This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ezMnjcrZrp_Arm-POXFDlG_w5UY.roa File: ezMnjcrZrp_Arm-POXFDlG_w5UY.roa (raw, json) Hash identifier: YnGArrkYUSVZyAdWl1OFzF5LcDZHSJMqy5MHIVZXy28= Subject key identifier: 7B:33:27:8D:CA:D9:AE:9F:C0:AE:6F:8F:39:71:43:94:6F:F0:E5:46 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019A1A690B595D9906E79DB140DC4B9A194E Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ezMnjcrZrp_Arm-POXFDlG_w5UY.roa Signing time: Sat 25 Oct 2025 08:08:03 +0000 ROA not before: Sat 25 Oct 2025 08:08:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211522 IP address blocks: 62.60.152.0/23 maxlen: 24 62.60.172.0/22 maxlen: 24 62.60.216.0/23 maxlen: 24 62.60.244.0/22 maxlen: 24 62.60.248.0/23 maxlen: 24 62.60.250.0/24 maxlen: 24 62.60.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1a:69:0b:59:5d:99:06:e7:9d:b1:40:dc:4b:9a:19:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Oct 25 08:08:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7b33278dcad9ae9fc0ae6f8f397143946ff0e546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a3:5d:81:46:90:e8:3b:33:1a:9f:7f:5f:52: 58:4d:45:15:d7:7e:63:0b:5d:33:32:9c:37:a0:13: d7:9b:d0:cb:f0:47:61:1c:db:d9:86:37:e4:f2:ce: d9:28:48:41:d6:4e:0c:89:52:f5:6c:7c:d9:87:8e: a3:61:bc:35:93:7f:cf:d5:94:c6:08:28:20:48:0a: 98:fc:d2:06:cb:d8:36:b2:b5:03:30:14:f2:f6:a8: 63:69:0f:8d:38:97:2e:fb:c6:92:e0:ba:52:54:d1: fc:16:05:4f:0e:d0:dd:1d:6c:b5:e7:21:e3:e0:7d: f8:de:c0:92:e6:e3:96:d8:ea:0e:c7:41:ff:ec:31: 2b:89:22:04:de:61:52:34:5d:75:69:fb:52:83:63: c3:fe:86:7e:12:e7:1f:e4:c1:db:8b:e5:0f:d8:61: be:de:d1:6b:c2:ed:d4:93:f3:11:a1:f1:b3:2c:6b: cf:aa:f4:17:19:41:97:57:43:e5:8d:e7:2b:40:7b: c7:66:8a:30:f3:46:7b:20:8f:b4:a1:3b:03:d0:cb: 71:7f:23:a7:10:eb:1d:fe:ef:70:d0:f1:74:1e:53: 3c:20:d8:cf:75:a0:cc:fd:9c:54:d5:e7:4b:34:cf: ef:33:7f:8b:02:f0:ab:39:1f:87:dd:4a:46:27:b4: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:33:27:8D:CA:D9:AE:9F:C0:AE:6F:8F:39:71:43:94:6F:F0:E5:46 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ezMnjcrZrp_Arm-POXFDlG_w5UY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.152.0/23 62.60.172.0/22 62.60.216.0/23 62.60.244.0-62.60.251.255 Signature Algorithm: sha256WithRSAEncryption 44:16:6c:a6:74:4b:52:ac:48:c6:69:fe:f8:14:0e:f4:16:95: d4:3f:33:1f:ef:c3:8c:cd:55:8d:51:66:ba:99:d5:dc:00:39: 10:fa:24:d4:ce:12:9e:13:43:2d:34:7b:2d:25:69:89:7b:75: 29:18:7e:82:a7:b9:e7:b7:53:44:09:ef:02:b2:e1:fe:1b:29: c3:e3:81:70:e8:7d:e6:ae:f6:42:c6:48:b8:67:45:a2:ae:e7: 32:e2:05:98:6b:6c:79:bd:d9:1b:31:fd:b8:af:80:4d:f4:05: 5f:bb:95:49:aa:13:a0:9a:98:be:be:80:43:1e:a7:24:a3:33: e3:ce:50:7a:dc:2a:82:85:c4:af:e5:2d:e3:75:25:66:b2:3b: 38:89:1d:13:1a:51:95:a7:56:39:bf:d8:ac:bc:5a:56:82:04: c4:91:6e:b8:de:24:5a:42:49:ba:71:b6:75:12:5d:9a:7f:17: 49:57:a3:fb:09:cf:c0:20:b1:c3:08:5c:cb:79:c9:bd:d5:ca: d0:48:2b:f1:88:a6:e4:5f:46:81:a7:39:f8:20:ab:0a:17:a4: bd:7c:1b:20:ff:7f:34:7f:fa:9a:b1:09:a6:3c:20:a3:cb:1c: 3f:f5:95:46:39:00:2b:2b:67:cc:d6:c4:3e:00:28:47:bb:5d: d3:46:8b:a9 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZoaaQtZXZkG552xQNxLmhlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjUxMDI1MDgwODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjMzMjc4ZGNhZDlhZTlmYzBhZTZmOGYzOTcxNDM5NDZmZjBlNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46NdgUaQ6DszGp9/X1JYTUUV135j C10zMpw3oBPXm9DL8EdhHNvZhjfk8s7ZKEhB1k4MiVL1bHzZh46jYbw1k3/P1ZTG CCggSAqY/NIGy9g2srUDMBTy9qhjaQ+NOJcu+8aS4LpSVNH8FgVPDtDdHWy15yHj 4H343sCS5uOW2OoOx0H/7DEriSIE3mFSNF11aftSg2PD/oZ+Eucf5MHbi+UP2GG+ 3tFrwu3Uk/MRofGzLGvPqvQXGUGXV0PljecrQHvHZoow80Z7II+0oTsD0MtxfyOn EOsd/u9w0PF0HlM8INjPdaDM/ZxU1edLNM/vM3+LAvCrOR+H3UpGJ7R7UQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHszJ43K2a6fwK5vjzlxQ5Rv8OVGMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvZXpNbmpjclpycF9Bcm0tUE9YRkRsR193NVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBPjyYAwQC PjysAwQBPjzYMAwDBAI+PPQDBAI+PPgwDQYJKoZIhvcNAQELBQADggEBAEQWbKZ0 S1KsSMZp/vgUDvQWldQ/Mx/vw4zNVY1RZrqZ1dwAORD6JNTOEp4TQy00ey0laYl7 dSkYfoKnuee3U0QJ7wKy4f4bKcPjgXDofeau9kLGSLhnRaKu5zLiBZhrbHm92Rsx /bivgE30BV+7lUmqE6CamL6+gEMepySjM+POUHrcKoKFxK/lLeN1JWayOziJHRMa UZWnVjm/2Ky8WlaCBMSRbrjeJFpCSbpxtnUSXZp/F0lXo/sJz8AgscMIXMt5yb3V ytBIK/GIpuRfRoGnOfggqwoXpL18GyD/fzR/+pqxCaY8IKPLHD/1lUY5ACsrZ8zW xD4AKEe7XdNGi6k= -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:36 2025 by rpki-client