This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/60zN1G8HfzYuFPygt3H-4b18ytU.roa File: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (raw, json) Hash identifier: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w= Subject key identifier: EB:4C:CD:D4:6F:07:7F:36:2E:14:FC:A0:B7:71:FE:E1:BD:7C:CA:D5 Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019B79108680658A8A6B190681F5DE10A8C4 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/60zN1G8HfzYuFPygt3H-4b18ytU.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60911 IP address blocks: 5.172.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:86:80:65:8a:8a:6b:19:06:81:f5:de:10:a8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb4ccdd46f077f362e14fca0b771fee1bd7ccad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:3f:37:0a:4f:a7:75:bd:b4:69:be:b5:e2: 1a:41:3d:3b:72:e9:32:c7:6a:27:7b:e3:c6:2c:51: e6:1c:f8:28:47:57:78:4c:a9:57:b8:1b:62:31:e1: 1f:7a:70:a3:5e:6b:ef:76:9b:18:f7:14:7c:5c:43: 4a:b5:cc:ad:ae:f2:eb:bf:02:7c:91:e3:17:1c:a1: 6a:c5:83:f4:97:78:dd:f8:3c:e9:13:0e:77:21:70: 6f:b3:fe:62:f1:81:a4:38:49:28:ff:32:05:dc:d9: 6e:be:0d:4b:4c:e5:bc:04:ad:27:7d:54:26:b1:5a: 42:ff:ca:ed:f0:48:8e:76:da:8e:bb:4c:d8:e4:ef: 95:96:12:6c:b7:03:6f:87:36:7d:a4:15:51:56:74: 8f:f2:25:f4:f0:5a:1f:0a:aa:e4:a8:78:1c:c2:7d: 41:1e:4f:b2:dd:c8:97:a8:58:e6:38:ed:5c:c9:37: 32:21:c1:2f:40:66:6e:aa:9a:f3:8e:52:3b:5d:4e: d2:e6:b2:09:6b:ee:4a:4d:b0:8f:b8:05:69:d8:29: 52:4c:ec:a1:24:79:7e:a5:05:c2:80:aa:d3:e0:6f: 33:04:36:4e:66:28:94:7b:7a:ad:65:a3:27:ec:b3: fb:96:fd:38:7d:af:dc:2f:fe:c8:dc:99:d6:08:e2: 0a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4C:CD:D4:6F:07:7F:36:2E:14:FC:A0:B7:71:FE:E1:BD:7C:CA:D5 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/60zN1G8HfzYuFPygt3H-4b18ytU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.207.0/24 Signature Algorithm: sha256WithRSAEncryption 56:6e:f1:ea:29:c7:62:5f:05:d9:b1:64:b9:45:a1:38:54:7d: 14:70:6f:9a:ff:34:b0:fc:ac:82:71:46:66:bd:c8:d5:83:3e: 8a:b0:1d:99:37:93:8c:d5:bf:b6:56:1b:7b:df:a4:99:19:75: 8a:f3:6d:72:08:8c:23:4c:0f:c4:f0:37:cd:b4:82:04:19:66: 1f:d3:c7:bb:10:43:10:44:c3:d6:5d:e7:9f:d2:91:9f:40:1e: 56:6e:dd:19:bd:6d:5b:62:ee:fe:d4:9a:04:19:fb:98:08:c8: cb:da:8a:b4:e4:e6:06:f2:9d:24:a2:5f:8e:8e:17:11:e3:de: 37:11:92:81:a1:69:b7:75:80:58:33:06:66:e7:f3:32:3e:59: 1a:ab:ca:61:47:d2:85:1b:80:be:89:1e:c2:63:06:24:19:b0: 14:13:b1:61:b3:12:d4:2a:29:6e:58:b3:c0:b5:cd:93:2a:42: ca:4c:7e:58:47:7f:a0:2c:c1:fd:7c:00:dd:f1:6c:99:38:30: 34:29:9d:f7:a9:5f:82:05:28:1a:d5:46:b5:67:d0:81:14:7b: f5:90:52:ae:72:2b:de:0c:5f:fc:3c:06:9b:51:c7:0a:7c:60: 43:60:00:93:8a:f7:4a:f7:c1:83:ba:db:4f:59:4e:0e:81:6b: 0a:e2:74:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIaAZYqKaxkGgfXeEKjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjRjY2RkNDZmMDc3ZjM2MmUxNGZjYTBiNzcxZmVlMWJkN2NjYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SI/NwpPp3W9tGm+teIaQT07cuky x2one+PGLFHmHPgoR1d4TKlXuBtiMeEfenCjXmvvdpsY9xR8XENKtcytrvLrvwJ8 keMXHKFqxYP0l3jd+DzpEw53IXBvs/5i8YGkOEko/zIF3Nluvg1LTOW8BK0nfVQm sVpC/8rt8EiOdtqOu0zY5O+VlhJstwNvhzZ9pBVRVnSP8iX08FofCqrkqHgcwn1B Hk+y3ciXqFjmOO1cyTcyIcEvQGZuqprzjlI7XU7S5rIJa+5KTbCPuAVp2ClSTOyh JHl+pQXCgKrT4G8zBDZOZiiUe3qtZaMn7LP7lv04fa/cL/7I3JnWCOIK4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtMzdRvB382LhT8oLdx/uG9fMrVMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvNjB6TjFHOEhmell1RlB5Z3QzSC00YjE4eXRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABazPMA0G CSqGSIb3DQEBCwUAA4IBAQBWbvHqKcdiXwXZsWS5RaE4VH0UcG+a/zSw/KyCcUZm vcjVgz6KsB2ZN5OM1b+2Vht736SZGXWK821yCIwjTA/E8DfNtIIEGWYf08e7EEMQ RMPWXeef0pGfQB5Wbt0ZvW1bYu7+1JoEGfuYCMjL2oq05OYG8p0kol+OjhcR4943 EZKBoWm3dYBYMwZm5/MyPlkaq8phR9KFG4C+iR7CYwYkGbAUE7FhsxLUKiluWLPA tc2TKkLKTH5YR3+gLMH9fADd8WyZODA0KZ33qV+CBSga1Ua1Z9CBFHv1kFKucive DF/8PAabUccKfGBDYACTivdK98GDuttPWU4OgWsK4nRZ -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:08 2026 by rpki-client