This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa File: yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa (raw, json) Hash identifier: 5AfMI1xdMmJjkxCT2B0IdTB1z5KEFifJ/L85wd8rc84= Subject key identifier: C9:F3:0F:95:E4:3A:CD:70:C1:F1:91:30:C3:3C:A2:F7:2F:C6:84:2E Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B7D5A9939FBC05904D85C87C91503D3EE Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa Signing time: Fri 02 Jan 2026 06:17:28 +0000 ROA not before: Fri 02 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48147 IP address blocks: 62.60.162.0/24 maxlen: 24 62.60.196.0/23 maxlen: 24 62.60.199.0/24 maxlen: 24 62.60.222.0/23 maxlen: 24 62.60.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:99:39:fb:c0:59:04:d8:5c:87:c9:15:03:d3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Jan 2 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9f30f95e43acd70c1f19130c33ca2f72fc6842e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:52:b1:e5:2d:c5:81:0c:0d:d6:6d:93:35:d9: a5:6e:cc:b2:75:5a:a5:57:4d:7d:da:14:52:09:02: 74:8c:00:0b:3b:37:f4:d8:25:e4:fb:76:59:8c:d1: 06:1e:76:3a:ea:de:f8:f7:4f:4b:0b:18:f1:ee:68: d5:df:20:3c:d7:09:93:c3:26:f9:75:f5:ae:f5:47: 58:99:cd:7e:9a:18:c5:99:6b:7c:da:92:af:bb:9b: 9c:e3:e7:46:5c:43:ab:71:3b:77:6e:19:10:dd:b5: 79:0c:89:bc:c5:4b:2b:39:28:86:bc:22:6a:aa:51: ae:82:d9:e7:b2:74:5c:52:0d:01:63:b2:04:8d:0d: c4:02:ca:7f:30:31:fa:84:44:8b:53:2f:7b:b4:2e: 35:37:8c:6a:ac:c5:7f:e1:d3:01:a8:fb:46:43:ac: 05:a7:87:02:66:ca:c6:13:fd:c6:30:e5:6f:f4:81: 2e:eb:a0:c0:2f:64:a8:43:28:04:59:7c:60:03:06: 8a:91:9b:d2:13:3a:67:5c:07:47:cb:53:de:e7:73: 13:e0:44:c5:9a:c1:cf:b2:d7:bd:f9:6c:9a:05:aa: 6c:d1:cc:06:d7:1c:e0:96:5f:07:88:d4:cc:cd:fd: 1b:f7:72:9e:0e:89:48:05:21:3e:5c:b3:28:b9:1d: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F3:0F:95:E4:3A:CD:70:C1:F1:91:30:C3:3C:A2:F7:2F:C6:84:2E X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yfMPleQ6zXDB8ZEwwzyi9y_GhC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.162.0/24 62.60.196.0/23 62.60.199.0/24 62.60.222.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:ac:1f:ed:63:29:e6:d3:d9:06:65:ad:b6:20:e5:e0:02:1b: 55:18:82:f6:f1:39:d2:b2:64:e3:8c:d7:79:7e:47:49:be:34: 20:e9:e0:b2:c1:ec:45:5f:be:63:ee:9e:bd:70:39:f8:fc:ed: 29:32:46:ae:a2:b2:2c:8e:01:56:3c:3f:9a:0f:7b:da:25:bf: e3:85:3d:00:1a:63:63:64:cd:fd:57:ae:01:28:6d:23:ee:b9: c3:82:9d:4c:08:1d:8d:8f:05:61:54:79:7b:b9:64:c4:22:50: a7:88:4f:25:6e:1c:61:19:67:da:6c:e0:67:72:c6:ae:3f:2d: 64:d6:05:94:74:a9:99:89:6f:09:7c:7f:56:15:69:66:86:ab: 4a:a1:f2:cd:01:19:90:fa:0c:66:85:22:12:82:36:48:ad:5b: 2b:23:4f:95:8a:10:5b:8c:45:21:c8:e9:b3:5a:ea:ec:8e:1d: a5:90:6f:2f:f8:52:bb:01:33:11:c4:30:2c:0e:04:ae:61:ab: 4a:59:d0:c1:0d:ac:71:a1:91:95:cf:b6:ff:b0:7b:4b:1a:b4: 4b:df:fc:8a:78:68:a0:a0:07:9c:8e:99:a7:3a:91:ec:84:57: 19:32:06:db:69:cc:ce:b9:80:b6:2c:11:a0:fe:97:58:b1:f4: fc:b6:64:87 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9Wpk5+8BZBNhch8kVA9PuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjYwMTAyMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWYzMGY5NWU0M2FjZDcwYzFmMTkxMzBjMzNjYTJmNzJmYzY4NDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVKx5S3FgQwN1m2TNdmlbsyydVql V0192hRSCQJ0jAALOzf02CXk+3ZZjNEGHnY66t74909LCxjx7mjV3yA81wmTwyb5 dfWu9UdYmc1+mhjFmWt82pKvu5uc4+dGXEOrcTt3bhkQ3bV5DIm8xUsrOSiGvCJq qlGugtnnsnRcUg0BY7IEjQ3EAsp/MDH6hESLUy97tC41N4xqrMV/4dMBqPtGQ6wF p4cCZsrGE/3GMOVv9IEu66DAL2SoQygEWXxgAwaKkZvSEzpnXAdHy1Pe53MT4ETF msHPste9+WyaBaps0cwG1xzgll8HiNTMzf0b93KeDolIBSE+XLMouR0a9wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMnzD5XkOs1wwfGRMMM8ovcvxoQuMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEveWZNUGxlUTZ6WERCOFpFd3d6eWk5eV9HaEM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPjyiAwQB PjzEAwQAPjzHAwQBPjzeMA0GCSqGSIb3DQEBCwUAA4IBAQBMrB/tYynm09kGZa22 IOXgAhtVGIL28TnSsmTjjNd5fkdJvjQg6eCywexFX75j7p69cDn4/O0pMkauorIs jgFWPD+aD3vaJb/jhT0AGmNjZM39V64BKG0j7rnDgp1MCB2NjwVhVHl7uWTEIlCn iE8lbhxhGWfabOBncsauPy1k1gWUdKmZiW8JfH9WFWlmhqtKofLNARmQ+gxmhSIS gjZIrVsrI0+VihBbjEUhyOmzWursjh2lkG8v+FK7ATMRxDAsDgSuYatKWdDBDaxx oZGVz7b/sHtLGrRL3/yKeGigoAecjpmnOpHshFcZMgbbaczOuYC2LBGg/pdYsfT8 tmSH -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:44 2026 by rpki-client