This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/iVkiAHYOg3HtM_uWUc76kLqrONs.roa File: iVkiAHYOg3HtM_uWUc76kLqrONs.roa (raw, json) Hash identifier: XlSThvg6yDDSVBDMohDGUs845WGTZEUqqZulw7z2Ytg= Subject key identifier: 89:59:22:00:76:0E:83:71:ED:33:FB:96:51:CE:FA:90:BA:AB:38:DB Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C12892C320FE469A966BEB9B8B3F1C7 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/iVkiAHYOg3HtM_uWUc76kLqrONs.roa Signing time: Fri 02 Jan 2026 00:19:08 +0000 ROA not before: Fri 02 Jan 2026 00:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207883 IP address blocks: 80.66.68.0/24 maxlen: 24 87.251.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:89:2c:32:0f:e4:69:a9:66:be:b9:b8:b3:f1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89592200760e8371ed33fb9651cefa90baab38db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:18:8c:b1:01:3d:dd:b6:30:ea:6b:78:76: f1:3d:ef:6c:38:df:49:8b:fc:1a:e3:28:df:67:b1: a7:9d:b0:9a:d7:76:d8:59:c8:80:eb:a0:f0:cd:46: 3f:10:5b:bf:d9:f9:15:b9:ff:a0:a5:f5:e0:64:6c: 80:3e:5a:0f:2b:4f:32:a3:f8:0c:d3:8b:1c:9b:84: 99:be:8b:5e:f7:ed:1e:d1:1e:7f:fc:e3:46:06:31: 4b:1d:1b:dc:16:cb:5f:be:6f:34:42:91:6d:41:6a: 33:30:70:e3:cd:f4:16:39:00:06:c3:b9:2f:7b:12: 98:74:e8:71:88:b7:ee:b6:0e:a1:09:3d:06:5d:b8: a8:e0:8a:40:c7:bf:a4:47:c4:c1:b2:c7:fd:15:ee: be:04:97:53:d1:68:14:b5:54:98:0e:41:a7:19:79: e2:b0:05:40:ec:6f:7c:f7:10:18:32:85:d7:b0:64: 5b:ae:2f:15:a4:75:26:8c:b3:eb:22:24:fa:85:2c: 3b:3d:c2:67:7d:92:a0:00:5f:71:86:b3:38:b3:3a: 33:17:33:c0:f0:91:b0:69:f3:be:b9:03:56:00:4b: 42:81:dc:2e:9f:f1:cf:52:87:89:78:32:e2:d2:41: 8d:2f:78:b7:cb:72:93:ae:e9:a5:fe:01:e5:aa:ff: 08:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:59:22:00:76:0E:83:71:ED:33:FB:96:51:CE:FA:90:BA:AB:38:DB X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/iVkiAHYOg3HtM_uWUc76kLqrONs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.68.0/24 87.251.70.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:51:96:34:1c:8e:6f:d3:9b:cd:7f:8c:55:6a:ba:23:c0:aa: 86:03:90:f5:28:52:b4:99:85:4c:45:cf:60:f6:f4:3d:e1:00: 8e:48:6e:04:ee:da:63:c1:95:00:65:9d:c8:51:ed:dc:8e:e0: af:ed:d2:fd:7e:9d:8e:ea:9b:29:c5:b5:60:13:20:74:b8:46: bc:70:5e:ca:5a:03:81:04:06:72:25:92:dd:8d:c1:97:22:df: 77:09:75:d1:2c:bd:b6:dc:e6:2a:0a:17:48:a0:8e:ae:e8:e5: 1b:de:e6:7f:13:cb:5e:12:f5:92:76:da:1a:ff:2b:64:6d:f6: 92:f5:6a:46:87:c0:0b:0d:b7:83:38:de:66:f7:f5:af:c8:d8: 56:0d:42:91:0e:cd:61:55:72:8c:28:53:c8:e4:22:0b:d6:79: 2f:ad:f6:14:96:5c:12:c4:4e:e6:cf:b7:33:68:8f:98:63:d5: 12:14:fb:41:ff:da:ec:00:f1:6d:02:54:08:d8:57:fb:e3:f9: ee:da:80:a0:e6:fb:89:1b:6e:cf:59:e8:ef:37:73:02:b0:d3: fb:a1:1f:50:24:9f:7a:3c:29:17:56:73:74:91:39:2b:40:f8: 72:74:7e:41:78:9e:4a:ec:35:49:ba:db:ea:81:0c:21:72:ff: 51:33:30:9d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EoksMg/kaalmvrm4s/HHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTU5MjIwMDc2MGU4MzcxZWQzM2ZiOTY1MWNlZmE5MGJhYWIzOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjMYjLEBPd22MOpreHbxPe9sON9J i/wa4yjfZ7GnnbCa13bYWciA66DwzUY/EFu/2fkVuf+gpfXgZGyAPloPK08yo/gM 04scm4SZvote9+0e0R5//ONGBjFLHRvcFstfvm80QpFtQWozMHDjzfQWOQAGw7kv exKYdOhxiLfutg6hCT0GXbio4IpAx7+kR8TBssf9Fe6+BJdT0WgUtVSYDkGnGXni sAVA7G989xAYMoXXsGRbri8VpHUmjLPrIiT6hSw7PcJnfZKgAF9xhrM4szozFzPA 8JGwafO+uQNWAEtCgdwun/HPUoeJeDLi0kGNL3i3y3KTruml/gHlqv8IWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIlZIgB2DoNx7TP7llHO+pC6qzjbMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvaVZraUFIWU9nM0h0TV91V1VjNzZrTHFyT05zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEJEAwQB V/tGMA0GCSqGSIb3DQEBCwUAA4IBAQB9UZY0HI5v05vNf4xVarojwKqGA5D1KFK0 mYVMRc9g9vQ94QCOSG4E7tpjwZUAZZ3IUe3cjuCv7dL9fp2O6pspxbVgEyB0uEa8 cF7KWgOBBAZyJZLdjcGXIt93CXXRLL223OYqChdIoI6u6OUb3uZ/E8teEvWSdtoa /ytkbfaS9WpGh8ALDbeDON5m9/WvyNhWDUKRDs1hVXKMKFPI5CIL1nkvrfYUllwS xE7mz7czaI+YY9USFPtB/9rsAPFtAlQI2Ff74/nu2oCg5vuJG27PWejvN3MCsNP7 oR9QJJ96PCkXVnN0kTkrQPhydH5BeJ5K7DVJutvqgQwhcv9RMzCd -----END CERTIFICATE-----Generated at Sun Jan 25 12:15:26 2026 by rpki-client