This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/7o1C0gUfTYFgrDGZrja_EfmmpuM.roa File: 7o1C0gUfTYFgrDGZrja_EfmmpuM.roa (raw, json) Hash identifier: yLaQG149IK/uZ/ShG7WfEjdz8NglgKnOJ/0ZHVFISk4= Subject key identifier: EE:8D:42:D2:05:1F:4D:81:60:AC:31:99:AE:36:BF:11:F9:A6:A6:E3 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B791150BD76915EA1CEDC8A4A25F2C816 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/7o1C0gUfTYFgrDGZrja_EfmmpuM.roa Signing time: Thu 01 Jan 2026 10:18:56 +0000 ROA not before: Thu 01 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210619 IP address blocks: 104.233.63.0/24 maxlen: 24 104.239.49.0/24 maxlen: 24 104.239.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:50:bd:76:91:5e:a1:ce:dc:8a:4a:25:f2:c8:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 1 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee8d42d2051f4d8160ac3199ae36bf11f9a6a6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:39:77:8b:1e:eb:92:05:ac:43:50:c5:ac: 24:84:55:ff:15:94:40:bc:16:ac:61:bc:95:cd:02: 27:4d:86:05:9e:ad:23:4e:e9:1b:d0:0e:7b:98:bb: 93:61:96:bd:8f:ee:fe:2e:af:ab:24:b9:ce:1c:a4: 38:75:0f:12:31:4e:56:69:cb:88:98:99:13:83:46: 67:69:66:81:39:6a:68:ce:39:c4:19:a6:63:c8:fd: 97:45:b5:93:62:a6:c7:d2:e8:c0:ed:2f:c8:18:70: a0:d2:21:f5:33:2f:b8:49:a1:99:25:ac:8f:ee:b2: b4:47:40:3e:82:d8:ee:e6:0a:c9:8a:e5:50:c1:e4: 63:e7:91:91:f4:c4:d0:95:80:44:54:2f:9e:c1:cf: d8:08:1a:9f:ba:84:60:98:68:fd:64:86:10:99:a0: 4d:a3:ea:1f:ee:c4:ca:6f:30:aa:ed:31:f6:fd:81: 9b:16:52:2f:5a:8e:0a:61:45:41:89:70:19:21:e1: bf:23:e7:bf:47:ed:5d:c9:e1:94:8a:ab:7c:31:ee: 1a:38:da:5b:70:94:58:63:a8:15:b1:a7:36:1d:c3: 32:c9:8a:f9:88:03:5c:38:26:7b:9a:76:ed:00:f9: 0e:70:41:58:56:bf:f0:a7:7d:fc:6e:69:72:79:cf: 56:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8D:42:D2:05:1F:4D:81:60:AC:31:99:AE:36:BF:11:F9:A6:A6:E3 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/7o1C0gUfTYFgrDGZrja_EfmmpuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.233.63.0/24 104.239.49.0-104.239.50.255 Signature Algorithm: sha256WithRSAEncryption 37:81:7e:1c:20:17:4a:ce:0f:67:5f:2e:86:30:e8:c6:45:a8: 38:19:12:be:81:e8:37:cd:3a:af:4b:29:a7:cb:53:7b:1e:e8: f6:40:c9:3d:b1:47:14:5e:26:0f:f3:fe:69:3b:ec:79:c8:fb: 6d:4b:82:09:46:70:f0:eb:95:cf:59:19:9c:9d:4e:96:cd:d9: bc:5a:9c:d8:a0:ae:43:ca:a1:cd:a9:be:6e:9a:6f:00:fd:39: 09:8d:f8:b6:39:17:c0:41:88:22:28:71:8b:02:b3:ae:40:29: 6a:90:47:27:26:b2:9b:85:50:a8:46:5c:a5:8c:a4:3b:62:82: ba:98:cc:02:f5:2b:69:4f:4c:6b:0c:5b:78:a8:c2:1e:db:a9: ea:c2:bc:78:b3:e4:42:a5:ec:41:68:28:e7:19:48:27:d9:f2: 1e:fe:fe:95:78:22:df:5a:73:a4:ad:42:8b:d0:cf:44:24:f0: 05:1d:4d:78:e5:57:93:da:18:38:fd:ef:bd:7a:2d:ce:4c:14: 01:b3:03:91:ae:01:74:9d:a1:d1:3d:69:62:9e:f2:4c:b4:91: a8:e1:5a:9d:8b:e9:06:16:27:44:40:3e:39:74:38:9f:c4:ca: 5d:e5:fc:35:cc:8d:cc:ce:57:3d:75:15:dc:61:d2:62:3a:a8: b5:6d:33:e1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5EVC9dpFeoc7cikol8sgWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTAxMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZThkNDJkMjA1MWY0ZDgxNjBhYzMxOTlhZTM2YmYxMWY5YTZhNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+w5d4se65IFrENQxawkhFX/FZRA vBasYbyVzQInTYYFnq0jTukb0A57mLuTYZa9j+7+Lq+rJLnOHKQ4dQ8SMU5WacuI mJkTg0ZnaWaBOWpozjnEGaZjyP2XRbWTYqbH0ujA7S/IGHCg0iH1My+4SaGZJayP 7rK0R0A+gtju5grJiuVQweRj55GR9MTQlYBEVC+ewc/YCBqfuoRgmGj9ZIYQmaBN o+of7sTKbzCq7TH2/YGbFlIvWo4KYUVBiXAZIeG/I+e/R+1dyeGUiqt8Me4aONpb cJRYY6gVsac2HcMyyYr5iANcOCZ7mnbtAPkOcEFYVr/wp338bmlyec9WsQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFO6NQtIFH02BYKwxma42vxH5pqbjMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvN28xQzBnVWZUWUZnckRHWnJqYV9FZm1tcHVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAaOk/MAwD BABo7zEDBABo7zIwDQYJKoZIhvcNAQELBQADggEBADeBfhwgF0rOD2dfLoYw6MZF qDgZEr6B6DfNOq9LKafLU3se6PZAyT2xRxReJg/z/mk77HnI+21LgglGcPDrlc9Z GZydTpbN2bxanNigrkPKoc2pvm6abwD9OQmN+LY5F8BBiCIocYsCs65AKWqQRycm spuFUKhGXKWMpDtigrqYzAL1K2lPTGsMW3iowh7bqerCvHiz5EKl7EFoKOcZSCfZ 8h7+/pV4It9ac6StQovQz0Qk8AUdTXjlV5PaGDj97716Lc5MFAGzA5GuAXSdodE9 aWKe8ky0kajhWp2L6QYWJ0RAPjl0OJ/Eyl3l/DXMjczOVz11Fdxh0mI6qLVtM+E= -----END CERTIFICATE-----Generated at Fri Jan 2 02:38:15 2026 by rpki-client