This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/REV3W8PYUxFJpyQqeipP60uquIM.roa File: REV3W8PYUxFJpyQqeipP60uquIM.roa (raw, json) Hash identifier: R/O4LVj/Nn1LD5Jt4pXt5pWCeAyMFWEfHCC2WmVvLdo= Subject key identifier: 44:45:77:5B:C3:D8:53:11:49:A7:24:2A:7A:2A:4F:EB:4B:AA:B8:83 Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019B7E3925982555E9E5AEB0BF48D453B963 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/REV3W8PYUxFJpyQqeipP60uquIM.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 72.63.88.0/22 maxlen: 22 72.63.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:25:98:25:55:e9:e5:ae:b0:bf:48:d4:53:b9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4445775bc3d8531149a7242a7a2a4feb4baab883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:0d:69:4d:2b:51:56:19:ec:45:ca:74:87: fe:44:5f:cb:af:b5:16:a9:8b:7f:e8:8e:a9:95:c1: 65:d1:d8:ac:22:05:7b:e1:d3:39:3f:98:d5:cd:0b: a4:16:e4:4f:c0:cc:42:87:34:c2:dc:83:0a:55:b3: 6e:0f:94:42:cb:98:0c:20:4d:97:66:fb:c0:ad:95: f2:73:ae:0a:57:d5:32:be:bc:5c:b4:26:ef:83:c7: a4:cd:b3:76:0c:06:db:1b:31:18:42:9d:f8:56:84: 6d:3a:2c:95:50:a8:38:d4:f0:09:f9:6a:3d:fb:2d: 08:48:6f:30:5c:a2:a0:cf:01:f5:d5:88:cf:3e:0a: 5f:d7:1f:4d:43:61:bc:fc:03:6d:6a:d7:f8:3d:b7: 6a:8a:b2:de:2b:74:8b:f5:20:34:70:15:a4:25:75: cd:81:7e:2c:20:bb:0c:1e:3a:51:fe:59:c1:61:b9: eb:5c:1d:c8:84:8e:aa:c4:a6:14:c4:f9:54:26:8e: 47:a9:23:3e:43:ea:05:fe:f6:3a:cd:a7:3e:12:8c: f6:71:48:0b:23:4b:6f:19:dc:d0:c9:17:c0:2c:4d: 72:ae:aa:0b:f9:04:2d:5b:2c:c6:f3:8f:62:d2:ec: 6f:3d:f8:09:1f:b0:5d:72:dc:11:77:5f:b1:2d:71: dc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:45:77:5B:C3:D8:53:11:49:A7:24:2A:7A:2A:4F:EB:4B:AA:B8:83 X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/REV3W8PYUxFJpyQqeipP60uquIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.63.88.0/22 72.63.248.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:ec:71:f2:b8:8b:77:c7:78:5b:e8:3b:11:f9:b7:51:08:2b: 4a:d6:61:2a:bf:2d:9c:9d:29:c6:97:1a:c3:5c:f9:a2:37:bb: 37:48:cf:db:b7:fe:2c:aa:89:c6:69:06:33:1a:d8:24:f7:84: a6:1c:d1:ae:24:18:89:76:fb:48:2c:9f:de:65:b8:c2:55:23: e6:f6:bc:66:34:ce:4c:b2:8b:e3:42:c5:34:6c:78:c5:14:8b: c5:6a:e0:5e:79:59:97:05:24:81:64:df:3b:75:51:38:03:df: 72:19:6b:be:30:b1:ea:c3:b7:53:52:b7:10:44:c8:0f:a9:b3: 04:93:13:74:08:dc:26:5b:be:d7:7e:b8:39:2c:6e:7d:29:5e: 5b:09:5a:8d:f8:11:3a:8f:fb:03:f1:c6:1c:34:4f:09:03:74: 33:66:4a:fb:2d:32:e1:e8:a2:6a:8b:df:62:61:91:3e:a6:18: de:23:6f:dd:ac:eb:7c:a6:07:35:28:e3:b7:a1:53:6b:db:7b: 64:0c:20:91:8d:18:d9:fb:c3:13:fa:39:67:10:d2:c2:37:d6: cb:dd:80:b3:01:50:c4:07:41:b5:37:cf:5f:90:3e:c0:7a:c1: 75:9e:ca:03:23:ef:1f:43:7d:dc:c4:aa:e1:ea:77:a6:a8:ee: 13:22:d1:da -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OSWYJVXp5a6wv0jUU7ljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDQ1Nzc1YmMzZDg1MzExNDlhNzI0MmE3YTJhNGZlYjRiYWFiODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx88NaU0rUVYZ7EXKdIf+RF/Lr7UW qYt/6I6plcFl0disIgV74dM5P5jVzQukFuRPwMxChzTC3IMKVbNuD5RCy5gMIE2X ZvvArZXyc64KV9UyvrxctCbvg8ekzbN2DAbbGzEYQp34VoRtOiyVUKg41PAJ+Wo9 +y0ISG8wXKKgzwH11YjPPgpf1x9NQ2G8/ANtatf4PbdqirLeK3SL9SA0cBWkJXXN gX4sILsMHjpR/lnBYbnrXB3IhI6qxKYUxPlUJo5HqSM+Q+oF/vY6zac+Eoz2cUgL I0tvGdzQyRfALE1yrqoL+QQtWyzG849i0uxvPfgJH7BdctwRd1+xLXHcAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFERFd1vD2FMRSackKnoqT+tLqriDMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvUkVWM1c4UFlVeEZKcHlRcWVpcFA2MHVxdUlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCSD9YAwQC SD/4MA0GCSqGSIb3DQEBCwUAA4IBAQAs7HHyuIt3x3hb6DsR+bdRCCtK1mEqvy2c nSnGlxrDXPmiN7s3SM/bt/4sqonGaQYzGtgk94SmHNGuJBiJdvtILJ/eZbjCVSPm 9rxmNM5MsovjQsU0bHjFFIvFauBeeVmXBSSBZN87dVE4A99yGWu+MLHqw7dTUrcQ RMgPqbMEkxN0CNwmW77Xfrg5LG59KV5bCVqN+BE6j/sD8cYcNE8JA3QzZkr7LTLh 6KJqi99iYZE+phjeI2/drOt8pgc1KOO3oVNr23tkDCCRjRjZ+8MT+jlnENLCN9bL 3YCzAVDEB0G1N89fkD7AesF1nsoDI+8fQ33cxKrh6nemqO4TItHa -----END CERTIFICATE-----Generated at Tue Jan 20 12:50:14 2026 by rpki-client