This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/r47MRARxvREaP0Ah_11O-cLfu-s.roa File: r47MRARxvREaP0Ah_11O-cLfu-s.roa (raw, json) Hash identifier: LeIj0s1+JXIIaqEgy1zlSIm6PbcOZinbhp+DfBd4YXA= Subject key identifier: AF:8E:CC:44:04:71:BD:11:1A:3F:40:21:FF:5D:4E:F9:C2:DF:BB:EB Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C8026F70A6AF8BAAD9E233ADC446B58 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/r47MRARxvREaP0Ah_11O-cLfu-s.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207252 IP address blocks: 37.221.95.0/24 maxlen: 24 45.84.197.0/24 maxlen: 24 45.133.75.0/24 maxlen: 24 45.137.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:26:f7:0a:6a:f8:ba:ad:9e:23:3a:dc:44:6b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af8ecc440471bd111a3f4021ff5d4ef9c2dfbbeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:be:92:af:52:7a:b9:af:e9:91:e2:91:87: 02:93:c9:d6:be:da:3b:ba:aa:4a:09:18:41:10:e5: 4b:20:6b:2d:c1:5b:f0:29:9e:e2:1c:87:bb:fa:25: b5:39:07:18:f2:1d:36:a3:fd:5c:8c:71:2e:38:fd: 91:21:4b:24:cf:c9:ef:a0:71:81:99:cf:3c:40:3f: f0:55:e2:20:c5:50:c6:7c:ff:18:f0:36:e4:1a:3a: 73:c9:fb:e6:79:d1:3e:57:60:c7:b4:77:d9:30:51: 5b:e9:28:34:9e:68:ee:21:51:0b:98:24:4b:00:95: 61:0b:46:9d:04:ba:73:6c:c2:ab:79:df:87:6a:e4: 0e:f5:2d:51:e6:43:a5:fe:da:7b:0e:cd:34:43:21: dc:3e:7f:a4:11:3b:57:e2:b1:96:e8:8e:10:8a:f0: d6:01:ce:a3:28:43:dd:75:28:52:23:b1:ac:77:38: c6:64:7e:e9:66:b0:f4:5d:e1:b2:de:23:0c:40:5d: 2b:ca:22:0a:5a:70:1a:ae:2b:91:6b:c9:d7:db:66: b5:38:8b:6d:2b:26:f6:f1:25:6f:6c:d9:bb:e2:6f: 7c:1d:25:9a:78:a6:ba:6f:1a:86:01:6f:2c:c8:7d: 61:93:e2:6d:78:3a:81:8e:14:6f:68:d2:8a:a7:c8: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8E:CC:44:04:71:BD:11:1A:3F:40:21:FF:5D:4E:F9:C2:DF:BB:EB X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/r47MRARxvREaP0Ah_11O-cLfu-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.95.0/24 45.84.197.0/24 45.133.75.0/24 45.137.68.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:30:3f:3c:b3:1c:83:1d:2f:2d:46:38:26:c9:5c:22:34:8c: e0:03:41:83:f0:56:d3:8d:88:1e:5c:c8:4d:8f:1f:38:e9:52: c9:b7:e2:42:d0:1f:31:73:55:46:86:81:92:8b:a2:3b:f9:9c: 87:4e:8d:ea:1e:6d:fa:98:c6:ab:83:fc:2c:5f:1e:15:4d:54: e8:69:a7:bc:96:81:ff:37:c4:58:63:d1:33:51:07:da:3f:65: 43:94:37:01:90:5c:07:06:39:30:af:94:7e:87:bc:78:3d:f4: 67:fc:a8:8b:a7:1f:53:39:b6:b5:0c:b7:5a:6c:50:63:a6:93: 11:cc:1a:82:4e:2c:8b:0a:62:e5:e1:d1:b1:eb:56:0c:24:a9: f9:f6:67:96:5f:ef:0e:cf:27:3c:6d:22:3c:44:2e:f8:c0:cc: ed:51:d9:4c:25:b6:2e:da:30:c8:ef:5e:e3:d7:5d:55:1d:39: 87:43:92:e4:ac:b2:98:ff:f2:84:54:6c:9e:7a:0f:4d:74:7e: 18:df:91:e4:ed:c6:bb:db:29:9c:a7:f3:62:18:5b:e2:1d:92: 04:a9:71:7a:28:26:5d:76:22:60:03:34:f1:72:2e:57:33:72: e2:08:d8:09:3e:58:e7:25:f8:47:d6:bc:50:f6:50:1c:06:b3: 64:b2:c8:99 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8gCb3Cmr4uq2eIzrcRGtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjhlY2M0NDA0NzFiZDExMWEzZjQwMjFmZjVkNGVmOWMyZGZiYmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6a+kq9Sermv6ZHikYcCk8nWvto7 uqpKCRhBEOVLIGstwVvwKZ7iHIe7+iW1OQcY8h02o/1cjHEuOP2RIUskz8nvoHGB mc88QD/wVeIgxVDGfP8Y8DbkGjpzyfvmedE+V2DHtHfZMFFb6Sg0nmjuIVELmCRL AJVhC0adBLpzbMKred+HauQO9S1R5kOl/tp7Ds00QyHcPn+kETtX4rGW6I4QivDW Ac6jKEPddShSI7GsdzjGZH7pZrD0XeGy3iMMQF0ryiIKWnAariuRa8nX22a1OItt Kyb28SVvbNm74m98HSWaeKa6bxqGAW8syH1hk+JteDqBjhRvaNKKp8iJlQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFK+OzEQEcb0RGj9AIf9dTvnC37vrMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvcjQ3TVJBUnh2UkVhUDBBaF8xMU8tY0xmdS1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJd1fAwQA LVTFAwQALYVLAwQALYlEMA0GCSqGSIb3DQEBCwUAA4IBAQA+MD88sxyDHS8tRjgm yVwiNIzgA0GD8FbTjYgeXMhNjx846VLJt+JC0B8xc1VGhoGSi6I7+ZyHTo3qHm36 mMarg/wsXx4VTVToaae8loH/N8RYY9EzUQfaP2VDlDcBkFwHBjkwr5R+h7x4PfRn /KiLpx9TOba1DLdabFBjppMRzBqCTiyLCmLl4dGx61YMJKn59meWX+8Ozyc8bSI8 RC74wMztUdlMJbYu2jDI717j111VHTmHQ5LkrLKY//KEVGyeeg9NdH4Y35Hk7ca7 2ymcp/NiGFviHZIEqXF6KCZddiJgAzTxci5XM3LiCNgJPljnJfhH1rxQ9lAcBrNk ssiZ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:31 2026 by rpki-client