This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/74FH53_qCyxdfdEDKjvoSC_Wclw.roa File: 74FH53_qCyxdfdEDKjvoSC_Wclw.roa (raw, json) Hash identifier: AIZwtyfbxw2VOFHLL9K5sj06w7V4DfeUDPOP1/okP6o= Subject key identifier: EF:81:47:E7:7F:EA:0B:2C:5D:7D:D1:03:2A:3B:E8:48:2F:D6:72:5C Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3 Certificate serial: 019B978C16AC0BF6BE5DA273217C7D514594 Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/74FH53_qCyxdfdEDKjvoSC_Wclw.roa Signing time: Wed 07 Jan 2026 08:21:39 +0000 ROA not before: Wed 07 Jan 2026 08:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8399 IP address blocks: 37.97.64.0/19 maxlen: 19 37.97.96.0/20 maxlen: 20 37.139.120.0/21 maxlen: 21 37.139.124.0/24 maxlen: 24 65.39.64.0/19 maxlen: 19 80.251.96.0/20 maxlen: 20 81.93.0.0/19 maxlen: 19 88.213.224.0/19 maxlen: 19 155.2.128.0/19 maxlen: 19 157.143.128.0/17 maxlen: 17 178.174.96.0/20 maxlen: 23 178.255.160.0/21 maxlen: 21 185.6.92.0/22 maxlen: 22 185.8.252.0/22 maxlen: 22 185.24.140.0/22 maxlen: 22 185.32.208.0/22 maxlen: 22 185.42.176.0/22 maxlen: 22 185.65.248.0/22 maxlen: 22 185.76.216.0/22 maxlen: 22 185.218.208.0/22 maxlen: 22 185.249.20.0/22 maxlen: 22 195.135.0.0/17 maxlen: 17 195.135.0.0/18 maxlen: 18 195.135.12.0/23 maxlen: 23 195.135.48.0/20 maxlen: 20 195.135.48.0/24 maxlen: 24 217.74.96.0/20 maxlen: 20 217.181.128.0/17 maxlen: 17 2a02:6e8::/32 maxlen: 32 2a02:c440::/29 maxlen: 29 2a05:5cc0::/29 maxlen: 29 2a0b:e3c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:8c:16:ac:0b:f6:be:5d:a2:73:21:7c:7d:51:45:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3 Validity Not Before: Jan 7 08:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef8147e77fea0b2c5d7dd1032a3be8482fd6725c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:a1:89:29:87:df:6a:88:fc:f4:6f:22:5a: 59:13:97:cd:e4:4d:d0:8c:77:25:02:ea:20:a9:7a: 7f:80:34:30:83:38:af:63:50:ee:6f:42:3a:2c:c5: ed:fd:1d:f2:fb:0c:87:0f:42:04:e3:74:bd:f1:e7: 0b:a8:3f:87:4d:05:df:e5:b6:1b:72:30:2e:54:b8: 2b:d1:f3:24:8b:88:8c:9c:75:26:83:4d:12:77:b2: c1:3f:5f:5a:09:37:fa:40:25:d3:af:66:60:e4:7c: 2c:67:ea:4e:45:dc:09:76:9f:b4:b1:0b:3d:10:22: a8:da:39:86:80:85:31:08:19:61:fb:49:7c:bd:5a: ae:92:b0:15:47:7a:bf:8f:9a:2c:5f:38:bc:e3:e8: 2e:a0:28:9d:44:ba:b0:05:71:5c:75:bf:cb:91:aa: 82:ab:b0:8f:79:30:05:e5:9d:b8:95:2f:a7:bc:73: 02:df:73:8e:7b:ca:99:15:7e:fc:bb:fa:e6:a3:51: 64:c2:a6:39:e2:59:0b:73:f0:98:6b:79:3e:77:74: 85:8c:28:ee:72:51:ba:da:2c:44:0a:76:ae:90:63: 1d:6e:63:01:2d:4c:5b:07:19:91:e7:58:5e:e8:04: 9d:99:1f:e6:51:7f:2a:14:b5:e4:93:1a:47:e6:21: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:81:47:E7:7F:EA:0B:2C:5D:7D:D1:03:2A:3B:E8:48:2F:D6:72:5C X509v3 Authority Key Identifier: keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/74FH53_qCyxdfdEDKjvoSC_Wclw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.97.64.0-37.97.111.255 37.139.120.0/21 65.39.64.0/19 80.251.96.0/20 81.93.0.0/19 