This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/iTmeATvkhdaQSx1hi5nnHidew6A.roa File: iTmeATvkhdaQSx1hi5nnHidew6A.roa (raw, json) Hash identifier: IYi+E84wN5bo5fjg0rwOe7narncl8RETFzc0nw+a92c= Subject key identifier: 89:39:9E:01:3B:E4:85:D6:90:4B:1D:61:8B:99:E7:1E:27:5E:C3:A0 Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Certificate serial: 019B7E38A2E9B77ED27E03F3F30508C055F4 Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/iTmeATvkhdaQSx1hi5nnHidew6A.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201821 IP address blocks: 185.63.73.0/24 maxlen: 24 185.63.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a2:e9:b7:7e:d2:7e:03:f3:f3:05:08:c0:55:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89399e013be485d6904b1d618b99e71e275ec3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:e0:9d:de:26:53:29:39:66:ef:74:72:aa: be:98:af:19:6a:44:bc:32:bf:ed:04:f8:71:8d:74: 5b:32:53:55:5c:e8:c1:47:0d:a1:4d:2e:b0:8e:0f: 6c:73:7c:05:3e:1d:12:d7:25:bb:66:eb:53:4e:5c: 99:63:3e:90:f7:a1:19:87:bf:c4:73:24:09:8c:0c: 51:fd:3c:7a:2a:d5:5c:d2:b4:3d:ad:43:1d:f6:b8: da:4d:95:c5:dd:47:28:b9:81:43:11:b6:09:d3:e5: c5:1c:a1:0b:4c:7d:ec:1e:5e:48:ed:cd:73:42:a2: 7b:c1:b1:85:5c:cf:3e:a5:e8:4a:83:c3:b2:12:60: ee:ad:8c:ef:27:6c:6c:ff:eb:5f:fa:52:95:6a:bd: 11:bc:cb:86:35:b7:37:26:0b:09:dd:0f:f8:cf:4c: 8f:40:2c:8d:39:a3:5b:cb:ab:9d:41:75:ee:ac:3f: c0:69:f3:44:4c:ec:f9:c8:ab:9c:5a:c8:50:6e:5b: 9d:ed:13:c0:c0:7a:0a:98:7c:1f:3a:d9:be:97:32: 10:8b:e4:89:67:32:87:ad:0b:0d:b0:60:5a:6b:5e: c6:13:fa:2f:48:85:7b:15:a1:ef:1a:ee:cc:56:24: 9c:b6:49:9e:c1:d7:40:4b:45:ea:7f:ff:62:97:02: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:39:9E:01:3B:E4:85:D6:90:4B:1D:61:8B:99:E7:1E:27:5E:C3:A0 X509v3 Authority Key Identifier: keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/iTmeATvkhdaQSx1hi5nnHidew6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.73.0/24 185.63.75.0/24 Signature Algorithm: sha256WithRSAEncryption 67:12:42:58:29:8e:e4:53:c8:c9:4a:a2:68:80:cc:4e:aa:7b: 52:6d:31:65:00:e6:27:6d:2e:9f:96:41:2e:84:9f:6c:4e:75: 26:30:e8:2f:cd:af:15:60:d2:57:b1:e4:34:d0:84:c5:06:56: ad:1c:c1:65:6e:31:b3:2b:ab:77:f9:fd:a4:c3:ce:74:0f:80: 67:9a:84:3a:e7:6b:2f:b5:cd:56:d4:54:2f:da:5f:97:d0:db: 21:c1:7a:fb:63:d5:f3:56:34:f6:0b:d2:f1:3a:d7:d0:bb:3a: 32:91:86:a2:d8:1a:3a:72:33:fb:4d:8a:bc:15:16:e1:d3:ca: 91:f1:d2:b8:d0:6b:f4:00:6d:f1:f6:93:9b:72:70:a0:b9:04: 61:36:f3:16:87:4d:18:ff:bc:c1:c6:f8:57:21:07:16:7f:dd: b6:8b:35:40:20:89:5d:36:a5:87:28:c8:10:25:59:b3:70:c9: 9f:2a:67:98:aa:4a:bf:ba:d5:85:0f:d2:81:f3:7a:4a:72:ea: 97:b8:7e:76:89:97:d6:07:96:d9:6e:f2:c6:5e:93:9f:5e:ce: 8c:57:22:1a:32:19:74:62:1c:e7:81:bd:4b:d3:5a:ce:3a:1c: 51:d2:77:1b:c5:10:21:25:c7:50:16:bb:af:cf:d6:10:4a:0a: cf:cf:41:ea -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OKLpt37SfgPz8wUIwFX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjM3Y2NmMzkzZjUyZTBiNTZmYjU4ZWUzNWFmNTQ0MTFk YWY2NDQwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTM5OWUwMTNiZTQ4NWQ2OTA0YjFkNjE4Yjk5ZTcxZTI3NWVjM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFjgnd4mUyk5Zu90cqq+mK8ZakS8 Mr/tBPhxjXRbMlNVXOjBRw2hTS6wjg9sc3wFPh0S1yW7ZutTTlyZYz6Q96EZh7/E cyQJjAxR/Tx6KtVc0rQ9rUMd9rjaTZXF3UcouYFDEbYJ0+XFHKELTH3sHl5I7c1z QqJ7wbGFXM8+pehKg8OyEmDurYzvJ2xs/+tf+lKVar0RvMuGNbc3JgsJ3Q/4z0yP QCyNOaNby6udQXXurD/AafNETOz5yKucWshQblud7RPAwHoKmHwfOtm+lzIQi+SJ ZzKHrQsNsGBaa17GE/ovSIV7FaHvGu7MViSctkmewddAS0Xqf/9ilwJ9AQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIk5ngE75IXWkEsdYYuZ5x4nXsOgMB8GA1UdIwQY MBaAFDtjfM85P1LgtW+1juNa9UQR2vZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYt MzA3MzNkMzcwZGYzLzEvaVRtZUFUdmtoZGFRU3gxaGk1bm5IaWRldzZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85YzVjMWYtZjRiNi00NWE4LTljOWYtMzA3MzNkMzcwZGYz LzEvTzJOOHp6a19VdUMxYjdXTzQxcjFSQkhhOWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuT9JAwQA uT9LMA0GCSqGSIb3DQEBCwUAA4IBAQBnEkJYKY7kU8jJSqJogMxOqntSbTFlAOYn bS6flkEuhJ9sTnUmMOgvza8VYNJXseQ00ITFBlatHMFlbjGzK6t3+f2kw850D4Bn moQ652svtc1W1FQv2l+X0NshwXr7Y9XzVjT2C9LxOtfQuzoykYai2Bo6cjP7TYq8 FRbh08qR8dK40Gv0AG3x9pObcnCguQRhNvMWh00Y/7zBxvhXIQcWf922izVAIIld NqWHKMgQJVmzcMmfKmeYqkq/utWFD9KB83pKcuqXuH52iZfWB5bZbvLGXpOfXs6M VyIaMhl0Yhzngb1L01rOOhxR0ncbxRAhJcdQFruvz9YQSgrPz0Hq -----END CERTIFICATE-----Generated at Sat Jan 3 19:48:30 2026 by rpki-client