This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/60ZuDyr70onvZz7b_VP-SDmx33E.roa File: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (raw, json) Hash identifier: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro= Subject key identifier: EB:46:6E:0F:2A:FB:D2:89:EF:67:3E:DB:FD:53:FE:48:39:B1:DF:71 Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Certificate serial: 019B7C129B200E1E126845C9AF297C4DDCEE Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/60ZuDyr70onvZz7b_VP-SDmx33E.roa Signing time: Fri 02 Jan 2026 00:19:12 +0000 ROA not before: Fri 02 Jan 2026 00:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208589 IP address blocks: 2a0e:3247:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9b:20:0e:1e:12:68:45:c9:af:29:7c:4d:dc:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204 Validity Not Before: Jan 2 00:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb466e0f2afbd289ef673edbfd53fe4839b1df71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:98:0a:3f:9e:f2:fa:38:cc:be:fc:e0:44: a2:13:3e:46:fb:a9:06:c3:f5:b7:e8:63:62:3b:9e: 57:28:f2:bf:00:72:f1:d0:76:94:2e:be:dd:e0:f6: 23:e1:69:98:68:61:e4:89:fa:1c:0c:69:b9:24:be: 10:8e:e8:eb:2c:b5:50:e5:f4:56:a3:6a:9e:55:3b: 57:05:c5:ce:eb:6c:7e:67:47:ca:0f:7e:ee:3a:f3: 59:6c:bc:1c:25:2c:40:67:45:38:a4:5f:fc:d8:f3: 2c:1d:83:d1:ba:ed:84:d4:4b:24:7c:f0:32:e1:18: 40:0f:90:13:a1:4a:f5:5e:4f:0c:a2:67:68:f2:0f: ad:f5:20:ed:11:46:57:54:05:6c:93:76:15:b1:9c: 2c:0e:b8:58:90:8f:4f:04:20:b7:62:5c:6b:06:ff: d8:cd:15:06:e8:04:75:da:30:48:71:ea:39:9d:15: a3:da:e9:2f:93:5f:11:14:70:b2:9b:48:47:1b:9c: ad:23:37:e0:1e:da:c9:6d:2f:92:8d:1d:6e:1c:97: 1b:b8:03:a3:d1:21:5c:ad:99:27:bd:94:e4:82:0c: 36:bd:01:20:08:33:33:6b:bb:aa:25:ab:9c:0e:67: b9:53:7a:4d:45:04:96:dc:f3:d5:a5:0f:19:a3:c4: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:46:6E:0F:2A:FB:D2:89:EF:67:3E:DB:FD:53:FE:48:39:B1:DF:71 X509v3 Authority Key Identifier: keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/60ZuDyr70onvZz7b_VP-SDmx33E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:3247:8000::/48 Signature Algorithm: sha256WithRSAEncryption c7:cb:da:a8:7a:7a:f3:c8:ff:ec:a6:cb:5f:78:86:7d:e5:a2: 0e:d5:54:39:12:14:58:49:a4:2d:76:cd:c2:d4:f9:24:f3:68: 30:ac:6a:50:c5:83:b1:40:40:09:c2:8d:23:2b:fd:51:ca:c4: 51:31:ef:c9:06:3a:34:05:96:60:96:57:4f:31:61:76:60:4a: ac:a7:1e:e8:5c:81:cc:82:cb:03:fd:07:9c:42:b8:38:e6:d0: db:a7:67:73:2a:60:03:29:34:61:df:40:f2:33:ac:aa:56:62: 07:4e:63:1c:b9:53:53:e3:e2:f2:72:e4:5a:9e:9d:74:5c:0f: c9:af:78:04:6f:24:b1:67:2d:40:08:68:77:a7:32:a1:f0:d1: c8:61:b4:c3:7f:87:e5:97:ea:fa:f8:10:cf:96:48:a7:86:4a: b1:f6:8b:55:2d:42:8b:f8:dd:a6:b0:30:9a:5a:88:f7:89:fd: 19:90:bf:77:f3:e1:0d:fe:67:5c:84:ef:0b:6f:14:0d:6e:a2: de:45:c1:9b:89:fd:3b:c4:c5:8f:e0:02:1e:ea:c3:67:23:8c: fe:7f:fb:bc:c9:80:6e:33:59:9d:1b:02:95:4b:4e:f3:bb:8a: 2d:25:e5:c7:81:7f:d7:a9:80:b8:cf:25:b1:13:3b:eb:91:fc: 5c:84:c7:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EpsgDh4SaEXJryl8TdzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4 MWQyMDQwHhcNMjYwMTAyMDAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjQ2NmUwZjJhZmJkMjg5ZWY2NzNlZGJmZDUzZmU0ODM5YjFkZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC2YCj+e8vo4zL784ESiEz5G+6kG w/W36GNiO55XKPK/AHLx0HaULr7d4PYj4WmYaGHkifocDGm5JL4QjujrLLVQ5fRW o2qeVTtXBcXO62x+Z0fKD37uOvNZbLwcJSxAZ0U4pF/82PMsHYPRuu2E1EskfPAy 4RhAD5AToUr1Xk8Momdo8g+t9SDtEUZXVAVsk3YVsZwsDrhYkI9PBCC3YlxrBv/Y zRUG6AR12jBIceo5nRWj2ukvk18RFHCym0hHG5ytIzfgHtrJbS+SjR1uHJcbuAOj 0SFcrZknvZTkggw2vQEgCDMza7uqJaucDme5U3pNRQSW3PPVpQ8Zo8SaoQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFOtGbg8q+9KJ72c+2/1T/kg5sd9xMB8GA1UdIwQY MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct MWMyMmVmZjcyODE4LzEvNjBadUR5cjcwb252Wno3Yl9WUC1TRG14MzNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4 LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4yR4AA MA0GCSqGSIb3DQEBCwUAA4IBAQDHy9qoenrzyP/spstfeIZ95aIO1VQ5EhRYSaQt ds3C1Pkk82gwrGpQxYOxQEAJwo0jK/1RysRRMe/JBjo0BZZglldPMWF2YEqspx7o XIHMgssD/QecQrg45tDbp2dzKmADKTRh30DyM6yqVmIHTmMcuVNT4+LycuRanp10 XA/Jr3gEbySxZy1ACGh3pzKh8NHIYbTDf4fll+r6+BDPlkinhkqx9otVLUKL+N2m sDCaWoj3if0ZkL938+EN/mdchO8LbxQNbqLeRcGbif07xMWP4AIe6sNnI4z+f/u8 yYBuM1mdGwKVS07zu4otJeXHgX/XqYC4zyWxEzvrkfxchMf/ -----END CERTIFICATE-----Generated at Sun Jan 25 23:42:54 2026 by rpki-client