This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/60-pD0D-EZGIhvYejrMgqJbhMRk.roa File: 60-pD0D-EZGIhvYejrMgqJbhMRk.roa (raw, json) Hash identifier: P4E3AmmqvJ10ma5HIxv+YZbD3kk258b1/Ycgozwi83g= Subject key identifier: EB:4F:A9:0F:40:FE:11:91:88:86:F6:1E:8E:B3:20:A8:96:E1:31:19 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B9438A69F9B78C3F9BA4A46F79DCED2A4 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/60-pD0D-EZGIhvYejrMgqJbhMRk.roa Signing time: Tue 06 Jan 2026 16:51:39 +0000 ROA not before: Tue 06 Jan 2026 16:51:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207416 IP address blocks: 64.188.115.0/24 maxlen: 24 77.239.127.0/24 maxlen: 24 144.31.96.0/22 maxlen: 24 144.31.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:38:a6:9f:9b:78:c3:f9:ba:4a:46:f7:9d:ce:d2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 6 16:51:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb4fa90f40fe11918886f61e8eb320a896e13119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:f0:df:74:e0:b9:9e:d3:19:ed:64:a5:d0: d0:8d:47:69:e1:84:f9:08:81:2b:8d:cc:f7:08:65: ba:b9:51:4a:f0:65:f6:6c:98:7e:35:be:5c:25:2a: 82:7a:f5:72:07:99:16:91:5d:c9:f4:98:a0:47:6f: 23:db:b8:50:f9:af:b0:6f:be:aa:e3:2c:49:9f:07: ef:f3:76:ec:c3:a5:34:e2:7a:12:ee:5b:3d:1b:da: 2d:24:24:16:81:8d:68:b0:9b:f5:ff:bc:05:5d:e3: 3f:1c:35:f0:53:10:15:c2:fe:56:07:e5:f9:75:82: f4:2d:65:f8:91:bf:d3:4f:66:e1:ac:14:92:9a:52: 8a:f0:81:33:0f:ab:7a:47:bf:15:cc:7a:b1:29:92: 8d:96:39:f8:74:97:ec:0f:74:c7:c2:fc:b2:01:1d: b2:b6:5c:92:9b:c3:97:6c:38:ad:20:81:ba:90:af: 2e:fe:1e:43:21:40:81:23:5b:72:3a:4b:b7:4a:7d: e2:83:01:ad:87:20:89:73:7c:57:66:7f:67:bf:7d: d8:56:05:b5:5e:88:ca:db:80:26:33:eb:6c:46:fe: 29:a5:da:5d:90:b0:ec:0d:0a:47:e5:b6:89:4d:1c: 02:d4:0b:b7:92:9b:01:aa:ae:a2:cc:46:62:07:97: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4F:A9:0F:40:FE:11:91:88:86:F6:1E:8E:B3:20:A8:96:E1:31:19 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/60-pD0D-EZGIhvYejrMgqJbhMRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.115.0/24 77.239.127.0/24 144.31.96.0/22 144.31.250.0/23 Signature Algorithm: sha256WithRSAEncryption 00:5a:c4:cc:2c:a7:66:be:b8:92:cd:9e:d7:e2:f9:11:bb:af: 80:f7:30:1d:fb:70:66:57:e6:0a:a7:0c:d0:30:4e:35:d0:c5: d6:0a:e4:b0:42:4b:38:92:30:82:e8:7b:f6:21:8d:13:59:83: 07:57:d0:38:dd:11:c5:91:d1:90:ad:61:a3:28:1f:86:fc:7e: ff:42:c9:f1:1a:ef:09:ad:1a:4d:c5:d7:c5:bc:e4:96:0d:2c: 29:3b:16:3e:fd:20:4b:a5:ed:f2:bc:5f:08:cf:3d:20:35:34: 0f:19:d7:25:a1:a9:6e:93:48:92:f0:85:ea:64:04:8a:d5:b8: 90:45:76:b6:79:f5:61:ef:6b:f5:fa:16:8e:61:c4:84:d3:47: 00:ad:24:35:59:99:cc:18:f3:ba:6f:ab:1c:7f:f4:fe:8e:a7: fe:76:c1:a2:26:f1:8b:b9:7e:4d:72:68:db:2c:6e:01:1e:78: dd:3e:2a:e2:fe:93:5d:01:e8:f0:19:ec:82:23:0c:cc:44:1e: 92:ee:72:41:78:f5:a0:07:3f:95:20:4d:95:f3:e5:82:be:0b: 07:10:21:03:71:3e:c3:0e:8a:26:1a:07:b0:31:42:95:6a:28: 22:e2:c4:c8:ff:f7:92:ad:65:55:a5:02:39:65:8a:82:47:7d: fa:69:ea:db -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuUOKafm3jD+bpKRvedztKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTA2MTY1MTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjRmYTkwZjQwZmUxMTkxODg4NmY2MWU4ZWIzMjBhODk2ZTEzMTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF3w33TguZ7TGe1kpdDQjUdp4YT5 CIErjcz3CGW6uVFK8GX2bJh+Nb5cJSqCevVyB5kWkV3J9JigR28j27hQ+a+wb76q 4yxJnwfv83bsw6U04noS7ls9G9otJCQWgY1osJv1/7wFXeM/HDXwUxAVwv5WB+X5 dYL0LWX4kb/TT2bhrBSSmlKK8IEzD6t6R78VzHqxKZKNljn4dJfsD3THwvyyAR2y tlySm8OXbDitIIG6kK8u/h5DIUCBI1tyOku3Sn3igwGthyCJc3xXZn9nv33YVgW1 XojK24AmM+tsRv4ppdpdkLDsDQpH5baJTRwC1Au3kpsBqq6izEZiB5ePaQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOtPqQ9A/hGRiIb2Ho6zIKiW4TEZMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvNjAtcEQwRC1FWkdJaHZZZWpyTWdxSmJoTVJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQLxzAwQA Te9/AwQCkB9gAwQBkB/6MA0GCSqGSIb3DQEBCwUAA4IBAQAAWsTMLKdmvriSzZ7X 4vkRu6+A9zAd+3BmV+YKpwzQME410MXWCuSwQks4kjCC6Hv2IY0TWYMHV9A43RHF kdGQrWGjKB+G/H7/QsnxGu8JrRpNxdfFvOSWDSwpOxY+/SBLpe3yvF8Izz0gNTQP Gdcloaluk0iS8IXqZASK1biQRXa2efVh72v1+haOYcSE00cArSQ1WZnMGPO6b6sc f/T+jqf+dsGiJvGLuX5NcmjbLG4BHnjdPiri/pNdAejwGeyCIwzMRB6S7nJBePWg Bz+VIE2V8+WCvgsHECEDcT7DDoomGgewMUKVaigi4sTI//eSrWVVpQI5ZYqCR336 aerb -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:05 2026 by rpki-client