This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa File: iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa (raw, json) Hash identifier: 1BhAgUiLaur5U/BDzt8YwtvIu/RtYONux/FF3rMGdkc= Subject key identifier: 89:99:15:5E:C4:BD:C8:64:39:B8:D0:E9:1B:BB:82:C7:22:EA:7B:E1 Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385 Certificate serial: 019B7E38F556B993A1C8C8B173773EFAAB4D Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa Signing time: Fri 02 Jan 2026 10:20:20 +0000 ROA not before: Fri 02 Jan 2026 10:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210150 IP address blocks: 37.18.48.0/22 maxlen: 22 37.18.52.0/22 maxlen: 22 45.144.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f5:56:b9:93:a1:c8:c8:b1:73:77:3e:fa:ab:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385 Validity Not Before: Jan 2 10:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8999155ec4bdc86439b8d0e91bbb82c722ea7be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:90:1a:53:94:4d:2b:1a:fa:c4:1d:41:a4: 4a:7b:45:ae:05:a2:f0:a9:43:d6:41:af:56:70:5c: 28:b9:30:ac:5e:4e:89:d7:2e:4e:bc:b7:91:1e:46: 2b:c5:21:ee:78:54:ee:17:d9:83:f8:98:2a:bb:64: 79:ef:d2:b6:d7:f8:9c:79:2b:6b:0d:df:68:0b:25: a8:d2:aa:0e:8e:9a:1a:cc:e3:b6:b8:49:33:92:5e: e7:8d:45:e0:49:a5:2c:59:22:d2:95:32:7b:3f:b2: 90:17:88:18:e2:7b:1c:75:04:55:97:e1:72:08:3c: 52:aa:b8:a1:00:08:07:f7:fd:15:b6:de:ca:81:92: 84:36:4d:66:78:43:0a:17:fa:cf:f5:49:26:f1:cb: 7d:a6:9f:9d:73:74:52:df:a9:3a:2f:61:d7:82:45: 7e:76:a2:8c:5d:34:e3:67:45:57:79:ad:00:44:14: d1:6c:bf:55:6d:c6:d9:5d:f3:31:d6:b5:63:ad:1e: 2d:4b:0d:51:34:c8:40:d2:f5:ae:4c:a9:b0:91:0c: fc:3d:67:0b:be:35:b2:b5:c1:7c:07:cb:7f:19:14: 50:a9:63:c9:28:38:68:08:b1:43:77:bb:fd:3c:15: cc:f4:76:b3:f2:ef:09:d8:8d:32:5b:68:11:d1:d2: 85:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:99:15:5E:C4:BD:C8:64:39:B8:D0:E9:1B:BB:82:C7:22:EA:7B:E1 X509v3 Authority Key Identifier: keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/iZkVXsS9yGQ5uNDpG7uCxyLqe-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.48.0/21 45.144.76.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:b8:c5:70:ac:e9:22:9f:18:e6:a9:4b:aa:2a:0c:62:59:69: 1f:a9:45:91:df:94:24:e7:5a:41:d7:b1:5e:de:d9:62:8b:9f: ac:3f:66:40:5d:58:ce:76:93:38:87:b8:a7:3b:ec:51:e6:c2: 28:fe:6b:ab:42:6c:ac:b5:a5:f3:fa:c4:57:cc:5e:70:80:08: e8:28:fc:f7:53:d8:72:6e:e7:38:21:da:c6:6d:37:bc:a9:76: 80:de:cf:be:f9:fd:34:9b:49:87:01:a9:ff:25:7e:04:1d:50: 03:73:60:58:10:56:cf:1a:a1:77:57:ff:14:47:e0:52:6a:23: 38:21:bc:a9:bd:29:5b:16:9f:ec:e3:c5:cb:28:30:db:42:5a: f0:18:8a:92:ab:a5:63:06:74:51:e8:6d:5c:c1:76:1d:74:32: 97:fa:71:c9:9a:83:5f:2b:89:9f:10:b3:5a:11:f4:42:3f:9d: 13:b9:77:90:f0:d1:da:69:4f:66:df:a5:43:b7:c3:b3:4d:02: 55:8c:64:70:da:51:5d:52:8e:45:6c:99:5e:3d:bb:03:02:af: b0:23:f0:76:a3:aa:9d:8c:88:ae:2e:bf:c5:80:54:79:eb:f3: 5e:0c:11:36:2a:93:87:3e:ea:ba:41:6e:0e:72:67:ea:5f:f7: 46:5a:ee:db -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OPVWuZOhyMixc3c++qtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZmJjODQxNTgyMTQ4NmU4ZmUwODYwYjViZWMzZTkyODNi ODAzODUwHhcNMjYwMTAyMTAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTk5MTU1ZWM0YmRjODY0MzliOGQwZTkxYmJiODJjNzIyZWE3YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXqQGlOUTSsa+sQdQaRKe0WuBaLw qUPWQa9WcFwouTCsXk6J1y5OvLeRHkYrxSHueFTuF9mD+Jgqu2R579K21/iceStr Dd9oCyWo0qoOjpoazOO2uEkzkl7njUXgSaUsWSLSlTJ7P7KQF4gY4nscdQRVl+Fy CDxSqrihAAgH9/0Vtt7KgZKENk1meEMKF/rP9Ukm8ct9pp+dc3RS36k6L2HXgkV+ dqKMXTTjZ0VXea0ARBTRbL9VbcbZXfMx1rVjrR4tSw1RNMhA0vWuTKmwkQz8PWcL vjWytcF8B8t/GRRQqWPJKDhoCLFDd7v9PBXM9Haz8u8J2I0yW2gR0dKFAQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFImZFV7EvchkObjQ6Ru7gsci6nvhMB8GA1UdIwQY MBaAFPj7yEFYIUhuj+CGC1vsPpKDuAOFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QdklRVmdoU0c2UDRJWUxXLXcta29PNEE0VS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMzYxYzU3LWVhNDItNDdlMi1hNjhm LWVjOTY3YjUxMWQ3Zi8xL2laa1ZYc1M5eUdRNXVORHBHN3VDeHlMcWUtRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGEvMzYxYzU3LWVhNDItNDdlMi1hNjhmLWVjOTY3YjUxMWQ3 Zi8xLzEtUHZJUVZnaFNHNlA0SVlMVy13LWtvTzRBNFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAMlEjAD BAItkEwwDQYJKoZIhvcNAQELBQADggEBAA+4xXCs6SKfGOapS6oqDGJZaR+pRZHf lCTnWkHXsV7e2WKLn6w/ZkBdWM52kziHuKc77FHmwij+a6tCbKy1pfP6xFfMXnCA COgo/PdT2HJu5zgh2sZtN7ypdoDez775/TSbSYcBqf8lfgQdUANzYFgQVs8aoXdX /xRH4FJqIzghvKm9KVsWn+zjxcsoMNtCWvAYipKrpWMGdFHobVzBdh10Mpf6ccma g18riZ8Qs1oR9EI/nRO5d5Dw0dppT2bfpUO3w7NNAlWMZHDaUV1SjkVsmV49uwMC r7Aj8Hajqp2MiK4uv8WAVHnr814METYqk4c+6rpBbg5yZ+pf90Za7ts= -----END CERTIFICATE-----Generated at Tue Jan 27 06:21:34 2026 by rpki-client