This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/FEFxaV6JKNIg7q55qcKCrfCq-z4.roa File: FEFxaV6JKNIg7q55qcKCrfCq-z4.roa (raw, json) Hash identifier: b7JfyrsOhBHQzoGqHArOuD+GUoiR1U1SMxRpiIKCIn8= Subject key identifier: 14:41:71:69:5E:89:28:D2:20:EE:AE:79:A9:C2:82:AD:F0:AA:FB:3E Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c Certificate serial: 019B79ECD2CEFF8ABA6972033E891937ACB9 Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/FEFxaV6JKNIg7q55qcKCrfCq-z4.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57970 IP address blocks: 37.152.128.0/19 maxlen: 24 37.152.128.0/24 maxlen: 24 37.152.129.0/24 maxlen: 24 37.152.130.0/24 maxlen: 24 37.152.131.0/24 maxlen: 24 37.152.132.0/24 maxlen: 24 37.152.133.0/24 maxlen: 24 37.152.134.0/24 maxlen: 24 37.152.135.0/24 maxlen: 24 37.152.136.0/23 maxlen: 23 37.152.138.0/24 maxlen: 24 37.152.139.0/24 maxlen: 24 37.152.140.0/24 maxlen: 24 37.152.141.0/24 maxlen: 24 37.152.142.0/24 maxlen: 24 37.152.143.0/24 maxlen: 24 37.152.144.0/21 maxlen: 21 37.152.152.0/22 maxlen: 22 37.152.156.0/24 maxlen: 24 37.152.157.0/24 maxlen: 24 37.152.158.0/24 maxlen: 24 37.152.159.0/24 maxlen: 24 185.20.192.0/22 maxlen: 22 185.20.192.0/24 maxlen: 24 185.20.193.0/24 maxlen: 24 185.20.194.0/24 maxlen: 24 185.20.195.0/24 maxlen: 24 185.86.72.0/22 maxlen: 22 185.86.72.0/24 maxlen: 24 185.86.73.0/24 maxlen: 24 185.86.74.0/24 maxlen: 24 185.86.75.0/24 maxlen: 24 185.88.0.0/22 maxlen: 22 185.88.0.0/24 maxlen: 24 185.88.1.0/24 maxlen: 24 185.88.2.0/24 maxlen: 24 185.88.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d2:ce:ff:8a:ba:69:72:03:3e:89:19:37:ac:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=144171695e8928d220eeae79a9c282adf0aafb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:06:61:83:c0:e3:91:a2:4b:81:48:27:f8:66: 51:f8:bd:f1:8c:44:4b:ff:c5:5e:38:d8:7d:0d:f6: 0b:46:a5:c8:ca:87:83:94:3e:48:69:ec:78:5a:a1: 78:67:fc:b4:d6:d4:bd:dc:b1:37:f2:31:ba:a4:13: 8d:43:95:80:0d:23:09:ef:c8:a1:be:87:aa:54:5b: 29:93:3e:6c:47:5f:25:42:ea:32:71:88:90:5f:93: 28:ff:f5:da:e8:2d:b7:e4:59:f0:95:39:32:d3:7f: ee:7f:42:82:30:26:42:0e:06:80:3b:ac:4b:2f:ba: 0b:34:fd:5d:15:2a:94:65:a8:72:a8:de:e6:98:4b: 36:45:1c:e1:a0:e1:2b:77:b7:6a:fc:be:9c:55:27: 0f:85:55:c8:a0:80:ac:ba:2a:e0:4b:f1:6d:ff:5a: bb:a1:46:5e:5b:33:9e:ff:ce:a9:29:46:ce:5d:d7: 19:45:d2:66:61:49:65:f6:fa:27:fd:43:c9:8d:da: a4:51:e7:7e:f0:e4:02:58:c9:f7:b3:ad:fe:18:13: a9:54:31:b5:90:27:b2:bc:86:a8:ec:67:cd:57:f2: c8:d1:4d:06:0d:89:59:15:4a:18:e6:76:07:c5:f5: b8:f4:97:ef:92:aa:4c:53:31:9c:4e:c5:3b:bd:1a: 48:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:71:69:5E:89:28:D2:20:EE:AE:79:A9:C2:82:AD:F0:AA:FB:3E X509v3 Authority Key Identifier: keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/FEFxaV6JKNIg7q55qcKCrfCq-z4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.152.128.0/19 185.20.192.0/22 185.86.72.0/22 185.88.0.0/22 Signature Algorithm: sha256WithRSAEncryption 37:3f:87:10:23:1e:17:34:b6:97:54:85:0e:37:6b:53:85:97: 55:fc:f5:c0:42:3c:07:9e:33:8b:ec:94:34:cc:e2:0d:0f:c0: c8:14:17:77:71:a2:c6:de:c8:e3:8b:7c:32:dc:c1:84:1e:25: 1a:50:b9:45:84:34:ef:c4:26:01:c5:bd:dc:65:c2:96:3a:e8: 14:67:bb:1c:5c:e7:d9:43:03:8f:7c:b4:44:b6:c2:09:43:16: 84:3a:28:57:de:ae:86:74:bb:2f:75:9a:5e:2f:d2:87:f4:f6: 9c:b3:b6:02:c0:b5:cf:9b:8b:29:46:d8:04:ef:ab:c3:42:a3: 07:7c:e0:e4:1a:97:79:d8:14:d7:db:64:2d:e3:44:9b:30:36: 94:f5:ce:cd:96:6a:30:d1:be:fe:71:14:4f:27:fc:5b:17:6d: 13:30:92:c8:04:a2:f2:be:25:4a:57:fa:65:93:8a:c1:2d:5e: c9:07:58:f1:e9:06:9f:e4:3f:39:e6:bc:81:01:58:d0:33:91: 2c:a9:0f:32:7f:f7:52:d6:79:92:25:f0:7e:c2:61:46:ed:ae: d7:fe:b5:c5:25:97:9b:8d:29:c5:ae:83:6d:d0:26:24:ee:e1: 71:65:d8:a3:0a:fb:cc:6a:28:53:1a:ff:c8:e6:c1:1b:2b:ed: 5d:da:18:f4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57NLO/4q6aXIDPokZN6y5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz ZWRjMWMwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDQxNzE2OTVlODkyOGQyMjBlZWFlNzlhOWMyODJhZGYwYWFmYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogZhg8DjkaJLgUgn+GZR+L3xjERL /8VeONh9DfYLRqXIyoeDlD5Iaex4WqF4Z/y01tS93LE38jG6pBONQ5WADSMJ78ih voeqVFspkz5sR18lQuoycYiQX5Mo//Xa6C235FnwlTky03/uf0KCMCZCDgaAO6xL L7oLNP1dFSqUZahyqN7mmEs2RRzhoOErd7dq/L6cVScPhVXIoICsuirgS/Ft/1q7 oUZeWzOe/86pKUbOXdcZRdJmYUll9von/UPJjdqkUed+8OQCWMn3s63+GBOpVDG1 kCeyvIao7GfNV/LI0U0GDYlZFUoY5nYHxfW49JfvkqpMUzGcTsU7vRpI8wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBRBcWleiSjSIO6ueanCgq3wqvs+MB8GA1UdIwQY MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt ZGFjYTI2ZGU2ZjdiLzEvRkVGeGFWNkpLTklnN3E1NXFjS0NyZkNxLXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFJZiAAwQC uRTAAwQCuVZIAwQCuVgAMA0GCSqGSIb3DQEBCwUAA4IBAQA3P4cQIx4XNLaXVIUO N2tThZdV/PXAQjwHnjOL7JQ0zOIND8DIFBd3caLG3sjji3wy3MGEHiUaULlFhDTv xCYBxb3cZcKWOugUZ7scXOfZQwOPfLREtsIJQxaEOihX3q6GdLsvdZpeL9KH9Pac s7YCwLXPm4spRtgE76vDQqMHfODkGpd52BTX22Qt40SbMDaU9c7Nlmow0b7+cRRP J/xbF20TMJLIBKLyviVKV/plk4rBLV7JB1jx6Qaf5D855ryBAVjQM5EsqQ8yf/dS 1nmSJfB+wmFG7a7X/rXFJZebjSnFroNt0CYk7uFxZdijCvvMaihTGv/I5sEbK+1d 2hj0 -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:07 2026 by rpki-client