This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa File: jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa (raw, json) Hash identifier: bLe2Zk8IquF+7aI/fXPQxZklmLIeFhH3W5DkdYCydQA= Subject key identifier: 8D:33:04:52:19:25:EA:C2:8F:0E:55:BA:80:68:17:66:C1:F8:57:04 Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35CB22FCAFFF95935C578181A11C89 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205544 IP address blocks: 37.44.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:cb:22:fc:af:ff:95:93:5c:57:81:81:a1:1c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d3304521925eac28f0e55ba80681766c1f85704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:ae:1d:17:e9:03:fb:26:d1:01:99:17:f9: 0c:b4:96:76:8e:36:26:c0:62:c5:05:e0:be:e4:d7: 2a:f7:ac:a6:88:06:64:09:e4:93:10:81:3e:88:19: 33:da:c6:1d:43:a6:7c:45:da:64:8d:47:71:3a:ee: a4:0d:4a:eb:17:7f:de:ed:9e:03:e0:81:e9:e0:96: f4:d9:a7:6f:01:da:8f:3c:68:66:f5:62:fc:94:5f: fe:b6:5c:89:ff:a1:d1:c3:5b:4b:7e:b0:20:8e:f9: 8a:11:21:43:ff:78:7d:71:5e:0d:cf:87:0a:b0:83: eb:8f:ce:22:c4:03:0e:6d:8e:36:a6:d5:2c:18:ec: b1:b3:54:bd:81:d9:94:0e:6b:0e:8d:c8:36:b7:ab: 8c:bf:20:19:82:dd:94:03:81:19:a7:5d:0b:b6:d4: e7:75:6a:80:75:ea:0c:0d:58:2d:d8:d9:d5:5f:72: 93:17:a4:47:15:83:6c:89:e6:5f:4c:c0:94:d2:e0: 1f:db:57:f8:44:8b:1e:5c:c9:60:3d:4f:f6:50:0c: f5:00:d3:aa:2f:23:1e:5d:d1:e3:2b:1e:c9:b6:5a: 8c:56:a3:a9:bf:ad:7c:f8:81:5a:5d:b6:ea:07:dc: 32:31:d5:f8:21:5e:72:c5:1f:bf:34:7e:86:35:33: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:33:04:52:19:25:EA:C2:8F:0E:55:BA:80:68:17:66:C1:F8:57:04 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.216.0/22 Signature Algorithm: sha256WithRSAEncryption 83:82:54:a4:51:bd:d8:6d:63:1c:10:f8:a9:02:d2:fd:ec:7d: 15:f9:c6:fe:e8:85:50:a7:c9:bb:44:0a:c7:58:34:3e:1e:12: 7b:44:a3:25:e2:e3:77:74:ba:aa:58:ce:a9:22:26:93:7a:64: 24:d4:b5:4d:ad:e2:a8:cd:1b:05:47:da:91:2e:a9:c8:04:f6: f7:dd:f4:72:95:29:69:dc:2a:8b:9a:84:5f:39:43:f8:24:48: 0a:98:fb:57:65:ba:c4:4c:6f:d8:fb:82:87:80:f0:12:46:c1: 98:08:6d:52:67:45:87:24:6a:3b:5c:6a:e8:d7:18:51:3c:fe: e1:2a:f0:93:a9:58:6e:26:7b:0f:44:25:23:d1:76:33:13:d5: da:4a:58:0a:b7:61:d5:5f:da:e2:be:87:28:c4:38:e6:b1:db: f7:50:06:68:c7:56:b3:60:68:77:9f:5b:34:87:8f:fe:8c:54: f0:c4:75:49:d7:a5:ca:cb:d1:ef:95:f1:99:66:89:73:5a:7c: 4c:02:c2:1b:d0:fc:a7:d4:a4:f0:34:9e:cc:8d:84:ac:c7:e1: a9:96:04:78:67:03:d2:a6:91:5e:c5:02:28:47:77:c9:68:74: f3:1a:d8:28:41:16:f6:fe:0b:7c:b9:32:e0:85:03:81:f1:f1: bf:53:2a:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ncsi/K//lZNcV4GBoRyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDMzMDQ1MjE5MjVlYWMyOGYwZTU1YmE4MDY4MTc2NmMxZjg1NzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptOuHRfpA/sm0QGZF/kMtJZ2jjYm wGLFBeC+5Ncq96ymiAZkCeSTEIE+iBkz2sYdQ6Z8RdpkjUdxOu6kDUrrF3/e7Z4D 4IHp4Jb02advAdqPPGhm9WL8lF/+tlyJ/6HRw1tLfrAgjvmKESFD/3h9cV4Nz4cK sIPrj84ixAMObY42ptUsGOyxs1S9gdmUDmsOjcg2t6uMvyAZgt2UA4EZp10LttTn dWqAdeoMDVgt2NnVX3KTF6RHFYNsieZfTMCU0uAf21f4RIseXMlgPU/2UAz1ANOq LyMeXdHjKx7JtlqMVqOpv618+IFaXbbqB9wyMdX4IV5yxR+/NH6GNTOhowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI0zBFIZJerCjw5VuoBoF2bB+FcEMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvalRNRVVoa2w2c0tQRGxXNmdHZ1hac0g0VndRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJSzYMA0G CSqGSIb3DQEBCwUAA4IBAQCDglSkUb3YbWMcEPipAtL97H0V+cb+6IVQp8m7RArH WDQ+HhJ7RKMl4uN3dLqqWM6pIiaTemQk1LVNreKozRsFR9qRLqnIBPb33fRylSlp 3CqLmoRfOUP4JEgKmPtXZbrETG/Y+4KHgPASRsGYCG1SZ0WHJGo7XGro1xhRPP7h KvCTqVhuJnsPRCUj0XYzE9XaSlgKt2HVX9rivocoxDjmsdv3UAZox1azYGh3n1s0 h4/+jFTwxHVJ16XKy9HvlfGZZolzWnxMAsIb0Pyn1KTwNJ7MjYSsx+GplgR4ZwPS ppFexQIoR3fJaHTzGtgoQRb2/gt8uTLghQOB8fG/Uyrr -----END CERTIFICATE-----Generated at Wed Jan 21 04:09:31 2026 by rpki-client