This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/iVJgr3Dl6opD93-NFPDb5IpQXE4.roa File: iVJgr3Dl6opD93-NFPDb5IpQXE4.roa (raw, json) Hash identifier: 2DZ//oCIJ0qofY4iPB1/JgdzdjLGfxN76M3nWUdUUx0= Subject key identifier: 89:52:60:AF:70:E5:EA:8A:43:F7:7F:8D:14:F0:DB:E4:8A:50:5C:4E Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6 Certificate serial: 019B7F14D664FDB2338EF3E08AF918BD2386 Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/iVJgr3Dl6opD93-NFPDb5IpQXE4.roa Signing time: Fri 02 Jan 2026 14:20:30 +0000 ROA not before: Fri 02 Jan 2026 14:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34636 IP address blocks: 185.63.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d6:64:fd:b2:33:8e:f3:e0:8a:f9:18:bd:23:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6 Validity Not Before: Jan 2 14:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=895260af70e5ea8a43f77f8d14f0dbe48a505c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:53:dd:66:cd:4c:e6:f0:e0:77:e7:d7:4c: 1a:3e:ba:e2:4f:92:96:3f:f2:1b:92:8d:d3:9e:2d: 12:05:21:f7:38:f1:08:bb:aa:b4:c6:49:80:29:12: 5f:08:c2:a0:3b:39:ff:a5:03:3b:3a:de:9c:76:d2: ba:ed:7e:b2:10:f2:ec:38:8c:23:68:05:7f:44:8a: 03:a9:94:c6:ad:86:77:18:97:68:95:8d:6c:60:7e: 53:4f:30:30:3c:66:4f:f6:3e:17:78:59:88:9b:5a: 74:6e:68:d9:9c:51:d4:af:51:8f:4b:58:8c:72:a1: 0e:e3:29:35:b1:8c:82:0d:17:1e:38:7e:9b:5f:37: c2:71:e0:36:99:01:13:dc:1c:64:73:9a:95:53:6c: e8:87:7f:a9:d3:fb:c9:54:ff:d8:f6:00:51:e4:72: be:3e:d4:7c:54:e7:ed:3f:b7:7e:04:13:c3:c2:76: 3a:f3:7a:25:6d:3a:ab:24:da:b0:4f:78:d9:ec:05: b4:7b:c1:1a:52:25:53:d7:d5:d9:9f:6e:8c:2f:ba: ff:27:e2:c1:ab:b1:82:c5:08:fa:c9:67:7b:a1:4f: 08:96:5b:93:29:1c:4f:a3:a5:e9:65:3c:f5:41:7b: 0f:a2:1d:4a:a2:92:2e:62:dd:3f:06:f8:c5:05:1e: 1e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:52:60:AF:70:E5:EA:8A:43:F7:7F:8D:14:F0:DB:E4:8A:50:5C:4E X509v3 Authority Key Identifier: keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/iVJgr3Dl6opD93-NFPDb5IpQXE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.113.0/24 Signature Algorithm: sha256WithRSAEncryption b1:39:c7:10:31:a3:d7:30:5d:44:8f:47:9b:0f:02:e4:8e:9f: b4:81:98:93:c8:cd:d1:62:03:45:60:44:d9:1f:d7:6b:82:74: 97:bd:13:39:c7:02:1b:2e:38:b4:53:16:3c:cc:12:3d:13:de: bb:7e:6f:5b:6c:13:48:0d:08:17:ae:46:0e:92:90:09:c9:5d: 28:29:ca:a9:dd:95:32:8f:0c:92:da:b0:50:37:92:6a:bc:9b: fe:59:d6:71:df:9b:f1:27:04:bb:10:d6:02:1d:03:1f:f7:bb: 77:aa:9a:bd:d0:d3:46:2b:9a:dc:36:cb:89:14:b6:c0:d5:3f: c0:a5:98:87:8d:7c:54:1c:dd:35:87:d3:5e:c4:5e:a9:62:80: fd:2a:73:78:86:4e:30:5d:d9:81:42:83:5d:47:ea:80:52:9f: 31:42:92:a8:cb:d6:ba:72:68:ec:63:77:66:90:de:e7:38:0c: 99:46:dc:ad:87:95:8a:1f:62:a0:21:c2:4b:2c:17:1e:0f:76: 8d:45:23:e9:60:59:ad:08:e0:73:fd:6f:cf:9a:bd:8a:64:07: 60:73:98:b0:81:11:78:7d:d8:d3:83:62:73:ed:38:44:8e:a4: 40:e0:cb:e5:a4:05:28:40:43:f8:72:23:c9:a3:fe:b5:69:69: df:69:30:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FNZk/bIzjvPgivkYvSOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3N2UxMWY1MjMzZTkzMzk5OWEyYTBjNjg5MDNmYzI3NWFl NDU5ZTYwHhcNMjYwMTAyMTQyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTUyNjBhZjcwZTVlYThhNDNmNzdmOGQxNGYwZGJlNDhhNTA1YzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4dT3WbNTObw4Hfn10waPrriT5KW P/Ibko3Tni0SBSH3OPEIu6q0xkmAKRJfCMKgOzn/pQM7Ot6cdtK67X6yEPLsOIwj aAV/RIoDqZTGrYZ3GJdolY1sYH5TTzAwPGZP9j4XeFmIm1p0bmjZnFHUr1GPS1iM cqEO4yk1sYyCDRceOH6bXzfCceA2mQET3Bxkc5qVU2zoh3+p0/vJVP/Y9gBR5HK+ PtR8VOftP7d+BBPDwnY683olbTqrJNqwT3jZ7AW0e8EaUiVT19XZn26ML7r/J+LB q7GCxQj6yWd7oU8IlluTKRxPo6XpZTz1QXsPoh1KopIuYt0/BvjFBR4ejwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlSYK9w5eqKQ/d/jRTw2+SKUFxOMB8GA1UdIwQY MBaAFBd+EfUjPpM5maKgxokD/Cda5FnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAt YWEwOWQ2ZTFmZmVlLzEvaVZKZ3IzRGw2b3BEOTMtTkZQRGI1SXBRWEU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAtYWEwOWQ2ZTFmZmVl LzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT9xMA0G CSqGSIb3DQEBCwUAA4IBAQCxOccQMaPXMF1Ej0ebDwLkjp+0gZiTyM3RYgNFYETZ H9drgnSXvRM5xwIbLji0UxY8zBI9E967fm9bbBNIDQgXrkYOkpAJyV0oKcqp3ZUy jwyS2rBQN5JqvJv+WdZx35vxJwS7ENYCHQMf97t3qpq90NNGK5rcNsuJFLbA1T/A pZiHjXxUHN01h9NexF6pYoD9KnN4hk4wXdmBQoNdR+qAUp8xQpKoy9a6cmjsY3dm kN7nOAyZRtyth5WKH2KgIcJLLBceD3aNRSPpYFmtCOBz/W/Pmr2KZAdgc5iwgRF4 fdjTg2Jz7ThEjqRA4MvlpAUoQEP4ciPJo/61aWnfaTAq -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:47 2026 by rpki-client