This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/HglIl2BwTY2fpCe5GwP5ysjNj7Y.roa File: HglIl2BwTY2fpCe5GwP5ysjNj7Y.roa (raw, json) Hash identifier: aHBtaErkZmaBHVd9P0AYZA/rEH87fSJk4r+cxPYL8Fk= Subject key identifier: 1E:09:48:97:60:70:4D:8D:9F:A4:27:B9:1B:03:F9:CA:C8:CD:8F:B6 Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Certificate serial: 019B7E38A33C1D2D96276AE42EED9C0715EB Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/HglIl2BwTY2fpCe5GwP5ysjNj7Y.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204732 IP address blocks: 185.63.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a3:3c:1d:2d:96:27:6a:e4:2e:ed:9c:07:15:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e09489760704d8d9fa427b91b03f9cac8cd8fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:93:85:ed:a2:c5:03:f7:91:bf:c6:fc:6e:99: 42:5e:3c:1b:36:39:2f:77:ec:fb:71:26:fd:d1:51: f8:49:2c:fa:e3:c9:43:af:7b:64:d8:8a:14:52:da: af:ca:37:35:fd:fe:39:7b:a7:0d:3d:3e:6e:72:65: 61:13:27:17:0a:34:69:ba:e6:e4:35:e5:b4:2b:26: cc:45:c6:90:22:0d:ec:fb:50:6d:b3:c5:f1:0c:a0: 4c:a2:e5:b2:66:85:4a:84:43:90:fc:94:a7:9a:fb: 7e:22:75:51:2c:11:f0:7d:7e:3f:f9:53:ca:e9:c0: 00:98:a5:1e:cc:71:64:35:46:65:1c:2f:90:7a:fb: ad:42:9d:f6:13:d3:62:48:5a:ba:2a:2f:08:7e:a6: a2:9d:18:52:9d:dd:b7:66:58:77:06:4c:72:c2:ea: ec:45:45:c5:d4:f2:37:9e:3a:f0:69:d2:39:b1:66: c5:f5:43:38:0f:ec:32:0a:61:79:52:61:42:4c:3e: fa:7c:58:51:27:1b:8d:86:79:95:93:1a:54:ea:58: 07:a8:dc:28:38:b2:b2:5e:e4:ca:54:52:5d:44:8e: d5:3a:5e:fa:db:f2:88:fb:84:ff:f6:1a:f8:82:85: 11:32:77:cb:ff:30:9e:5c:93:0b:15:3b:c3:8e:fe: 32:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:09:48:97:60:70:4D:8D:9F:A4:27:B9:1B:03:F9:CA:C8:CD:8F:B6 X509v3 Authority Key Identifier: keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/HglIl2BwTY2fpCe5GwP5ysjNj7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.72.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:04:16:83:39:40:2c:3e:a2:58:74:8a:84:f3:23:26:c5:bf: c2:62:4f:cb:9e:7d:45:c7:7a:bc:4d:3e:69:86:6c:dc:c7:c8: eb:97:91:49:1e:09:30:d9:5c:e0:3d:3c:b9:bc:06:90:86:86: e6:cc:10:a6:95:1a:51:c4:8d:7f:21:c6:ea:78:aa:20:bd:9e: 80:09:36:6c:f5:27:19:49:ae:31:fd:b6:bc:05:ff:06:2b:c0: b2:9f:d6:4b:b1:16:91:e1:ae:a5:14:be:f8:ae:32:5d:4a:36: 3d:74:db:9a:99:cc:3d:c5:e6:ba:02:6f:d5:ab:28:8b:55:10: 81:4c:26:52:7e:d5:3e:28:b1:2d:84:38:d6:72:99:c4:dd:ff: 6d:78:d1:32:7b:9f:15:f8:b6:06:36:63:d5:a3:c0:13:60:d7: dc:73:13:69:34:d0:da:99:e5:29:e2:25:77:df:fe:ce:94:4c: 21:75:bb:ed:61:2a:61:94:cf:6c:23:bc:6b:b6:7d:65:86:d3: b9:66:83:68:30:9d:26:f5:15:88:95:25:3e:e6:44:2f:8b:7f: 2b:b8:ae:40:14:fb:1c:e2:b9:cd:fa:c8:8f:94:19:80:2e:94: c7:1d:85:8a:b1:31:cf:81:38:8d:c7:d8:41:4b:8d:e3:eb:6e: 87:13:36:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OKM8HS2WJ2rkLu2cBxXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjM3Y2NmMzkzZjUyZTBiNTZmYjU4ZWUzNWFmNTQ0MTFk YWY2NDQwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTA5NDg5NzYwNzA0ZDhkOWZhNDI3YjkxYjAzZjljYWM4Y2Q4ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5OF7aLFA/eRv8b8bplCXjwbNjkv d+z7cSb90VH4SSz648lDr3tk2IoUUtqvyjc1/f45e6cNPT5ucmVhEycXCjRpuubk NeW0KybMRcaQIg3s+1Bts8XxDKBMouWyZoVKhEOQ/JSnmvt+InVRLBHwfX4/+VPK 6cAAmKUezHFkNUZlHC+QevutQp32E9NiSFq6Ki8IfqainRhSnd23Zlh3Bkxywurs RUXF1PI3njrwadI5sWbF9UM4D+wyCmF5UmFCTD76fFhRJxuNhnmVkxpU6lgHqNwo OLKyXuTKVFJdRI7VOl762/KI+4T/9hr4goURMnfL/zCeXJMLFTvDjv4yvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB4JSJdgcE2Nn6QnuRsD+crIzY+2MB8GA1UdIwQY MBaAFDtjfM85P1LgtW+1juNa9UQR2vZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYt MzA3MzNkMzcwZGYzLzEvSGdsSWwyQndUWTJmcENlNUd3UDV5c2pOajdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYtMzA3MzNkMzcwZGYz LzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT9IMA0G CSqGSIb3DQEBCwUAA4IBAQAsBBaDOUAsPqJYdIqE8yMmxb/CYk/Lnn1Fx3q8TT5p hmzcx8jrl5FJHgkw2VzgPTy5vAaQhobmzBCmlRpRxI1/IcbqeKogvZ6ACTZs9ScZ Sa4x/ba8Bf8GK8Cyn9ZLsRaR4a6lFL74rjJdSjY9dNuamcw9xea6Am/VqyiLVRCB TCZSftU+KLEthDjWcpnE3f9teNEye58V+LYGNmPVo8ATYNfccxNpNNDameUp4iV3 3/7OlEwhdbvtYSphlM9sI7xrtn1lhtO5ZoNoMJ0m9RWIlSU+5kQvi38ruK5AFPsc 4rnN+siPlBmALpTHHYWKsTHPgTiNx9hBS43j626HEzaP -----END CERTIFICATE-----Generated at Sat Jan 3 19:32:57 2026 by rpki-client