This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/60Yzg5ovYbhNZtsG87V10o4lft0.roa File: 60Yzg5ovYbhNZtsG87V10o4lft0.roa (raw, json) Hash identifier: pwf3Cr849YIF4wTPFp3jPWoUW71SDRP921dWjmbB0ls= Subject key identifier: EB:46:33:83:9A:2F:61:B8:4D:66:DB:06:F3:B5:75:D2:8E:25:7E:DD Certificate issuer: /CN=153b46702839a795baba8d8d15ecdcca637e336c Certificate serial: 019B7A5B7A781195B022A8247F24C718A953 Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/60Yzg5ovYbhNZtsG87V10o4lft0.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8823 IP address blocks: 185.245.22.0/24 maxlen: 24 2a0c:d4c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7a:78:11:95:b0:22:a8:24:7f:24:c7:18:a9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb4633839a2f61b84d66db06f3b575d28e257edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f6:9c:8f:00:e1:e7:5d:c6:76:66:fd:21:4f: 10:8f:cf:ae:5e:24:0d:77:99:5b:89:ad:65:5b:c9: 03:84:39:f4:20:1c:b8:ec:ef:cd:05:ed:7c:29:5a: cf:2c:35:80:ca:01:c0:58:df:77:ba:59:8e:51:ff: 78:4d:07:c5:4a:ad:55:eb:ad:19:e4:b9:0a:e7:9e: b1:08:ba:78:8e:15:9d:c9:de:6a:da:55:1a:9f:13: ed:05:55:b9:90:42:bc:42:f1:02:ba:78:37:db:5a: 84:b6:b4:75:30:59:2e:67:24:bb:10:b1:1d:8c:75: 6c:60:b8:36:e8:7a:22:98:dd:68:ba:5b:2e:b9:15: 3f:89:77:3d:13:97:ba:82:3a:cc:aa:8f:ae:9b:8e: 42:64:67:0f:79:2d:ec:08:45:9c:71:7b:62:80:07: 5c:35:da:c3:3c:7a:c8:58:85:5a:a8:ba:5f:2e:69: 0b:60:67:e0:b2:75:aa:d6:98:02:f2:b8:b1:57:c5: 27:85:3b:d1:05:5e:59:b8:f6:ac:58:c5:3b:21:a4: 1a:34:ef:2a:64:fa:ba:18:f2:1d:0d:d8:3d:62:f7: 0d:94:94:8c:62:ee:d1:99:69:5c:f6:13:40:f7:b9: ce:bc:47:b4:59:5c:c5:6a:48:4c:c3:c7:36:4b:89: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:46:33:83:9A:2F:61:B8:4D:66:DB:06:F3:B5:75:D2:8E:25:7E:DD X509v3 Authority Key Identifier: keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/60Yzg5ovYbhNZtsG87V10o4lft0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.22.0/24 IPv6: 2a0c:d4c0::/29 Signature Algorithm: sha256WithRSAEncryption 4a:6c:05:34:79:eb:6d:f7:da:c5:34:f1:7a:2f:e2:81:58:95: ec:83:8d:3c:7a:6d:a9:b7:3d:d5:06:de:59:29:80:6c:b7:a8: e5:ca:da:f5:b8:f0:ae:57:e1:03:51:f4:74:5b:69:7e:ca:5f: da:e0:87:15:a4:9a:7a:0f:e2:bb:92:25:e2:a3:05:30:d0:ab: 1a:74:f6:ab:ef:5d:4b:94:60:86:bf:c5:b0:22:2b:f9:c2:fb: 84:aa:59:1f:9e:8c:14:3a:0d:c0:bc:8c:ce:f8:a1:db:9d:5d: d5:f2:a2:60:c8:d5:a7:07:88:76:e0:52:69:ce:50:80:33:37: fb:21:d9:46:e1:ff:dd:f2:a8:98:35:44:77:dd:52:c1:e9:dd: b1:8e:d8:14:14:d2:8e:f1:f6:c1:67:2f:fe:e9:0b:a0:c1:0d: e0:ec:3c:65:c0:42:06:9b:d9:22:2d:02:c8:ae:64:4d:7c:ad: ba:69:f1:c7:aa:73:bc:23:5d:29:c6:35:b1:ca:70:c7:3e:f0: 8c:d1:9b:e4:a4:ee:ad:14:cc:bb:b2:2b:3f:cd:ac:e6:17:2f: d5:9e:5d:e4:4a:7a:7b:ea:26:c9:ce:75:52:d2:b4:f3:79:4c: 76:f0:65:a5:a3:e3:80:3e:bb:da:63:be:7f:cc:24:2e:7e:b4: 15:56:05:cc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W3p4EZWwIqgkfyTHGKlTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2I0NjcwMjgzOWE3OTViYWJhOGQ4ZDE1ZWNkY2NhNjM3 ZTMzNmMwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjQ2MzM4MzlhMmY2MWI4NGQ2NmRiMDZmM2I1NzVkMjhlMjU3ZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/acjwDh513Gdmb9IU8Qj8+uXiQN d5lbia1lW8kDhDn0IBy47O/NBe18KVrPLDWAygHAWN93ulmOUf94TQfFSq1V660Z 5LkK556xCLp4jhWdyd5q2lUanxPtBVW5kEK8QvECung321qEtrR1MFkuZyS7ELEd jHVsYLg26HoimN1oulsuuRU/iXc9E5e6gjrMqo+um45CZGcPeS3sCEWccXtigAdc NdrDPHrIWIVaqLpfLmkLYGfgsnWq1pgC8rixV8UnhTvRBV5ZuPasWMU7IaQaNO8q ZPq6GPIdDdg9YvcNlJSMYu7RmWlc9hNA97nOvEe0WVzFakhMw8c2S4njOwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOtGM4OaL2G4TWbbBvO1ddKOJX7dMB8GA1UdIwQY MBaAFBU7RnAoOaeVurqNjRXs3MpjfjNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNTZkN2YtMWI3OC00NDUzLTgxZTct YmE1NjM3OGE2NDc2LzEvNjBZemc1b3ZZYmhOWnRzRzg3VjEwbzRsZnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNTZkN2YtMWI3OC00NDUzLTgxZTctYmE1NjM3OGE2NDc2 LzEvRlR0R2NDZzVwNVc2dW8yTkZlemN5bU4tTTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufUWMA0E AgACMAcDBQMqDNTAMA0GCSqGSIb3DQEBCwUAA4IBAQBKbAU0eett99rFNPF6L+KB WJXsg408em2ptz3VBt5ZKYBst6jlytr1uPCuV+EDUfR0W2l+yl/a4IcVpJp6D+K7 kiXiowUw0KsadPar711LlGCGv8WwIiv5wvuEqlkfnowUOg3AvIzO+KHbnV3V8qJg yNWnB4h24FJpzlCAMzf7IdlG4f/d8qiYNUR33VLB6d2xjtgUFNKO8fbBZy/+6Qug wQ3g7DxlwEIGm9kiLQLIrmRNfK26afHHqnO8I10pxjWxynDHPvCM0ZvkpO6tFMy7 sis/zazmFy/Vnl3kSnp76ibJznVS0rTzeUx28GWlo+OAPrvaY75/zCQufrQVVgXM -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:18 2026 by rpki-client