This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/37vTJFPETNCDAO7KZbONU7fbwcM.roa File: 37vTJFPETNCDAO7KZbONU7fbwcM.roa (raw, json) Hash identifier: Q18KPTSBZ3VxFyv7LVoO5oNPqV/ToKd1sV6OVpiL3mY= Subject key identifier: DF:BB:D3:24:53:C4:4C:D0:83:00:EE:CA:65:B3:8D:53:B7:DB:C1:C3 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019A922CC132B93C54E83075CD0595F443ED Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/37vTJFPETNCDAO7KZbONU7fbwcM.roa Signing time: Mon 17 Nov 2025 14:16:37 +0000 ROA not before: Mon 17 Nov 2025 14:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7018 IP address blocks: 2a0c:fe02::/32 maxlen: 32 2a0c:fe04::/32 maxlen: 32 2a0c:fe05::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:2c:c1:32:b9:3c:54:e8:30:75:cd:05:95:f4:43:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Nov 17 14:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dfbbd32453c44cd08300eeca65b38d53b7dbc1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:7a:e5:26:7c:82:28:eb:c9:9f:de:03:f4: bc:67:eb:f7:e2:fb:f2:41:13:d8:2f:4c:99:56:91: 1d:eb:ef:3a:ae:f5:e9:ff:c1:0e:09:27:b4:1c:ed: f0:2b:21:07:81:c7:8a:14:40:b6:f0:29:29:d7:b3: f0:8d:e8:0b:ac:1e:8b:d9:b8:c4:64:18:18:83:32: 89:86:fd:b0:5e:08:1d:4a:fe:c0:7c:d6:3c:66:0b: 65:47:c9:7a:37:d2:bc:38:c8:c9:03:fb:93:07:d4: 59:59:fc:93:f8:8f:f0:a3:f7:6a:89:a4:dc:2b:73: 06:e1:b9:d3:7f:a6:61:3c:1f:f9:51:c4:7c:c6:ad: e3:58:51:62:34:7f:dc:ec:b5:9b:05:6c:a5:29:8d: 8f:5f:ea:f9:c6:4b:da:cc:9f:a0:40:ab:a3:4a:80: 56:33:48:ad:ca:93:36:f6:44:77:f8:60:3d:2c:cc: 0b:5f:39:0f:b9:19:b8:90:45:76:15:8f:e3:02:a2: 79:ba:1c:71:4c:15:5e:80:4d:3f:e9:c1:c5:b9:72: 73:35:6b:7a:f6:24:db:c4:3a:dc:2d:72:78:19:03: 54:3a:85:1b:33:62:f5:90:15:a9:63:ea:06:1b:5d: 69:5a:f8:7e:f1:f0:c8:34:7a:03:5c:b0:19:15:14: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BB:D3:24:53:C4:4C:D0:83:00:EE:CA:65:B3:8D:53:B7:DB:C1:C3 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/37vTJFPETNCDAO7KZbONU7fbwcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:fe02::/32 2a0c:fe04::/31 Signature Algorithm: sha256WithRSAEncryption 25:28:44:69:52:b5:e1:9a:50:a5:a0:96:a0:2a:c8:0e:07:d1: e2:36:1d:cb:17:26:c3:2d:63:b9:64:f3:7c:aa:25:3a:5e:21: da:0b:74:0e:de:9e:21:c3:53:0d:7f:df:3d:a9:6e:83:63:dd: 7a:37:85:cd:db:61:37:2d:4b:7c:38:3b:fe:f4:57:73:f6:2d: 0e:e1:c8:39:b3:b5:ed:3b:55:e3:6c:2a:87:31:94:6b:c2:61: e3:61:f5:da:43:77:bf:5a:3c:04:b1:97:3b:9b:bc:12:29:34: 9d:ef:2b:77:fd:20:5d:39:61:92:b5:ff:37:78:11:38:46:42: a2:1c:57:42:4e:49:27:1f:2f:ac:13:61:33:95:44:f4:d7:d9: 70:4f:48:38:4f:c4:cb:85:0d:a8:2a:6f:cd:68:28:cc:58:41: 7d:d5:62:e1:0a:0f:95:c7:fa:f8:3d:e9:07:79:9c:31:28:01: 1c:27:68:0e:e5:c5:f7:51:1f:43:52:c7:44:a6:15:e2:07:6c: e5:eb:33:21:db:c8:ab:21:68:af:06:e4:84:9d:41:f7:2c:cb: 01:98:2b:a6:53:41:ae:00:68:b9:9f:63:df:25:0c:f9:8b:cf: a7:a1:39:4d:b8:38:e4:33:62:d7:86:66:53:9f:fd:76:65:d0: 0d:51:ae:4d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZqSLMEyuTxU6DB1zQWV9EPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMTE3MTQxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmJiZDMyNDUzYzQ0Y2QwODMwMGVlY2E2NWIzOGQ1M2I3ZGJjMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpx65SZ8gijryZ/eA/S8Z+v34vvy QRPYL0yZVpEd6+86rvXp/8EOCSe0HO3wKyEHgceKFEC28Ckp17PwjegLrB6L2bjE ZBgYgzKJhv2wXggdSv7AfNY8ZgtlR8l6N9K8OMjJA/uTB9RZWfyT+I/wo/dqiaTc K3MG4bnTf6ZhPB/5UcR8xq3jWFFiNH/c7LWbBWylKY2PX+r5xkvazJ+gQKujSoBW M0itypM29kR3+GA9LMwLXzkPuRm4kEV2FY/jAqJ5uhxxTBVegE0/6cHFuXJzNWt6 9iTbxDrcLXJ4GQNUOoUbM2L1kBWpY+oGG11pWvh+8fDINHoDXLAZFRRJkwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFN+70yRTxEzQgwDuymWzjVO328HDMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvMzd2VEpGUEVUTkNEQU83S1piT05VN2Zid2NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKgz+AgMF ASoM/gQwDQYJKoZIhvcNAQELBQADggEBACUoRGlSteGaUKWglqAqyA4H0eI2HcsX JsMtY7lk83yqJTpeIdoLdA7eniHDUw1/3z2pboNj3Xo3hc3bYTctS3w4O/70V3P2 LQ7hyDmzte07VeNsKocxlGvCYeNh9dpDd79aPASxlzubvBIpNJ3vK3f9IF05YZK1 /zd4EThGQqIcV0JOSScfL6wTYTOVRPTX2XBPSDhPxMuFDagqb81oKMxYQX3VYuEK D5XH+vg96Qd5nDEoARwnaA7lxfdRH0NSx0SmFeIHbOXrMyHbyKshaK8G5ISdQfcs ywGYK6ZTQa4AaLmfY98lDPmLz6ehOU24OOQzYteGZlOf/XZl0A1Rrk0= -----END CERTIFICATE-----Generated at Thu Dec 4 05:53:55 2025 by rpki-client