This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa File: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (raw, json) Hash identifier: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU= Subject key identifier: 84:8D:18:04:54:8A:1F:C3:A5:B7:C9:46:87:B9:11:0A:8D:97:E8:CD Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347 Certificate serial: 019B7CEE2D1AA0960D11D9CCDE88E074E44D Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201782 IP address blocks: 185.63.180.0/22 maxlen: 22 2a03:da0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2d:1a:a0:96:0d:11:d9:cc:de:88:e0:74:e4:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=848d1804548a1fc3a5b7c94687b9110a8d97e8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cb:d4:b2:a0:cc:c1:09:0b:9b:60:a9:3d:7a: 54:e8:61:8a:ba:2f:52:2b:29:a7:28:00:27:ff:26: 88:19:62:aa:3d:a6:4a:0b:d9:e9:15:f8:31:a8:39: c3:76:47:d2:5b:ae:60:b7:c1:67:de:4f:7e:0b:54: 91:fb:61:09:e9:65:29:e0:55:cb:cd:94:06:f7:93: 8c:c4:fc:1c:3a:21:1a:d3:8b:d3:78:73:26:bd:54: 24:fd:05:d2:ae:f7:20:20:38:61:69:4a:97:1f:40: 75:f8:79:6d:ee:c8:d5:7c:ce:67:62:e1:fe:d1:da: da:9c:e5:3d:c0:0c:fa:4d:d5:24:c1:b9:04:80:f2: d6:3c:43:3a:57:a7:52:3a:1e:2a:f0:6c:26:7a:7a: ae:06:f3:b6:c7:12:21:fb:61:6a:c1:7d:3f:33:54: 95:52:71:f5:fc:54:25:7c:f1:9d:2a:a0:25:ab:a3: 05:43:80:fe:23:ef:c3:fb:60:dd:66:2d:0c:a1:64: f7:81:5b:36:fb:25:1a:36:b3:48:1f:f5:4e:aa:2e: 86:0b:9a:65:2f:ed:d4:1e:69:6d:87:16:94:cd:b0: da:00:90:5a:03:96:e4:84:57:84:08:87:90:e4:6d: f5:e8:eb:a2:2d:9c:f8:ba:17:81:2a:2f:15:6e:fb: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8D:18:04:54:8A:1F:C3:A5:B7:C9:46:87:B9:11:0A:8D:97:E8:CD X509v3 Authority Key Identifier: keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.180.0/22 IPv6: 2a03:da0::/32 Signature Algorithm: sha256WithRSAEncryption a0:63:6f:91:07:7d:db:69:86:0a:b7:1d:9f:01:1a:a5:0b:a2: 02:d1:2e:f4:88:aa:66:88:c8:f0:64:6f:ea:14:8c:52:4f:12: 69:5a:b7:5a:f6:3b:fb:f9:d2:f6:21:55:09:ae:23:87:fd:8f: 6c:f4:33:f1:a6:d1:bb:d0:e1:58:fd:25:31:f3:21:dc:3e:ec: b7:e1:39:08:2a:ff:0f:75:c9:2a:38:68:69:44:d5:9a:25:0e: 92:f0:73:37:b9:e2:2c:84:99:fc:22:8a:39:92:87:db:5e:54: da:e8:48:c3:1b:45:31:db:20:ec:cd:57:4f:dc:41:8c:e5:57: cb:a5:a6:49:8d:fc:8e:9a:09:78:12:3c:2d:e7:17:cf:9f:0e: e9:5a:a9:63:41:df:55:5a:fb:22:79:95:7a:3f:a6:0b:57:27: 76:cb:57:af:9b:8e:b9:d5:3a:ca:16:07:93:49:f5:80:47:0a: c6:ce:05:d0:72:50:64:4f:04:7c:f9:35:cd:6f:9e:b9:c0:e4: 29:2f:c1:0e:bc:c6:a8:eb:04:53:3f:9c:8d:60:13:9b:04:9b: 9e:f0:81:a1:d0:0d:c8:3e:9f:43:42:22:21:a4:12:89:16:2f: ac:80:5f:95:2b:63:d3:b8:a3:30:2b:c4:54:01:ac:9d:72:20: 98:e6:e3:f7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87i0aoJYNEdnM3ojgdORNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZTcwZWY2ZmViODEzZWQ5ZGJiOTY3ZDA1MTNjZjIwNDNk M2EzNDcwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDhkMTgwNDU0OGExZmMzYTViN2M5NDY4N2I5MTEwYThkOTdlOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MvUsqDMwQkLm2CpPXpU6GGKui9S KymnKAAn/yaIGWKqPaZKC9npFfgxqDnDdkfSW65gt8Fn3k9+C1SR+2EJ6WUp4FXL zZQG95OMxPwcOiEa04vTeHMmvVQk/QXSrvcgIDhhaUqXH0B1+Hlt7sjVfM5nYuH+ 0dranOU9wAz6TdUkwbkEgPLWPEM6V6dSOh4q8GwmenquBvO2xxIh+2FqwX0/M1SV UnH1/FQlfPGdKqAlq6MFQ4D+I+/D+2DdZi0MoWT3gVs2+yUaNrNIH/VOqi6GC5pl L+3UHmlthxaUzbDaAJBaA5bkhFeECIeQ5G316OuiLZz4uheBKi8Vbvst4QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFISNGARUih/DpbfJRoe5EQqNl+jNMB8GA1UdIwQY MBaAFNrnDvb+uBPtnbuWfQUTzyBD06NHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDIt ZWFiNDBiZTQ4Y2MxLzEvaEkwWUJGU0tIOE9sdDhsR2g3a1JDbzJYNk0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDItZWFiNDBiZTQ4Y2Mx LzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuT+0MA0E AgACMAcDBQAqAw2gMA0GCSqGSIb3DQEBCwUAA4IBAQCgY2+RB33baYYKtx2fARql C6IC0S70iKpmiMjwZG/qFIxSTxJpWrda9jv7+dL2IVUJriOH/Y9s9DPxptG70OFY /SUx8yHcPuy34TkIKv8PdckqOGhpRNWaJQ6S8HM3ueIshJn8Ioo5kofbXlTa6EjD G0Ux2yDszVdP3EGM5VfLpaZJjfyOmgl4Ejwt5xfPnw7pWqljQd9VWvsieZV6P6YL Vyd2y1evm4651TrKFgeTSfWARwrGzgXQclBkTwR8+TXNb565wOQpL8EOvMao6wRT P5yNYBObBJue8IGh0A3IPp9DQiIhpBKJFi+sgF+VK2PTuKMwK8RUAaydciCY5uP3 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:31 2026 by rpki-client