This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/q60PSvvClTQwtGkyd2ZN34a_Je0.roa File: q60PSvvClTQwtGkyd2ZN34a_Je0.roa (raw, json) Hash identifier: 1rwFQ0QJ9T/+UqLw5pNdm0Jyj9+fr1fgBKzACzq7tPM= Subject key identifier: AB:AD:0F:4A:FB:C2:95:34:30:B4:69:32:77:66:4D:DF:86:BF:25:ED Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 019B7DC972FB848527E7785603E2C889BE36 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/q60PSvvClTQwtGkyd2ZN34a_Je0.roa Signing time: Fri 02 Jan 2026 08:18:32 +0000 ROA not before: Fri 02 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202984 IP address blocks: 2a05:543::/32 maxlen: 32 2a06:c007::/32 maxlen: 32 2a0f:381::/32 maxlen: 32 2a0f:383::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:72:fb:84:85:27:e7:78:56:03:e2:c8:89:be:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Jan 2 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abad0f4afbc2953430b4693277664ddf86bf25ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:34:2c:0c:82:58:e4:7c:10:79:c5:75:6d: a8:2f:d2:e6:d9:53:1c:52:8f:14:66:3f:cb:25:7f: ac:25:d8:e4:5f:d6:b1:72:17:78:1d:4c:33:4a:05: 07:c1:f1:47:78:0d:18:6f:76:f3:3b:8b:30:19:0f: b6:cc:b9:33:d7:8d:1a:b9:b2:a6:dd:0a:3e:de:7e: ca:36:13:0d:c2:ad:41:61:10:50:67:a2:4f:0b:13: 08:1e:0d:14:15:d2:b9:b0:0f:60:5f:fb:39:44:84: 15:a6:22:8a:a6:2a:85:11:c9:86:4c:9e:bc:8f:73: 0a:12:1f:33:15:d2:da:87:4b:e5:db:34:45:b1:1c: 30:f8:9f:e6:da:09:46:42:64:c2:76:e9:d5:9c:a3: d4:5f:a4:2d:2c:ef:28:32:d5:87:b0:c3:b1:f9:6e: 1d:af:9a:aa:44:6a:42:4f:7c:e4:e2:77:1f:16:3d: 09:0e:a3:9a:63:61:5f:5c:7a:7e:4d:dc:7b:5c:d1: f1:49:d6:2a:bf:5c:b8:53:00:55:f5:8c:6b:44:71: aa:52:67:99:19:81:b2:c2:e3:ca:74:9b:c3:01:39: 0c:05:07:78:89:26:98:a4:5b:7f:ec:2f:c0:00:dc: 43:fb:7f:b9:f1:1a:97:5a:74:d7:97:50:54:14:d4: 94:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AD:0F:4A:FB:C2:95:34:30:B4:69:32:77:66:4D:DF:86:BF:25:ED X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/q60PSvvClTQwtGkyd2ZN34a_Je0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:543::/32 2a06:c007::/32 2a0f:381::/32 2a0f:383::/32 Signature Algorithm: sha256WithRSAEncryption 67:88:18:b7:a9:29:9b:cd:71:af:68:38:30:62:d1:c1:cb:07: 14:38:93:de:35:e3:f9:ed:6c:9f:b9:2a:99:56:bb:a1:c3:f9: 53:f8:73:c1:75:fc:2d:71:65:f1:33:35:fb:b1:fa:1b:ff:0a: fa:57:fd:62:af:e0:ad:ab:98:5d:90:bf:26:05:14:40:6b:e0: ea:21:94:90:5d:6e:54:65:64:72:fe:b8:9f:bd:4e:4c:bc:ef: a9:7c:e0:92:18:3d:38:b5:01:70:61:4a:c5:33:eb:40:cc:74: 9c:bc:67:e8:49:ac:44:b4:59:ea:1e:e7:cd:b8:53:bf:b4:56: 1c:5f:43:2b:77:af:60:af:80:7d:77:39:84:20:53:10:82:7e: 57:e9:01:30:6b:dd:c0:91:78:16:a1:07:1e:39:d0:17:ce:e9: 09:1e:6e:6b:34:84:37:03:64:63:a7:23:ad:95:dd:15:8e:7a: 3e:17:e2:c2:6a:ec:83:5c:bf:37:51:70:43:d8:c4:1e:c1:c1: 0e:4f:d0:d3:5f:a2:e9:43:f9:a9:d7:11:75:02:76:dc:54:5a: a5:49:bb:76:dc:a0:d7:11:14:c5:87:78:d9:d5:d7:bd:5d:b8: ae:66:f3:74:64:f1:6f:17:d4:2f:8f:d2:9c:6b:f8:6a:bf:2d: 42:10:6f:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9yXL7hIUn53hWA+LIib42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjYwMTAyMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmFkMGY0YWZiYzI5NTM0MzBiNDY5MzI3NzY2NGRkZjg2YmYyNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQM0LAyCWOR8EHnFdW2oL9Lm2VMc Uo8UZj/LJX+sJdjkX9axchd4HUwzSgUHwfFHeA0Yb3bzO4swGQ+2zLkz140aubKm 3Qo+3n7KNhMNwq1BYRBQZ6JPCxMIHg0UFdK5sA9gX/s5RIQVpiKKpiqFEcmGTJ68 j3MKEh8zFdLah0vl2zRFsRww+J/m2glGQmTCdunVnKPUX6QtLO8oMtWHsMOx+W4d r5qqRGpCT3zk4ncfFj0JDqOaY2FfXHp+Tdx7XNHxSdYqv1y4UwBV9YxrRHGqUmeZ GYGywuPKdJvDATkMBQd4iSaYpFt/7C/AANxD+3+58RqXWnTXl1BUFNSUmwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFKutD0r7wpU0MLRpMndmTd+GvyXtMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvcTYwUFN2dkNsVFF3dEdreWQyWk4zNGFfSmUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUAKgUFQwMF ACoGwAcDBQAqDwOBAwUAKg8DgzANBgkqhkiG9w0BAQsFAAOCAQEAZ4gYt6kpm81x r2g4MGLRwcsHFDiT3jXj+e1sn7kqmVa7ocP5U/hzwXX8LXFl8TM1+7H6G/8K+lf9 Yq/grauYXZC/JgUUQGvg6iGUkF1uVGVkcv64n71OTLzvqXzgkhg9OLUBcGFKxTPr QMx0nLxn6EmsRLRZ6h7nzbhTv7RWHF9DK3evYK+AfXc5hCBTEIJ+V+kBMGvdwJF4 FqEHHjnQF87pCR5uazSENwNkY6cjrZXdFY56Phfiwmrsg1y/N1FwQ9jEHsHBDk/Q 01+i6UP5qdcRdQJ23FRapUm7dtyg1xEUxYd42dXXvV24rmbzdGTxbxfUL4/SnGv4 ar8tQhBvkg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:39:29 2026 by rpki-client