This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Dq_mBcLhUMS_pQCjtpCPKzsidpA.roa File: Dq_mBcLhUMS_pQCjtpCPKzsidpA.roa (raw, json) Hash identifier: H4mo7JnzKQ2sbr/W9JDRWhvtqzQ6ofkO+1tzkWssdNY= Subject key identifier: 0E:AF:E6:05:C2:E1:50:C4:BF:A5:00:A3:B6:90:8F:2B:3B:22:76:90 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 019B4F05F8A506EEF1379E28ACD02AFA95C1 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Dq_mBcLhUMS_pQCjtpCPKzsidpA.roa Signing time: Wed 24 Dec 2025 06:22:29 +0000 ROA not before: Wed 24 Dec 2025 06:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15611 IP address blocks: 62.60.136.0/24 maxlen: 24 62.60.137.0/24 maxlen: 24 62.60.139.0/24 maxlen: 24 62.60.140.0/24 maxlen: 24 62.60.142.0/24 maxlen: 24 62.60.145.0/24 maxlen: 24 62.60.168.0/22 maxlen: 24 213.176.3.0/24 maxlen: 24 213.176.4.0/24 maxlen: 24 213.176.5.0/24 maxlen: 24 213.176.96.0/24 maxlen: 24 213.176.122.0/24 maxlen: 24 213.176.123.0/24 maxlen: 24 213.176.124.0/24 maxlen: 24 213.176.125.0/24 maxlen: 24 2001:790::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:05:f8:a5:06:ee:f1:37:9e:28:ac:d0:2a:fa:95:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: Dec 24 06:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0eafe605c2e150c4bfa500a3b6908f2b3b227690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c4:5b:e4:d1:1d:1e:54:25:34:43:b7:2d:1e: cb:98:35:ab:fb:fc:a8:b5:9a:58:b7:1c:d7:04:ef: 60:c6:bd:43:ec:18:ac:1a:8b:52:f1:a4:a5:ff:4d: 2d:78:88:e1:a4:98:b2:67:98:aa:49:0d:96:b0:8f: 30:b6:4b:44:91:cf:de:3b:a3:e0:a6:2c:96:2f:9b: 76:c5:4d:75:61:59:14:c4:b7:09:ad:f0:25:69:f4: 1a:ef:aa:bb:5c:9e:28:03:95:12:e1:ca:cd:df:26: ac:6a:a3:81:3c:17:3f:99:51:81:5a:ee:e5:69:bd: f4:4a:18:02:ed:84:66:ff:12:67:20:6d:4d:91:1e: 78:43:ef:27:55:4d:c3:a8:86:90:a7:fe:82:5c:24: bd:90:46:7a:84:9c:61:fa:85:68:42:b1:ff:69:44: aa:ec:b2:d8:b4:9e:fb:e5:39:82:a4:b2:3c:91:3a: e5:a2:34:6b:d1:cb:c1:cf:f8:b5:27:3e:b7:22:36: 55:f7:54:08:4b:73:49:79:4f:63:8c:f4:88:e6:c9: 8f:72:cd:d2:fc:bb:ef:19:c8:b1:0f:1d:97:db:79: 77:86:82:8b:a7:ae:22:71:0b:5c:cc:a7:00:63:50: 1f:4a:b7:d5:11:0e:8b:ed:28:d0:27:2b:6b:9f:1d: a2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AF:E6:05:C2:E1:50:C4:BF:A5:00:A3:B6:90:8F:2B:3B:22:76:90 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Dq_mBcLhUMS_pQCjtpCPKzsidpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.60.136.0/23 62.60.139.0-62.60.140.255 