This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/czKBKq8A_xBWLhtPr0Y-1MlsF5I.roa File: czKBKq8A_xBWLhtPr0Y-1MlsF5I.roa (raw, json) Hash identifier: M1Hus8B8LnDIJXJs14SlxF7rPlmcMWDpqZDfv9sheM8= Subject key identifier: 73:32:81:2A:AF:00:FF:10:56:2E:1B:4F:AF:46:3E:D4:C9:6C:17:92 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E382A0B1A09134D2B8383FCA555CC99 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/czKBKq8A_xBWLhtPr0Y-1MlsF5I.roa Signing time: Fri 02 Jan 2026 10:19:28 +0000 ROA not before: Fri 02 Jan 2026 10:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57494 IP address blocks: 37.139.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2a:0b:1a:09:13:4d:2b:83:83:fc:a5:55:cc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7332812aaf00ff10562e1b4faf463ed4c96c1792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:af:ec:ba:56:93:2b:85:61:1c:94:9d:3a:66: 54:87:c7:4c:fb:36:e6:81:11:28:33:77:9d:47:d0: f2:67:c4:45:70:b6:02:e9:fc:1f:c8:86:35:19:72: d0:0b:46:3d:64:04:cd:3c:c5:52:e6:14:46:30:f0: 07:fe:2c:bf:bd:1d:84:87:8c:28:d2:97:9f:79:8a: d3:83:8b:5c:c6:e3:91:97:a2:42:6d:ea:d4:bb:64: 92:3e:bb:57:56:60:4f:fd:0f:28:e8:8d:8d:ba:91: 96:6c:37:5c:c6:6e:e2:08:f0:f5:20:72:c2:44:ca: 7a:85:fe:57:9b:a1:46:7c:2a:7e:7f:24:58:56:b8: 55:db:71:f6:0a:5d:6d:45:3a:ad:f5:03:af:c6:55: 38:10:39:bb:0e:61:54:9c:e5:48:f5:97:95:ae:c1: 70:63:0f:0e:aa:79:df:f8:fe:af:ac:21:07:6c:43: 0b:5f:04:8f:b5:48:a1:9a:f2:79:ee:af:1b:6c:13: 85:d0:97:43:d4:90:ef:8e:99:c4:78:0f:b9:67:f3: 90:22:44:0b:44:61:88:9b:92:17:c4:25:99:e1:29: 9f:80:b1:99:5c:a0:45:1a:eb:5a:82:d9:d7:76:03: 13:c6:bf:ee:31:f2:27:ed:f9:9f:e7:2c:9e:1d:75: be:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:32:81:2A:AF:00:FF:10:56:2E:1B:4F:AF:46:3E:D4:C9:6C:17:92 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/czKBKq8A_xBWLhtPr0Y-1MlsF5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.51.0/24 Signature Algorithm: sha256WithRSAEncryption 59:db:dd:e0:17:1b:1e:66:49:c3:f7:b7:db:30:5d:2c:6a:3f: d8:05:95:55:b3:11:7c:3b:90:48:eb:ed:9e:20:08:df:63:99: 13:83:38:2b:08:7c:35:93:2c:0f:89:c6:82:b3:77:21:a7:31: 0e:b5:d0:85:1e:0b:1b:0c:1c:c9:18:c6:b2:86:86:44:2d:45: 54:68:70:14:02:a1:0e:b6:01:75:94:ff:bf:9e:43:24:a8:63: 05:f8:40:34:3e:ac:97:38:32:fb:fb:41:70:ba:bb:7d:62:fe: 1b:45:3b:73:e1:54:26:a4:95:7d:df:fe:78:88:7c:44:05:b7: 6c:5c:b5:c6:8e:12:9c:c8:bf:c7:a9:a9:dc:14:60:ed:c5:ad: 61:7d:34:18:d7:84:6c:7c:9c:cd:22:c8:46:33:40:ab:43:f5: 91:fc:61:08:0a:4c:22:d8:35:04:d0:32:e1:6c:b2:74:d8:80: a6:3b:a1:4e:d3:02:e7:83:f8:d6:25:13:fa:0d:ad:85:3b:50: 0d:2e:2f:80:74:ad:e5:aa:df:c3:b0:22:bd:2a:75:58:22:76: 7a:29:94:e7:64:eb:5a:5c:73:6c:12:3a:f1:42:3d:15:03:fa: 15:a8:60:1d:27:c7:66:2d:8b:88:80:4c:a7:ad:4f:d7:d7:77: d3:16:be:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCoLGgkTTSuDg/ylVcyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzMyODEyYWFmMDBmZjEwNTYyZTFiNGZhZjQ2M2VkNGM5NmMxNzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4q/sulaTK4VhHJSdOmZUh8dM+zbm gREoM3edR9DyZ8RFcLYC6fwfyIY1GXLQC0Y9ZATNPMVS5hRGMPAH/iy/vR2Eh4wo 0pefeYrTg4tcxuORl6JCberUu2SSPrtXVmBP/Q8o6I2NupGWbDdcxm7iCPD1IHLC RMp6hf5Xm6FGfCp+fyRYVrhV23H2Cl1tRTqt9QOvxlU4EDm7DmFUnOVI9ZeVrsFw Yw8Oqnnf+P6vrCEHbEMLXwSPtUihmvJ57q8bbBOF0JdD1JDvjpnEeA+5Z/OQIkQL RGGIm5IXxCWZ4SmfgLGZXKBFGutagtnXdgMTxr/uMfIn7fmf5yyeHXW+mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMygSqvAP8QVi4bT69GPtTJbBeSMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvY3pLQktxOEFfeEJXTGh0UHIwWS0xTWxzRjVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJYszMA0G CSqGSIb3DQEBCwUAA4IBAQBZ293gFxseZknD97fbMF0saj/YBZVVsxF8O5BI6+2e IAjfY5kTgzgrCHw1kywPicaCs3chpzEOtdCFHgsbDBzJGMayhoZELUVUaHAUAqEO tgF1lP+/nkMkqGMF+EA0PqyXODL7+0Fwurt9Yv4bRTtz4VQmpJV93/54iHxEBbds XLXGjhKcyL/HqancFGDtxa1hfTQY14RsfJzNIshGM0CrQ/WR/GEICkwi2DUE0DLh bLJ02ICmO6FO0wLng/jWJRP6Da2FO1ANLi+AdK3lqt/DsCK9KnVYInZ6KZTnZOta XHNsEjrxQj0VA/oVqGAdJ8dmLYuIgEynrU/X13fTFr7D -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:48 2026 by rpki-client