This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Yr4LGOABYu5W9-EljwJ4N_D7ls0.roa File: Yr4LGOABYu5W9-EljwJ4N_D7ls0.roa (raw, json) Hash identifier: 6rW48I8Y/zasMPqwK/4WCGGXEmKv2CdZMtGOJT44cLA= Subject key identifier: 62:BE:0B:18:E0:01:62:EE:56:F7:E1:25:8F:02:78:37:F0:FB:96:CD Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019AB48B8C438592D3A1CCB579DE298156FF Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Yr4LGOABYu5W9-EljwJ4N_D7ls0.roa Signing time: Mon 24 Nov 2025 06:27:15 +0000 ROA not before: Mon 24 Nov 2025 06:27:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35372 IP address blocks: 62.60.138.0/24 maxlen: 24 62.60.144.0/24 maxlen: 24 62.60.147.0/24 maxlen: 24 62.60.160.0/24 maxlen: 24 62.60.218.0/23 maxlen: 24 213.176.0.0/24 maxlen: 24 213.176.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:8b:8c:43:85:92:d3:a1:cc:b5:79:de:29:81:56:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Nov 24 06:27:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=62be0b18e00162ee56f7e1258f027837f0fb96cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bb:b9:bd:57:ea:7e:6a:b9:54:bc:2b:91:53: 1d:83:a4:a6:2f:44:ec:c3:9f:87:2f:3c:12:58:68: 3d:b8:b7:da:2b:73:18:b8:29:96:70:0f:71:d3:28: 9d:04:94:f6:a2:0c:17:de:74:f2:3f:52:cb:80:eb: 66:2d:8d:97:cd:ec:c9:03:bd:76:b8:7a:bf:a5:58: e1:c4:82:ac:a5:81:9b:8f:fc:a4:cb:0d:03:a4:5e: bc:77:f8:a5:75:7e:ff:99:5f:8c:25:5d:a5:0f:b5: 4e:bc:73:f7:2d:fb:9a:25:1c:6f:38:2b:53:7e:8e: 99:96:5c:8f:f4:ba:fe:48:2d:fa:08:85:59:b2:17: 37:84:81:12:63:55:7a:87:01:4d:b2:fc:b9:79:d8: ec:6d:2d:75:ee:64:58:7e:5a:31:5d:90:15:3c:f7: ac:f2:56:60:bf:84:8d:8a:57:e4:f3:1a:0e:ad:4d: 49:b6:b8:d6:89:58:fe:fe:12:61:d7:e6:fb:53:18: 55:9e:3f:9a:87:3c:14:f1:8c:25:fe:cf:98:7d:7a: b8:28:b7:55:ed:05:97:fd:03:94:ec:e1:a3:64:91: 8e:fb:d1:65:8c:80:00:3e:c6:70:60:32:aa:2d:95: a8:7d:10:72:c9:cc:13:2c:7c:44:68:17:f6:7e:a8: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BE:0B:18:E0:01:62:EE:56:F7:E1:25:8F:02:78:37:F0:FB:96:CD X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Yr4LGOABYu5W9-EljwJ4N_D7ls0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.138.0/24 62.60.144.0/24 62.60.147.0/24 62.60.160.0/24 62.60.218.0/23 213.176.0.0/24 213.176.126.0/24 Signature Algorithm: sha256WithRSAEncryption 49:7b:80:67:3c:1e:d7:c8:ab:d6:77:70:1f:8d:7e:f9:9f:d4: ad:b5:3d:20:e2:dc:04:f1:23:f3:13:7c:93:1a:47:37:5d:b7: f2:b5:e2:cc:86:ff:10:d0:62:4a:22:f1:61:c8:d3:ec:6e:f4: 3b:22:27:63:7e:50:de:ef:88:55:f2:c8:69:05:64:16:a7:60: 1b:71:41:dc:c1:a5:c8:0c:64:fb:e5:36:25:79:52:c7:6f:f9: ac:f9:92:e0:6d:3d:3a:fe:6b:a9:be:dc:12:94:ed:03:f5:a6: 49:68:54:fe:7f:df:fc:7f:e2:d2:12:df:0a:65:b5:25:f7:bc: fe:f0:73:c7:1b:0e:2e:5b:6d:c7:05:32:ca:51:78:02:8b:00: 5f:86:da:9a:f5:12:26:ff:55:68:f9:b9:4e:66:d5:a3:af:ed: b7:15:65:9b:aa:ae:e8:c5:d2:f8:e4:eb:e5:ed:82:b9:fb:78: 50:91:d6:fb:a7:0f:9d:6f:41:e6:7e:3a:7f:c4:f6:9a:6f:65: 11:50:de:0e:c4:b6:6e:2f:90:77:4a:6e:be:4b:b7:6a:06:46: bc:46:23:98:2e:ef:9d:0a:ec:28:f4:6e:2c:73:58:9e:10:1f: ce:dd:8f:b0:3d:65:a6:90:db:90:e0:47:52:34:7b:9f:7d:8f: f3:24:c8:5f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZq0i4xDhZLTocy1ed4pgVb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjUxMTI0MDYyNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MmJlMGIxOGUwMDE2MmVlNTZmN2UxMjU4ZjAyNzgzN2YwZmI5NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybu5vVfqfmq5VLwrkVMdg6SmL0Ts w5+HLzwSWGg9uLfaK3MYuCmWcA9x0yidBJT2ogwX3nTyP1LLgOtmLY2XzezJA712 uHq/pVjhxIKspYGbj/ykyw0DpF68d/ildX7/mV+MJV2lD7VOvHP3LfuaJRxvOCtT fo6ZllyP9Lr+SC36CIVZshc3hIESY1V6hwFNsvy5edjsbS117mRYfloxXZAVPPes 8lZgv4SNilfk8xoOrU1JtrjWiVj+/hJh1+b7UxhVnj+ahzwU8Ywl/s+YfXq4KLdV 7QWX/QOU7OGjZJGO+9FljIAAPsZwYDKqLZWofRByycwTLHxEaBf2fqjPnQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFGK+CxjgAWLuVvfhJY8CeDfw+5bNMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvWXI0TEdPQUJZdTVXOS1FbGp3SjROX0Q3bHMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAPjyKAwQA PjyQAwQAPjyTAwQAPjygAwQBPjzaAwQA1bAAAwQA1bB+MA0GCSqGSIb3DQEBCwUA A4IBAQBJe4BnPB7XyKvWd3AfjX75n9SttT0g4twE8SPzE3yTGkc3XbfyteLMhv8Q 0GJKIvFhyNPsbvQ7IidjflDe74hV8shpBWQWp2AbcUHcwaXIDGT75TYleVLHb/ms +ZLgbT06/mupvtwSlO0D9aZJaFT+f9/8f+LSEt8KZbUl97z+8HPHGw4uW23HBTLK UXgCiwBfhtqa9RIm/1Vo+blOZtWjr+23FWWbqq7oxdL45Ovl7YK5+3hQkdb7pw+d b0Hmfjp/xPaab2URUN4OxLZuL5B3Sm6+S7dqBka8RiOYLu+dCuwo9G4sc1ieEB/O 3Y+wPWWmkNuQ4EdSNHuffY/zJMhf -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:38 2025 by rpki-client