This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/ySQQLXcCioQUrT-vVLYr88NDd8k.roa File: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (raw, json) Hash identifier: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY= Subject key identifier: C9:24:10:2D:77:02:8A:84:14:AD:3F:AF:54:B6:2B:F3:C3:43:77:C9 Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519 Certificate serial: 019B7C80C32DD98B8DE1E57E28B12E58A6A5 Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/ySQQLXcCioQUrT-vVLYr88NDd8k.roa Signing time: Fri 02 Jan 2026 02:19:31 +0000 ROA not before: Fri 02 Jan 2026 02:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 37.205.0.0/24 maxlen: 24 37.205.1.0/24 maxlen: 24 37.205.2.0/24 maxlen: 24 37.205.3.0/24 maxlen: 24 37.205.4.0/24 maxlen: 24 37.205.5.0/24 maxlen: 24 37.205.6.0/24 maxlen: 24 37.205.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:c3:2d:d9:8b:8d:e1:e5:7e:28:b1:2e:58:a6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519 Validity Not Before: Jan 2 02:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c924102d77028a8414ad3faf54b62bf3c34377c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:1d:09:56:34:0d:6c:06:30:cd:77:f9:8b: 26:43:48:a3:3b:78:28:c1:4f:ea:3e:a0:fa:77:28: e9:48:ce:09:7c:f7:ae:13:1c:4a:e7:d6:e0:cb:5d: 90:fa:f7:e5:b3:0f:8e:7d:bc:e7:2b:39:03:47:c2: cb:4d:0a:26:99:ae:ea:a1:44:42:21:4e:3b:8b:87: d8:c7:4b:8a:31:ad:b3:34:47:c1:cc:7d:18:ee:73: e7:2b:d3:9e:3c:2b:1d:8f:0c:bd:ef:68:d5:b0:b3: 27:b3:e6:f3:7b:27:78:b9:de:9d:d5:5c:e5:72:66: 54:80:e9:1b:88:a0:2a:2d:85:ee:62:69:55:ba:a5: bd:ca:91:a3:c3:07:26:ce:41:93:d0:3f:36:21:60: 6a:3d:b7:fd:aa:60:81:a0:90:02:97:8f:53:7d:64: 45:98:e5:4b:64:02:5a:59:80:c6:84:28:78:35:49: 32:60:2c:39:38:e5:d7:2d:44:52:c2:06:db:36:c7: fc:f4:1f:f6:36:e4:ba:18:86:9e:36:23:db:ff:a5: 7d:b3:14:93:d1:6e:53:49:2d:80:eb:72:d5:42:8e: a1:42:19:73:5b:13:30:77:a3:23:52:d3:76:51:55: 19:5e:54:59:76:55:53:6e:cf:14:b1:16:04:98:1a: 12:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:24:10:2D:77:02:8A:84:14:AD:3F:AF:54:B6:2B:F3:C3:43:77:C9 X509v3 Authority Key Identifier: keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/ySQQLXcCioQUrT-vVLYr88NDd8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.205.0.0/21 Signature Algorithm: sha256WithRSAEncryption 0f:c2:2f:c0:50:9b:56:40:45:dc:5e:56:90:7f:78:7d:c4:9e: 00:de:c1:67:c7:56:94:c2:1d:b0:04:c9:88:05:4a:da:71:e0: aa:ad:35:d7:4f:c7:8e:86:a2:40:56:1b:5c:ce:50:19:64:59: 9b:f0:81:56:10:4d:6b:f2:cb:5d:5e:f8:f8:7a:09:cd:95:d6: 3b:55:9f:09:a8:64:5f:6e:6d:15:6b:35:91:51:02:19:c8:42: 6e:5f:c6:91:21:28:0a:7e:73:b4:42:cd:98:28:11:1e:8e:b1: 9c:d6:6a:eb:39:69:0c:4e:0d:54:41:cc:da:27:a0:16:05:87: aa:0d:2f:d5:47:da:c5:e5:75:b0:fa:9a:a6:9a:3e:d3:aa:1d: ee:18:51:18:99:e7:04:28:0c:7b:03:3f:53:40:de:37:cb:98: 4e:7a:17:02:91:48:2d:c5:6c:c1:fa:29:11:92:16:a9:e0:d9: 1d:78:29:22:3b:cb:70:96:ba:a9:57:5f:5b:5f:d2:15:ae:78: 4b:be:80:3a:c2:5e:3b:86:f1:67:cf:74:11:f0:b9:e5:b1:48: 9b:f3:d7:27:d9:6e:bc:d1:28:3b:47:89:92:60:42:f9:f3:0d: 13:f4:6e:18:b0:f9:80:f4:c3:de:ea:a5:51:5c:19:f4:56:48: c3:0b:a5:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMMt2YuN4eV+KLEuWKalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwZWJhZjJjYmE4MzU5NDM4ZTQzNDEyM2RkYTdhNWEzOTZm NWY1MTkwHhcNMjYwMTAyMDIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTI0MTAyZDc3MDI4YTg0MTRhZDNmYWY1NGI2MmJmM2MzNDM3N2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQwdCVY0DWwGMM13+YsmQ0ijO3go wU/qPqD6dyjpSM4JfPeuExxK59bgy12Q+vflsw+OfbznKzkDR8LLTQomma7qoURC IU47i4fYx0uKMa2zNEfBzH0Y7nPnK9OePCsdjwy972jVsLMns+bzeyd4ud6d1Vzl cmZUgOkbiKAqLYXuYmlVuqW9ypGjwwcmzkGT0D82IWBqPbf9qmCBoJACl49TfWRF mOVLZAJaWYDGhCh4NUkyYCw5OOXXLURSwgbbNsf89B/2NuS6GIaeNiPb/6V9sxST 0W5TSS2A63LVQo6hQhlzWxMwd6MjUtN2UVUZXlRZdlVTbs8UsRYEmBoSnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMkkEC13AoqEFK0/r1S2K/PDQ3fJMB8GA1UdIwQY MBaAFIDrryy6g1lDjkNBI92npaOW9fUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDkt Zjc4YmRiNmY2MGMyLzEveVNRUUxYY0Npb1FVclQtdlZMWXI4OE5EZDhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMWY4YTAtN2U5NS00ZmUyLTg4MDktZjc4YmRiNmY2MGMy LzEvZ091dkxMcURXVU9PUTBFajNhZWxvNWIxOVJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJc0AMA0G CSqGSIb3DQEBCwUAA4IBAQAPwi/AUJtWQEXcXlaQf3h9xJ4A3sFnx1aUwh2wBMmI BUraceCqrTXXT8eOhqJAVhtczlAZZFmb8IFWEE1r8stdXvj4egnNldY7VZ8JqGRf bm0VazWRUQIZyEJuX8aRISgKfnO0Qs2YKBEejrGc1mrrOWkMTg1UQczaJ6AWBYeq DS/VR9rF5XWw+pqmmj7Tqh3uGFEYmecEKAx7Az9TQN43y5hOehcCkUgtxWzB+ikR khap4NkdeCkiO8twlrqpV19bX9IVrnhLvoA6wl47hvFnz3QR8LnlsUib89cn2W68 0Sg7R4mSYEL58w0T9G4YsPmA9MPe6qVRXBn0VkjDC6VS -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:08 2026 by rpki-client