88.213.224.0/19 155.2.128.0/19 157.143.128.0/17 178.174.96.0/20 178.255.160.0/21 185.6.92.0/22 185.8.252.0/22 185.24.140.0/22 185.32.208.0/22 185.42.176.0/22 185.65.248.0/22 185.76.216.0/22 185.218.208.0/22 185.249.20.0/22 195.135.0.0/17 217.74.96.0/20 217.181.128.0/17 IPv6: 2a02:6e8::/32 2a02:c440::/29 2a05:5cc0::/29 2a0b:e3c0::/29 Signature Algorithm: sha256WithRSAEncryption 11:bb:a6:78:01:75:30:aa:5e:8b:ec:e5:06:ea:f7:ef:ab:97: 6e:54:4c:bc:82:f9:74:b0:3e:d1:21:dd:bd:65:6b:d2:4f:75: 6f:2d:d2:fe:47:ca:d0:f6:b1:7d:e3:c4:b7:f4:c2:ee:93:70: 8b:d4:54:8c:06:7b:db:d7:03:48:47:bd:ed:bd:9b:9e:47:55: 5c:6e:f7:a5:4b:d5:6d:12:a3:94:9b:38:e6:86:fc:e0:79:cc: 2d:37:76:90:27:42:e4:99:0e:0a:5f:c0:51:84:6b:ac:9f:39: 60:35:a5:2f:63:5c:81:16:72:8a:95:19:32:48:53:bb:3b:3a: 8f:96:20:b3:ac:d0:62:f6:0d:2a:3e:79:f7:5b:60:03:57:3f: e6:99:81:07:3e:b6:5c:b9:22:69:5b:02:4f:dc:b9:b9:47:fd: b6:c9:89:42:df:21:55:0d:3b:1f:ba:d4:cf:ce:c3:ba:00:4b: f3:31:07:eb:5a:37:84:30:d8:c8:ba:83:61:f2:10:41:39:51: 26:17:f0:89:58:7f:64:62:48:02:8f:41:9a:d4:89:1b:2f:40: 4c:46:94:0f:46:a0:d6:07:96:05:49:6d:d3:3c:1b:f2:3d:d2: da:65:55:be:6e:be:9f:5d:01:52:e4:bf:c4:78:57:54:11:92: c2:7d:50:79 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZuXjBasC/a+XaJzIXx9UUWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDc5YjgzYzUyMGQ3ODQ0NDVjMjQ4MjhiYWI2MzNmMGQ3 MDJjZjMwHhcNMjYwMTA3MDgyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjgxNDdlNzdmZWEwYjJjNWQ3ZGQxMDMyYTNiZTg0ODJmZDY3MjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vWhiSmH32qI/PRvIlpZE5fN5E3Q jHclAuogqXp/gDQwgzivY1Dub0I6LMXt/R3y+wyHD0IE43S98ecLqD+HTQXf5bYb cjAuVLgr0fMki4iMnHUmg00Sd7LBP19aCTf6QCXTr2Zg5HwsZ+pORdwJdp+0sQs9 ECKo2jmGgIUxCBlh+0l8vVqukrAVR3q/j5osXzi84+guoCidRLqwBXFcdb/LkaqC q7CPeTAF5Z24lS+nvHMC33OOe8qZFX78u/rmo1FkwqY54lkLc/CYa3k+d3SFjCju clG62ixECnaukGMdbmMBLUxbBxmR51he6ASdmR/mUX8qFLXkkxpH5iFn9wIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFO+BR+d/6gssXX3RAyo76Egv1nJcMB8GA1UdIwQY MBaAFPFHm4PFINeERFwkgourYz8NcCzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEt YmRkNGFmNWYzNWQxLzEvNzRGSDUzX3FDeXhkZmRFREtqdm9TQ19XY2x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEtYmRkNGFmNWYzNWQx LzEvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBkwQCAAEwgYwwDAME BiVhQAMEBCVhYAMEAyWLeAMEBUEnQAMEBFD7YAMEBVFdAAMEBVjV4AMEBZsCgAME B52PgAMEBLKuYAMEA7L/oAMEArkGXAMEArkI/AMEArkYjAMEArkg0AMEArkqsAME ArlB+AMEArlM2AMEArna0AMEArn5FAMEB8OHAAMEBNlKYAMEB9m1gDAiBAIAAjAc AwUAKgIG6AMFAyoCxEADBQMqBVzAAwUDKgvjwDANBgkqhkiG9w0BAQsFAAOCAQEA EbumeAF1MKpei+zlBur376uXblRMvIL5dLA+0SHdvWVr0k91by3S/kfK0PaxfePE t/TC7pNwi9RUjAZ729cDSEe97b2bnkdVXG73pUvVbRKjlJs45ob84HnMLTd2kCdC 5JkOCl/AUYRrrJ85YDWlL2NcgRZyipUZMkhTuzs6j5Ygs6zQYvYNKj5591tgA1c/ 5pmBBz62XLkiaVsCT9y5uUf9tsmJQt8hVQ07H7rUz87DugBL8zEH61o3hDDYyLqD YfIQQTlRJhfwiVh/ZGJIAo9BmtSJGy9ATEaUD0ag1geWBUlt0zwb8j3S2mVVvm6+ n10BUuS/xHhXVBGSwn1QeQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:06 2026 by rpki-client