This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa File: FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa (raw, json) Hash identifier: htFUuvTJdlK2gOgKs0gKKqW+9jnUAHhAceSH0KAekak= Subject key identifier: 16:C0:BB:8F:56:67:5B:D7:EF:77:F3:21:2E:C3:28:D0:5E:70:88:33 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9909771ECE7125C6DE14D5FEBB42 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa Signing time: Fri 02 Jan 2026 04:18:24 +0000 ROA not before: Fri 02 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56804 IP address blocks: 62.0.4.0/24 maxlen: 24 147.234.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:99:09:77:1e:ce:71:25:c6:de:14:d5:fe:bb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16c0bb8f56675bd7ef77f3212ec328d05e708833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a4:85:1a:d7:67:20:f2:7e:ef:e9:e0:ce:99: a4:a9:f1:06:8a:07:58:59:e5:bf:61:14:d9:9b:bb: 0b:bc:34:26:f5:c0:20:ba:90:3b:9a:6a:ca:e4:01: 48:89:ae:fc:ac:24:99:f6:91:3c:cb:8b:99:2d:7f: 25:3f:38:40:a8:48:2a:31:6b:54:63:31:d1:0d:af: 19:7c:5a:9d:d0:ca:e0:45:a6:a2:35:d0:d1:66:be: c9:3c:5b:bc:d3:38:27:37:26:a4:93:05:df:2c:6f: a7:ed:47:c4:b4:8c:07:ec:e0:51:a9:63:0d:3a:cf: cf:c7:c7:9d:a7:f0:f6:8d:69:d9:c5:97:6f:34:b3: 2d:c7:cf:91:96:48:1f:be:6a:15:7f:bd:c3:82:6b: 84:fe:44:27:1b:2a:e9:21:cb:fe:d2:f0:61:fa:64: 45:c7:89:b7:a3:81:5f:01:c6:15:e1:11:93:1d:4a: 60:bd:d7:91:b5:45:66:23:8f:1c:2f:46:81:bb:15: 64:22:78:c7:3e:63:a6:41:05:d7:8c:6b:b3:fd:18: 7e:ae:aa:bd:57:d2:82:27:0a:31:f3:8a:fa:a4:fe: c7:e3:42:93:78:91:aa:32:81:4f:a7:ef:0a:05:9a: e3:29:5d:2c:50:d3:19:17:45:ce:94:29:8a:36:94: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C0:BB:8F:56:67:5B:D7:EF:77:F3:21:2E:C3:28:D0:5E:70:88:33 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/FsC7j1ZnW9fvd_MhLsMo0F5wiDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.0.4.0/24 147.234.42.0/24 Signature Algorithm: sha256WithRSAEncryption 61:29:d8:2a:a6:8c:77:a6:89:c8:88:5c:cf:1e:6e:61:99:d8: 97:a7:d1:cf:af:94:0b:7e:63:1d:e3:bb:43:7d:49:31:d4:44: 86:87:8d:f5:07:39:2e:22:ba:f8:34:f5:cd:ed:35:58:25:62: 3f:f5:dc:f4:b3:c9:df:4c:df:2a:56:be:09:bc:6e:6a:cc:bd: ae:54:0a:80:d7:0c:0a:56:18:2d:f0:5d:31:36:75:19:f2:5c: bb:5c:ca:ae:e8:3d:03:ff:ec:4d:12:32:59:e9:ee:8c:75:c4: 6d:d0:54:46:61:b2:2e:ed:3f:0e:d6:00:cc:39:33:0f:03:35: 98:13:bf:2b:3c:22:2f:cc:6d:10:20:e9:f1:ff:91:93:b5:19: 46:a3:87:83:ac:96:63:03:7d:0f:62:cd:30:45:44:85:fd:c8: 61:b8:9b:41:df:41:c1:34:68:5e:3a:f2:03:9b:34:38:a5:83: df:24:05:2f:5c:27:44:fd:5a:28:d9:c6:a6:c4:2a:0a:33:c3: 96:a9:4e:3e:87:8f:c3:d9:a3:cd:4e:00:70:97:f4:8d:6d:c4: 45:58:6f:a9:6b:c3:53:e6:a5:3b:72:07:2d:f8:5f:f2:84:c2: 59:21:12:57:4a:40:86:bb:a1:a7:4b:1c:76:9d:a2:6f:16:ef: 68:c0:13:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ZkJdx7OcSXG3hTV/rtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmMwYmI4ZjU2Njc1YmQ3ZWY3N2YzMjEyZWMzMjhkMDVlNzA4ODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKSFGtdnIPJ+7+ngzpmkqfEGigdY WeW/YRTZm7sLvDQm9cAgupA7mmrK5AFIia78rCSZ9pE8y4uZLX8lPzhAqEgqMWtU YzHRDa8ZfFqd0MrgRaaiNdDRZr7JPFu80zgnNyakkwXfLG+n7UfEtIwH7OBRqWMN Os/Px8edp/D2jWnZxZdvNLMtx8+RlkgfvmoVf73DgmuE/kQnGyrpIcv+0vBh+mRF x4m3o4FfAcYV4RGTHUpgvdeRtUVmI48cL0aBuxVkInjHPmOmQQXXjGuz/Rh+rqq9 V9KCJwox84r6pP7H40KTeJGqMoFPp+8KBZrjKV0sUNMZF0XOlCmKNpRyEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBbAu49WZ1vX73fzIS7DKNBecIgzMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvRnNDN2oxWm5XOWZ2ZF9NaExzTW8wRjV3aURNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPgAEAwQA k+oqMA0GCSqGSIb3DQEBCwUAA4IBAQBhKdgqpox3ponIiFzPHm5hmdiXp9HPr5QL fmMd47tDfUkx1ESGh431BzkuIrr4NPXN7TVYJWI/9dz0s8nfTN8qVr4JvG5qzL2u VAqA1wwKVhgt8F0xNnUZ8ly7XMqu6D0D/+xNEjJZ6e6MdcRt0FRGYbIu7T8O1gDM OTMPAzWYE78rPCIvzG0QIOnx/5GTtRlGo4eDrJZjA30PYs0wRUSF/chhuJtB30HB NGheOvIDmzQ4pYPfJAUvXCdE/Voo2camxCoKM8OWqU4+h4/D2aPNTgBwl/SNbcRF WG+pa8NT5qU7cgct+F/yhMJZIRJXSkCGu6GnSxx2naJvFu9owBMo -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:30 2026 by rpki-client