This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/60dZFJFuLe3UTsfmi0rplRhg-aE.roa File: 60dZFJFuLe3UTsfmi0rplRhg-aE.roa (raw, json) Hash identifier: 2mhQnrCXAiB8k9hSFOHBxlgfbZp94FxVPbWl+SNohJ0= Subject key identifier: EB:47:59:14:91:6E:2D:ED:D4:4E:C7:E6:8B:4A:E9:95:18:60:F9:A1 Certificate issuer: /CN=2c571d688aa503a2e566bbc876df0ba455c577ed Certificate serial: 019B7F8474A328F1E3D100AA68C53DFDF6D4 Authority key identifier: 2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/60dZFJFuLe3UTsfmi0rplRhg-aE.roa Signing time: Fri 02 Jan 2026 16:22:25 +0000 ROA not before: Fri 02 Jan 2026 16:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15796 IP address blocks: 51.154.0.0/16 maxlen: 16 51.154.248.0/22 maxlen: 22 51.154.252.0/22 maxlen: 22 213.55.128.0/17 maxlen: 24 213.55.128.0/24 maxlen: 24 213.55.131.0/24 maxlen: 24 213.55.132.0/24 maxlen: 24 213.55.141.0/24 maxlen: 24 213.55.147.0/24 maxlen: 24 213.55.150.0/24 maxlen: 24 213.55.179.0/24 maxlen: 24 213.55.180.0/22 maxlen: 22 213.55.184.0/22 maxlen: 22 213.55.188.0/24 maxlen: 24 213.55.189.0/24 maxlen: 24 213.55.190.0/24 maxlen: 24 213.55.191.0/24 maxlen: 24 213.55.192.0/24 maxlen: 24 213.55.193.0/24 maxlen: 24 213.55.194.0/24 maxlen: 24 213.55.195.0/24 maxlen: 24 213.55.196.0/22 maxlen: 22 213.55.206.0/24 maxlen: 24 213.55.220.0/22 maxlen: 22 213.55.224.0/22 maxlen: 22 213.55.233.0/24 maxlen: 24 213.55.234.0/24 maxlen: 24 213.55.235.0/24 maxlen: 24 213.55.236.0/24 maxlen: 24 213.55.237.0/24 maxlen: 24 213.55.238.0/24 maxlen: 24 213.55.240.0/22 maxlen: 22 213.55.244.0/22 maxlen: 22 2a04:ee40::/29 maxlen: 29 2a04:ee40:2000::/35 maxlen: 35 2a04:ee41::/41 maxlen: 41 2a04:ee41:80::/41 maxlen: 41 2a04:ee42:1::/64 maxlen: 64 2a04:ee42:1:7::/64 maxlen: 64 2a04:ee42:2::/64 maxlen: 64 2a04:ee42:2:7::/64 maxlen: 64 2a04:ee42:53::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.mft rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:74:a3:28:f1:e3:d1:00:aa:68:c5:3d:fd:f6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c571d688aa503a2e566bbc876df0ba455c577ed Validity Not Before: Jan 2 16:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb475914916e2dedd44ec7e68b4ae9951860f9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:95:d1:f7:d0:78:a6:78:54:8e:30:ff:90: 27:ca:c2:f6:fc:3e:f8:d1:af:23:9d:34:47:b6:3f: 1a:41:ad:41:f6:9c:8f:e7:f4:34:da:5e:75:57:34: 94:41:01:a7:ee:a5:02:27:d1:61:72:33:a9:2f:fe: 30:f0:78:ab:ca:ab:c3:84:66:63:9f:8a:e1:cf:f2: ee:9e:ef:9e:d4:d4:0b:21:2b:bb:cf:0e:d3:d2:49: 28:4b:1b:77:c3:6c:4c:6b:2e:d4:ec:f1:6e:1d:a3: a7:69:07:ce:2a:a8:28:52:bf:7f:df:8c:c2:2d:40: 91:c5:b2:dc:e9:dd:fb:b1:fa:fc:ca:b1:78:5c:e1: 80:a2:64:73:d3:42:7d:09:af:ed:31:a2:34:69:34: 55:9e:6b:87:1f:5a:cc:cc:cf:b3:82:b8:23:09:c7: 88:75:4d:63:b6:41:9d:60:15:7b:d8:bf:dc:90:2d: 60:fd:ac:4f:1a:3c:a1:18:a2:0f:c2:7d:2a:4f:5e: f5:31:45:22:be:85:53:d8:15:c3:dd:7d:5e:3d:cf: 92:9c:f2:6c:9c:c9:5e:a3:1b:df:42:1d:7c:e5:22: 15:42:5c:cd:93:65:9b:c1:5b:66:d3:15:d2:ae:d6: 1c:42:77:53:02:e5:2a:ad:6a:00:8f:ce:4c:72:4d: 17:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:47:59:14:91:6E:2D:ED:D4:4E:C7:E6:8B:4A:E9:95:18:60:F9:A1 