This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/34wMdXaJWXbm1abhGPa8jrp6PhI.roa File: 34wMdXaJWXbm1abhGPa8jrp6PhI.roa (raw, json) Hash identifier: S1oGzVckDcSBz0QSTCJM8A+w1TpNDNfG3AFSsSOoiFk= Subject key identifier: DF:8C:0C:75:76:89:59:76:E6:D5:A6:E1:18:F6:BC:8E:BA:7A:3E:12 Certificate issuer: /CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2 Certificate serial: 019B77C6AD2BD5998009298AE45E3BB5F7D1 Authority key identifier: 2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/34wMdXaJWXbm1abhGPa8jrp6PhI.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49354 IP address blocks: 37.18.128.0/22 maxlen: 26 2a05:280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.mft rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ad:2b:d5:99:80:09:29:8a:e4:5e:3b:b5:f7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2efb9e6d7566dfef9d5cb98d929cb70323d389f2 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df8c0c7576895976e6d5a6e118f6bc8eba7a3e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:71:f6:bc:c2:2d:05:e4:16:b5:08:d2:2b:5a: 80:0e:46:e8:78:53:dd:26:03:96:c6:d9:56:4c:af: b0:15:79:bc:4e:b5:55:c8:08:2b:07:c4:5b:e2:10: 9e:c4:63:91:fd:f3:76:2a:c1:a1:1a:bf:2a:d2:0d: ec:3b:0f:16:99:e6:a9:f1:b3:d9:cd:30:ab:67:d4: 62:c9:81:c8:a4:5f:2a:93:5b:89:4b:2e:fd:41:f4: 5d:eb:24:6f:f4:70:c1:15:cc:15:74:5c:a3:eb:ed: 5c:2b:41:2b:c5:25:f5:c3:77:b8:14:81:17:85:35: d8:76:88:76:c2:1d:8f:7c:77:bd:06:e0:1f:b8:65: f8:7a:4c:f9:a1:27:c8:78:fc:5d:a8:04:19:8c:e8: ae:e3:41:5f:2e:d3:6c:5c:7b:e4:a0:3d:67:b7:a4: 55:ed:2e:99:46:3b:ea:17:47:35:05:06:68:f7:84: d6:b5:56:c5:e6:33:11:e2:2c:f8:62:15:64:86:8b: 6e:f3:31:a4:da:67:de:01:c6:06:1e:d4:04:89:b9: 4a:74:64:11:00:ed:49:39:79:5a:cc:1a:5b:80:39: 82:c8:8d:2d:b7:9c:05:f2:83:61:b4:b0:50:fb:c2: a3:fd:cf:91:73:31:b1:37:bd:35:bc:be:87:bb:8c: 3f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8C:0C:75:76:89:59:76:E6:D5:A6:E1:18:F6:BC:8E:BA:7A:3E:12 X509v3 Authority Key Identifier: keyid:2E:FB:9E:6D:75:66:DF:EF:9D:5C:B9:8D:92:9C:B7:03:23:D3:89:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvuebXVm3--dXLmNkpy3AyPTifI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/34wMdXaJWXbm1abhGPa8jrp6PhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fc627-a373-474d-bc7e-e2d846849482/1/LvuebXVm3--dXLmNkpy3AyPTifI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.128.0/22 IPv6: 2a05:280::/29 Signature Algorithm: sha256WithRSAEncryption 04:52:fc:8c:4d:66:45:7c:7d:ac:07:17:52:83:2a:c8:4f:c4: