This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wSq3__UGmNbW-8TQE4RjCIpqjmw.roa File: wSq3__UGmNbW-8TQE4RjCIpqjmw.roa (raw, json) Hash identifier: jjqUM3B0MDwIvRTwCmksMhaKY2Be8FCBDAEdMnrY/lg= Subject key identifier: C1:2A:B7:FF:F5:06:98:D6:D6:FB:C4:D0:13:84:63:08:8A:6A:8E:6C Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5AA822E23D38937E51BC414EE3F8F0 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wSq3__UGmNbW-8TQE4RjCIpqjmw.roa Signing time: Fri 02 Jan 2026 06:17:31 +0000 ROA not before: Fri 02 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214119 IP address blocks: 62.60.224.0/24 maxlen: 24 62.60.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:a8:22:e2:3d:38:93:7e:51:bc:41:4e:e3:f8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c12ab7fff50698d6d6fbc4d0138463088a6a8e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:db:c9:f5:00:b0:1f:c2:bf:19:5b:b7:04:f3: f3:df:58:5e:48:3e:0b:53:77:ff:0e:1c:1a:5f:bb: 68:0a:e0:4e:6f:76:71:88:79:a6:08:f6:2f:71:ca: 71:b0:fb:30:da:ff:79:66:1a:fb:9d:26:90:7d:c8: 97:0e:7a:18:d8:90:14:ff:c3:d5:60:1d:1e:55:26: 27:78:7c:e7:65:98:d2:99:84:66:29:8b:5a:5b:39: 94:fe:de:23:7e:b0:44:f3:9c:32:62:47:c2:97:54: f1:ea:80:22:ef:51:96:0b:17:8f:c8:f4:04:de:27: a0:9b:7a:85:83:b0:1d:d6:45:a3:d5:f0:0e:4f:b0: ac:de:bb:fb:12:ba:c2:3f:8a:07:bc:7b:19:06:c0: 9d:b4:64:77:79:dc:b5:e7:b0:51:db:ac:ab:81:f0: 12:95:9c:f7:67:a3:bb:01:13:c4:c9:95:6d:2a:e9: b9:a0:f7:46:36:00:df:5f:65:fc:ed:57:94:e9:65: db:99:5b:a0:db:84:ed:10:f6:73:e0:4b:d2:23:17: e4:4c:2f:d4:7d:67:de:54:a3:48:03:17:b3:28:42: b0:aa:56:c3:f3:95:18:4c:f9:57:59:0c:eb:dc:0b: f6:d0:5e:30:8f:71:70:60:f0:9c:dc:c6:38:03:37: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2A:B7:FF:F5:06:98:D6:D6:FB:C4:D0:13:84:63:08:8A:6A:8E:6C X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wSq3__UGmNbW-8TQE4RjCIpqjmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.224.0/23 Signature Algorithm: sha256WithRSAEncryption 98:87:2e:63:ac:44:18:41:a9:67:50:44:cd:85:07:8f:d9:f0: d3:a3:9d:d1:8b:17:64:14:7b:60:fe:da:25:fe:85:60:d8:c5: ef:3c:f3:55:0a:f2:ec:f4:3f:e6:a8:cb:ea:d2:c0:d1:c7:01: b7:97:2c:70:cb:54:db:0e:24:8b:08:1f:cb:9a:d6:76:c5:d7: e2:7a:bb:8c:ad:43:43:10:63:79:7d:13:f4:1f:32:37:3d:e9: bc:8c:99:5b:ad:49:86:24:fb:b1:96:48:41:77:d4:af:da:56: 22:1b:53:dc:4f:da:8d:dd:3d:f5:d9:10:62:ef:2d:9c:e9:b7: 10:93:5c:f0:5a:0e:a5:5a:27:e8:ac:e7:61:d0:7a:43:8e:51: 2d:73:e9:a8:ca:79:9a:06:bb:a1:af:ac:57:fd:22:a2:0f:54: 46:99:b4:aa:92:65:c8:11:b6:3e:38:a1:f6:d5:05:ca:db:83: 60:c5:4a:22:b3:88:4c:8f:18:98:13:e1:93:2d:fd:3f:10:64: 7f:9d:ae:d4:99:c7:3b:bf:b9:de:54:8e:80:ba:03:68:7e:2c: f0:ca:05:44:5e:4a:61:48:59:0d:9d:de:c9:74:d5:3a:08:88: 4e:83:3a:1e:23:4f:e3:2a:72:87:a9:eb:bd:40:cd:25:68:1d: cb:a6:b0:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wqgi4j04k35RvEFO4/jwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTJhYjdmZmY1MDY5OGQ2ZDZmYmM0ZDAxMzg0NjMwODhhNmE4ZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9vJ9QCwH8K/GVu3BPPz31heSD4L U3f/DhwaX7toCuBOb3ZxiHmmCPYvccpxsPsw2v95Zhr7nSaQfciXDnoY2JAU/8PV YB0eVSYneHznZZjSmYRmKYtaWzmU/t4jfrBE85wyYkfCl1Tx6oAi71GWCxePyPQE 3iegm3qFg7Ad1kWj1fAOT7Cs3rv7ErrCP4oHvHsZBsCdtGR3edy157BR26yrgfAS lZz3Z6O7ARPEyZVtKum5oPdGNgDfX2X87VeU6WXbmVug24TtEPZz4EvSIxfkTC/U fWfeVKNIAxezKEKwqlbD85UYTPlXWQzr3Av20F4wj3FwYPCc3MY4Azd6+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMEqt//1BpjW1vvE0BOEYwiKao5sMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvd1NxM19fVUdtTmJXLThUUUU0UmpDSXBxam13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBPjzgMA0G CSqGSIb3DQEBCwUAA4IBAQCYhy5jrEQYQalnUETNhQeP2fDTo53RixdkFHtg/tol /oVg2MXvPPNVCvLs9D/mqMvq0sDRxwG3lyxwy1TbDiSLCB/LmtZ2xdfieruMrUND EGN5fRP0HzI3Pem8jJlbrUmGJPuxlkhBd9Sv2lYiG1PcT9qN3T312RBi7y2c6bcQ k1zwWg6lWiforOdh0HpDjlEtc+moynmaBruhr6xX/SKiD1RGmbSqkmXIEbY+OKH2 1QXK24NgxUois4hMjxiYE+GTLf0/EGR/na7Umcc7v7neVI6AugNofizwygVEXkph SFkNnd7JdNU6CIhOgzoeI0/jKnKHqeu9QM0laB3LprDo -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:34 2026 by rpki-client