This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/63y8SGT1xErvBSh2Z_hJttu62lM.roa File: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (raw, json) Hash identifier: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30= Subject key identifier: EB:7C:BC:48:64:F5:C4:4A:EF:05:28:76:67:F8:49:B6:DB:BA:DA:53 Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81 Certificate serial: 019B7EA72AE5B27CDAFCB949FE74CCB40CD2 Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/63y8SGT1xErvBSh2Z_hJttu62lM.roa Signing time: Fri 02 Jan 2026 12:20:43 +0000 ROA not before: Fri 02 Jan 2026 12:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34702 IP address blocks: 46.22.208.0/20 maxlen: 20 80.79.112.0/20 maxlen: 20 185.246.184.0/22 maxlen: 22 2a01:97a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2a:e5:b2:7c:da:fc:b9:49:fe:74:cc:b4:0c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81 Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb7cbc4864f5c44aef05287667f849b6dbbada53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:35:d2:10:15:85:99:4d:5f:70:6a:d4:22: b5:41:6a:0d:5e:a3:92:5a:74:6a:d8:ed:3d:5d:28: 40:9b:85:39:b4:76:80:0f:37:1d:ab:99:a6:ba:6b: 2b:eb:6c:54:48:80:16:ea:c0:16:ea:48:63:97:fd: fd:6d:f6:0e:3e:66:3d:a3:09:f2:50:15:6e:25:5d: 52:15:a6:f9:e7:ef:12:08:02:1f:11:24:90:26:fc: 30:e1:eb:b1:97:54:21:4b:ce:f8:a0:b6:35:ec:97: f7:ee:63:c3:8a:fb:c8:06:2a:ca:c6:c3:35:0d:1b: c5:84:43:7a:93:78:85:6b:1e:d4:67:b7:8a:fb:95: d2:2a:86:bf:24:fc:07:41:91:ad:ad:76:54:1d:41: 95:f7:93:94:26:db:98:85:25:b6:3f:86:51:85:79: 48:0e:1c:39:b4:ed:ce:b5:82:d4:35:f1:61:14:ab: bc:13:ba:08:7d:e6:3a:fd:27:5a:29:7f:e0:66:a1: 41:54:b9:0e:6d:8e:08:26:b3:d1:68:81:7b:17:8d: ac:2a:0e:ef:3b:fd:e3:f1:06:0c:d0:cd:53:69:5c: 40:75:75:75:49:5a:4d:ec:3d:be:b8:a5:53:eb:2e: 68:4a:55:5f:f4:be:c7:e6:8f:cf:c5:c8:d3:53:56: cc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7C:BC:48:64:F5:C4:4A:EF:05:28:76:67:F8:49:B6:DB:BA:DA:53 X509v3 Authority Key Identifier: keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/63y8SGT1xErvBSh2Z_hJttu62lM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.208.0/20 80.79.112.0/20 185.246.184.0/22 IPv6: 2a01:97a0::/32 Signature Algorithm: sha256WithRSAEncryption 8c:48:26:32:05:76:72:b3:58:5b:54:24:a9:75:fe:64:54:1b: 98:95:46:a6:6c:35:85:df:40:0a:cc:36:ae:17:0f:47:7f:ac: c3:1e:55:e7:0f:b3:97:e9:af:f2:df:c6:18:b0:89:ce:c7:8e: 90:fc:63:0e:dc:fe:3f:63:d3:d3:c6:0e:50:b2:aa:a2:12:96: 5b:2e:51:8d:0b:92:37:19:14:fa:b1:30:33:0e:fb:ec:6b:a4: 98:55:c4:9d:6e:e9:7a:d2:c4:f4:94:b6:62:7c:6b:1d:e7:ca: 3c:a7:c8:18:1f:68:96:b9:25:96:34:16:1c:c6:80:14:89:8f: 6c:78:35:04:89:25:be:70:9a:ed:1b:d4:33:9a:db:f0:ba:67: 44:69:93:d4:d5:95:4f:16:39:cb:0c:fc:70:af:86:4f:ca:2c: 89:30:f4:7f:d8:8d:93:60:ae:d9:6f:f4:61:ca:c3:88:8b:a5: f6:e6:59:02:9d:d2:01:5f:d1:af:dc:00:41:d9:62:da:4c:4f: a3:31:17:97:a4:9c:70:26:f3:36:6f:ad:68:ab:4c:1c:48:bc: fd:34:7b:ff:58:f4:51:52:de:63:c0:44:00:6d:ca:b6:ce:bb: 33:79:d8:b7:35:69:a3:08:da:e8:42:2f:a1:ac:29:13:f0:4f: 4b:0f:4f:bd -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+pyrlsnza/LlJ/nTMtAzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzcwY2M1ZDI2MGYzZTJhZWZmNWRkOGY4ZjRhNDE1YTIz NDVhODEwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjdjYmM0ODY0ZjVjNDRhZWYwNTI4NzY2N2Y4NDliNmRiYmFkYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSg10hAVhZlNX3Bq1CK1QWoNXqOS WnRq2O09XShAm4U5tHaADzcdq5mmumsr62xUSIAW6sAW6khjl/39bfYOPmY9owny UBVuJV1SFab55+8SCAIfESSQJvww4euxl1QhS874oLY17Jf37mPDivvIBirKxsM1 DRvFhEN6k3iFax7UZ7eK+5XSKoa/JPwHQZGtrXZUHUGV95OUJtuYhSW2P4ZRhXlI Dhw5tO3OtYLUNfFhFKu8E7oIfeY6/SdaKX/gZqFBVLkObY4IJrPRaIF7F42sKg7v O/3j8QYM0M1TaVxAdXV1SVpN7D2+uKVT6y5oSlVf9L7H5o/PxcjTU1bMlQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOt8vEhk9cRK7wUodmf4SbbbutpTMB8GA1UdIwQY MBaAFIU3DMXSYPPirv9d2Pj0pBWiNFqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEt YWU2MGJlYTA2YTljLzEvNjN5OFNHVDF4RXJ2QlNoMlpfaEp0dHU2MmxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEtYWU2MGJlYTA2YTlj LzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQELhbQAwQE UE9wAwQCufa4MA0EAgACMAcDBQAqAZegMA0GCSqGSIb3DQEBCwUAA4IBAQCMSCYy BXZys1hbVCSpdf5kVBuYlUambDWF30AKzDauFw9Hf6zDHlXnD7OX6a/y38YYsInO x46Q/GMO3P4/Y9PTxg5QsqqiEpZbLlGNC5I3GRT6sTAzDvvsa6SYVcSdbul60sT0 lLZifGsd58o8p8gYH2iWuSWWNBYcxoAUiY9seDUEiSW+cJrtG9QzmtvwumdEaZPU 1ZVPFjnLDPxwr4ZPyiyJMPR/2I2TYK7Zb/RhysOIi6X25lkCndIBX9Gv3ABB2WLa TE+jMReXpJxwJvM2b61oq0wcSLz9NHv/WPRRUt5jwEQAbcq2zrszedi3NWmjCNro Qi+hrCkT8E9LD0+9 -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:33 2026 by rpki-client