This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/37zVP7UkJg0TEDlhuX6Tds3TEYY.roa File: 37zVP7UkJg0TEDlhuX6Tds3TEYY.roa (raw, json) Hash identifier: xRpj83Tlm0zn7GLk3CyccKosQD+8RAoJJ4bNYsKIjX0= Subject key identifier: DF:BC:D5:3F:B5:24:26:0D:13:10:39:61:B9:7E:93:76:CD:D3:11:86 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B42653DF442220A6987D29D7E16F9903B Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/37zVP7UkJg0TEDlhuX6Tds3TEYY.roa Signing time: Sun 21 Dec 2025 19:31:29 +0000 ROA not before: Sun 21 Dec 2025 19:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211826 IP address blocks: 212.66.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:65:3d:f4:42:22:0a:69:87:d2:9d:7e:16:f9:90:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 21 19:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dfbcd53fb524260d13103961b97e9376cdd31186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ab:ee:8c:dd:71:da:04:c7:60:22:2f:46:ff: 4d:41:2d:6e:bb:4d:4b:fa:aa:9d:9c:1c:82:52:21: 15:dd:a1:ae:60:35:10:b1:6b:6a:f3:83:b1:80:16: 74:8f:cc:c8:56:6e:63:1b:f4:ae:e7:3d:5f:f2:04: 50:35:d9:15:9d:98:d0:12:9f:34:32:80:82:fa:c3: e3:47:86:63:44:06:d2:df:5b:c2:3f:38:10:14:52: 98:4a:42:9a:a6:b5:9f:7a:89:2f:93:97:88:02:2f: 19:0d:35:d3:ba:d1:50:19:8b:07:0a:86:f3:1c:7f: a3:00:eb:c6:e0:a3:f0:e3:42:2b:03:62:70:d8:fc: aa:bb:40:a5:53:20:fa:7e:79:67:6b:7d:24:d6:a4: 54:f1:59:79:21:22:1d:0b:9d:f7:bf:4d:89:68:63: a3:62:3f:c9:ad:fd:0b:06:58:cd:ae:b4:45:62:69: 9f:89:f7:2a:f6:41:6e:bb:77:9e:81:d9:d2:db:22: 1b:4b:76:ed:6c:6e:7c:8c:ee:96:88:e6:ac:a7:99: 60:36:4c:b1:ce:48:cd:95:45:d3:05:7d:43:e6:7f: 6d:99:9b:d5:61:89:ff:4b:60:43:8f:b0:69:da:94: 7c:6e:6a:02:f4:4b:73:41:ba:17:80:f6:07:b8:1c: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BC:D5:3F:B5:24:26:0D:13:10:39:61:B9:7E:93:76:CD:D3:11:86 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/37zVP7UkJg0TEDlhuX6Tds3TEYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.54.0/24 Signature Algorithm: sha256WithRSAEncryption 73:d4:34:69:f7:75:b1:7d:dc:2f:2d:47:a2:6f:26:3a:d8:72: 47:a7:69:27:90:f0:57:ba:77:f5:d6:45:40:f8:1a:23:bb:a4: 4f:4e:c7:42:8e:70:db:89:22:1e:91:3a:d8:98:47:28:1e:12: ff:ba:5d:22:19:8f:00:69:38:ca:d2:3c:74:d1:a7:e4:a2:4f: 20:f9:77:2c:b1:05:fd:fb:6d:f9:ab:7d:82:95:91:62:f4:12: 9d:27:13:2f:23:d8:33:39:67:d8:0f:a9:66:d0:48:21:d5:18: 52:a7:3d:48:7e:7b:bb:4f:22:3b:75:1b:97:d1:57:a5:37:91: 8a:08:99:ad:d7:a7:38:6e:1e:83:17:8d:ab:31:3d:de:ae:8e: aa:e4:60:30:db:a3:eb:78:bb:31:10:f0:ae:23:d5:59:a7:6a: a8:65:73:6e:73:24:ad:5b:94:30:21:f0:1f:03:24:b5:b4:4e: fa:c2:a6:50:6a:8d:1f:dd:77:6d:d1:99:2e:e3:80:f2:77:b3: 00:2a:55:67:ce:b0:f6:7b:39:f8:8e:48:3c:1a:43:ed:80:3c: 2c:c1:1f:57:8b:19:26:f4:fd:4b:a8:f1:cb:4a:4d:0e:43:75: 61:a7:a7:5b:4c:00:a9:f9:d3:2b:49:6a:79:83:e3:a6:93:b9: 93:dc:20:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtCZT30QiIKaYfSnX4W+ZA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjIxMTkzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmJjZDUzZmI1MjQyNjBkMTMxMDM5NjFiOTdlOTM3NmNkZDMxMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qvujN1x2gTHYCIvRv9NQS1uu01L +qqdnByCUiEV3aGuYDUQsWtq84OxgBZ0j8zIVm5jG/Su5z1f8gRQNdkVnZjQEp80 MoCC+sPjR4ZjRAbS31vCPzgQFFKYSkKaprWfeokvk5eIAi8ZDTXTutFQGYsHCobz HH+jAOvG4KPw40IrA2Jw2Pyqu0ClUyD6fnlna30k1qRU8Vl5ISIdC533v02JaGOj Yj/Jrf0LBljNrrRFYmmfifcq9kFuu3eegdnS2yIbS3btbG58jO6WiOasp5lgNkyx zkjNlUXTBX1D5n9tmZvVYYn/S2BDj7Bp2pR8bmoC9EtzQboXgPYHuBwp2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+81T+1JCYNExA5Ybl+k3bN0xGGMB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvMzd6VlA3VWtKZzBURURsaHVYNlRkczNURVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EI2MA0G CSqGSIb3DQEBCwUAA4IBAQBz1DRp93WxfdwvLUeibyY62HJHp2knkPBXunf11kVA +Boju6RPTsdCjnDbiSIekTrYmEcoHhL/ul0iGY8AaTjK0jx00afkok8g+XcssQX9 +235q32ClZFi9BKdJxMvI9gzOWfYD6lm0Egh1RhSpz1Ifnu7TyI7dRuX0VelN5GK CJmt16c4bh6DF42rMT3ero6q5GAw26PreLsxEPCuI9VZp2qoZXNucyStW5QwIfAf AyS1tE76wqZQao0f3Xdt0Zku44Dyd7MAKlVnzrD2ezn4jkg8GkPtgDwswR9Xixkm 9P1LqPHLSk0OQ3Vhp6dbTACp+dMrSWp5g+Omk7mT3CBP -----END CERTIFICATE-----Generated at Sat Dec 27 08:41:12 2025 by rpki-client