fc:84:2d:32:61:ec:98:fd:7b:39:9e:32:90:09:e8:17:1a:90: 24:a8:c5:6d:e7:2d:bc:61:ab:83:bc:f1:f6:9f:31:e7:a1:a5: e3:1c:b1:2d:cf:10:c1:93:4b:61:ee:9f:8b:38:ac:85:db:dc: 05:93:f3:35:0f:2c:2e:93:43:14:30:e1:ef:5a:51:08:73:d9: 66:8b:aa:21:36:c3:42:b1:46:a5:9a:09:50:0f:1c:3b:55:64: 88:4e:4c:c5:66:c6:42:29:b0:86:5f:9f:1a:c5:91:21:a6:69: ff:33:c1:9c:88:73:f4:a0:e5:1e:93:15:de:aa:a9:81:1f:cc: b7:af:16:7d:30:93:ab:14:87:15:58:49:33:2b:5e:d2:51:63: 0d:75:5e:b4:e7:a5:b3:c0:a5:84:e9:b0:2b:69:b7:31:42:d4: 61:ac:27:3d:2a:90:28:52:a1:23:df:a3:54:75:8c:c3:9c:fd: 70:4c:60:f9:21:13:eb:87:8b:9d:f2:7e:74:b6:8c:13:d0:b4: e5:c9:a5:76:7a:db:fa:1e:5e:a2:25:ee:fe:15:d4:fa:9d:7c: 00:ec:9a:c3:90:2d:02:51:93:b8:fc:65:31:08:c8:1d:e3:57: 47:cb:0b:69 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xq0r1ZmACSmK5F47tffRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZmI5ZTZkNzU2NmRmZWY5ZDVjYjk4ZDkyOWNiNzAzMjNk Mzg5ZjIwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjhjMGM3NTc2ODk1OTc2ZTZkNWE2ZTExOGY2YmM4ZWJhN2EzZTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3H2vMItBeQWtQjSK1qADkboeFPd JgOWxtlWTK+wFXm8TrVVyAgrB8Rb4hCexGOR/fN2KsGhGr8q0g3sOw8Wmeap8bPZ zTCrZ9RiyYHIpF8qk1uJSy79QfRd6yRv9HDBFcwVdFyj6+1cK0ErxSX1w3e4FIEX hTXYdoh2wh2PfHe9BuAfuGX4ekz5oSfIePxdqAQZjOiu40FfLtNsXHvkoD1nt6RV 7S6ZRjvqF0c1BQZo94TWtVbF5jMR4iz4YhVkhotu8zGk2mfeAcYGHtQEiblKdGQR AO1JOXlazBpbgDmCyI0tt5wF8oNhtLBQ+8Kj/c+RczGxN701vL6Hu4w/0QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN+MDHV2iVl25tWm4Rj2vI66ej4SMB8GA1UdIwQY MBaAFC77nm11Zt/vnVy5jZKctwMj04nyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZ1ZWJYVm0zLS1kWExtTmtweTNBeVBUaWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xZmM2MjctYTM3My00NzRkLWJjN2Ut ZTJkODQ2ODQ5NDgyLzEvMzR3TWRYYUpXWGJtMWFiaEdQYThqcnA2UGhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xZmM2MjctYTM3My00NzRkLWJjN2UtZTJkODQ2ODQ5NDgy LzEvTHZ1ZWJYVm0zLS1kWExtTmtweTNBeVBUaWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCJRKAMA0E AgACMAcDBQMqBQKAMA0GCSqGSIb3DQEBCwUAA4IBAQAEUvyMTWZFfH2sBxdSgyrI T8T8hC0yYeyY/Xs5njKQCegXGpAkqMVt5y28YauDvPH2nzHnoaXjHLEtzxDBk0th 7p+LOKyF29wFk/M1Dywuk0MUMOHvWlEIc9lmi6ohNsNCsUalmglQDxw7VWSITkzF ZsZCKbCGX58axZEhpmn/M8GciHP0oOUekxXeqqmBH8y3rxZ9MJOrFIcVWEkzK17S UWMNdV6056WzwKWE6bArabcxQtRhrCc9KpAoUqEj36NUdYzDnP1wTGD5IRPrh4ud 8n50towT0LTlyaV2etv6Hl6iJe7+FdT6nXwA7JrDkC0CUZO4/GUxCMgd41dHywtp -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:40 2026 by rpki-client