This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/l60G9RtGQQ6DxTnY-7uGdBT18E0.roa File: l60G9RtGQQ6DxTnY-7uGdBT18E0.roa (raw, json) Hash identifier: 7f3s+Mq0G+/ok4ZNqNp75Xktxw69L98MKsHRcjmDKdA= Subject key identifier: 97:AD:06:F5:1B:46:41:0E:83:C5:39:D8:FB:BB:86:74:14:F5:F0:4D Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDE997C7A3A7421DC4B4391EAD5BE6 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/l60G9RtGQQ6DxTnY-7uGdBT18E0.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 62.72.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e9:97:c7:a3:a7:42:1d:c4:b4:39:1e:ad:5b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97ad06f51b46410e83c539d8fbbb867414f5f04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:7c:ca:20:75:d6:8b:cc:c3:5a:c2:e7:51: 46:08:7a:83:2c:96:2f:ce:9f:d4:b9:6b:fa:a6:46: 76:68:d5:f7:b9:33:d9:33:45:8a:8c:9a:d7:2c:14: 78:73:6e:03:f2:2f:92:aa:45:76:34:da:ab:b1:99: 2b:a7:89:c0:bf:73:b1:66:87:ae:00:71:ba:b3:ac: 37:08:eb:06:f6:c7:39:af:cf:40:bc:c2:0a:61:d0: d1:93:ec:6b:0b:47:71:fc:93:09:eb:d8:93:6a:4c: 83:e2:ba:b9:15:e3:7c:7d:86:d3:ec:7d:79:61:11: 2e:5f:c8:d4:e9:3e:26:6a:b7:b1:45:22:21:ef:50: f5:82:6a:4a:32:71:58:7f:9b:48:2a:03:1e:85:0c: e8:c8:56:9d:bd:66:c7:bf:39:db:10:58:0f:a3:02: 85:26:bc:9e:7c:f9:c1:c4:41:09:c2:3f:d9:d2:cd: bb:db:b0:a5:b8:24:b7:c6:05:04:26:82:a9:3b:fc: ad:8a:85:fd:39:f2:4f:4d:9c:67:81:3a:0c:5f:2e: 60:3a:81:b9:35:ef:a8:3f:fd:bb:4a:2e:d3:e3:84: 1d:fd:2c:ef:5f:ed:5a:43:36:43:64:d7:87:64:e8: a0:4c:a1:65:0b:91:c7:d2:32:2a:3c:90:4e:23:e8: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AD:06:F5:1B:46:41:0E:83:C5:39:D8:FB:BB:86:74:14:F5:F0:4D X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/l60G9RtGQQ6DxTnY-7uGdBT18E0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.166.0/24 Signature Algorithm: sha256WithRSAEncryption 04:b5:5d:d8:74:95:19:2b:49:7f:ba:39:82:d2:2d:eb:8a:ef: a6:c5:99:42:78:da:88:08:13:87:a9:20:0b:5f:79:1f:60:09: 59:73:f2:f4:e0:61:0f:77:a0:0e:2d:95:09:d6:22:36:d9:5d: df:c3:f0:0f:6b:40:65:59:f4:29:38:fe:19:f7:02:8f:3f:50: fa:ca:7e:8c:ca:be:ba:8d:b1:19:d3:0a:ba:87:b4:82:ca:f9: 4d:d6:cc:e0:74:be:e3:c7:71:d9:b3:62:84:b8:79:da:2b:43: d7:79:e8:4f:ce:82:58:c2:76:a6:1d:ab:c5:59:06:f6:3a:e2: e4:fd:6e:2f:28:58:f9:1a:ff:d5:eb:50:ee:d9:18:2b:10:37: a6:c3:c7:fa:3e:56:c9:3e:b9:d9:05:af:e3:0d:70:58:e2:aa: 82:98:f8:8a:e8:bc:67:12:53:cf:03:41:3d:c6:58:53:4e:00: c6:db:ef:3c:d2:91:8d:c3:37:ae:5e:0b:58:89:d2:c9:c6:69: 9e:b1:b6:5a:40:70:4a:6a:b5:fe:1b:4b:3b:03:c4:99:89:36: aa:39:8d:0c:4e:d7:29:df:d3:d7:92:10:46:f9:38:d7:3f:5c: b5:b6:2f:a9:13:a0:7e:48:7b:32:66:13:f7:6a:e6:54:04:9b: e6:8f:7f:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87emXx6OnQh3EtDkerVvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2FkMDZmNTFiNDY0MTBlODNjNTM5ZDhmYmJiODY3NDE0ZjVmMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9l8yiB11ovMw1rC51FGCHqDLJYv zp/UuWv6pkZ2aNX3uTPZM0WKjJrXLBR4c24D8i+SqkV2NNqrsZkrp4nAv3OxZoeu AHG6s6w3COsG9sc5r89AvMIKYdDRk+xrC0dx/JMJ69iTakyD4rq5FeN8fYbT7H15 YREuX8jU6T4marexRSIh71D1gmpKMnFYf5tIKgMehQzoyFadvWbHvznbEFgPowKF JryefPnBxEEJwj/Z0s2727CluCS3xgUEJoKpO/ytioX9OfJPTZxngToMXy5gOoG5 Ne+oP/27Si7T44Qd/SzvX+1aQzZDZNeHZOigTKFlC5HH0jIqPJBOI+gkTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJetBvUbRkEOg8U52Pu7hnQU9fBNMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvbDYwRzlSdEdRUTZEeFRuWS03dUdkQlQxOEUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkimMA0G CSqGSIb3DQEBCwUAA4IBAQAEtV3YdJUZK0l/ujmC0i3riu+mxZlCeNqICBOHqSAL X3kfYAlZc/L04GEPd6AOLZUJ1iI22V3fw/APa0BlWfQpOP4Z9wKPP1D6yn6Myr66 jbEZ0wq6h7SCyvlN1szgdL7jx3HZs2KEuHnaK0PXeehPzoJYwnamHavFWQb2OuLk /W4vKFj5Gv/V61Du2RgrEDemw8f6PlbJPrnZBa/jDXBY4qqCmPiK6LxnElPPA0E9 xlhTTgDG2+880pGNwzeuXgtYidLJxmmesbZaQHBKarX+G0s7A8SZiTaqOY0MTtcp 39PXkhBG+TjXP1y1ti+pE6B+SHsyZhP3auZUBJvmj39c -----END CERTIFICATE-----Generated at Fri Jan 2 17:52:41 2026 by rpki-client