This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/Pu68vnj2IvxGfPG1sUfBz7pfl60.roa File: Pu68vnj2IvxGfPG1sUfBz7pfl60.roa (raw, json) Hash identifier: e/ZGCUCMCJsJmK9XNPoqVMd6wsMqJMbIyH+5hWYg1kc= Subject key identifier: 3E:EE:BC:BE:78:F6:22:FC:46:7C:F1:B5:B1:47:C1:CF:BA:5F:97:AD Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019B77C6B98C9A7B2AC1863D5EB9C873EAD2 Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/Pu68vnj2IvxGfPG1sUfBz7pfl60.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 92.60.72.0/23 maxlen: 23 92.60.74.0/24 maxlen: 24 92.60.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b9:8c:9a:7b:2a:c1:86:3d:5e:b9:c8:73:ea:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eeebcbe78f622fc467cf1b5b147c1cfba5f97ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:e2:f8:31:2a:98:74:f3:67:65:9a:78:f9: 4a:ae:71:db:bf:bd:24:d9:25:a6:a3:46:45:d2:7e: ee:04:fe:22:76:96:91:dd:b8:31:da:02:21:04:fb: 9e:98:a3:28:60:59:6e:4b:c3:72:5f:f7:45:e1:8e: 28:42:0a:4b:e8:99:00:83:0d:ce:b6:c3:1a:52:d1: b7:71:4b:d6:c8:64:49:b2:4b:5c:f8:ba:71:da:5e: a0:90:f1:6c:3c:92:22:8e:0f:66:8c:fa:28:96:be: 23:90:52:ac:64:86:2f:d8:7b:4a:d2:ac:d6:32:83: f8:c4:04:59:a7:13:9d:f8:aa:bb:a6:6f:f1:39:9b: 8b:af:8c:dc:c8:e4:a7:c0:93:4b:f9:5e:1a:e4:d3: ca:3c:8c:23:2a:7c:16:37:78:51:86:ef:4c:66:3b: 38:4e:20:b1:69:45:32:ca:85:9e:45:58:65:b7:a2: b5:13:d5:2a:6c:04:9a:48:ff:72:93:cb:cf:3e:18: e0:a6:ab:4a:eb:db:77:cd:a4:ba:cd:6d:ed:81:84: 81:c8:a6:5b:71:eb:95:90:fe:16:2b:fa:8d:f0:0b: 13:67:65:f0:3b:09:24:5b:f3:6b:bc:89:8d:1b:2c: c1:52:2a:04:e5:48:bb:4b:1f:62:bc:78:43:3c:b8: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EE:BC:BE:78:F6:22:FC:46:7C:F1:B5:B1:47:C1:CF:BA:5F:97:AD X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/Pu68vnj2IvxGfPG1sUfBz7pfl60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.60.72.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:e3:c7:7a:73:03:c4:c2:8b:2d:a7:7f:84:bb:0a:e4:19:11: b6:b0:e9:dd:2c:fb:ae:4c:63:40:51:fc:33:b9:7f:dd:47:ac: 7c:30:03:02:8c:55:50:03:eb:21:e1:12:dd:7d:c9:fd:55:1c: 80:48:58:87:3b:6c:32:38:82:ac:a3:d0:15:5d:cb:7e:1b:49: ef:63:22:2b:3b:73:f5:18:20:06:bc:99:f7:bc:f6:a2:c4:5d: 34:d9:ca:2f:c4:73:97:bf:d4:c0:25:55:5c:c5:15:bb:ec:f7: ba:85:ea:9e:67:27:55:bc:a3:ee:5c:5f:8a:35:e0:10:9a:27: 74:45:ac:ff:25:08:5e:24:b5:6f:53:e0:1e:9a:71:00:38:67: 5f:bf:9c:a3:4d:05:6b:54:87:25:8e:28:37:e5:77:8b:6d:3a: b7:83:c4:9d:b5:f2:e1:9a:c1:ae:e3:a4:f4:b9:6f:be:f8:83: ca:75:bd:04:a6:0e:6f:3f:6c:b5:ba:7e:80:43:ec:a8:a1:17: b8:70:32:bc:81:0d:7b:dd:60:5a:1a:90:15:ba:39:2b:a2:d6: 35:ba:7a:cb:53:44:ae:62:ce:28:b3:c2:b9:15:f5:9e:31:61: a7:87:65:b0:69:c1:45:4b:fe:c0:fd:f3:a7:59:19:89:e0:e5: 90:3a:8b:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrmMmnsqwYY9XrnIc+rSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWVlYmNiZTc4ZjYyMmZjNDY3Y2YxYjViMTQ3YzFjZmJhNWY5N2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNzi+DEqmHTzZ2WaePlKrnHbv70k 2SWmo0ZF0n7uBP4idpaR3bgx2gIhBPuemKMoYFluS8NyX/dF4Y4oQgpL6JkAgw3O tsMaUtG3cUvWyGRJsktc+Lpx2l6gkPFsPJIijg9mjPoolr4jkFKsZIYv2HtK0qzW MoP4xARZpxOd+Kq7pm/xOZuLr4zcyOSnwJNL+V4a5NPKPIwjKnwWN3hRhu9MZjs4 TiCxaUUyyoWeRVhlt6K1E9UqbASaSP9yk8vPPhjgpqtK69t3zaS6zW3tgYSByKZb ceuVkP4WK/qN8AsTZ2XwOwkkW/NrvImNGyzBUioE5Ui7Sx9ivHhDPLiqtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD7uvL549iL8RnzxtbFHwc+6X5etMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvUHU2OHZuajJJdnhHZlBHMXNVZkJ6N3BmbDYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXDxIMA0G CSqGSIb3DQEBCwUAA4IBAQA+48d6cwPEwostp3+EuwrkGRG2sOndLPuuTGNAUfwz uX/dR6x8MAMCjFVQA+sh4RLdfcn9VRyASFiHO2wyOIKso9AVXct+G0nvYyIrO3P1 GCAGvJn3vPaixF002covxHOXv9TAJVVcxRW77Pe6heqeZydVvKPuXF+KNeAQmid0 Raz/JQheJLVvU+AemnEAOGdfv5yjTQVrVIcljig35XeLbTq3g8SdtfLhmsGu46T0 uW+++IPKdb0Epg5vP2y1un6AQ+yooRe4cDK8gQ173WBaGpAVujkrotY1unrLU0Su Ys4os8K5FfWeMWGnh2WwacFFS/7A/fOnWRmJ4OWQOosQ -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:14 2026 by rpki-client