This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/60O0SRzjGsORJ1LBFnHv2U1PHTk.roa File: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (raw, json) Hash identifier: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU= Subject key identifier: EB:43:B4:49:1C:E3:1A:C3:91:27:52:C1:16:71:EF:D9:4D:4F:1D:39 Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Certificate serial: 019B7E386F3BDA83C864BA559CA812B00269 Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/60O0SRzjGsORJ1LBFnHv2U1PHTk.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206160 IP address blocks: 185.141.253.0/24 maxlen: 24 2a07:2781:a4a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6f:3b:da:83:c8:64:ba:55:9c:a8:12:b0:02:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360 Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb43b4491ce31ac3912752c11671efd94d4f1d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:cf:e4:de:78:20:d7:9a:66:cd:61:f2:c1: 2c:85:ec:75:d8:23:b8:11:fd:5f:b7:5d:fd:ce:8e: e0:98:5d:c5:98:71:3b:1a:4f:9d:55:fc:77:79:7c: fc:3f:2c:d3:75:8b:a4:d1:a0:64:7b:0b:85:66:09: 8d:f3:6e:a9:22:97:6d:c7:ed:1d:7b:db:9c:2b:9e: f5:60:dc:3b:56:99:88:b6:94:b7:69:bf:f2:82:cc: 62:40:34:96:95:0a:72:77:82:eb:0e:8e:98:82:10: 46:60:c0:9a:3f:0b:01:c5:6f:a8:01:0d:25:72:8a: 0e:5d:cb:40:d0:93:b9:86:8b:a2:08:6c:6e:f0:f3: 0b:08:38:ad:61:6a:5b:88:7f:66:fd:26:9f:04:6a: e2:76:2d:01:10:38:00:9f:3a:83:9c:fc:2c:90:2c: 77:39:14:3f:62:9d:fb:0e:69:32:f5:46:a0:b3:46: 13:d7:e5:3e:75:22:68:9d:ed:4d:e3:b2:dd:ad:51: 79:cd:5d:20:c5:0c:c8:1d:9b:31:63:a2:df:c8:89: 21:6b:f7:c7:13:4b:db:50:eb:18:b5:1a:86:f7:15: 1a:9c:57:fa:f9:fe:04:c3:44:15:b5:6f:c3:ce:19: 40:44:92:6a:25:be:53:79:94:a5:09:b6:80:e0:96: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:B4:49:1C:E3:1A:C3:91:27:52:C1:16:71:EF:D9:4D:4F:1D:39 X509v3 Authority Key Identifier: keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/60O0SRzjGsORJ1LBFnHv2U1PHTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.253.0/24 IPv6: 2a07:2781:a4a3::/48 Signature Algorithm: sha256WithRSAEncryption bb:38:8c:90:74:78:79:9e:e8:31:26:e9:f2:9a:3d:32:18:85: c1:9f:52:a5:af:b2:d8:c8:24:40:52:52:4c:08:16:70:32:10: fc:61:0c:08:a8:08:e1:30:86:2c:ae:de:9e:ed:e7:8b:2f:bc: 6c:b6:7e:27:9b:23:07:10:5d:45:08:64:e2:1e:c2:50:d7:7e: f3:d3:c9:d3:3b:ed:63:40:b0:25:7c:10:51:60:7c:94:30:9e: 68:b9:ee:8e:d6:75:ad:97:70:64:38:02:54:35:fd:13:02:5b: d7:f3:33:c8:ca:46:c5:a6:3a:e7:58:1f:b0:ef:85:7a:62:79: 5f:e6:89:62:28:c9:8d:16:fc:d9:fc:2a:8a:6e:e5:82:b3:30: cd:80:4d:51:6c:d6:99:4c:b8:dd:30:d8:e9:d9:eb:1e:35:ef: b4:fa:7a:b3:bb:10:93:c2:e1:42:6b:b2:b1:d4:32:de:27:e5: 20:ca:2c:a9:2e:1b:0a:b0:e0:f7:da:f3:cf:95:56:2e:b3:a1: 14:d7:b6:9a:f9:0c:1b:b1:4e:a4:a5:5d:47:bd:c8:ed:34:f9: 54:f5:3e:3c:5c:5e:8c:c7:88:e2:d6:c3:d2:f9:e0:bc:f5:01: 83:a1:31:9d:9d:ad:6f:4c:da:ba:ca:7b:6c:88:20:7c:88:cb: 7d:37:25:87 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OG872oPIZLpVnKgSsAJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5 NDkzNjAwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjQzYjQ0OTFjZTMxYWMzOTEyNzUyYzExNjcxZWZkOTRkNGYxZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ7P5N54INeaZs1h8sEshex12CO4 Ef1ft139zo7gmF3FmHE7Gk+dVfx3eXz8PyzTdYuk0aBkewuFZgmN826pIpdtx+0d e9ucK571YNw7VpmItpS3ab/ygsxiQDSWlQpyd4LrDo6YghBGYMCaPwsBxW+oAQ0l cooOXctA0JO5houiCGxu8PMLCDitYWpbiH9m/SafBGridi0BEDgAnzqDnPwskCx3 ORQ/Yp37Dmky9Uags0YT1+U+dSJone1N47LdrVF5zV0gxQzIHZsxY6LfyIkha/fH E0vbUOsYtRqG9xUanFf6+f4Ew0QVtW/DzhlARJJqJb5TeZSlCbaA4JaGKQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOtDtEkc4xrDkSdSwRZx79lNTx05MB8GA1UdIwQY MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt NjQxZGQ0Mjg4YzQwLzEvNjBPMFNSempHc09SSjFMQkZuSHYyVTFQSFRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuY39MA8E AgACMAkDBwAqByeBpKMwDQYJKoZIhvcNAQELBQADggEBALs4jJB0eHme6DEm6fKa PTIYhcGfUqWvstjIJEBSUkwIFnAyEPxhDAioCOEwhiyu3p7t54svvGy2fiebIwcQ XUUIZOIewlDXfvPTydM77WNAsCV8EFFgfJQwnmi57o7Wda2XcGQ4AlQ1/RMCW9fz M8jKRsWmOudYH7DvhXpieV/miWIoyY0W/Nn8Kopu5YKzMM2ATVFs1plMuN0w2OnZ 6x4177T6erO7EJPC4UJrsrHUMt4n5SDKLKkuGwqw4Pfa88+VVi6zoRTXtpr5DBux TqSlXUe9yO00+VT1PjxcXozHiOLWw9L54Lz1AYOhMZ2drW9M2rrKe2yIIHyIy303 JYc= -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:59 2026 by rpki-client