This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/HG5Kli8hZRqe9Jb2XYQsB0z5g80.roa File: HG5Kli8hZRqe9Jb2XYQsB0z5g80.roa (raw, json) Hash identifier: RjeW7jzYxN5dt1A79QkDAR9PpQjGPAX194OHWzecguA= Subject key identifier: 1C:6E:4A:96:2F:21:65:1A:9E:F4:96:F6:5D:84:2C:07:4C:F9:83:CD Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019A78AFC9BE9ADC9A9E9DDE487AAE449E81 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/HG5Kli8hZRqe9Jb2XYQsB0z5g80.roa Signing time: Wed 12 Nov 2025 15:29:37 +0000 ROA not before: Wed 12 Nov 2025 15:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208137 IP address blocks: 62.60.131.0/24 maxlen: 24 62.60.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:af:c9:be:9a:dc:9a:9e:9d:de:48:7a:ae:44:9e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Nov 12 15:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1c6e4a962f21651a9ef496f65d842c074cf983cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:2f:f5:7b:15:c5:ae:dd:0f:bc:97:69:e7: ca:8a:ad:97:48:5e:d6:40:ff:9d:b5:99:ab:d1:0e: da:de:5c:9b:25:d4:ed:52:be:13:c6:78:95:6d:43: 69:59:e1:8b:70:27:ac:5e:06:e6:53:c3:7b:93:47: b7:87:9f:b8:41:0a:66:61:71:89:ef:1e:84:5e:73: 64:b3:b3:b1:bd:75:ab:ca:9c:c7:85:33:53:14:b6: 59:23:2e:53:42:b9:b3:68:8f:88:b5:4c:c8:70:fd: f6:70:41:fd:eb:9d:54:15:56:c2:a1:4b:56:04:5e: 6d:4b:23:9e:6a:67:1b:d0:b5:9a:d9:c1:00:6f:2c: 20:93:60:ce:0f:27:f6:58:fa:97:47:73:4a:9c:0f: 7a:59:25:f3:a9:ff:d0:b0:76:95:2c:57:46:1f:84: 1f:65:d0:c3:a8:ae:7a:30:6b:ea:e2:05:b4:16:5b: 37:6f:e2:b4:02:5e:b9:98:23:2f:f3:a6:63:4b:90: 67:2e:b1:bf:cb:9d:2f:b2:96:02:5b:a4:0e:4f:a6: 5b:3c:ab:e3:ee:9f:34:9c:57:ac:c4:34:19:08:62: 2b:36:66:8c:b6:e7:cc:c2:17:b9:ad:65:6c:b2:c2: 3d:c7:16:04:c0:25:3e:f0:d9:e5:b2:16:22:dd:8c: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6E:4A:96:2F:21:65:1A:9E:F4:96:F6:5D:84:2C:07:4C:F9:83:CD X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/HG5Kli8hZRqe9Jb2XYQsB0z5g80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.131.0/24 62.60.135.0/24 Signature Algorithm: sha256WithRSAEncryption bf:75:af:37:1e:f0:25:45:ab:14:47:e9:5c:8f:71:51:62:e7: 84:e2:29:10:85:1c:78:5f:07:84:34:18:6f:54:b0:17:67:c3: 7b:56:e7:2a:da:d3:48:48:3f:8e:6d:97:f8:4d:77:06:9b:46: e4:21:b9:e8:07:6f:91:a8:6e:ae:e3:1d:d5:22:a9:d4:c7:f7: a1:5a:7d:0c:e4:f7:81:39:d8:a5:ef:c4:36:15:e9:02:1e:f6: 36:58:bb:c0:2a:7a:bd:b0:73:e8:5c:db:99:11:ea:c2:8b:bc: 7d:d9:47:66:ab:8d:13:e9:f5:cc:24:68:3b:6b:ce:85:d8:b5: 73:f5:32:d2:cf:f5:dd:00:ec:f4:11:17:db:8d:a9:d0:ab:55: 90:4e:ed:a0:60:e1:00:c3:6c:aa:91:b8:ea:77:27:d6:44:2a: 51:a2:eb:d4:66:1e:fa:2a:80:08:ea:26:a0:64:87:ad:6c:16: cf:3a:b1:79:45:38:a0:e2:79:9f:7f:f2:bd:a4:2c:4b:f8:b1: 21:c2:16:89:ad:5e:a8:e0:c7:df:4a:11:89:2a:50:ea:46:3d: f7:54:8c:1f:cc:cf:37:bd:aa:7d:00:f9:77:8a:1b:bb:b7:51: 57:b3:b3:83:e9:ae:7f:42:85:fb:4b:20:dd:14:00:66:ed:01: 1c:58:cf:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp4r8m+mtyanp3eSHquRJ6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjUxMTEyMTUyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzZlNGE5NjJmMjE2NTFhOWVmNDk2ZjY1ZDg0MmMwNzRjZjk4M2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/gv9XsVxa7dD7yXaefKiq2XSF7W QP+dtZmr0Q7a3lybJdTtUr4TxniVbUNpWeGLcCesXgbmU8N7k0e3h5+4QQpmYXGJ 7x6EXnNks7OxvXWrypzHhTNTFLZZIy5TQrmzaI+ItUzIcP32cEH9651UFVbCoUtW BF5tSyOeamcb0LWa2cEAbywgk2DODyf2WPqXR3NKnA96WSXzqf/QsHaVLFdGH4Qf ZdDDqK56MGvq4gW0Fls3b+K0Al65mCMv86ZjS5BnLrG/y50vspYCW6QOT6ZbPKvj 7p80nFesxDQZCGIrNmaMtufMwhe5rWVsssI9xxYEwCU+8NnlshYi3Yx1FwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBxuSpYvIWUanvSW9l2ELAdM+YPNMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvSEc1S2xpOGhaUnFlOUpiMlhZUXNCMHo1ZzgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPjyDAwQA PjyHMA0GCSqGSIb3DQEBCwUAA4IBAQC/da83HvAlRasUR+lcj3FRYueE4ikQhRx4 XweENBhvVLAXZ8N7Vucq2tNISD+ObZf4TXcGm0bkIbnoB2+RqG6u4x3VIqnUx/eh Wn0M5PeBOdil78Q2FekCHvY2WLvAKnq9sHPoXNuZEerCi7x92Udmq40T6fXMJGg7 a86F2LVz9TLSz/XdAOz0ERfbjanQq1WQTu2gYOEAw2yqkbjqdyfWRCpRouvUZh76 KoAI6iagZIetbBbPOrF5RTig4nmff/K9pCxL+LEhwhaJrV6o4MffShGJKlDqRj33 VIwfzM83vap9APl3ihu7t1FXs7OD6a5/QoX7SyDdFABm7QEcWM8y -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:32 2025 by rpki-client