X509v3 Authority Key Identifier: keyid:2C:57:1D:68:8A:A5:03:A2:E5:66:BB:C8:76:DF:0B:A4:55:C5:77:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LFcdaIqlA6LlZrvIdt8LpFXFd-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/60dZFJFuLe3UTsfmi0rplRhg-aE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/63eb42-a0e1-4f1c-bcc9-87524014dbfb/1/LFcdaIqlA6LlZrvIdt8LpFXFd-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.154.0.0/16 213.55.128.0/17 IPv6: 2a04:ee40::/29 Signature Algorithm: sha256WithRSAEncryption 7c:32:7c:6d:1b:80:dc:86:4a:2e:f3:ed:00:95:cd:9c:04:03: 99:33:6b:2f:05:3e:40:20:b0:b0:e8:6d:70:dc:40:98:c2:79: 2e:90:3c:27:c7:6f:76:59:15:ef:75:ee:16:5e:20:41:55:63: af:94:11:f0:3c:27:ce:84:4b:07:0f:84:7f:25:6b:19:c3:4d: 66:2b:1d:33:9f:96:9a:e1:d6:13:03:de:4b:72:7c:3b:55:77: f6:f1:58:1c:b7:07:54:44:e2:7a:79:de:0f:87:07:36:f6:e7: d0:4b:85:0c:0f:ac:90:ba:17:99:be:3a:99:06:98:18:3d:c8: 89:aa:60:00:64:66:91:d2:a4:f1:19:cd:b1:8c:8e:26:16:53: 77:bd:84:fc:da:d8:81:66:84:96:2b:23:11:3e:b3:7f:c3:11: a8:6e:82:65:dd:6b:9b:90:e0:f5:b1:71:3a:70:7e:1d:fe:49: cc:c0:3f:25:e1:db:1a:7a:1b:d0:0d:e9:6d:9a:b8:bf:e0:db: 58:c0:24:7b:a3:8a:0c:2d:78:21:10:52:25:8c:50:7f:9a:db: 72:f1:e8:05:34:f9:c8:2a:33:dc:65:8b:a2:0d:5f:79:a7:57: 21:2c:46:1f:41:6e:7c:e6:5b:8f:19:30:42:43:5f:46:b3:19: 16:a6:9b:e1 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/hHSjKPHj0QCqaMU9/fbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNTcxZDY4OGFhNTAzYTJlNTY2YmJjODc2ZGYwYmE0NTVj NTc3ZWQwHhcNMjYwMTAyMTYyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjQ3NTkxNDkxNmUyZGVkZDQ0ZWM3ZTY4YjRhZTk5NTE4NjBmOWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfaV0ffQeKZ4VI4w/5AnysL2/D74 0a8jnTRHtj8aQa1B9pyP5/Q02l51VzSUQQGn7qUCJ9FhcjOpL/4w8HiryqvDhGZj n4rhz/Lunu+e1NQLISu7zw7T0kkoSxt3w2xMay7U7PFuHaOnaQfOKqgoUr9/34zC LUCRxbLc6d37sfr8yrF4XOGAomRz00J9Ca/tMaI0aTRVnmuHH1rMzM+zgrgjCceI dU1jtkGdYBV72L/ckC1g/axPGjyhGKIPwn0qT171MUUivoVT2BXD3X1ePc+SnPJs nMleoxvfQh185SIVQlzNk2WbwVtm0xXSrtYcQndTAuUqrWoAj85Mck0XpQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOtHWRSRbi3t1E7H5otK6ZUYYPmhMB8GA1UdIwQY MBaAFCxXHWiKpQOi5Wa7yHbfC6RVxXftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEZjZGFJcWxBNkxsWnJ2SWR0OExwRlhGZC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82M2ViNDItYTBlMS00ZjFjLWJjYzkt ODc1MjQwMTRkYmZiLzEvNjBkWkZKRnVMZTNVVHNmbWkwcnBsUmhnLWFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy82M2ViNDItYTBlMS00ZjFjLWJjYzktODc1MjQwMTRkYmZi LzEvTEZjZGFJcWxBNkxsWnJ2SWR0OExwRlhGZC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAM5oDBAfV N4AwDQQCAAIwBwMFAyoE7kAwDQYJKoZIhvcNAQELBQADggEBAHwyfG0bgNyGSi7z 7QCVzZwEA5kzay8FPkAgsLDobXDcQJjCeS6QPCfHb3ZZFe917hZeIEFVY6+UEfA8 J86ESwcPhH8laxnDTWYrHTOflprh1hMD3ktyfDtVd/bxWBy3B1RE4np53g+HBzb2 59BLhQwPrJC6F5m+OpkGmBg9yImqYABkZpHSpPEZzbGMjiYWU3e9hPza2IFmhJYr IxE+s3/DEahugmXda5uQ4PWxcTpwfh3+SczAPyXh2xp6G9AN6W2auL/g21jAJHuj igwteCEQUiWMUH+a23Lx6AU0+cgqM9xli6INX3mnVyEsRh9BbnzmW48ZMEJDX0az GRamm+E= -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:23 2026 by rpki-client