This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-upBOrt9jA-Kt4NN_OCgXZWSZe4.roa File: 1-upBOrt9jA-Kt4NN_OCgXZWSZe4.roa (raw, json) Hash identifier: 4wpNuEz34BT49JM/n3ZszEzfuA0DkHxHulOjRkssrEo= Subject key identifier: FA:EA:41:3A:BB:7D:8C:0F:8A:B7:83:4D:FC:E0:A0:5D:95:92:65:EE Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B79114EE7277BF9613FEDB2E051DF2455 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-upBOrt9jA-Kt4NN_OCgXZWSZe4.roa Signing time: Thu 01 Jan 2026 10:18:55 +0000 ROA not before: Thu 01 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205964 IP address blocks: 64.137.70.0/23 maxlen: 23 64.137.105.0/24 maxlen: 24 64.137.107.0/24 maxlen: 24 104.143.248.0/22 maxlen: 22 104.143.254.0/23 maxlen: 23 104.239.0.0/23 maxlen: 23 104.239.2.0/23 maxlen: 23 104.239.4.0/23 maxlen: 23 104.239.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4e:e7:27:7b:f9:61:3f:ed:b2:e0:51:df:24:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faea413abb7d8c0f8ab7834dfce0a05d959265ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ad:cc:96:2a:4e:62:c5:f6:99:d7:f2:c9:bb: 50:6c:9f:91:9d:be:51:30:26:0e:40:bd:c1:a9:10: 9d:2b:f6:ce:39:ef:d5:b5:c4:24:35:24:af:f5:d7: 45:6d:e0:7a:a5:35:ad:ea:71:c3:80:4c:38:13:14: 4e:11:d3:18:52:b0:ae:af:ce:f9:52:30:69:f7:c8: ba:fc:67:83:82:ea:f3:7f:38:cb:7c:50:1f:d1:e9: 71:47:bb:6e:63:cb:b7:f5:93:b5:ee:57:46:fc:60: 76:72:f0:0e:6d:17:5e:5d:8f:5f:02:8a:68:7b:54: 30:6d:20:5c:59:dd:84:7c:b4:30:1f:d7:e0:8d:bb: 91:af:07:58:78:91:be:f3:05:e7:00:7d:55:b3:3a: 7c:af:23:13:50:ab:bd:9f:7f:79:ef:9b:cd:4c:bc: 2a:45:6b:79:82:51:06:fd:59:58:4d:1b:4d:1e:bd: a9:ab:0c:ae:06:d0:35:95:6a:25:aa:20:46:15:f3: 69:63:6a:f8:cf:98:49:06:0e:24:30:eb:b7:90:a3: 4d:26:f3:b5:25:36:df:96:0e:10:60:78:11:95:9c: 61:b0:98:b0:fb:2a:f0:38:fe:42:fa:a3:ff:6b:3d: 87:5c:2f:48:af:4a:a7:a0:ce:47:5d:80:92:6d:b2: 24:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EA:41:3A:BB:7D:8C:0F:8A:B7:83:4D:FC:E0:A0:5D:95:92:65:EE X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-upBOrt9jA-Kt4NN_OCgXZWSZe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.137.70.0/23 64.137.105.0/24 64.137.107.0/24 104.143.248.0/22 104.143.254.0/23 104.239.0.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:e1:ed:ce:0b:9c:2e:47:cd:bb:eb:6a:13:67:5b:23:c3:e1: 02:85:f6:3f:f9:3f:58:f2:a7:a6:98:91:96:f6:32:dc:0b:0a: 3d:5d:22:d6:90:ca:e9:de:fc:b0:96:c9:b5:d6:f7:9c:d0:69: 17:fd:cf:31:4c:57:a2:12:df:91:04:81:5b:4c:9a:1b:37:dc: cc:4b:75:0f:24:10:0f:27:1d:ff:df:db:ba:9b:bd:80:48:ad: 80:dc:02:41:3d:6d:03:57:b7:f2:ef:08:20:fb:50:ae:17:b5: 7d:b1:6c:de:5e:4c:6b:89:be:89:8f:08:34:ae:ba:1d:3a:e7: fd:11:81:4b:fc:ba:01:14:33:7e:2b:07:32:24:40:6a:50:ec: 5f:bd:e5:87:0d:0a:e0:07:13:1b:31:c8:e1:fc:59:eb:d3:ec: 90:4a:06:45:26:f3:9b:f1:cd:df:ba:28:20:01:ac:43:00:a5: 3e:81:da:f3:96:e8:0f:58:ba:91:a5:26:cf:44:c0:82:36:bf: fa:23:2a:46:f3:9e:c3:97:21:f5:55:ef:ed:fb:ee:eb:1f:39: a3:b8:b9:0c:2b:88:3d:12:81:13:2e:0d:ee:1d:4f:4f:9f:30: b9:aa:54:5f:14:77:13:df:9e:3d:bf:38:38:1a:95:95:dd:06: ee:b4:b7:13 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt5EU7nJ3v5YT/tsuBR3yRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWVhNDEzYWJiN2Q4YzBmOGFiNzgzNGRmY2UwYTA1ZDk1OTI2NWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K3MlipOYsX2mdfyybtQbJ+Rnb5R MCYOQL3BqRCdK/bOOe/VtcQkNSSv9ddFbeB6pTWt6nHDgEw4ExROEdMYUrCur875 UjBp98i6/GeDgurzfzjLfFAf0elxR7tuY8u39ZO17ldG/GB2cvAObRdeXY9fAopo e1QwbSBcWd2EfLQwH9fgjbuRrwdYeJG+8wXnAH1Vszp8ryMTUKu9n39575vNTLwq RWt5glEG/VlYTRtNHr2pqwyuBtA1lWolqiBGFfNpY2r4z5hJBg4kMOu3kKNNJvO1 JTbflg4QYHgRlZxhsJiw+yrwOP5C+qP/az2HXC9Ir0qnoM5HXYCSbbIkCQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFPrqQTq7fYwPireDTfzgoF2VkmXuMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvMS11cEJPcnQ5akEtS3Q0Tk5fT0NnWFpXU1plNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNWEvZmRkNjMzLWM2NTgtNDljNS05ZThmLWZiMDc5NTVmM2Fh YS8xL1lGZ2VaejJBOTBkSk5ySVROLXI4d2IzRGhlay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAUCJRgME AECJaQMEAECJawMEAmiP+AMEAWiP/gMEA2jvADANBgkqhkiG9w0BAQsFAAOCAQEA LeHtzgucLkfNu+tqE2dbI8PhAoX2P/k/WPKnppiRlvYy3AsKPV0i1pDK6d78sJbJ tdb3nNBpF/3PMUxXohLfkQSBW0yaGzfczEt1DyQQDycd/9/bupu9gEitgNwCQT1t A1e38u8IIPtQrhe1fbFs3l5Ma4m+iY8INK66HTrn/RGBS/y6ARQzfisHMiRAalDs X73lhw0K4AcTGzHI4fxZ69PskEoGRSbzm/HN37ooIAGsQwClPoHa85boD1i6kaUm z0TAgja/+iMqRvOew5ch9VXv7fvu6x85o7i5DCuIPRKBEy4N7h1PT58wuapUXxR3 E9+ePb84OBqVld0G7rS3Ew== -----END CERTIFICATE-----Generated at Fri Jan 2 02:39:54 2026 by rpki-client