This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Ia3WxJ4E9TqR5H8goAOL2URQgII.roa File: Ia3WxJ4E9TqR5H8goAOL2URQgII.roa (raw, json) Hash identifier: c7Sq9aBefC9FbsCEReCs8PjML6m8fkyaIUcwK37ZNC4= Subject key identifier: 21:AD:D6:C4:9E:04:F5:3A:91:E4:7F:20:A0:03:8B:D9:44:50:80:82 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A4442C8458F434083986F73C06E9 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Ia3WxJ4E9TqR5H8goAOL2URQgII.roa Signing time: Fri 02 Jan 2026 10:18:54 +0000 ROA not before: Fri 02 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207023 IP address blocks: 37.97.116.0/22 maxlen: 24 91.229.147.0/24 maxlen: 24 91.232.18.0/24 maxlen: 24 91.234.122.0/23 maxlen: 24 176.116.238.0/23 maxlen: 24 176.118.200.0/22 maxlen: 22 176.118.204.0/22 maxlen: 22 192.162.186.0/23 maxlen: 24 194.33.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a4:44:2c:84:58:f4:34:08:39:86:f7:3c:06:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21add6c49e04f53a91e47f20a0038bd944508082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:fa:5e:48:d6:53:bb:09:32:51:5c:17:86: 07:ef:24:0d:bd:ef:3e:7c:01:42:c1:99:00:83:bf: 8a:2b:e4:f5:d5:b4:6a:fd:f3:96:22:87:30:c8:6a: 68:33:c5:e5:4b:21:0a:b8:d9:1e:c1:5e:eb:a3:d7: f2:3a:8a:ba:ff:0f:d9:27:02:d0:d0:35:28:80:ae: 01:e6:a4:aa:94:90:af:08:25:ef:1e:07:dc:e5:e2: 7d:f5:c0:21:ff:9c:5c:3c:22:9d:8f:02:5b:93:41: 4a:70:27:f3:e7:60:54:d7:2e:05:4c:24:74:ee:f5: 7e:cd:31:3f:ef:ec:91:5e:a3:52:d8:5d:77:6b:05: 2b:6e:97:5b:d6:2e:b5:a6:cf:51:46:91:30:6d:4f: 0b:fe:44:db:a9:af:91:ce:35:75:04:e4:9d:92:d6: 2a:00:e0:63:33:7f:6a:42:45:61:63:77:1f:4f:81: 9c:76:b4:62:49:8d:64:22:cc:8b:1f:36:ae:ac:24: 2f:8b:43:c1:35:2e:cc:8a:fe:7c:2a:85:35:56:f7: 1a:22:7c:1a:82:e4:dc:27:da:18:42:3d:de:d7:62: 9e:69:cb:9e:bd:9c:f7:ec:a0:83:d5:7b:d1:ec:83: 6b:86:bf:55:e0:1e:76:77:8d:0e:52:44:6e:81:d0: c6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AD:D6:C4:9E:04:F5:3A:91:E4:7F:20:A0:03:8B:D9:44:50:80:82 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Ia3WxJ4E9TqR5H8goAOL2URQgII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.97.116.0/22 91.229.147.0/24 91.232.18.0/24 91.234.122.0/23 176.116.238.0/23 176.118.200.0/21 192.162.186.0/23 194.33.64.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:22:94:4b:e0:1e:fd:0b:7e:ac:62:d3:f8:cc:09:e5:6a:4b: 1f:db:30:57:50:7d:ed:4d:11:d5:74:d3:ed:70:07:29:65:ae: c3:4e:e9:20:43:b6:5b:36:32:54:05:a8:62:bf:35:fa:c7:c6: 7a:ec:b9:c0:5c:20:7a:8b:8b:c0:e9:01:d2:22:c0:f4:a3:ed: eb:5a:f6:6e:5f:7f:da:19:c6:43:ae:43:dd:fe:db:80:86:8f: 80:ec:e8:64:9a:0e:ef:6c:37:be:2d:2f:cb:b5:97:e4:09:43: 7b:0c:c6:65:5c:50:55:f3:c1:86:1d:8b:66:aa:c1:5a:5b:a5: d4:8e:30:93:80:9a:6b:b2:49:bf:d6:e7:d7:f0:7d:cc:8c:0c: d6:8d:43:27:b3:9c:b3:50:09:ca:5e:55:2d:12:93:35:57:d9: 30:2d:5b:d2:73:c5:50:af:31:ee:74:b9:bf:a0:e9:53:46:0e: 31:00:a8:18:32:70:9c:4f:3b:74:51:cd:d5:c6:d9:d2:c2:22: d3:8b:09:8b:83:1b:61:c6:23:61:fc:c9:dc:60:d3:18:dd:66: 3d:d9:bc:8f:cf:94:a5:5e:af:4f:ab:dc:e2:0d:05:b9:d7:d5: 61:b8:9b:93:57:2a:c3:d0:4a:06:93:08:f8:0c:f7:1d:f8:ed: 45:e4:19:c0 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt+N6RELIRY9DQIOYb3PAbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWFkZDZjNDllMDRmNTNhOTFlNDdmMjBhMDAzOGJkOTQ0NTA4MDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3If6XkjWU7sJMlFcF4YH7yQNve8+ fAFCwZkAg7+KK+T11bRq/fOWIocwyGpoM8XlSyEKuNkewV7ro9fyOoq6/w/ZJwLQ 0DUogK4B5qSqlJCvCCXvHgfc5eJ99cAh/5xcPCKdjwJbk0FKcCfz52BU1y4FTCR0 7vV+zTE/7+yRXqNS2F13awUrbpdb1i61ps9RRpEwbU8L/kTbqa+RzjV1BOSdktYq AOBjM39qQkVhY3cfT4GcdrRiSY1kIsyLHzaurCQvi0PBNS7Miv58KoU1VvcaInwa guTcJ9oYQj3e12KeacuevZz37KCD1XvR7INrhr9V4B52d40OUkRugdDGGwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFCGt1sSeBPU6keR/IKADi9lEUICCMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvSWEzV3hKNEU5VHFSNUg4Z29BT0wyVVJRZ0lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCJWF0AwQA W+WTAwQAW+gSAwQBW+p6AwQBsHTuAwQDsHbIAwQBwKK6AwQBwiFAMA0GCSqGSIb3 DQEBCwUAA4IBAQA+IpRL4B79C36sYtP4zAnlaksf2zBXUH3tTRHVdNPtcAcpZa7D TukgQ7ZbNjJUBahivzX6x8Z67LnAXCB6i4vA6QHSIsD0o+3rWvZuX3/aGcZDrkPd /tuAho+A7Ohkmg7vbDe+LS/LtZfkCUN7DMZlXFBV88GGHYtmqsFaW6XUjjCTgJpr skm/1ufX8H3MjAzWjUMns5yzUAnKXlUtEpM1V9kwLVvSc8VQrzHudLm/oOlTRg4x AKgYMnCcTzt0Uc3VxtnSwiLTiwmLgxthxiNh/MncYNMY3WY92byPz5SlXq9Pq9zi DQW519VhuJuTVyrD0EoGkwj4DPcd+O1F5BnA -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:00 2026 by rpki-client