This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/37QPNayYR3ZU8r-eTrm1uGcfPCI.roa File: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (raw, json) Hash identifier: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A= Subject key identifier: DF:B4:0F:35:AC:98:47:76:54:F2:BF:9E:4E:B9:B5:B8:67:1F:3C:22 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C77795040D2A1A7FA2385783787665 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/37QPNayYR3ZU8r-eTrm1uGcfPCI.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59993 IP address blocks: 109.197.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:77:95:04:0d:2a:1a:7f:a2:38:57:83:78:76:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfb40f35ac98477654f2bf9e4eb9b5b8671f3c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:62:a4:ed:70:9e:30:91:2d:d9:72:71:9f: 14:79:fe:f4:fb:b0:fc:1f:fe:3d:1d:35:66:a7:4f: 4e:1a:1b:80:97:34:7c:fe:18:cb:b1:68:22:8c:64: e7:84:e9:6f:05:8d:5b:64:4c:a1:aa:b5:f1:75:0a: d6:5d:5e:0e:98:f0:35:74:d0:48:1d:46:2c:0a:48: a8:29:f5:a6:8a:56:6c:94:cc:aa:a5:e1:fc:f1:dd: 51:35:b0:f7:b7:fa:87:44:1f:4a:e4:f8:ca:8a:c4: c0:57:76:5b:cd:5d:18:b3:ee:a0:0d:80:0f:ae:3f: e5:3d:f4:3c:57:05:28:9f:9e:75:95:c6:39:4a:c1: d6:e8:e3:6e:c1:70:55:22:e3:5e:7e:89:0d:53:2c: ec:1a:a7:f7:18:27:6b:cb:b9:69:4b:c2:67:6f:c9: 5a:f3:50:b5:f8:1e:2e:31:c6:31:37:8b:14:65:4b: ca:cb:e9:18:ba:f1:15:26:33:0e:08:ad:7e:58:55: 98:f6:20:d5:71:3a:6e:72:a3:6d:25:48:2f:d7:cd: 35:c8:72:18:85:42:a4:dc:5a:d9:34:cb:8f:54:b0: 1a:3a:1f:aa:38:18:0e:29:c0:f7:88:03:62:65:fe: ed:37:05:15:3c:54:71:a1:0e:fa:b2:97:27:e1:6a: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B4:0F:35:AC:98:47:76:54:F2:BF:9E:4E:B9:B5:B8:67:1F:3C:22 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/37QPNayYR3ZU8r-eTrm1uGcfPCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.197.209.0/24 Signature Algorithm: sha256WithRSAEncryption 25:eb:0a:d5:20:7c:41:72:ac:0d:30:89:db:e4:48:a3:7e:7d: 5b:1f:64:35:c6:4c:b9:1a:af:17:ec:c1:39:c5:5d:05:9b:b2: 68:0b:18:d4:8e:ae:9d:4e:92:79:d9:f1:3c:7c:e8:1e:d1:b6: 19:34:80:6e:12:34:33:d4:02:d5:1f:26:24:da:f7:f7:e5:24: f7:86:82:85:98:55:ed:7f:a4:3f:b3:fa:b0:3b:1e:5c:c7:0b: d6:b1:19:b5:79:72:69:f3:6b:64:c4:84:26:08:72:71:52:9b: 33:a0:4b:6a:02:0f:7f:9e:bc:a2:9f:00:ce:ee:47:99:45:83: e1:82:70:4d:eb:4b:11:9c:1c:64:6f:94:a0:98:61:90:8b:cc: f7:c5:7c:2c:73:e5:c1:8e:31:a3:3c:9c:67:e0:13:0e:3a:32: 9c:fa:e5:b2:3d:a7:e0:11:27:78:d5:d7:e7:2f:02:86:df:cb: da:b6:0b:b4:c5:00:43:57:3f:a2:86:96:f2:00:ea:59:05:c2: 48:fb:69:4f:a4:95:01:ed:e2:dd:6e:1a:42:9d:29:4a:ef:b4: 37:69:02:3e:e3:e7:0a:36:7f:70:ed:7e:8b:94:3d:ce:b5:c8: a4:12:7f:8d:3a:5c:50:59:f9:e7:5c:c0:5e:bc:52:36:bd:f4: 31:4d:93:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3eVBA0qGn+iOFeDeHZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmI0MGYzNWFjOTg0Nzc2NTRmMmJmOWU0ZWI5YjViODY3MWYzYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9hipO1wnjCRLdlycZ8Uef70+7D8 H/49HTVmp09OGhuAlzR8/hjLsWgijGTnhOlvBY1bZEyhqrXxdQrWXV4OmPA1dNBI HUYsCkioKfWmilZslMyqpeH88d1RNbD3t/qHRB9K5PjKisTAV3ZbzV0Ys+6gDYAP rj/lPfQ8VwUon551lcY5SsHW6ONuwXBVIuNefokNUyzsGqf3GCdry7lpS8Jnb8la 81C1+B4uMcYxN4sUZUvKy+kYuvEVJjMOCK1+WFWY9iDVcTpucqNtJUgv1801yHIY hUKk3FrZNMuPVLAaOh+qOBgOKcD3iANiZf7tNwUVPFRxoQ76spcn4WrXWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+0DzWsmEd2VPK/nk65tbhnHzwiMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvMzdRUE5heVlSM1pVOHItZVRybTF1R2NmUENJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbcXRMA0G CSqGSIb3DQEBCwUAA4IBAQAl6wrVIHxBcqwNMInb5Eijfn1bH2Q1xky5Gq8X7ME5 xV0Fm7JoCxjUjq6dTpJ52fE8fOge0bYZNIBuEjQz1ALVHyYk2vf35ST3hoKFmFXt f6Q/s/qwOx5cxwvWsRm1eXJp82tkxIQmCHJxUpszoEtqAg9/nryinwDO7keZRYPh gnBN60sRnBxkb5SgmGGQi8z3xXwsc+XBjjGjPJxn4BMOOjKc+uWyPafgESd41dfn LwKG38vatgu0xQBDVz+ihpbyAOpZBcJI+2lPpJUB7eLdbhpCnSlK77Q3aQI+4+cK Nn9w7X6LlD3OtcikEn+NOlxQWfnnXMBevFI2vfQxTZP4 -----END CERTIFICATE-----Generated at Wed Jan 21 20:35:08 2026 by rpki-client