c1:96:b0:eb:1d: 83:9a:2e:f8:de:41:35:dd:27:f8:cc:03:1d:68:a3: 19:bc:a0:dd:64:50:9d:c0:09:71:ee:bc:e9:a2:8b: 05:12:8d:e1:47:f8:ca:88:3f:e5:18:77:6d:37:ea: 1e:1e:e5:85:80:46:b2:a8:b9:04:2c:9c:64:4d:b8: e5:a5:5e:ce:8a:92:e1:cd:a1:8f:c8:23:cd:6c:a0: 57:6d:08:e6:71:0c:4a:e6:f0:99:47:01:c8:09:34: 14:89:63:0a:38:39:3b:7f:58:e4:75:12:95:8f:ae: 19:7b:14:d6:97:8f:05:c2:db:87:59:fd:90:1b:d6: b6:d5:87:c8:f5:79:66:6d:de:ac:2a:0f:cc:5e:9a: 5c:84:1f:69:70:a5:3e:80:5b:dd:a6:29:3e:db:2f: 90:54:c8:c4:73:7b:c0:42:09:e8:f1:d5:d5:da:7d: 35:12:72:0f:c2:ec:80:6c:8d:0b:fd:07:f1:cc:2a: 27:9f:d8:a5:52:62:a0:4b:29:6b:ee:ea:37:0e:40: eb:c6:74:48:1b:ad:58:70:0f:f9:d5:5b:80:5c:6d: 9e:c9:e4:f6:87:ef:15:b0:db:6a:8b:97:4a:7e:db: 54:de:66:73:da:6f:72:9a:1c:c2:bd:15:19:60:e7: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F4:18:DA:53:3B:8C:16:92:0F:9E:54:9E:56:29:D8:22:4A:96:AC X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/t_QY2lM7jBaSD55UnlYp2CJKlqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.138.0/24 62.60.144.0/24 62.60.147.0/24 62.60.160.0/24 62.60.218.0/23 213.176.0.0/24 213.176.126.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:5d:41:6c:93:ac:76:87:aa:ff:40:45:b6:44:5d:39:ad:1e: df:5f:ef:88:7f:ad:c1:30:ff:0b:cc:78:aa:43:5d:c0:b0:f1: 3a:c8:fb:0e:04:ce:61:9b:cc:03:7b:0b:59:62:1c:37:ee:31: 36:49:66:03:74:90:ea:33:e3:9d:a3:22:e4:ca:da:32:1d:e7: ef:f2:78:41:b5:4c:02:b0:d6:2f:0d:00:d3:6b:3e:c7:01:c2: 38:d2:0c:3b:d3:4c:85:d1:84:77:63:49:e4:f6:73:e6:84:32: ee:4d:3b:6d:74:4c:f6:35:92:b4:f4:f7:62:c0:f8:7c:32:d6: 72:b7:7f:03:ea:8b:1d:f9:df:62:bf:6d:02:c6:05:72:f2:3d: 05:a7:79:dc:eb:f4:a5:52:ff:2a:f8:d5:b7:82:de:ea:8e:9c: 26:2b:1b:43:4b:53:df:02:ed:f0:cb:5d:26:d5:e4:62:de:bd: 54:87:2b:a0:a6:31:49:57:72:1a:af:ec:12:8d:01:3e:6d:95: 79:9d:46:a6:11:46:2b:0d:08:ed:73:e4:83:8f:8e:28:b5:4c: 9d:cb:90:4b:eb:ab:88:ac:fe:16:fb:4b:3c:b2:c2:93:e6:3c: e9:0a:c3:7b:6f:22:c5:ec:17:b1:fb:2e:7b:a4:12:33:3a:0a: 58:7d:b5:47 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt9WpcC3wtlJJ4XoX0ILL6HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2Y0MThkYTUzM2I4YzE2OTIwZjllNTQ5ZTU2MjlkODIyNGE5NmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6A5ggwxcoLwwZaw6x2Dmi743kE1 3Sf4zAMdaKMZvKDdZFCdwAlx7rzpoosFEo3hR/jKiD/lGHdtN+oeHuWFgEayqLkE LJxkTbjlpV7OipLhzaGPyCPNbKBXbQjmcQxK5vCZRwHICTQUiWMKODk7f1jkdRKV j64ZexTWl48FwtuHWf2QG9a21YfI9Xlmbd6sKg/MXppchB9pcKU+gFvdpik+2y+Q VMjEc3vAQgno8dXV2n01EnIPwuyAbI0L/QfxzConn9ilUmKgSylr7uo3DkDrxnRI G61YcA/51VuAXG2eyeT2h+8VsNtqi5dKfttU3mZz2m9ymhzCvRUZYOeXiQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFLf0GNpTO4wWkg+eVJ5WKdgiSpasMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvdF9RWTJsTTdqQmFTRDU1VW5sWXAyQ0pLbHF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAPjyKAwQA PjyQAwQAPjyTAwQAPjygAwQBPjzaAwQA1bAAAwQA1bB+MA0GCSqGSIb3DQEBCwUA A4IBAQAvXUFsk6x2h6r/QEW2RF05rR7fX++If63BMP8LzHiqQ13AsPE6yPsOBM5h m8wDewtZYhw37jE2SWYDdJDqM+OdoyLkytoyHefv8nhBtUwCsNYvDQDTaz7HAcI4 0gw700yF0YR3Y0nk9nPmhDLuTTttdEz2NZK09PdiwPh8MtZyt38D6osd+d9iv20C xgVy8j0Fp3nc6/SlUv8q+NW3gt7qjpwmKxtDS1PfAu3wy10m1eRi3r1UhyugpjFJ V3Iar+wSjQE+bZV5nUamEUYrDQjtc+SDj44otUydy5BL66uIrP4W+0s8ssKT5jzp CsN7byLF7Bex+y57pBIzOgpYfbVH -----END CERTIFICATE-----Generated at Wed Jan 21 10:49:29 2026 by rpki-client