This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/gqKM98sI7jnWHnPv9ivS5msKTUY.roa File: gqKM98sI7jnWHnPv9ivS5msKTUY.roa (raw, json) Hash identifier: MUUwJmXcsDOjEK4OJCGSz757s9z/nbZdi2bqGnLrhRg= Subject key identifier: 82:A2:8C:F7:CB:08:EE:39:D6:1E:73:EF:F6:2B:D2:E6:6B:0A:4D:46 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3603595ABECC1EBBF0567FD48C5B66 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/gqKM98sI7jnWHnPv9ivS5msKTUY.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49770 IP address blocks: 37.16.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:03:59:5a:be:cc:1e:bb:f0:56:7f:d4:8c:5b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82a28cf7cb08ee39d61e73eff62bd2e66b0a4d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:54:aa:4a:01:ce:2d:4a:af:31:d5:2c:e6: 94:6f:88:5b:84:59:7d:ac:cd:fa:67:d8:38:3f:20: fe:de:35:14:72:b0:bc:f7:fa:e5:f1:51:67:2d:42: 06:a2:08:19:1b:95:c7:ce:38:d1:3b:96:dc:b6:02: a4:26:54:f0:50:ba:49:5a:7c:5d:4c:64:e0:e8:4e: 16:9b:4a:2d:70:e6:81:e7:ba:87:b3:c8:fd:06:fb: a6:83:df:af:a2:a3:6c:8a:83:bf:d0:cd:be:02:ac: b8:6e:5e:84:d5:03:d5:e0:b0:57:96:e1:b8:fe:a0: 08:e9:be:60:da:7b:ce:29:fb:3a:76:6a:1f:18:61: 3d:44:36:cd:06:20:31:76:c7:7d:9a:bc:01:bf:e1: 59:58:01:0f:a7:a6:e8:7f:f4:68:d9:99:b9:ab:ae: 00:58:4b:fa:71:18:a0:a2:7a:68:19:7f:60:d6:20: f5:ad:ae:47:49:06:47:73:df:95:6c:a1:30:10:4e: 26:16:04:9a:84:8c:2d:61:9e:0c:e8:b9:ed:dd:fe: 2e:94:3d:5b:8a:72:e9:fd:1a:3f:5b:20:d5:f7:ed: 4d:ad:3f:89:e7:e0:d0:b2:90:5e:72:8d:c3:2c:f6: 97:ef:1d:d8:fc:cc:e8:c7:20:a3:4b:a4:d3:16:6f: 98:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A2:8C:F7:CB:08:EE:39:D6:1E:73:EF:F6:2B:D2:E6:6B:0A:4D:46 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/gqKM98sI7jnWHnPv9ivS5msKTUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.88.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:71:74:ba:e3:99:6c:99:6c:93:ad:9d:e0:73:de:ec:ca:07: 64:a0:b5:8e:7e:1d:3f:d7:f0:77:10:94:e9:b4:91:4d:c1:b2: 2b:a6:8e:33:ad:62:a9:fc:06:76:e9:24:fa:e0:13:7d:56:db: 1a:91:b8:5d:bf:64:36:03:32:a3:ba:86:8a:a2:6e:69:b9:dd: e3:1c:34:19:04:50:95:02:5f:11:66:dd:6f:db:48:83:22:18: 0d:a1:6b:af:8a:57:f9:6a:e4:f0:7a:84:60:ce:d0:05:cd:f0: e1:da:81:af:3b:83:5c:b2:72:d3:d3:a8:d1:6a:93:0f:ec:f2: cd:6f:81:ea:44:ef:0c:c9:a9:7e:59:f3:85:df:35:1a:10:45: ae:da:a3:6d:b1:3a:bd:de:e1:c3:89:5a:2c:cb:7d:2b:35:c5: 74:85:32:b2:33:31:4a:a8:03:5d:55:a4:58:2b:a1:03:b0:53: 3a:82:f6:1a:69:2a:f0:47:e0:e2:3f:4e:65:11:d6:e3:ab:cd: fd:3d:e2:3d:15:4b:43:cf:98:d9:89:fa:64:4f:83:d7:26:b9: 33:54:5c:be:13:6f:42:bd:39:cf:7a:f6:64:d4:de:e3:45:15: 50:ed:a9:99:d9:0c:8b:09:cc:c2:2a:76:39:4e:77:29:44:da: b1:84:ec:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgNZWr7MHrvwVn/UjFtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmEyOGNmN2NiMDhlZTM5ZDYxZTczZWZmNjJiZDJlNjZiMGE0ZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwBUqkoBzi1KrzHVLOaUb4hbhFl9 rM36Z9g4PyD+3jUUcrC89/rl8VFnLUIGoggZG5XHzjjRO5bctgKkJlTwULpJWnxd TGTg6E4Wm0otcOaB57qHs8j9Bvumg9+voqNsioO/0M2+Aqy4bl6E1QPV4LBXluG4 /qAI6b5g2nvOKfs6dmofGGE9RDbNBiAxdsd9mrwBv+FZWAEPp6bof/Ro2Zm5q64A WEv6cRigonpoGX9g1iD1ra5HSQZHc9+VbKEwEE4mFgSahIwtYZ4M6Lnt3f4ulD1b inLp/Ro/WyDV9+1NrT+J5+DQspBeco3DLPaX7x3Y/MzoxyCjS6TTFm+YiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIKijPfLCO451h5z7/Yr0uZrCk1GMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvZ3FLTTk4c0k3am5XSG5QdjlpdlM1bXNLVFVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRBYMA0G CSqGSIb3DQEBCwUAA4IBAQAKcXS645lsmWyTrZ3gc97sygdkoLWOfh0/1/B3EJTp tJFNwbIrpo4zrWKp/AZ26ST64BN9Vtsakbhdv2Q2AzKjuoaKom5pud3jHDQZBFCV Al8RZt1v20iDIhgNoWuvilf5auTweoRgztAFzfDh2oGvO4NcsnLT06jRapMP7PLN b4HqRO8Myal+WfOF3zUaEEWu2qNtsTq93uHDiVosy30rNcV0hTKyMzFKqANdVaRY K6EDsFM6gvYaaSrwR+DiP05lEdbjq839PeI9FUtDz5jZifpkT4PXJrkzVFy+E29C vTnPevZk1N7jRRVQ7amZ2QyLCczCKnY5TncpRNqxhOyg -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:46 2026 by rpki-client