This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/63SqzZD5khW3oTW4jRZSucUtNGA.roa File: 63SqzZD5khW3oTW4jRZSucUtNGA.roa (raw, json) Hash identifier: HQr53feJwK5pwYjEmFTl1oYwFxU9RbSGeLwQty/u4ds= Subject key identifier: EB:74:AA:CD:90:F9:92:15:B7:A1:35:B8:8D:16:52:B9:C5:2D:34:60 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13A44A08C7A84CA692AE3B8C20CB1F Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/63SqzZD5khW3oTW4jRZSucUtNGA.roa Signing time: Fri 02 Jan 2026 00:20:20 +0000 ROA not before: Fri 02 Jan 2026 00:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216307 IP address blocks: 185.218.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:a4:4a:08:c7:a8:4c:a6:92:ae:3b:8c:20:cb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb74aacd90f99215b7a135b88d1652b9c52d3460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:92:bf:14:a0:fd:5a:f0:dd:fc:44:9d:d2: 53:bf:16:24:9c:19:95:f3:b5:67:d3:df:13:5d:58: ea:e7:1a:b6:4e:55:cc:7e:75:07:0f:ff:af:68:8a: 0c:e4:fc:fe:1d:f0:d2:bf:8c:5e:60:b1:c0:3a:2d: a4:b0:95:55:58:42:9d:bf:47:88:3e:ae:f8:22:9c: c6:eb:47:fa:5e:e5:a9:45:2f:5f:8b:5a:30:b7:3e: f1:76:c7:7c:de:6d:fa:20:4f:37:4d:b7:9e:8d:c6: 67:0d:38:81:ab:9c:41:ce:9f:ad:ca:62:28:39:ed: f5:d3:71:45:77:5a:d0:03:62:e2:82:73:4a:78:7a: 87:a7:48:5a:05:9b:1e:4e:4a:e9:06:9f:da:18:bf: c0:3f:40:f3:d2:4a:ba:0f:9e:2b:c2:96:87:36:7d: ff:80:0e:3e:ef:03:fc:48:2e:be:2f:29:65:89:cd: 0e:b5:c1:71:de:9c:1b:19:de:b0:77:b0:0d:50:49: 7e:3f:10:00:33:59:6d:cf:ed:67:10:b2:31:62:af: a7:34:86:fe:ff:80:1a:ab:83:9f:37:00:91:92:05: c5:9c:da:7a:27:46:19:ca:f3:79:46:bd:7a:a7:50: f5:0f:d8:39:20:50:dc:b4:6e:60:6a:e6:d7:77:52: 87:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:74:AA:CD:90:F9:92:15:B7:A1:35:B8:8D:16:52:B9:C5:2D:34:60 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/63SqzZD5khW3oTW4jRZSucUtNGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.100.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:86:c7:69:21:0c:4d:65:ec:a0:39:0f:bf:f9:7d:a9:5e:2d: 28:a0:d8:4a:5a:a5:44:17:18:0e:bd:02:d9:8f:e8:24:8a:56: 84:46:11:e1:6f:ae:b9:ef:7f:b3:45:45:59:ed:f5:15:52:5b: 38:80:e3:91:be:db:cd:7c:49:4e:73:2f:64:26:e3:fe:0e:3c: 1e:d3:58:d1:41:2b:e4:f7:de:90:0e:14:9b:ba:82:fb:5d:a3: 8e:bd:9b:7d:0f:0d:15:1b:06:02:df:09:28:36:27:82:1b:e1: 52:ba:3e:35:6a:ff:0b:c8:52:1c:18:12:db:83:4f:70:9c:a4: 3d:f8:28:bf:fa:6f:ea:48:40:0e:8e:70:cb:3d:a9:70:69:52: 8e:75:7b:43:6f:cf:da:4c:1d:73:bf:1e:91:23:3d:3c:08:4a: a4:d9:f1:00:0b:17:13:28:f4:2e:9b:6a:80:cb:ba:83:44:d9: 1e:3f:fa:d3:08:8d:69:93:0b:e9:bb:32:36:cf:ca:72:ab:1a: ae:62:e7:6d:d1:b0:0b:a6:fd:13:d8:e1:30:b6:83:ad:d8:54: 08:81:26:de:c7:07:b9:2a:d6:6d:cf:22:af:f3:6a:9b:4f:57: 02:bb:04:fa:a8:ff:7d:97:c5:ad:60:53:c3:84:c2:46:3a:61: d9:21:63:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E6RKCMeoTKaSrjuMIMsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjc0YWFjZDkwZjk5MjE1YjdhMTM1Yjg4ZDE2NTJiOWM1MmQzNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg+SvxSg/Vrw3fxEndJTvxYknBmV 87Vn098TXVjq5xq2TlXMfnUHD/+vaIoM5Pz+HfDSv4xeYLHAOi2ksJVVWEKdv0eI Pq74IpzG60f6XuWpRS9fi1owtz7xdsd83m36IE83TbeejcZnDTiBq5xBzp+tymIo Oe3103FFd1rQA2LignNKeHqHp0haBZseTkrpBp/aGL/AP0Dz0kq6D54rwpaHNn3/ gA4+7wP8SC6+Lyllic0OtcFx3pwbGd6wd7ANUEl+PxAAM1ltz+1nELIxYq+nNIb+ /4Aaq4OfNwCRkgXFnNp6J0YZyvN5Rr16p1D1D9g5IFDctG5gaubXd1KH8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOt0qs2Q+ZIVt6E1uI0WUrnFLTRgMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvNjNTcXpaRDVraFczb1RXNGpSWlN1Y1V0TkdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudpkMA0G CSqGSIb3DQEBCwUAA4IBAQAuhsdpIQxNZeygOQ+/+X2pXi0ooNhKWqVEFxgOvQLZ j+gkilaERhHhb66573+zRUVZ7fUVUls4gOORvtvNfElOcy9kJuP+Djwe01jRQSvk 996QDhSbuoL7XaOOvZt9Dw0VGwYC3wkoNieCG+FSuj41av8LyFIcGBLbg09wnKQ9 +Ci/+m/qSEAOjnDLPalwaVKOdXtDb8/aTB1zvx6RIz08CEqk2fEACxcTKPQum2qA y7qDRNkeP/rTCI1pkwvpuzI2z8pyqxquYudt0bALpv0T2OEwtoOt2FQIgSbexwe5 KtZtzyKv82qbT1cCuwT6qP99l8WtYFPDhMJGOmHZIWNT -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:17 2026 by rpki-client