This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_-tRtE1lmX7PRGsAecxfpQ9_bQU.roa File: _-tRtE1lmX7PRGsAecxfpQ9_bQU.roa (raw, json) Hash identifier: 9Bphhm0YCwly28A2k3toW4PUXy2+b2oIPQMbBIFHWbU= Subject key identifier: FF:EB:51:B4:4D:65:99:7E:CF:44:6B:00:79:CC:5F:A5:0F:7F:6D:05 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B7758FD3D85A2466C0CFF635D59808570 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_-tRtE1lmX7PRGsAecxfpQ9_bQU.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 84.55.17.0/24 maxlen: 24 84.55.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fd:3d:85:a2:46:6c:0c:ff:63:5d:59:80:85:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffeb51b44d65997ecf446b0079cc5fa50f7f6d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:07:6a:b2:43:4e:9a:b3:61:7e:3d:62:54:32: c8:f6:9d:05:d5:4f:46:1d:cb:d8:50:40:16:70:d4: 7f:51:29:8b:02:0c:2d:53:8f:6c:56:81:f7:62:c1: c3:6f:fa:fa:00:1d:77:cd:52:9d:2e:e5:00:10:25: 93:62:0c:06:c4:ef:b2:f5:15:54:13:0c:cf:a9:28: d8:5f:18:d6:2b:37:ae:fe:67:ee:78:6e:bc:18:38: 2f:a9:79:11:3f:20:bf:be:64:47:1a:21:78:ef:1e: ae:3d:a0:48:64:e1:cb:a1:cd:bb:07:96:75:e5:b4: c7:c1:2a:4b:c8:e9:e3:98:93:1a:20:a6:8b:8a:d0: 53:99:14:85:06:ae:5f:50:53:69:20:a4:ca:b2:dd: 35:de:89:36:1c:9a:fc:15:16:39:b8:5b:27:7f:54: 09:93:7b:4e:1c:77:62:31:34:53:52:80:96:4e:6a: d1:94:89:aa:52:16:03:2e:af:08:d3:43:95:9e:e1: 53:56:77:33:bc:f1:d6:f7:97:ed:d2:bf:8f:62:5d: 96:03:3c:6c:f3:04:93:b7:37:4b:1f:59:06:f3:33: fb:92:57:90:b2:fd:b3:bd:f6:f8:d1:60:e2:78:88: 05:b5:36:f2:6d:9c:50:c6:78:cc:a1:8b:76:ef:2f: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EB:51:B4:4D:65:99:7E:CF:44:6B:00:79:CC:5F:A5:0F:7F:6D:05 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_-tRtE1lmX7PRGsAecxfpQ9_bQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.55.17.0/24 84.55.22.0/24 Signature Algorithm: sha256WithRSAEncryption 68:fb:2e:35:a5:89:3e:03:80:0d:9f:90:f3:8a:1d:81:80:34: 90:04:2c:ad:08:c1:13:bc:9c:f1:d4:04:99:a2:18:23:b5:5f: b2:42:58:ae:f3:04:41:48:19:21:a1:75:f3:11:4e:62:a0:a8: 70:b6:e6:c3:f6:45:a2:22:16:a9:89:95:0e:61:f3:44:04:10: 89:ae:9a:f6:ca:ca:7e:01:cb:83:f5:cf:e2:f8:7f:ea:2d:9a: 6e:93:26:d0:c1:64:ca:a7:a0:28:b1:a1:bf:32:e5:79:93:64: c4:2d:bb:49:95:18:13:18:f9:de:2a:04:d3:2a:4f:11:c6:90: 51:d8:b0:56:8c:9e:aa:98:e1:43:6d:83:c5:dc:b9:f9:0f:c4: 63:c4:b3:e7:8c:35:d2:1d:90:4c:dd:62:25:41:21:07:2e:1c: 3e:89:96:8b:44:ee:2d:d4:83:97:77:47:f4:ec:a9:70:76:f2: 76:b3:d3:33:3c:90:df:07:92:aa:71:84:4e:61:2c:26:58:a4: 36:74:9c:83:fb:c8:a3:e9:e4:d0:60:57:f0:8a:ba:81:82:4a: 70:24:7e:4e:f8:ab:9d:fc:e7:14:5a:94:6f:37:2b:06:a9:bf: 4a:6d:90:92:71:f5:7b:de:3d:c8:26:fb:7c:61:83:43:16:30: 8a:a2:83:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WP09haJGbAz/Y11ZgIVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmViNTFiNDRkNjU5OTdlY2Y0NDZiMDA3OWNjNWZhNTBmN2Y2ZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AdqskNOmrNhfj1iVDLI9p0F1U9G HcvYUEAWcNR/USmLAgwtU49sVoH3YsHDb/r6AB13zVKdLuUAECWTYgwGxO+y9RVU EwzPqSjYXxjWKzeu/mfueG68GDgvqXkRPyC/vmRHGiF47x6uPaBIZOHLoc27B5Z1 5bTHwSpLyOnjmJMaIKaLitBTmRSFBq5fUFNpIKTKst013ok2HJr8FRY5uFsnf1QJ k3tOHHdiMTRTUoCWTmrRlImqUhYDLq8I00OVnuFTVnczvPHW95ft0r+PYl2WAzxs 8wSTtzdLH1kG8zP7kleQsv2zvfb40WDieIgFtTbybZxQxnjMoYt27y/PJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP/rUbRNZZl+z0RrAHnMX6UPf20FMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvXy10UnRFMWxtWDdQUkdzQWVjeGZwUTlfYlFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVDcRAwQA VDcWMA0GCSqGSIb3DQEBCwUAA4IBAQBo+y41pYk+A4ANn5Dzih2BgDSQBCytCMET vJzx1ASZohgjtV+yQliu8wRBSBkhoXXzEU5ioKhwtubD9kWiIhapiZUOYfNEBBCJ rpr2ysp+AcuD9c/i+H/qLZpukybQwWTKp6AosaG/MuV5k2TELbtJlRgTGPneKgTT Kk8RxpBR2LBWjJ6qmOFDbYPF3Ln5D8RjxLPnjDXSHZBM3WIlQSEHLhw+iZaLRO4t 1IOXd0f07KlwdvJ2s9MzPJDfB5KqcYROYSwmWKQ2dJyD+8ij6eTQYFfwirqBgkpw JH5O+Kud/OcUWpRvNysGqb9KbZCScfV73j3IJvt8YYNDFjCKooOv -----END CERTIFICATE-----Generated at Mon Jan 19 11:51:32 2026 by rpki-client