This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/36dwh5FyPDSM8op_d8ZZrdcL01I.roa File: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (raw, json) Hash identifier: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s= Subject key identifier: DF:A7:70:87:91:72:3C:34:8C:F2:8A:7F:77:C6:59:AD:D7:0B:D3:52 Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019B8B486BAC5A969B22DC6843A1359F1D4B Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/36dwh5FyPDSM8op_d8ZZrdcL01I.roa Signing time: Sun 04 Jan 2026 23:12:17 +0000 ROA not before: Sun 04 Jan 2026 23:12:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47890 IP address blocks: 2.57.122.0/24 maxlen: 24 45.13.38.0/24 maxlen: 24 45.13.213.0/24 maxlen: 24 45.129.14.0/24 maxlen: 24 45.129.15.0/24 maxlen: 24 45.134.48.0/24 maxlen: 24 45.138.96.0/24 maxlen: 24 45.138.97.0/24 maxlen: 24 45.138.98.0/24 maxlen: 24 45.148.9.0/24 maxlen: 24 80.94.92.0/24 maxlen: 24 80.94.94.0/24 maxlen: 24 92.118.39.0/24 maxlen: 24 185.232.64.0/24 maxlen: 24 185.232.66.0/24 maxlen: 24 193.32.162.0/24 maxlen: 24 193.46.254.0/24 maxlen: 24 193.46.255.0/24 maxlen: 24 193.47.69.0/24 maxlen: 24 2a0c:9f00::/48 maxlen: 48 2a0c:9f00:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8b:48:6b:ac:5a:96:9b:22:dc:68:43:a1:35:9f:1d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jan 4 23:12:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfa7708791723c348cf28a7f77c659add70bd352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d0:f3:88:80:3f:ae:2c:51:2f:1a:b2:a7:e5: 28:49:4f:6a:c6:76:43:49:78:15:e6:ea:09:c8:0b: d8:58:58:79:f7:34:37:31:69:c5:c0:9d:08:95:8d: 1e:5d:61:a9:e2:4d:45:be:eb:54:09:15:7f:5c:1d: a3:af:94:36:f0:bb:5d:cc:37:9a:d2:d3:6d:e9:b4: 05:a2:fc:b1:b7:73:56:93:b3:ea:e2:fb:ed:75:2e: d5:87:78:09:32:5c:d6:3b:61:94:89:c4:54:ad:2b: 46:ee:0d:b3:43:bb:3d:db:24:5e:80:34:23:0a:54: 0d:7a:28:99:32:10:a2:b4:18:e3:59:73:73:f3:01: 18:95:b2:39:96:23:2f:c8:93:25:e4:40:4e:22:72: 7c:d7:a5:ad:98:19:f0:c0:9a:ea:11:2b:22:f1:0e: 32:d5:a3:e2:43:4e:aa:3b:de:58:c9:21:a8:50:8a: 51:cc:88:27:04:69:6a:46:e8:2e:87:d6:c0:11:f7: 39:0a:eb:5d:3f:cb:12:94:aa:e0:31:1d:de:b7:62: 92:53:ee:a8:80:3e:71:1c:d7:83:17:27:ba:4c:30: 17:94:d0:54:76:f9:c0:c4:b2:e2:79:ab:3f:57:bb: 95:c5:f5:1a:2b:a6:75:31:a9:80:de:ef:5d:91:a7: 14:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A7:70:87:91:72:3C:34:8C:F2:8A:7F:77:C6:59:AD:D7:0B:D3:52 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/36dwh5FyPDSM8op_d8ZZrdcL01I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.122.0/24 45.13.38.0/24 45.13.213.0/24 