This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/36P60n_A-MwjiwD6uyhgY22phxA.roa File: 36P60n_A-MwjiwD6uyhgY22phxA.roa (raw, json) Hash identifier: eUcegOgWx2e5tZypy6pwKd7HaKvPBA1CoHaxPDGLqFw= Subject key identifier: DF:A3:FA:D2:7F:C0:F8:CC:23:8B:00:FA:BB:28:60:63:6D:A9:87:10 Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243 Certificate serial: 019B7BA419C292ED54C4CBA3230FA7494AEF Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/36P60n_A-MwjiwD6uyhgY22phxA.roa Signing time: Thu 01 Jan 2026 22:18:30 +0000 ROA not before: Thu 01 Jan 2026 22:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.25.0.0/16 maxlen: 16 192.53.103.0/24 maxlen: 24 192.129.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:19:c2:92:ed:54:c4:cb:a3:23:0f:a7:49:4a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243 Validity Not Before: Jan 1 22:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfa3fad27fc0f8cc238b00fabb2860636da98710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:e2:0a:33:e8:c0:63:a4:de:db:bc:35:67: 9b:17:b9:ba:70:c1:20:b6:98:2d:15:3e:bf:28:1c: e6:f5:a2:aa:ae:95:ef:59:ad:69:cc:d3:88:f9:c5: d0:b0:5c:73:e5:42:f2:ee:ba:85:2a:5b:4c:53:d5: 48:90:fe:fa:74:e2:9a:4e:48:b2:0a:88:a4:8d:3d: 98:5f:41:c2:d6:e2:51:75:6d:87:2d:bd:5c:9b:e9: 0e:9e:b0:a7:f0:98:34:fc:0b:b9:9a:d6:03:8d:c1: 24:31:c1:b6:a9:89:aa:41:e3:82:bc:92:c9:82:ce: 22:6f:ee:16:6b:b7:ee:24:06:43:0a:41:73:20:2d: 2f:dd:94:e0:66:4c:79:ba:48:f7:45:e8:d5:88:30: 6d:29:e1:54:75:42:ea:79:c9:42:7c:f1:63:20:ab: 51:2a:09:54:39:60:de:fe:35:80:f7:4c:02:fd:59: 6b:de:31:e7:54:05:1b:2b:44:8b:10:21:cb:ab:1b: f8:87:56:a6:fb:9a:e1:65:0e:e6:68:68:b7:09:b8: 6d:55:6e:22:01:63:87:67:ec:a3:3d:21:af:21:8f: 19:6d:11:b2:7c:5a:59:39:a8:7b:c0:61:03:73:79: b5:98:8d:81:c2:b7:27:57:86:ff:6e:f3:26:02:86: 2b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A3:FA:D2:7F:C0:F8:CC:23:8B:00:FA:BB:28:60:63:6D:A9:87:10 X509v3 Authority Key Identifier: keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/36P60n_A-MwjiwD6uyhgY22phxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.25.0.0/16 192.53.103.0/24 192.129.51.0/24 Signature Algorithm: sha256WithRSAEncryption 15:57:c2:01:e8:cf:d8:88:fa:a7:41:33:4d:11:b1:6f:73:56: f7:af:da:e5:d4:fd:17:2a:4a:b8:ac:2f:5e:3d:1f:09:c9:08: c9:63:7a:66:6b:61:ed:ec:fe:5c:5d:55:67:4e:a4:f0:5f:ae: 0b:da:10:10:66:3f:6c:64:c2:ed:93:c7:3f:af:1b:59:01:25: c6:e8:4c:5b:f9:44:88:2a:45:4a:c6:27:a3:68:c5:e4:a4:a3: 9c:81:e3:67:3d:bd:ef:27:11:62:77:c5:1f:cd:10:af:7c:ca: f5:5e:54:ff:a1:66:7a:7a:d1:c2:9b:22:df:13:d9:8b:12:96: 43:81:6c:87:b4:b7:de:fe:d4:79:c7:fc:66:71:b0:4f:29:b9: ab:4c:f3:7b:39:cb:d8:28:6f:f2:d7:c9:66:b0:a4:c9:6a:3d: 6c:11:57:88:31:2d:d9:26:0e:34:00:76:4e:bd:ee:ac:0d:1d: 43:60:71:d4:ab:cc:59:c0:3c:e7:44:17:52:f5:79:c3:99:f3: d5:10:93:ac:75:f8:72:fb:5e:52:ba:8c:ba:44:40:aa:bc:b6: 83:57:3b:cc:3d:66:32:23:cd:69:dd:4f:fb:a2:ed:86:0c:5f: 6e:22:a7:d7:94:75:a3:0d:be:ce:da:eb:85:85:6d:14:6c:b0: 0f:4e:3b:99 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt7pBnCku1UxMujIw+nSUrvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhYWU3MzhlZTE3ODI3MzU5MzlhNGZiMGQ2NzJhNjMxN2I3 ZjUyNDMwHhcNMjYwMTAxMjIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmEzZmFkMjdmYzBmOGNjMjM4YjAwZmFiYjI4NjA2MzZkYTk4NzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGviCjPowGOk3tu8NWebF7m6cMEg tpgtFT6/KBzm9aKqrpXvWa1pzNOI+cXQsFxz5ULy7rqFKltMU9VIkP76dOKaTkiy CoikjT2YX0HC1uJRdW2HLb1cm+kOnrCn8Jg0/Au5mtYDjcEkMcG2qYmqQeOCvJLJ gs4ib+4Wa7fuJAZDCkFzIC0v3ZTgZkx5ukj3RejViDBtKeFUdULqeclCfPFjIKtR KglUOWDe/jWA90wC/Vlr3jHnVAUbK0SLECHLqxv4h1am+5rhZQ7maGi3CbhtVW4i AWOHZ+yjPSGvIY8ZbRGyfFpZOah7wGEDc3m1mI2BwrcnV4b/bvMmAoYrTwIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFN+j+tJ/wPjMI4sA+rsoYGNtqYcQMB8GA1UdIwQY MBaAFEquc47heCc1k5pPsNZypjF7f1JDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ZTAyNGUtYzZlNS00OTc3LWIzNjkt MWZmOWZmMTkyY2Q3LzEvMzZQNjBuX0EtTXdqaXdENnV5aGdZMjJwaHhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85ZTAyNGUtYzZlNS00OTc3LWIzNjktMWZmOWZmMTkyY2Q3 LzEvU3E1emp1RjRKeldUbWstdzFuS21NWHRfVWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMAjRkDBADA NWcDBADAgTMwDQYJKoZIhvcNAQELBQADggEBABVXwgHoz9iI+qdBM00RsW9zVvev 2uXU/RcqSrisL149HwnJCMljemZrYe3s/lxdVWdOpPBfrgvaEBBmP2xkwu2Txz+v G1kBJcboTFv5RIgqRUrGJ6NoxeSko5yB42c9ve8nEWJ3xR/NEK98yvVeVP+hZnp6 0cKbIt8T2YsSlkOBbIe0t97+1HnH/GZxsE8puatM83s5y9gob/LXyWawpMlqPWwR V4gxLdkmDjQAdk697qwNHUNgcdSrzFnAPOdEF1L1ecOZ89UQk6x1+HL7XlK6jLpE QKq8toNXO8w9ZjIjzWndT/ui7YYMX24ip9eUdaMNvs7a64WFbRRssA9OO5k= -----END CERTIFICATE-----Generated at Tue Jan 27 11:28:27 2026 by rpki-client