This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa File: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (raw, json) Hash identifier: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE= Subject key identifier: DF:A2:20:F0:A5:D7:81:1D:07:97:1F:35:0D:B8:AF:B7:6F:CA:28:1D Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A08D18667EB2A087825493132849 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa Signing time: Fri 02 Jan 2026 10:18:53 +0000 ROA not before: Fri 02 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202183 IP address blocks: 77.36.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a0:8d:18:66:7e:b2:a0:87:82:54:93:13:28:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfa220f0a5d7811d07971f350db8afb76fca281d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:18:8a:8a:43:35:1b:97:4a:71:19:fa:c2: 77:7f:c2:87:2a:7c:40:9d:14:d8:27:93:87:e7:18: 1a:b2:06:bb:70:b5:14:01:8b:2f:3a:d1:d1:2e:cf: f1:60:d1:23:fd:3a:03:e6:72:54:51:ec:8b:43:13: 9b:41:53:5e:2e:90:88:46:29:ad:19:ed:f0:25:1d: 23:7d:a7:5f:98:9f:7a:a8:25:37:3d:de:a2:06:fd: 8c:3a:2d:02:8f:fd:e7:af:be:8d:a3:be:ca:b8:eb: f7:17:fa:db:aa:b4:75:5a:91:60:9e:e3:88:ee:84: bf:4d:0d:d8:f8:fb:37:f2:e5:f6:2e:1a:8a:28:59: 63:88:30:36:6a:90:5e:9e:46:c4:f2:71:cd:24:b6: a2:39:67:18:8b:22:14:a8:4c:14:da:51:49:83:21: 36:39:75:5b:55:a8:6c:a8:67:0d:87:01:fe:59:f3: 48:f3:76:16:ec:a4:5a:5a:cb:0c:ac:6b:49:38:40: ee:57:14:83:c3:26:dc:26:59:02:5e:09:10:c1:55: d1:d3:85:2f:b5:25:46:d4:ff:07:6d:1c:fd:4d:c0: 99:3d:67:0d:d0:be:ee:8c:9a:30:5b:fa:35:e4:7a: cd:6a:64:55:f3:b2:f7:4a:f2:bc:2c:f1:ad:c3:74: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A2:20:F0:A5:D7:81:1D:07:97:1F:35:0D:B8:AF:B7:6F:CA:28:1D X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.36.31.0/24 Signature Algorithm: sha256WithRSAEncryption 46:35:13:92:f6:dd:9a:ab:63:a8:f1:58:57:6b:eb:6a:2a:20: c8:a5:67:37:b3:ec:b8:11:22:ea:c3:8f:a5:d0:d1:58:ba:7e: 47:58:f1:03:7e:8b:33:5e:93:82:d4:6e:d6:79:f2:b2:73:e5: b4:7f:d5:bb:3f:ee:d0:2d:8c:df:9e:0f:c1:24:29:13:6b:7e: 55:bd:ad:9a:6c:df:4e:72:3f:6f:65:71:29:df:af:1d:1e:40: 2f:6b:a6:7c:de:71:ee:b9:76:bd:06:5c:be:16:d8:de:bb:6c: ea:b7:92:e0:cb:86:99:95:3e:32:b6:8e:6e:bc:8a:81:62:12: 56:51:5f:28:fb:9c:70:5a:9b:c0:62:d9:ac:f2:3a:4f:e3:92: 94:a8:ac:b0:6a:a4:34:20:95:09:19:a1:80:51:cc:dd:53:9b: 05:01:8f:f2:fb:29:ec:ce:7a:50:bf:3f:5d:a8:ee:fd:bb:fb: dd:99:ba:4f:6d:cf:cf:a0:09:8f:98:f4:8e:68:e1:60:3d:14: 02:81:3c:8d:84:b0:23:4e:0f:f3:69:aa:bb:c7:97:d4:b9:34: 63:e8:4c:3e:cf:5c:2a:42:c4:b4:23:e1:ab:21:12:1e:35:33: 61:83:9c:4d:26:7b:a9:e2:ab:73:f6:5c:3f:55:cd:04:42:ad: aa:18:94:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N6CNGGZ+sqCHglSTEyhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmEyMjBmMGE1ZDc4MTFkMDc5NzFmMzUwZGI4YWZiNzZmY2EyODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfoYiopDNRuXSnEZ+sJ3f8KHKnxA nRTYJ5OH5xgasga7cLUUAYsvOtHRLs/xYNEj/ToD5nJUUeyLQxObQVNeLpCIRimt Ge3wJR0jfadfmJ96qCU3Pd6iBv2MOi0Cj/3nr76No77KuOv3F/rbqrR1WpFgnuOI 7oS/TQ3Y+Ps38uX2LhqKKFljiDA2apBenkbE8nHNJLaiOWcYiyIUqEwU2lFJgyE2 OXVbVahsqGcNhwH+WfNI83YW7KRaWssMrGtJOEDuVxSDwybcJlkCXgkQwVXR04Uv tSVG1P8HbRz9TcCZPWcN0L7ujJowW/o15HrNamRV87L3SvK8LPGtw3TzIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+iIPCl14EdB5cfNQ24r7dvyigdMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvMzZJZzhLWFhnUjBIbHg4MURiaXZ0Ml9LS0IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATSQfMA0G CSqGSIb3DQEBCwUAA4IBAQBGNROS9t2aq2Oo8VhXa+tqKiDIpWc3s+y4ESLqw4+l 0NFYun5HWPEDfoszXpOC1G7WefKyc+W0f9W7P+7QLYzfng/BJCkTa35Vva2abN9O cj9vZXEp368dHkAva6Z83nHuuXa9Bly+Ftjeu2zqt5Lgy4aZlT4yto5uvIqBYhJW UV8o+5xwWpvAYtms8jpP45KUqKywaqQ0IJUJGaGAUczdU5sFAY/y+ynsznpQvz9d qO79u/vdmbpPbc/PoAmPmPSOaOFgPRQCgTyNhLAjTg/zaaq7x5fUuTRj6Ew+z1wq QsS0I+GrIRIeNTNhg5xNJnup4qtz9lw/Vc0EQq2qGJRJ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:15 2026 by rpki-client