This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/C60VxSBJDSdFCd1k1UlGSCrwJvY.roa File: C60VxSBJDSdFCd1k1UlGSCrwJvY.roa (raw, json) Hash identifier: KibtnUkNqe/Q4+yRw8o2hlvC70cIKXb1SxvsmfXdEPk= Subject key identifier: 0B:AD:15:C5:20:49:0D:27:45:09:DD:64:D5:49:46:48:2A:F0:26:F6 Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad Certificate serial: 019B78A27F3B476DD77CC3A7A8E2C3558A50 Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/C60VxSBJDSdFCd1k1UlGSCrwJvY.roa Signing time: Thu 01 Jan 2026 08:17:53 +0000 ROA not before: Thu 01 Jan 2026 08:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50487 IP address blocks: 195.191.104.0/23 maxlen: 23 195.191.104.0/24 maxlen: 24 195.191.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7f:3b:47:6d:d7:7c:c3:a7:a8:e2:c3:55:8a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad Validity Not Before: Jan 1 08:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bad15c520490d274509dd64d54946482af026f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:52:26:28:1a:39:29:b8:cc:59:6c:10:a7: e9:62:2b:b7:7e:78:18:7a:06:e9:8c:b8:97:9e:d8: be:5c:07:09:d6:5d:7e:5f:1b:0e:3b:98:47:ff:b2: 2a:af:64:83:a1:97:e1:d9:a6:76:90:0c:8d:92:ef: e4:f2:b2:b2:dc:7e:30:aa:db:f1:0a:04:ae:e2:54: d1:bc:c2:2b:db:9c:6a:45:1e:96:99:6d:19:16:32: 31:fd:cf:69:c9:2f:7a:5c:4c:c7:74:1d:8f:ea:1b: ef:cc:68:27:00:a8:89:c5:27:35:07:e8:39:af:f8: 23:f9:db:4e:39:1c:0f:3d:3e:fb:37:35:db:04:25: 1b:73:08:1c:ee:cd:28:c7:63:4d:f9:f8:b9:65:b8: c9:30:f9:9f:f5:89:23:d3:49:73:3c:96:81:7e:ec: 1d:07:3c:61:b8:47:8b:ff:fd:62:a9:7c:5e:8f:a7: 5d:1b:10:5a:86:e4:06:bc:de:6f:38:57:93:1f:e2: bd:1d:6f:49:24:13:ae:29:c6:3c:e0:87:fd:52:66: ee:8c:5d:3d:7a:63:1e:81:fc:71:ca:4b:e1:6e:34: ba:1c:e2:00:d8:6b:48:a9:c5:d9:6d:09:4b:70:67: 8a:8f:28:11:f1:fa:87:21:e7:50:ce:33:3a:f2:81: c2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AD:15:C5:20:49:0D:27:45:09:DD:64:D5:49:46:48:2A:F0:26:F6 X509v3 Authority Key Identifier: keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/C60VxSBJDSdFCd1k1UlGSCrwJvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.104.0/23 Signature Algorithm: sha256WithRSAEncryption 39:04:1b:4e:9d:58:37:7e:ce:25:ac:a0:90:a6:67:7d:48:85: 15:9b:64:a9:d0:5a:37:50:72:b7:cf:55:78:4b:cf:55:db:60: ca:07:01:a6:55:12:d9:5f:e5:06:98:80:b0:c0:03:36:cd:84: e9:8c:60:1a:02:75:d7:6c:08:d1:39:34:3d:e0:b5:f7:94:80: 78:1c:2e:ff:3a:f0:cf:5c:9e:b5:d7:c3:25:da:2c:3f:6a:c8: a2:93:38:aa:40:4f:60:3a:db:0e:bd:63:42:40:6c:e7:83:49: 0e:c4:b2:92:41:d6:94:93:ad:97:a1:ab:99:aa:f1:48:0b:9f: 33:bd:23:d4:ff:a2:fb:ec:19:a8:cd:b1:1b:75:1e:3e:2a:35: 3b:7e:a1:b1:14:57:1c:3c:c1:80:e7:c9:a0:95:b0:6d:bf:05: c1:39:29:5c:27:0f:8c:91:71:37:7f:30:fa:9d:63:9b:44:b0: 61:db:1b:da:7b:b1:f2:c4:75:57:20:96:05:17:01:a4:1c:79: 31:d1:ce:58:94:d7:c2:75:68:85:4f:24:63:46:73:1c:c9:41: b5:8c:eb:d0:29:61:88:e6:f5:11:b8:a2:9e:09:ee:a1:f7:4e: 92:2f:af:2b:c4:42:46:c1:d2:5e:68:55:ea:ad:d3:1f:b1:29: c1:b9:2b:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4on87R23XfMOnqOLDVYpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkZjA5Y2Y5NmU1ZmM4NzRlZTkzOTA5N2M1NjUxYzhiZDg0 MmU2YWQwHhcNMjYwMTAxMDgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmFkMTVjNTIwNDkwZDI3NDUwOWRkNjRkNTQ5NDY0ODJhZjAyNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU1SJigaOSm4zFlsEKfpYiu3fngY egbpjLiXnti+XAcJ1l1+XxsOO5hH/7Iqr2SDoZfh2aZ2kAyNku/k8rKy3H4wqtvx CgSu4lTRvMIr25xqRR6WmW0ZFjIx/c9pyS96XEzHdB2P6hvvzGgnAKiJxSc1B+g5 r/gj+dtOORwPPT77NzXbBCUbcwgc7s0ox2NN+fi5ZbjJMPmf9Ykj00lzPJaBfuwd BzxhuEeL//1iqXxej6ddGxBahuQGvN5vOFeTH+K9HW9JJBOuKcY84If9UmbujF09 emMegfxxykvhbjS6HOIA2GtIqcXZbQlLcGeKjygR8fqHIedQzjM68oHC3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAutFcUgSQ0nRQndZNVJRkgq8Cb2MB8GA1UdIwQY MBaAFN3wnPluX8h07pOQl8VlHIvYQuatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2ZDYy1XNWZ5SFR1azVDWHhXVWNpOWhDNXEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wMDc5ZTgtYzI0Ni00YzM4LTkwNTIt NjczNjcwZTZlZjA5LzEvQzYwVnhTQkpEU2RGQ2QxazFVbEdTQ3J3SnZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wMDc5ZTgtYzI0Ni00YzM4LTkwNTItNjczNjcwZTZlZjA5 LzEvM2ZDYy1XNWZ5SFR1azVDWHhXVWNpOWhDNXEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79oMA0G CSqGSIb3DQEBCwUAA4IBAQA5BBtOnVg3fs4lrKCQpmd9SIUVm2Sp0Fo3UHK3z1V4 S89V22DKBwGmVRLZX+UGmICwwAM2zYTpjGAaAnXXbAjROTQ94LX3lIB4HC7/OvDP XJ6118Ml2iw/asiikziqQE9gOtsOvWNCQGzng0kOxLKSQdaUk62XoauZqvFIC58z vSPU/6L77BmozbEbdR4+KjU7fqGxFFccPMGA58mglbBtvwXBOSlcJw+MkXE3fzD6 nWObRLBh2xvae7HyxHVXIJYFFwGkHHkx0c5YlNfCdWiFTyRjRnMcyUG1jOvQKWGI 5vURuKKeCe6h906SL68rxEJGwdJeaFXqrdMfsSnBuSvA -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:23 2026 by rpki-client