This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tv37BYJAMZaLcLQ9lOZAErObN7o.roa File: tv37BYJAMZaLcLQ9lOZAErObN7o.roa (raw, json) Hash identifier: +sD2u1OMFGxC03bNOA33l1h+zNux7th1IVT3hj/UiZk= Subject key identifier: B6:FD:FB:05:82:40:31:96:8B:70:B4:3D:94:E6:40:12:B3:9B:37:BA Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A302CBB15E1EA5E22B1E81C4321A6C Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tv37BYJAMZaLcLQ9lOZAErObN7o.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48115 IP address blocks: 94.156.36.0/24 maxlen: 24 94.156.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:02:cb:b1:5e:1e:a5:e2:2b:1e:81:c4:32:1a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6fdfb05824031968b70b43d94e64012b39b37ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:d6:e1:11:ad:27:b5:45:c9:0a:d9:b2:92: 4d:b3:15:2d:d7:f3:63:ee:33:32:37:dd:3c:66:18: 39:af:73:f1:50:39:3e:01:1f:8f:09:a5:01:ab:d2: a3:a1:90:c6:d5:f5:89:72:30:20:da:73:65:5d:f4: ae:49:6c:64:09:6d:f7:cb:c3:96:eb:9a:8e:ba:7a: 71:4a:bc:c5:09:fe:eb:fb:ff:09:0e:99:5b:63:f1: 67:d5:9e:83:50:f3:48:a0:63:d9:6b:80:e4:0b:fb: 70:02:d6:e9:17:80:05:d7:ab:4c:c6:70:83:29:bd: 51:df:a0:8c:59:ef:8c:f2:f5:dd:22:2e:ed:18:1e: b5:14:f0:12:b9:0d:2e:52:ea:9d:45:30:ce:b8:93: 08:76:06:ca:a4:d8:c8:22:81:7d:e1:74:37:90:f5: 09:40:c8:80:ad:c2:af:ab:0f:80:3e:c6:ef:0b:df: 17:96:be:f8:25:de:3d:37:76:d0:e9:7b:84:9b:96: 47:ac:48:77:25:ad:bd:93:26:25:cb:da:c9:2c:b4: 20:11:db:64:cd:32:36:1e:32:57:b3:10:46:98:ff: d7:1a:9d:8c:98:b2:16:79:7b:e0:1c:96:be:e5:ca: 97:93:e6:60:f2:99:f8:7f:18:74:07:9c:5e:73:6d: 65:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FD:FB:05:82:40:31:96:8B:70:B4:3D:94:E6:40:12:B3:9B:37:BA X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tv37BYJAMZaLcLQ9lOZAErObN7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.36.0/24 94.156.101.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:1a:0c:2f:b2:ba:cb:7e:de:0a:cd:c4:29:67:0a:d1:69:5b: 21:fd:f9:84:f4:0a:91:6f:85:19:fa:88:17:8e:9c:c9:65:e3: c4:fb:d4:8b:fd:cf:f8:6e:25:51:3f:d2:99:82:9d:67:96:55: f5:c0:8b:30:b7:5e:18:c0:1d:6a:85:3a:38:c5:38:8d:65:84: 38:6b:f5:73:b6:0c:86:0b:48:2f:ac:b0:13:43:0e:f4:a6:a2: 6a:02:2d:3d:61:9a:20:70:d6:06:f6:98:be:b5:80:d5:90:9b: 7e:85:5c:90:2d:5f:9f:ae:9d:eb:9d:74:3f:95:fb:80:3d:70: 67:a6:2c:3f:52:fe:95:e4:13:ff:6e:17:50:19:76:9f:70:2c: 0c:4b:9b:66:27:9e:92:a8:33:dc:a5:fd:09:2e:d8:74:8c:43: d4:70:ee:4f:af:4a:07:87:94:c7:94:b4:42:b8:fe:b6:a4:1a: 7a:e4:c6:02:4b:fa:c2:47:99:84:18:f6:7d:2a:4b:23:0f:5b: b0:06:e4:c1:e5:7e:50:32:11:0b:fa:bf:89:c7:e0:b4:0c:21: 1f:96:b0:01:e3:3f:8c:00:19:29:6c:97:8a:72:fa:fb:92:32: 88:82:02:e5:fa:75:b2:74:a2:8f:17:de:df:8d:11:4f:f8:b1: 01:c0:b5:59 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4owLLsV4epeIrHoHEMhpsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmZkZmIwNTgyNDAzMTk2OGI3MGI0M2Q5NGU2NDAxMmIzOWIzN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnXW4RGtJ7VFyQrZspJNsxUt1/Nj 7jMyN908Zhg5r3PxUDk+AR+PCaUBq9KjoZDG1fWJcjAg2nNlXfSuSWxkCW33y8OW 65qOunpxSrzFCf7r+/8JDplbY/Fn1Z6DUPNIoGPZa4DkC/twAtbpF4AF16tMxnCD Kb1R36CMWe+M8vXdIi7tGB61FPASuQ0uUuqdRTDOuJMIdgbKpNjIIoF94XQ3kPUJ QMiArcKvqw+APsbvC98Xlr74Jd49N3bQ6XuEm5ZHrEh3Ja29kyYly9rJLLQgEdtk zTI2HjJXsxBGmP/XGp2MmLIWeXvgHJa+5cqXk+Zg8pn4fxh0B5xec21lPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLb9+wWCQDGWi3C0PZTmQBKzmze6MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdHYzN0JZSkFNWmFMY0xROWxPWkFFck9iTjdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpwkAwQA XpxlMA0GCSqGSIb3DQEBCwUAA4IBAQBNGgwvsrrLft4KzcQpZwrRaVsh/fmE9AqR b4UZ+ogXjpzJZePE+9SL/c/4biVRP9KZgp1nllX1wIswt14YwB1qhTo4xTiNZYQ4 a/VztgyGC0gvrLATQw70pqJqAi09YZogcNYG9pi+tYDVkJt+hVyQLV+frp3rnXQ/ lfuAPXBnpiw/Uv6V5BP/bhdQGXafcCwMS5tmJ56SqDPcpf0JLth0jEPUcO5Pr0oH h5THlLRCuP62pBp65MYCS/rCR5mEGPZ9KksjD1uwBuTB5X5QMhEL+r+Jx+C0DCEf lrAB4z+MABkpbJeKcvr7kjKIggLl+nWydKKPF97fjRFP+LEBwLVZ -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:20 2026 by rpki-client