This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/B08LenF7yMg-N_h3Vsro44gwUvU.roa File: B08LenF7yMg-N_h3Vsro44gwUvU.roa (raw, json) Hash identifier: lBlkYBGRq6hhb9CFJXeVSFMPTiDOZk1Hd5NmnUdVAgk= Subject key identifier: 07:4F:0B:7A:71:7B:C8:C8:3E:37:F8:77:56:CA:E8:E3:88:30:52:F5 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A31301005DEA83B479B7B9444F0260 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/B08LenF7yMg-N_h3Vsro44gwUvU.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25188 IP address blocks: 37.202.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:13:01:00:5d:ea:83:b4:79:b7:b9:44:4f:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=074f0b7a717bc8c83e37f87756cae8e3883052f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:04:bd:37:ea:19:69:5d:b4:9b:31:ce:13: fb:4f:fb:61:e7:96:ab:23:66:a2:5d:56:e7:29:93: 99:86:26:17:0d:e1:82:d1:bf:a6:f6:57:fd:7f:c7: 7f:3f:a4:ed:ee:33:40:60:7c:17:f6:86:bc:49:ae: 44:79:f2:72:4a:14:4f:8d:50:20:e3:90:4a:3e:bb: 33:94:ef:63:5c:0f:e0:b3:3f:81:6b:26:23:80:03: ad:91:92:a6:d7:4c:41:63:5b:9b:03:26:92:ca:56: 61:38:f2:10:a9:26:37:f5:ff:55:b2:8d:7e:51:e3: 5c:83:9d:fd:d8:16:b5:8e:23:c1:75:3f:9c:74:a7: 1b:2c:64:82:7d:c5:4c:57:c9:4a:19:90:3f:c9:15: cf:f4:77:6e:a5:5d:ce:a3:ec:63:6d:eb:22:95:24: 45:c6:fd:77:91:ce:e8:5c:d3:54:bb:30:ee:76:b9: c4:60:ba:5a:e1:66:cb:df:e8:43:78:28:d8:fd:54: 3f:47:27:67:a6:e1:2b:a3:ed:cb:32:be:ad:bc:46: 7f:a3:c4:23:3f:c5:12:25:d4:e3:ca:1e:5f:d4:5f: f9:e0:9c:ff:10:1e:10:1d:88:30:bf:8d:90:5a:ae: c8:96:b2:f3:68:c4:83:e7:a0:96:af:e6:89:02:2b: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4F:0B:7A:71:7B:C8:C8:3E:37:F8:77:56:CA:E8:E3:88:30:52:F5 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/B08LenF7yMg-N_h3Vsro44gwUvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.8.0/22 Signature Algorithm: sha256WithRSAEncryption 76:8c:c3:d9:a2:d9:c8:bc:fa:f8:59:d4:14:3a:89:fb:e5:5f: c2:36:ca:43:58:72:56:8c:fb:4b:f8:21:2e:0f:9b:8b:ed:48: e1:51:31:70:e8:c1:80:c2:21:39:da:d0:ec:b5:fa:bb:72:59: e2:79:c2:56:93:24:89:1f:e8:e5:d5:34:eb:f7:34:2c:84:71: 99:14:df:59:22:64:09:d0:75:f7:fc:9e:de:4e:54:13:b5:6e: 8a:9a:dc:41:59:eb:40:c7:7b:b3:f4:96:f4:e7:9a:f1:80:3a: 90:ab:97:d3:5d:b0:99:fc:95:bb:9c:1c:13:78:bf:c5:db:0a: 18:a2:92:4b:66:66:02:06:28:c4:44:3e:d1:5d:b0:3d:ce:08: ba:8c:2e:db:c3:a1:2e:10:e4:31:b4:e9:6b:9b:65:44:17:34: c9:99:88:bd:99:aa:cf:c9:2a:8f:c2:ac:df:d6:f6:13:b1:44: 46:77:1c:19:68:f5:fd:ff:5c:9e:6c:41:8e:05:1d:3d:b6:4c: b1:9c:72:fe:78:95:88:4a:60:c0:2c:3b:d1:5e:9e:84:c1:96: 93:83:30:71:fc:e8:e3:0b:38:bf:8a:b4:8c:2a:cb:1b:cc:4b: 9e:2f:46:94:ec:03:2f:6e:da:03:d8:c1:0c:82:df:f2:e2:42: b1:65:81:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxMBAF3qg7R5t7lETwJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzRmMGI3YTcxN2JjOGM4M2UzN2Y4Nzc1NmNhZThlMzg4MzA1MmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcIEvTfqGWldtJsxzhP7T/th55ar I2aiXVbnKZOZhiYXDeGC0b+m9lf9f8d/P6Tt7jNAYHwX9oa8Sa5EefJyShRPjVAg 45BKPrszlO9jXA/gsz+BayYjgAOtkZKm10xBY1ubAyaSylZhOPIQqSY39f9Vso1+ UeNcg5392Ba1jiPBdT+cdKcbLGSCfcVMV8lKGZA/yRXP9HdupV3Oo+xjbesilSRF xv13kc7oXNNUuzDudrnEYLpa4WbL3+hDeCjY/VQ/RydnpuEro+3LMr6tvEZ/o8Qj P8USJdTjyh5f1F/54Jz/EB4QHYgwv42QWq7IlrLzaMSD56CWr+aJAitrhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAdPC3pxe8jIPjf4d1bK6OOIMFL1MB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQjA4TGVuRjd5TWctTl9oM1Zzcm80NGd3VXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJcoIMA0G CSqGSIb3DQEBCwUAA4IBAQB2jMPZotnIvPr4WdQUOon75V/CNspDWHJWjPtL+CEu D5uL7UjhUTFw6MGAwiE52tDstfq7clniecJWkySJH+jl1TTr9zQshHGZFN9ZImQJ 0HX3/J7eTlQTtW6KmtxBWetAx3uz9Jb055rxgDqQq5fTXbCZ/JW7nBwTeL/F2woY opJLZmYCBijERD7RXbA9zgi6jC7bw6EuEOQxtOlrm2VEFzTJmYi9marPySqPwqzf 1vYTsURGdxwZaPX9/1yebEGOBR09tkyxnHL+eJWISmDALDvRXp6EwZaTgzBx/Ojj Czi/irSMKssbzEueL0aU7AMvbtoD2MEMgt/y4kKxZYGc -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:43 2026 by rpki-client