This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/72Cr_Te6hj22fsyuMAoOS3LtAQM.roa File: 72Cr_Te6hj22fsyuMAoOS3LtAQM.roa (raw, json) Hash identifier: 3ePMfSqb+vV1YH91xVmuUGuzyNGpXjBaKkiQAni83AI= Subject key identifier: EF:60:AB:FD:37:BA:86:3D:B6:7E:CC:AE:30:0A:0E:4B:72:ED:01:03 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35FBF1FDB49F0AD390AD2ADF3DBF76 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/72Cr_Te6hj22fsyuMAoOS3LtAQM.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43201 IP address blocks: 31.222.251.0/24 maxlen: 24 37.72.139.0/24 maxlen: 24 91.247.77.0/24 maxlen: 24 91.247.79.0/24 maxlen: 24 193.3.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:fb:f1:fd:b4:9f:0a:d3:90:ad:2a:df:3d:bf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef60abfd37ba863db67eccae300a0e4b72ed0103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1a:eb:ec:36:1f:a6:5f:36:58:dd:ae:c7:a5: 59:01:ae:a3:35:d8:c4:85:51:b9:98:21:ed:a8:37: b9:71:1f:05:10:d7:a8:5c:89:31:f0:32:fb:9e:8b: b7:4b:1f:0a:75:25:e6:72:dd:06:09:54:11:f1:be: 3c:d8:01:dd:7a:b8:dc:ff:6e:77:60:87:23:20:dc: d1:9d:67:24:8e:af:5c:dd:34:7a:b8:d5:a0:79:bb: 27:f6:32:46:16:0d:7a:eb:c7:06:9e:76:06:23:29: 83:9b:d6:76:35:2e:47:7f:bf:0a:19:bf:81:8e:dd: 45:84:ad:a4:8a:03:c0:14:92:22:cc:6d:f7:87:fb: 4d:bb:61:fc:79:76:a9:e1:65:0b:2d:e1:08:18:f1: f1:07:2b:9f:3b:e9:ed:07:dc:ec:82:31:95:91:f1: 4e:1c:fc:38:70:e1:79:e2:30:7e:c2:54:fa:31:7b: c9:b4:e4:40:94:1c:f0:0f:8b:63:54:8a:af:6c:f0: 90:26:c6:5b:a5:f4:1d:8c:b6:00:f6:66:3e:5b:c5: 39:a9:42:35:e3:49:5f:bb:e5:5e:e9:8b:ec:9c:76: 45:f9:44:3d:a4:ac:bf:48:ab:e0:f1:28:96:29:0e: c3:fe:b2:8f:58:11:53:61:8c:29:fc:6d:e1:b6:d7: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:60:AB:FD:37:BA:86:3D:B6:7E:CC:AE:30:0A:0E:4B:72:ED:01:03 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/72Cr_Te6hj22fsyuMAoOS3LtAQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.251.0/24 37.72.139.0/24 91.247.77.0/24 91.247.79.0/24 193.3.170.0/24 Signature Algorithm: sha256WithRSAEncryption 23:c8:5c:91:88:39:5b:f0:e7:ba:eb:7c:5f:97:65:84:4c:d9: cb:ee:26:78:37:fd:59:91:f2:7f:fd:0d:82:9d:9c:fc:2c:51: bb:d5:c9:58:a9:88:cb:57:0d:1a:b8:fc:38:7e:d9:00:44:08: e8:d4:9d:0c:d5:0d:4e:b3:53:0f:bf:d1:28:fb:fb:97:52:5c: ae:6d:04:e6:eb:3c:c6:86:3f:a8:ef:43:5f:b8:5b:f6:30:2e: f9:2e:d9:97:cb:ab:b8:bb:62:56:5e:70:ab:03:52:0c:d3:83: 11:03:f8:27:5f:e7:3e:f5:e2:40:4c:13:1f:18:d9:a5:7f:da: 4a:98:cd:e0:e2:b5:8e:46:07:40:c4:92:c5:8d:e2:c5:c4:61: 27:92:e3:82:e3:7d:9c:83:fa:c7:b9:80:2e:de:10:a7:c2:c8: 46:27:b9:36:05:5c:09:4e:0b:cd:6d:d1:e9:47:a5:e6:75:4b: 66:6f:34:20:ac:4b:7f:cd:b1:ee:b5:a4:c1:77:37:51:0c:4d: a6:e7:c2:d4:f2:95:80:4f:3a:db:14:dd:16:57:91:28:0f:d1: b0:c5:cf:7c:e1:48:91:88:db:8e:d4:bb:92:b6:eb:7b:41:c0: f0:e1:ac:47:0e:a3:75:4b:1a:c3:06:d8:6d:9e:22:e0:e9:a9: c8:ca:06:30 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7Nfvx/bSfCtOQrSrfPb92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjYwYWJmZDM3YmE4NjNkYjY3ZWNjYWUzMDBhMGU0YjcyZWQwMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hrr7DYfpl82WN2ux6VZAa6jNdjE hVG5mCHtqDe5cR8FENeoXIkx8DL7nou3Sx8KdSXmct0GCVQR8b482AHderjc/253 YIcjINzRnWckjq9c3TR6uNWgebsn9jJGFg1668cGnnYGIymDm9Z2NS5Hf78KGb+B jt1FhK2kigPAFJIizG33h/tNu2H8eXap4WULLeEIGPHxByufO+ntB9zsgjGVkfFO HPw4cOF54jB+wlT6MXvJtORAlBzwD4tjVIqvbPCQJsZbpfQdjLYA9mY+W8U5qUI1 40lfu+Ve6YvsnHZF+UQ9pKy/SKvg8SiWKQ7D/rKPWBFTYYwp/G3htteeKQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFO9gq/03uoY9tn7MrjAKDkty7QEDMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvNzJDcl9UZTZoajIyZnN5dU1Bb09TM0x0QVFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAH977AwQA JUiLAwQAW/dNAwQAW/dPAwQAwQOqMA0GCSqGSIb3DQEBCwUAA4IBAQAjyFyRiDlb 8Oe663xfl2WETNnL7iZ4N/1ZkfJ//Q2CnZz8LFG71clYqYjLVw0auPw4ftkARAjo 1J0M1Q1Os1MPv9Eo+/uXUlyubQTm6zzGhj+o70NfuFv2MC75LtmXy6u4u2JWXnCr A1IM04MRA/gnX+c+9eJATBMfGNmlf9pKmM3g4rWORgdAxJLFjeLFxGEnkuOC432c g/rHuYAu3hCnwshGJ7k2BVwJTgvNbdHpR6XmdUtmbzQgrEt/zbHutaTBdzdRDE2m 58LU8pWATzrbFN0WV5EoD9Gwxc984UiRiNuO1LuStut7QcDw4axHDqN1SxrDBtht niLg6anIygYw -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:27 2026 by rpki-client