This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tvPeKds6Rs-tyJptVtOIvuKxmA4.roa File: tvPeKds6Rs-tyJptVtOIvuKxmA4.roa (raw, json) Hash identifier: IQjUvx4REkxY8A9XoP7XWkP4LYacniyqJHRgCh8A+HI= Subject key identifier: B6:F3:DE:29:DB:3A:46:CF:AD:C8:9A:6D:56:D3:88:BE:E2:B1:98:0E Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019A78AFCA4E924FADA504346931219C1237 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tvPeKds6Rs-tyJptVtOIvuKxmA4.roa Signing time: Wed 12 Nov 2025 15:29:37 +0000 ROA not before: Wed 12 Nov 2025 15:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213456 IP address blocks: 62.60.131.0/24 maxlen: 24 62.60.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:af:ca:4e:92:4f:ad:a5:04:34:69:31:21:9c:12:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Nov 12 15:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6f3de29db3a46cfadc89a6d56d388bee2b1980e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3b:90:23:c3:15:44:b3:60:7e:3a:1b:a6:00: a4:1e:ef:c9:f3:64:bc:08:d4:e4:cf:a3:c4:31:01: 48:37:71:17:4b:db:fa:43:8e:79:8f:33:34:41:47: 0a:13:23:0f:c7:0a:75:cf:f5:31:a9:70:f5:67:87: 36:82:5e:96:94:83:8e:6f:69:0f:dd:46:41:ff:ed: 9d:d6:04:f4:4f:d4:28:62:87:6a:8f:a1:0b:cb:bc: a7:45:94:25:41:f7:4d:30:86:f6:07:8e:88:ce:0a: 5c:99:14:50:20:45:5b:17:9f:b3:03:47:49:25:ca: 04:a1:ef:4e:7a:f6:87:0e:58:46:9b:61:6c:1f:a8: 6b:b5:7b:78:9f:3a:5f:9d:ed:bd:f6:24:5b:fc:03: 07:68:a8:dc:d2:8e:3e:a6:d6:5c:03:be:b5:98:d7: 49:d3:3b:d8:5d:f0:66:42:bb:9f:f5:88:47:52:16: f5:8c:eb:9f:a6:d0:6f:dd:b8:e2:3b:46:e6:8b:c5: 16:49:f1:88:e8:da:5d:28:a7:87:73:be:b6:7c:6d: 6c:8d:1b:da:90:f5:59:71:59:d0:7b:b6:ce:e1:6b: 51:67:be:20:b2:e6:77:2b:34:96:d2:cb:53:0b:4e: 41:6c:68:0f:88:15:65:03:89:2c:45:3c:15:00:26: 9a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F3:DE:29:DB:3A:46:CF:AD:C8:9A:6D:56:D3:88:BE:E2:B1:98:0E X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tvPeKds6Rs-tyJptVtOIvuKxmA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.131.0/24 62.60.134.0/24 Signature Algorithm: sha256WithRSAEncryption 00:74:31:0e:bc:43:24:17:a0:9a:8b:a5:b4:f3:47:5b:92:45: 32:b4:e4:6c:66:ad:70:5d:50:ba:77:ef:60:05:a9:ca:e8:d5: 1f:86:cf:60:19:68:2f:bb:21:92:b4:e1:dd:d4:f7:ca:fd:c6: 28:59:4d:2d:2e:a8:05:d4:52:a0:79:3a:14:3c:03:29:f6:27: 85:5a:3b:ec:c0:7d:9b:72:de:9d:d6:e6:6f:e2:0c:c5:1b:98: 3a:25:14:67:d6:6d:97:60:f5:fd:58:f5:4c:b9:a4:02:6f:b6: df:c7:d3:3c:74:24:c9:1c:ba:21:f7:57:30:4a:cf:3f:cb:b4: f1:8a:80:b8:63:59:c1:85:a1:9a:1e:ab:26:10:d7:62:eb:23: d2:ed:87:5b:13:d9:14:b6:15:81:8e:11:9f:4b:0f:e5:4e:9b: 0f:c3:e9:b3:24:c9:bb:31:73:2b:cb:71:3c:01:b4:a1:6d:ca: bb:24:cd:e1:27:11:e6:f1:74:3e:10:e3:65:bb:21:6b:31:91: f5:5e:61:5a:8b:25:55:2f:10:f4:8f:fc:75:c7:f2:6f:25:1c: 60:ed:91:01:3a:0b:8f:64:06:81:f6:c5:ad:b4:77:dc:d6:dd: 69:f5:65:40:cb:43:81:17:86:58:65:21:e5:11:f4:cc:4e:d6: 6a:6a:a1:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp4r8pOkk+tpQQ0aTEhnBI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjUxMTEyMTUyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmYzZGUyOWRiM2E0NmNmYWRjODlhNmQ1NmQzODhiZWUyYjE5ODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjuQI8MVRLNgfjobpgCkHu/J82S8 CNTkz6PEMQFIN3EXS9v6Q455jzM0QUcKEyMPxwp1z/UxqXD1Z4c2gl6WlIOOb2kP 3UZB/+2d1gT0T9QoYodqj6ELy7ynRZQlQfdNMIb2B46IzgpcmRRQIEVbF5+zA0dJ JcoEoe9OevaHDlhGm2FsH6hrtXt4nzpfne299iRb/AMHaKjc0o4+ptZcA761mNdJ 0zvYXfBmQruf9YhHUhb1jOufptBv3bjiO0bmi8UWSfGI6NpdKKeHc762fG1sjRva kPVZcVnQe7bO4WtRZ74gsuZ3KzSW0stTC05BbGgPiBVlA4ksRTwVACaahwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLbz3inbOkbPrciabVbTiL7isZgOMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvdHZQZUtkczZScy10eUpwdFZ0T0l2dUt4bUE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPjyDAwQA PjyGMA0GCSqGSIb3DQEBCwUAA4IBAQAAdDEOvEMkF6Cai6W080dbkkUytORsZq1w XVC6d+9gBanK6NUfhs9gGWgvuyGStOHd1PfK/cYoWU0tLqgF1FKgeToUPAMp9ieF WjvswH2bct6d1uZv4gzFG5g6JRRn1m2XYPX9WPVMuaQCb7bfx9M8dCTJHLoh91cw Ss8/y7TxioC4Y1nBhaGaHqsmENdi6yPS7YdbE9kUthWBjhGfSw/lTpsPw+mzJMm7 MXMry3E8AbShbcq7JM3hJxHm8XQ+EONluyFrMZH1XmFaiyVVLxD0j/x1x/JvJRxg 7ZEBOguPZAaB9sWttHfc1t1p9WVAy0OBF4ZYZSHlEfTMTtZqaqGs -----END CERTIFICATE-----Generated at Sat Dec 6 20:43:27 2025 by rpki-client