This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/60GOELdjS90NT3HQ_TIoDBw9jEk.roa File: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (raw, json) Hash identifier: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I= Subject key identifier: EB:41:8E:10:B7:63:4B:DD:0D:4F:71:D0:FD:32:28:0C:1C:3D:8C:49 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79102148E27E87E79047C46272E5D9F0 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/60GOELdjS90NT3HQ_TIoDBw9jEk.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 46.37.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:21:48:e2:7e:87:e7:90:47:c4:62:72:e5:d9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb418e10b7634bdd0d4f71d0fd32280c1c3d8c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0a:e5:d8:b3:fb:8a:e9:34:74:62:04:98:a3: 5f:e8:61:07:06:64:56:14:72:d9:c4:7c:e1:c9:31: 5a:57:9f:a6:95:44:ea:26:02:aa:05:f1:f6:5b:4c: 56:d1:75:42:01:02:3b:e7:57:e0:78:05:ee:2f:87: ae:92:25:24:f7:db:6e:bc:73:9e:d9:47:2d:01:d3: e6:11:d2:44:65:38:4b:59:5e:51:55:32:da:19:7e: c5:f9:4d:8c:69:5c:c0:c8:0f:b5:d2:0c:ae:06:a8: 43:e3:53:88:3b:e4:6e:0e:62:a0:f9:7e:03:01:83: 36:58:72:75:76:1b:a7:35:79:37:f1:98:b5:eb:c4: ed:80:93:e7:8e:6a:3f:3c:d3:2b:a1:0c:9d:f7:6f: 52:9b:37:3b:df:dd:e9:b5:d9:19:ff:6e:11:39:ee: 2f:23:04:d4:b8:c6:6a:ac:f3:e9:5a:77:2d:70:53: 0e:26:c1:b3:ee:b2:04:bd:8a:50:33:4b:1d:25:5e: 93:a0:f7:95:70:70:9e:14:7a:e6:d7:6f:e2:c2:17: ea:44:ba:70:95:0a:f4:b9:b3:92:01:e2:9d:b1:74: 37:9c:20:4e:52:b1:fa:47:53:db:00:50:3e:35:52: ba:66:bf:42:6c:bf:80:a4:f9:85:2e:83:e3:4c:d5: b5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:41:8E:10:B7:63:4B:DD:0D:4F:71:D0:FD:32:28:0C:1C:3D:8C:49 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/60GOELdjS90NT3HQ_TIoDBw9jEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.114.0/24 Signature Algorithm: sha256WithRSAEncryption 25:39:ed:23:33:6e:1e:00:04:bd:6e:a8:58:1e:d2:fa:b8:ad: a1:c1:5d:e6:d0:cf:91:0b:d3:b7:28:85:ff:3f:8e:2b:33:8a: 26:df:db:72:0b:40:14:38:81:7a:5e:e1:9a:ac:79:a8:3d:b7: 98:d6:8c:8d:74:b3:86:2f:ec:7f:3e:1a:4d:6e:1c:d1:6b:34: d9:fa:81:4d:0d:b7:26:89:06:ed:1b:c7:cb:c1:d8:2f:22:28: b6:77:7f:e2:56:a8:a0:41:84:ba:22:19:e4:b8:06:dc:20:f1: b3:51:59:71:b3:71:c2:f1:c4:3a:18:31:13:c3:4d:64:d2:ef: b9:42:5c:9d:fc:ca:9f:c6:08:d5:a0:b9:31:cc:63:f8:38:4d: bb:c9:5e:0b:46:19:9e:08:ce:80:33:d2:f7:26:f9:de:4f:dc: ab:00:59:f4:d0:26:fc:c0:c1:9a:19:0e:c6:f1:d1:f5:ac:cd: ba:4e:ff:d1:75:ef:6c:61:3c:43:76:29:34:b9:ef:8a:44:ad: ac:c2:53:bd:bb:7f:88:fb:f4:e9:e2:fb:26:23:80:27:f3:42: 47:c0:38:e7:b8:36:77:bd:7d:6f:db:12:aa:9c:63:57:2a:b6: db:73:82:63:fd:17:e6:fb:2f:ee:53:d8:13:28:8b:a3:0d:83: 52:07:5f:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECFI4n6H55BHxGJy5dnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjQxOGUxMGI3NjM0YmRkMGQ0ZjcxZDBmZDMyMjgwYzFjM2Q4YzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQrl2LP7iuk0dGIEmKNf6GEHBmRW FHLZxHzhyTFaV5+mlUTqJgKqBfH2W0xW0XVCAQI751fgeAXuL4eukiUk99tuvHOe 2UctAdPmEdJEZThLWV5RVTLaGX7F+U2MaVzAyA+10gyuBqhD41OIO+RuDmKg+X4D AYM2WHJ1dhunNXk38Zi168TtgJPnjmo/PNMroQyd929Smzc7393ptdkZ/24ROe4v IwTUuMZqrPPpWnctcFMOJsGz7rIEvYpQM0sdJV6ToPeVcHCeFHrm12/iwhfqRLpw lQr0ubOSAeKdsXQ3nCBOUrH6R1PbAFA+NVK6Zr9CbL+ApPmFLoPjTNW1dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtBjhC3Y0vdDU9x0P0yKAwcPYxJMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvNjBHT0VMZGpTOTBOVDNIUV9USW9EQnc5akVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVyMA0G CSqGSIb3DQEBCwUAA4IBAQAlOe0jM24eAAS9bqhYHtL6uK2hwV3m0M+RC9O3KIX/ P44rM4om39tyC0AUOIF6XuGarHmoPbeY1oyNdLOGL+x/PhpNbhzRazTZ+oFNDbcm iQbtG8fLwdgvIii2d3/iVqigQYS6IhnkuAbcIPGzUVlxs3HC8cQ6GDETw01k0u+5 Qlyd/MqfxgjVoLkxzGP4OE27yV4LRhmeCM6AM9L3JvneT9yrAFn00Cb8wMGaGQ7G 8dH1rM26Tv/Rde9sYTxDdik0ue+KRK2swlO9u3+I+/Tp4vsmI4An80JHwDjnuDZ3 vX1v2xKqnGNXKrbbc4Jj/Rfm+y/uU9gTKIujDYNSB18f -----END CERTIFICATE-----Generated at Mon Jan 19 18:41:58 2026 by rpki-client