62.60.142.0/24 62.60.145.0/24 62.60.168.0/22 213.176.3.0-213.176.5.255 213.176.96.0/24 213.176.122.0-213.176.125.255 IPv6: 2001:790::/32 Signature Algorithm: sha256WithRSAEncryption 1e:1d:2c:1a:ed:2c:e1:53:48:56:d6:45:31:7f:bd:d6:a3:f1: cc:04:78:7b:93:ac:31:53:0c:99:09:88:5c:61:93:f1:10:c0: c3:e3:cf:9d:3e:ff:59:70:1c:74:00:ce:7c:9a:1d:c4:e4:b0: 71:4e:98:2f:f2:f8:ad:1d:44:72:04:8b:a4:cf:d4:31:85:62: b9:da:ce:f7:42:44:91:94:95:8d:c5:f3:bc:04:da:fd:2e:72: 4d:d0:c8:d2:a4:c2:85:5f:8c:19:e7:5d:d5:61:59:fa:0f:bf: 44:7c:9b:90:cb:83:3b:97:47:39:52:ec:b8:33:d5:dc:88:6a: 78:34:ef:28:5b:f7:9b:d8:ef:cd:d4:ab:35:2b:4e:31:4d:4b: 0f:af:6a:64:c8:ff:ea:a3:f2:6e:06:aa:f1:25:cc:1e:d9:46: a9:04:22:54:6d:fa:43:a6:9e:8d:db:25:a6:5f:ef:9b:a8:a2: 34:df:61:b3:9a:0c:3f:89:28:7b:9e:89:cf:6d:58:21:db:91: 1c:d1:c8:4d:a2:77:6c:81:79:d1:92:51:e8:e0:de:45:3b:7d: a0:77:cb:0d:9c:53:04:f4:4b:e8:f6:f1:e5:d7:a0:14:db:8b: 27:37:93:4f:cf:5f:31:73:87:a5:b8:95:cd:26:c3:38:02:31: 31:51:5e:76 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZtPBfilBu7xN54orNAq+pXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjUxMjI0MDYyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWFmZTYwNWMyZTE1MGM0YmZhNTAwYTNiNjkwOGYyYjNiMjI3NjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MRb5NEdHlQlNEO3LR7LmDWr+/yo tZpYtxzXBO9gxr1D7BisGotS8aSl/00teIjhpJiyZ5iqSQ2WsI8wtktEkc/eO6Pg piyWL5t2xU11YVkUxLcJrfAlafQa76q7XJ4oA5US4crN3yasaqOBPBc/mVGBWu7l ab30ShgC7YRm/xJnIG1NkR54Q+8nVU3DqIaQp/6CXCS9kEZ6hJxh+oVoQrH/aUSq 7LLYtJ775TmCpLI8kTrlojRr0cvBz/i1Jz63IjZV91QIS3NJeU9jjPSI5smPcs3S /LvvGcixDx2X23l3hoKLp64icQtczKcAY1AfSrfVEQ6L7SjQJytrnx2iiwIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFA6v5gXC4VDEv6UAo7aQjys7InaQMB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvRHFfbUJjTGhVTVNfcFFDanRwQ1BLenNpZHBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQBPjyIMAwD BAA+PIsDBAA+PIwDBAA+PI4DBAA+PJEDBAI+PKgwDAMEANWwAwMEAdWwBAMEANWw YDAMAwQB1bB6AwQB1bB8MA0EAgACMAcDBQAgAQeQMA0GCSqGSIb3DQEBCwUAA4IB AQAeHSwa7SzhU0hW1kUxf73Wo/HMBHh7k6wxUwyZCYhcYZPxEMDD48+dPv9ZcBx0 AM58mh3E5LBxTpgv8vitHURyBIukz9QxhWK52s73QkSRlJWNxfO8BNr9LnJN0MjS pMKFX4wZ513VYVn6D79EfJuQy4M7l0c5Uuy4M9XciGp4NO8oW/eb2O/N1Ks1K04x TUsPr2pkyP/qo/JuBqrxJcwe2UapBCJUbfpDpp6N2yWmX++bqKI032Gzmgw/iSh7 nonPbVgh25Ec0chNondsgXnRklHo4N5FO32gd8sNnFME9Evo9vHl16AU24snN5NP z18xc4eluJXNJsM4AjExUV52 -----END CERTIFICATE-----Generated at Mon Dec 29 17:45:45 2025 by rpki-client