This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/60PmQRc6KqumCF_7Z7zTsYcdYaY.roa File: 60PmQRc6KqumCF_7Z7zTsYcdYaY.roa (raw, json) Hash identifier: y1QSPcuJ+pW6ofu1/70Fq1yGPon+kU5iDXnDLtw/Cpo= Subject key identifier: EB:43:E6:41:17:3A:2A:AB:A6:08:5F:FB:67:BC:D3:B1:87:1D:61:A6 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36B08990967D88009ED8752255C718 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/60PmQRc6KqumCF_7Z7zTsYcdYaY.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57107 IP address blocks: 194.190.128.0/24 maxlen: 29 194.190.129.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b0:89:90:96:7d:88:00:9e:d8:75:22:55:c7:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb43e641173a2aaba6085ffb67bcd3b1871d61a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:fe:96:bf:97:61:ea:17:40:c6:88:56:05: 51:69:c9:6d:ab:18:83:7d:98:25:58:dc:1a:0e:d1: 12:2f:33:a4:4f:78:a5:ab:31:6a:75:67:39:4b:72: dd:1a:a3:4e:d1:b9:27:16:b0:7e:08:bc:19:07:c2: bb:37:d4:dd:66:0c:e3:62:0f:9d:0b:2a:ce:44:d2: 9f:cc:fb:aa:9a:9c:35:21:73:0c:14:79:3c:e5:69: 52:3c:70:9d:14:ca:e2:bd:85:e5:0a:54:f5:c3:0b: 64:6a:b6:62:b3:da:20:04:76:e3:f2:95:3d:1b:8b: 27:64:ed:92:9c:70:2a:05:8b:13:98:78:51:ce:3f: 7b:ec:43:c5:43:9e:ef:74:cb:ed:f1:c7:ec:88:2b: 1b:23:c3:22:2a:c2:e4:6f:9e:4c:ad:bf:10:a3:1a: 60:32:10:a3:03:18:fd:c7:ac:7b:fe:ac:27:29:92: dd:10:f8:6d:c6:29:1d:d2:5e:f2:2c:09:b1:0a:55: e3:ad:d4:57:d4:77:2a:2b:cc:96:c9:39:fe:9b:4b: b1:26:45:3d:dd:7b:fe:ce:91:c8:cf:cb:c9:d0:b0: ad:ec:e5:fc:6c:34:14:6d:51:2f:e0:09:f3:7c:bf: 9f:2f:59:50:8e:9e:23:f1:cb:01:bc:af:6b:04:17: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:E6:41:17:3A:2A:AB:A6:08:5F:FB:67:BC:D3:B1:87:1D:61:A6 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/60PmQRc6KqumCF_7Z7zTsYcdYaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.190.128.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:70:4d:ac:bb:29:ce:42:fc:9c:44:f2:43:1a:ef:7b:ab:b6: e3:7a:a8:10:06:cb:44:e4:d5:fc:d9:7d:dd:02:fe:9c:a7:1d: 56:65:ed:f0:bc:e3:44:b1:94:22:b8:4e:16:ab:5f:53:4d:c0: bc:67:e4:45:3b:f8:e2:07:8b:a1:36:d4:72:9c:78:18:22:fd: 5b:fd:0f:10:31:eb:70:28:d0:1d:20:86:e6:ad:cf:2a:d2:fb: 79:b0:5f:d5:2f:50:ca:75:58:bb:23:16:0a:7d:19:36:e4:f0: 3c:d9:38:53:1b:0a:ac:5b:f8:40:7a:bd:48:fe:e0:9c:21:37: 68:28:f2:1e:6e:05:60:9a:48:37:ac:bd:fd:5b:6b:e9:79:19: 56:1b:4b:f3:4e:66:f2:07:c8:96:58:a6:52:a1:a8:8e:f7:48: 25:29:bf:82:ed:63:2c:b9:b9:89:1c:74:ca:7f:4b:f9:e2:b2: 2f:0a:17:8a:88:48:3b:d4:19:38:74:33:5f:62:18:4e:27:7b: 1e:31:03:f4:bf:6e:2d:02:f6:18:08:43:23:a1:4f:ac:35:e1: 2b:45:e7:18:a2:cb:3e:47:5f:fa:a3:b6:2b:e1:80:bb:22:c3: 6a:f0:2c:45:1e:9a:82:b4:83:d0:f1:b7:78:81:95:46:a7:8a: 88:a7:f3:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrCJkJZ9iACe2HUiVccYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjQzZTY0MTE3M2EyYWFiYTYwODVmZmI2N2JjZDNiMTg3MWQ2MWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbj+lr+XYeoXQMaIVgVRacltqxiD fZglWNwaDtESLzOkT3ilqzFqdWc5S3LdGqNO0bknFrB+CLwZB8K7N9TdZgzjYg+d CyrORNKfzPuqmpw1IXMMFHk85WlSPHCdFMrivYXlClT1wwtkarZis9ogBHbj8pU9 G4snZO2SnHAqBYsTmHhRzj977EPFQ57vdMvt8cfsiCsbI8MiKsLkb55Mrb8Qoxpg MhCjAxj9x6x7/qwnKZLdEPhtxikd0l7yLAmxClXjrdRX1HcqK8yWyTn+m0uxJkU9 3Xv+zpHIz8vJ0LCt7OX8bDQUbVEv4AnzfL+fL1lQjp4j8csBvK9rBBdd7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtD5kEXOiqrpghf+2e807GHHWGmMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvNjBQbVFSYzZLcXVtQ0ZfN1o3elRzWWNkWWFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwr6AMA0G CSqGSIb3DQEBCwUAA4IBAQA+cE2suynOQvycRPJDGu97q7bjeqgQBstE5NX82X3d Av6cpx1WZe3wvONEsZQiuE4Wq19TTcC8Z+RFO/jiB4uhNtRynHgYIv1b/Q8QMetw KNAdIIbmrc8q0vt5sF/VL1DKdVi7IxYKfRk25PA82ThTGwqsW/hAer1I/uCcITdo KPIebgVgmkg3rL39W2vpeRlWG0vzTmbyB8iWWKZSoaiO90glKb+C7WMsubmJHHTK f0v54rIvCheKiEg71Bk4dDNfYhhOJ3seMQP0v24tAvYYCEMjoU+sNeErRecYoss+ R1/6o7Yr4YC7IsNq8CxFHpqCtIPQ8bd4gZVGp4qIp/Nh -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:24 2026 by rpki-client