This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/63TIjmHhFmia6-SPDcFe70kVqtI.roa File: 63TIjmHhFmia6-SPDcFe70kVqtI.roa (raw, json) Hash identifier: gwcdwV2htgxpCfsTeyB5jC24Ad+k1RHIt/ODocEGWsU= Subject key identifier: EB:74:C8:8E:61:E1:16:68:9A:EB:E4:8F:0D:C1:5E:EF:49:15:AA:D2 Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6 Certificate serial: 019B21820D17B95F586EAAD842991E967161 Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/63TIjmHhFmia6-SPDcFe70kVqtI.roa Signing time: Mon 15 Dec 2025 10:15:29 +0000 ROA not before: Mon 15 Dec 2025 10:15:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47447 IP address blocks: 46.19.152.0/21 maxlen: 24 185.88.60.0/22 maxlen: 24 2a02:2980::/32 maxlen: 32 2a05:ca80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:82:0d:17:b9:5f:58:6e:aa:d8:42:99:1e:96:71:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6 Validity Not Before: Dec 15 10:15:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eb74c88e61e116689aebe48f0dc15eef4915aad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:61:08:65:db:97:43:de:d8:d0:26:54:1a:7c: 23:69:6a:94:a3:a3:de:25:f6:23:79:de:76:a3:0f: 6e:75:33:3a:0b:03:e8:4c:f6:a9:7a:d6:aa:11:8c: ce:63:74:1a:dd:c3:5a:0c:09:bf:13:d7:24:71:23: 2e:fc:98:3a:34:4a:14:8d:f4:e9:63:cb:83:c3:d2: af:62:eb:9d:f4:fd:d7:20:43:28:50:01:68:17:08: 2d:45:e9:03:05:10:57:ca:1e:bc:05:8d:39:a6:14: 31:56:c0:f1:9f:cd:85:14:f5:fe:8a:c4:b5:c4:2f: ac:0f:1b:7e:49:fc:8c:af:39:10:68:da:27:06:4a: d3:ec:5b:8a:15:b3:1b:43:43:5a:b0:e5:0f:56:68: ac:ff:d8:45:87:c8:28:60:b4:e0:d3:5b:9e:7c:c0: f7:b7:77:b5:ce:14:fa:af:94:9c:7c:b3:74:6c:bb: f3:7e:7d:a1:2f:a3:18:31:8e:47:33:4a:09:60:7c: 33:c8:ce:5a:c6:21:cc:10:e3:69:09:b3:4a:0f:a2: cd:4a:63:f0:17:8c:17:27:a2:21:3a:c0:28:c6:f9: 4d:3b:c8:cb:7f:e8:bf:a1:b9:33:f8:fc:ba:fd:04: 66:03:06:b0:21:12:95:63:05:e1:3f:a7:2c:44:08: 2b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:74:C8:8E:61:E1:16:68:9A:EB:E4:8F:0D:C1:5E:EF:49:15:AA:D2 X509v3 Authority Key Identifier: keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/63TIjmHhFmia6-SPDcFe70kVqtI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.152.0/21 185.88.60.0/22 IPv6: 2a02:2980::/32 2a05:ca80::/29 Signature Algorithm: sha256WithRSAEncryption 65:a2:ca:01:0c:85:77:7f:f1:2e:38:48:75:83:76:a1:18:81: cc:22:25:67:f7:cc:8c:54:3b:5a:99:c4:2e:e6:30:2f:52:49: 91:5e:3c:31:5f:06:5c:f2:34:ae:1a:1f:2d:5a:d7:bd:c8:75: 90:ed:15:85:d7:c8:52:0b:a4:36:71:01:56:1e:26:4b:bc:cd: d4:3e:75:e4:3a:d2:68:bb:c1:a2:f7:54:62:e0:7f:be:55:24: 71:81:05:37:6e:d2:8d:df:14:1e:67:b2:98:c1:49:1a:46:38: ec:b4:58:b5:47:12:0b:15:82:43:88:4b:12:7b:48:16:08:82: 65:59:91:97:0c:f3:60:0b:d3:03:ff:b6:2a:9b:c5:63:b0:81: 25:2f:c4:c1:f2:64:ef:0e:40:6d:0d:47:ee:bf:67:0a:89:95: 9f:9b:eb:28:04:0a:b8:f7:db:20:31:a5:2e:87:b9:47:4f:dc: 91:b4:73:da:ee:ae:62:cd:6d:c8:77:95:e4:8f:4c:ec:12:f0: e4:c7:64:2b:dc:14:72:7a:fc:64:0b:ee:ec:83:51:fc:08:7c: 6c:99:72:a5:e6:73:bb:03:63:3a:1d:a5:17:fd:3e:c5:20:ac: bb:cf:a6:5d:fa:ce:aa:fe:72:3f:d9:8d:a4:3e:62:d4:03:ae: df:bf:65:98 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZshgg0XuV9YbqrYQpkelnFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNGU0OTkyNDBjZWE1ODg1NDFhN2RjNzRmMzIxYzkxNDE3 NDRiYjYwHhcNMjUxMjE1MTAxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjc0Yzg4ZTYxZTExNjY4OWFlYmU0OGYwZGMxNWVlZjQ5MTVhYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWEIZduXQ97Y0CZUGnwjaWqUo6Pe JfYjed52ow9udTM6CwPoTPapetaqEYzOY3Qa3cNaDAm/E9ckcSMu/Jg6NEoUjfTp Y8uDw9KvYuud9P3XIEMoUAFoFwgtRekDBRBXyh68BY05phQxVsDxn82FFPX+isS1 xC+sDxt+SfyMrzkQaNonBkrT7FuKFbMbQ0NasOUPVmis/9hFh8goYLTg01uefMD3 t3e1zhT6r5ScfLN0bLvzfn2hL6MYMY5HM0oJYHwzyM5axiHMEONpCbNKD6LNSmPw F4wXJ6IhOsAoxvlNO8jLf+i/obkz+Py6/QRmAwawIRKVYwXhP6csRAgrlQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOt0yI5h4RZomuvkjw3BXu9JFarSMB8GA1UdIwQY MBaAFKFOSZJAzqWIVBp9x08yHJFBdEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wODI4ZTctMWU1Ny00NzQ3LThlYTEt MzZhODA4ZjNkMTRkLzEvNjNUSWptSGhGbWlhNi1TUERjRmU3MGtWcXRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wODI4ZTctMWU1Ny00NzQ3LThlYTEtMzZhODA4ZjNkMTRk LzEvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQDLhOYAwQC uVg8MBQEAgACMA4DBQAqAimAAwUDKgXKgDANBgkqhkiG9w0BAQsFAAOCAQEAZaLK AQyFd3/xLjhIdYN2oRiBzCIlZ/fMjFQ7WpnELuYwL1JJkV48MV8GXPI0rhofLVrX vch1kO0VhdfIUgukNnEBVh4mS7zN1D515DrSaLvBovdUYuB/vlUkcYEFN27Sjd8U HmeymMFJGkY47LRYtUcSCxWCQ4hLEntIFgiCZVmRlwzzYAvTA/+2KpvFY7CBJS/E wfJk7w5AbQ1H7r9nComVn5vrKAQKuPfbIDGlLoe5R0/ckbRz2u6uYs1tyHeV5I9M 7BLw5MdkK9wUcnr8ZAvu7INR/Ah8bJlypeZzuwNjOh2lF/0+xSCsu8+mXfrOqv5y P9mNpD5i1AOu379lmA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:14:49 2025 by rpki-client