This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/63PrN8mXH55oBJX7rIWVabUHvQ8.roa File: 63PrN8mXH55oBJX7rIWVabUHvQ8.roa (raw, json) Hash identifier: pZ+Bby5HjRIxKd0d8Pj3TvHaCe/jpasI4E0danVgwOc= Subject key identifier: EB:73:EB:37:C9:97:1F:9E:68:04:95:FB:AC:85:95:69:B5:07:BD:0F Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54 Certificate serial: 019B7EA6D6D51467E29E44B4263186705252 Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/63PrN8mXH55oBJX7rIWVabUHvQ8.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51431 IP address blocks: 185.137.24.0/24 maxlen: 24 185.137.25.0/24 maxlen: 24 185.137.26.0/24 maxlen: 24 185.137.27.0/24 maxlen: 24 185.191.76.0/22 maxlen: 24 185.191.76.0/24 maxlen: 24 185.191.77.0/24 maxlen: 24 185.191.78.0/24 maxlen: 24 185.191.79.0/24 maxlen: 24 2a0c:99c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d6:d5:14:67:e2:9e:44:b4:26:31:86:70:52:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb73eb37c9971f9e680495fbac859569b507bd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:51:bd:0e:57:19:9e:7d:44:76:4e:02:69: 60:e6:ce:78:43:e7:95:99:85:89:9c:a0:da:48:3d: 17:82:a7:d9:52:83:51:64:2b:7f:f2:e1:42:b0:7b: 65:73:b3:fb:ed:68:03:25:71:36:55:f3:cd:f7:00: 50:60:19:5a:8f:db:e1:3f:a2:d4:e7:2b:0f:ba:65: 86:0f:db:1f:51:e9:7a:eb:b2:c3:9f:a7:3e:26:4c: b2:d5:7a:87:4e:60:8a:82:fb:3f:f1:d3:b3:f7:2c: 75:1c:c7:6b:e2:b4:cb:72:e7:0b:11:fc:40:0c:af: 95:0d:bf:c8:57:f1:ee:45:46:e3:ab:09:62:12:05: 81:15:aa:63:8f:4c:b2:69:5e:90:55:07:3a:0b:4b: ad:66:13:2d:fb:17:37:92:c4:72:f8:81:25:c9:2a: 42:ee:f9:d7:c0:a8:a7:1c:c8:77:49:8f:4f:ec:ec: ae:43:83:6b:a1:70:c2:4d:4d:f4:b5:a9:9e:fc:be: 6f:07:b6:2a:e2:01:f1:3f:41:9f:b2:3f:fb:04:9b: bb:ae:95:98:d1:8d:6d:a6:58:49:eb:f5:70:06:33: 2e:36:cc:da:13:bf:81:ba:43:18:56:8b:e7:6d:05: aa:6d:8a:8f:5e:5b:2f:95:c5:40:74:50:87:d6:b7: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:73:EB:37:C9:97:1F:9E:68:04:95:FB:AC:85:95:69:B5:07:BD:0F X509v3 Authority Key Identifier: keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/63PrN8mXH55oBJX7rIWVabUHvQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.24.0/22 185.191.76.0/22 IPv6: 2a0c:99c0::/29 Signature Algorithm: sha256WithRSAEncryption 08:e2:c9:30:e3:58:ff:09:22:aa:44:8d:9a:4c:e0:34:32:83: d4:e4:aa:bd:ba:60:43:cd:a4:ee:bd:c7:6f:c3:de:00:c8:82: 08:37:78:fd:73:79:91:e2:cd:96:68:83:92:f8:f3:92:9e:45: 00:72:30:33:e4:fb:0f:cb:46:a4:6d:39:84:7a:a8:9f:4b:c2: 5a:a6:21:c1:a3:bb:7e:32:af:cf:79:3f:1f:80:3e:e5:24:4b: cc:c9:79:87:2b:49:8a:9e:20:82:18:b5:c0:05:95:b2:77:8c: e4:2f:97:34:44:19:38:21:11:f9:16:23:9d:73:cd:7e:1b:56: 03:10:4e:ab:f4:42:2f:4e:c1:e8:7a:ae:e3:79:a5:95:4e:8a: 7f:80:03:17:a7:54:de:c7:98:6c:59:8c:51:c9:51:ab:42:71: 6c:db:4b:3b:e5:fc:05:0a:2c:06:1a:7e:e4:aa:38:85:07:ac: 83:96:24:dd:7d:e0:f8:4d:39:a9:0e:57:fc:47:5d:2e:a9:a2: fc:e6:f9:00:1a:d5:80:55:f0:69:09:d0:02:dd:7d:08:ad:6a: 7d:4b:bb:c2:32:c0:96:21:d9:54:3f:d7:b4:51:9f:c9:42:9b: 72:c1:a2:82:bd:32:c0:b0:29:53:ad:77:8a:78:51:d3:a2:cc: 9a:b7:83:80 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+ptbVFGfinkS0JjGGcFJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYmEwYmU3Y2NlMzgwZTZiYjc0ZTNjNWZjZWEwODFlOTc5 OWFlNTQwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjczZWIzN2M5OTcxZjllNjgwNDk1ZmJhYzg1OTU2OWI1MDdiZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMhRvQ5XGZ59RHZOAmlg5s54Q+eV mYWJnKDaSD0XgqfZUoNRZCt/8uFCsHtlc7P77WgDJXE2VfPN9wBQYBlaj9vhP6LU 5ysPumWGD9sfUel667LDn6c+Jkyy1XqHTmCKgvs/8dOz9yx1HMdr4rTLcucLEfxA DK+VDb/IV/HuRUbjqwliEgWBFapjj0yyaV6QVQc6C0utZhMt+xc3ksRy+IElySpC 7vnXwKinHMh3SY9P7OyuQ4NroXDCTU30tame/L5vB7Yq4gHxP0Gfsj/7BJu7rpWY 0Y1tplhJ6/VwBjMuNszaE7+BukMYVovnbQWqbYqPXlsvlcVAdFCH1reKuwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOtz6zfJlx+eaASV+6yFlWm1B70PMB8GA1UdIwQY MBaAFGG6C+fM44Dmu3TjxfzqCB6Xma5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDIt MjEwZDQ4MmE0YjkzLzEvNjNQck44bVhINTVvQkpYN3JJV1ZhYlVIdlE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDItMjEwZDQ4MmE0Yjkz LzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYkYAwQC ub9MMA0EAgACMAcDBQMqDJnAMA0GCSqGSIb3DQEBCwUAA4IBAQAI4skw41j/CSKq RI2aTOA0MoPU5Kq9umBDzaTuvcdvw94AyIIIN3j9c3mR4s2WaIOS+POSnkUAcjAz 5PsPy0akbTmEeqifS8JapiHBo7t+Mq/PeT8fgD7lJEvMyXmHK0mKniCCGLXABZWy d4zkL5c0RBk4IRH5FiOdc81+G1YDEE6r9EIvTsHoeq7jeaWVTop/gAMXp1Tex5hs WYxRyVGrQnFs20s75fwFCiwGGn7kqjiFB6yDliTdfeD4TTmpDlf8R10uqaL85vkA GtWAVfBpCdAC3X0IrWp9S7vCMsCWIdlUP9e0UZ/JQptywaKCvTLAsClTrXeKeFHT osyat4OA -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:38 2026 by rpki-client