45.129.14.0/23 45.134.48.0/24 45.138.96.0-45.138.98.255 45.148.9.0/24 80.94.92.0/24 80.94.94.0/24 92.118.39.0/24 185.232.64.0/24 185.232.66.0/24 193.32.162.0/24 193.46.254.0/23 193.47.69.0/24 IPv6: 2a0c:9f00::/48 2a0c:9f00:2::/48 Signature Algorithm: sha256WithRSAEncryption 5e:16:88:ca:62:7d:c5:80:62:2d:ae:ff:9e:c5:88:47:0c:90: a9:c9:62:21:8d:4a:af:47:66:96:11:c1:39:5b:10:58:90:6e: 3e:f0:fc:a3:b9:3f:45:ae:1f:12:dc:ce:2d:fd:c2:9c:df:f3: bb:3a:c1:20:be:3f:d5:be:7e:69:c5:4a:b1:47:df:38:f0:bc: e9:05:bd:e0:8c:c3:ed:1d:29:8f:56:22:1f:e7:06:b7:03:4c: bf:74:23:9b:9c:93:6f:01:33:7b:e1:4e:ad:2d:9b:5c:7e:1d: 22:a6:68:43:00:10:d8:ff:ce:74:92:73:85:f1:4c:4f:e3:1a: ee:89:fb:4a:c7:5c:4b:9e:67:b5:b3:36:34:39:0d:2d:70:1b: 88:30:40:6c:84:da:d6:ca:eb:53:3d:a3:a7:ea:34:ea:8b:9c: 74:36:a4:30:05:e5:42:74:3d:56:36:54:7c:a0:97:c9:0b:9d: d7:c2:2a:ca:f1:c4:e2:83:1a:85:d5:32:c3:77:b1:0a:63:8b: f6:30:28:b4:0d:c7:cd:87:2a:66:98:fd:8f:bf:ba:a3:0b:95: 5d:d0:51:67:19:f5:93:ca:ac:17:60:af:12:1d:7e:f2:f2:46: 3d:35:5c:29:f0:70:22:8b:27:7e:cb:90:11:12:e9:b2:75:eb: f0:6c:fe:25 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgISAZuLSGusWpabItxoQ6E1nx1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMTA0MjMxMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmE3NzA4NzkxNzIzYzM0OGNmMjhhN2Y3N2M2NTlhZGQ3MGJkMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdDziIA/rixRLxqyp+UoSU9qxnZD SXgV5uoJyAvYWFh59zQ3MWnFwJ0IlY0eXWGp4k1FvutUCRV/XB2jr5Q28LtdzDea 0tNt6bQFovyxt3NWk7Pq4vvtdS7Vh3gJMlzWO2GUicRUrStG7g2zQ7s92yRegDQj ClQNeiiZMhCitBjjWXNz8wEYlbI5liMvyJMl5EBOInJ816WtmBnwwJrqESsi8Q4y 1aPiQ06qO95YySGoUIpRzIgnBGlqRuguh9bAEfc5CutdP8sSlKrgMR3et2KSU+6o gD5xHNeDFye6TDAXlNBUdvnAxLLieas/V7uVxfUaK6Z1MamA3u9dkacUVwIDAQAB o4ICgjCCAn4wHQYDVR0OBBYEFN+ncIeRcjw0jPKKf3fGWa3XC9NSMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvMzZkd2g1RnlQRFNNOG9wX2Q4WlpyZGNMMDFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGXBggrBgEFBQcBBwEB/wSBhzCBhDBoBAIAATBiAwQAAjl6 AwQALQ0mAwQALQ3VAwQBLYEOAwQALYYwMAwDBAUtimADBAAtimIDBAAtlAkDBABQ XlwDBABQXl4DBABcdicDBAC56EADBAC56EIDBADBIKIDBAHBLv4DBADBL0UwGAQC AAIwEgMHACoMnwAAAAMHACoMnwAAAjANBgkqhkiG9w0BAQsFAAOCAQEAXhaIymJ9 xYBiLa7/nsWIRwyQqcliIY1Kr0dmlhHBOVsQWJBuPvD8o7k/Ra4fEtzOLf3CnN/z uzrBIL4/1b5+acVKsUffOPC86QW94IzD7R0pj1YiH+cGtwNMv3Qjm5yTbwEze+FO rS2bXH4dIqZoQwAQ2P/OdJJzhfFMT+Ma7on7SsdcS55ntbM2NDkNLXAbiDBAbITa 1srrUz2jp+o06oucdDakMAXlQnQ9VjZUfKCXyQud18IqyvHE4oMahdUyw3exCmOL 9jAotA3HzYcqZpj9j7+6owuVXdBRZxn1k8qsF2CvEh1+8vJGPTVcKfBwIosnfsuQ ERLpsnXr8Gz+JQ== -----END CERTIFICATE-----Generated at Tue Jan 20 00:10:02 2026 by rpki-client