This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/60TwTXZ3s8c9GnAKSlAJ3NgM0QI.roa File: 60TwTXZ3s8c9GnAKSlAJ3NgM0QI.roa (raw, json) Hash identifier: EZkxwCyWCEu1KeBrV5jR0jwiImpY2bsUjKB0OADSv0M= Subject key identifier: EB:44:F0:4D:76:77:B3:C7:3D:1A:70:0A:4A:50:09:DC:D8:0C:D1:02 Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312 Certificate serial: 019B7D5B318A237B8D8C8BE4097372E8665A Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/60TwTXZ3s8c9GnAKSlAJ3NgM0QI.roa Signing time: Fri 02 Jan 2026 06:18:06 +0000 ROA not before: Fri 02 Jan 2026 06:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20775 IP address blocks: 217.194.224.0/20 maxlen: 20 217.194.224.0/21 maxlen: 21 217.194.232.0/21 maxlen: 21 2a02:22d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:31:8a:23:7b:8d:8c:8b:e4:09:73:72:e8:66:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312 Validity Not Before: Jan 2 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb44f04d7677b3c73d1a700a4a5009dcd80cd102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:eb:f8:a9:3c:c9:de:84:d5:09:db:4a:92: ab:26:27:a3:7e:bb:50:02:85:da:96:ff:86:56:79: 8a:bf:e4:dd:bd:59:41:a1:4d:cc:b4:0c:16:08:05: 8a:10:c4:11:f8:ed:ec:4f:c4:36:af:d6:e9:be:bf: 47:af:8c:ff:48:b6:7a:24:ea:4a:a6:2e:01:df:67: 9a:08:ee:02:5b:ea:15:4d:b5:43:82:c6:c0:08:ac: ca:be:4a:b5:ad:24:40:24:56:dd:cf:18:fb:4c:de: e3:ab:a8:dc:fa:95:92:37:2e:aa:c3:73:48:3f:26: 3c:c6:6f:f4:b4:20:22:37:ee:0a:47:7f:77:74:d8: 2f:ac:bb:b0:a3:1e:26:46:5e:23:29:b9:2d:92:74: 18:14:d8:6b:54:ad:1d:d6:ee:d1:ef:4d:86:ed:19: b4:5b:6b:6d:31:c6:fd:2c:92:69:6b:89:9d:13:58: 24:04:5d:e0:db:e3:8f:36:f3:04:36:45:7d:ab:4f: e1:b8:b0:92:8d:2d:dd:a3:db:c7:12:f7:10:60:21: d3:1d:42:24:ce:73:b6:5f:35:29:29:d6:bc:82:c5: 4c:50:68:3d:88:75:5e:43:ba:8e:1d:27:a8:e1:bd: 26:6c:10:f3:00:ca:71:f7:c4:22:cc:6d:26:c9:6c: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:44:F0:4D:76:77:B3:C7:3D:1A:70:0A:4A:50:09:DC:D8:0C:D1:02 X509v3 Authority Key Identifier: keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/60TwTXZ3s8c9GnAKSlAJ3NgM0QI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.194.224.0/20 IPv6: 2a02:22d8::/32 Signature Algorithm: sha256WithRSAEncryption 30:df:df:74:bb:c7:ee:c1:5a:51:f2:3c:66:6d:1d:95:4e:56: 6c:ae:ca:fa:e8:10:ba:4a:3f:8f:e6:6f:db:9c:67:69:f0:6a: 8d:c1:cf:7a:15:e0:5f:8a:80:a9:d0:57:03:9b:10:1e:50:db: 89:8c:d7:38:a5:a8:ce:4c:41:d6:77:52:a2:b0:66:d2:1b:50: 82:1f:0a:d9:ff:01:34:0b:83:7f:04:64:76:ca:df:98:5a:69: 7b:d8:4b:58:b0:58:24:02:6e:5e:d9:c6:89:99:2d:1b:be:93: 5f:8e:35:cf:cc:36:a9:e9:80:64:c6:ae:86:d5:60:d4:ad:62: 11:37:09:26:4e:88:99:f2:08:4d:87:44:72:d0:ca:89:ae:58: b2:bf:e0:cf:f7:b4:20:b5:3d:06:98:81:1f:e0:04:c6:91:d3: 1a:c8:13:63:e1:06:3b:84:88:9d:2f:89:e9:05:4d:3f:22:1c: b3:e4:0c:b2:c2:5d:f6:6b:1d:6d:66:e4:a4:11:97:0c:e6:93: bf:b2:a9:0e:b5:6c:ab:4e:40:4a:78:12:42:6c:2c:4e:2b:d2: 1b:bb:25:2b:c0:de:23:6f:13:fc:a0:38:40:be:63:05:40:3e: 50:f2:d2:66:65:8d:03:83:03:cf:7d:c0:9f:5b:fb:69:7e:37: 7e:cd:95:b9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9WzGKI3uNjIvkCXNy6GZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YzRkMzQxMjc5MWUzYTNlOTk0MDQwNTg5ZWM4YWQyZjU4 ZmUzMTIwHhcNMjYwMTAyMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjQ0ZjA0ZDc2NzdiM2M3M2QxYTcwMGE0YTUwMDlkY2Q4MGNkMTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kfr+Kk8yd6E1QnbSpKrJiejfrtQ AoXalv+GVnmKv+TdvVlBoU3MtAwWCAWKEMQR+O3sT8Q2r9bpvr9Hr4z/SLZ6JOpK pi4B32eaCO4CW+oVTbVDgsbACKzKvkq1rSRAJFbdzxj7TN7jq6jc+pWSNy6qw3NI PyY8xm/0tCAiN+4KR393dNgvrLuwox4mRl4jKbktknQYFNhrVK0d1u7R702G7Rm0 W2ttMcb9LJJpa4mdE1gkBF3g2+OPNvMENkV9q0/huLCSjS3do9vHEvcQYCHTHUIk znO2XzUpKda8gsVMUGg9iHVeQ7qOHSeo4b0mbBDzAMpx98QizG0myWxkMQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOtE8E12d7PHPRpwCkpQCdzYDNECMB8GA1UdIwQY MBaAFMnE00EnkeOj6ZQEBYnsitL1j+MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jMmM4YmYtZGNlNC00MjgzLWJmNzIt Y2M3Zjg3ZjRhOTUwLzEvNjBUd1RYWjNzOGM5R25BS1NsQUozTmdNMFFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jMmM4YmYtZGNlNC00MjgzLWJmNzItY2M3Zjg3ZjRhOTUw LzEveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQE2cLgMA0E AgACMAcDBQAqAiLYMA0GCSqGSIb3DQEBCwUAA4IBAQAw3990u8fuwVpR8jxmbR2V TlZsrsr66BC6Sj+P5m/bnGdp8GqNwc96FeBfioCp0FcDmxAeUNuJjNc4pajOTEHW d1KisGbSG1CCHwrZ/wE0C4N/BGR2yt+YWml72EtYsFgkAm5e2caJmS0bvpNfjjXP zDap6YBkxq6G1WDUrWIRNwkmToiZ8ghNh0Ry0MqJrliyv+DP97QgtT0GmIEf4ATG kdMayBNj4QY7hIidL4npBU0/Ihyz5Ayywl32ax1tZuSkEZcM5pO/sqkOtWyrTkBK eBJCbCxOK9IbuyUrwN4jbxP8oDhAvmMFQD5Q8tJmZY0DgwPPfcCfW/tpfjd+zZW5 -----END CERTIFICATE-----Generated at Tue Feb 10 02:26:14 2026 by rpki-client