This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/r_KWp6IFKww9parS2sD0k4Jt_ZE.roa File: r_KWp6IFKww9parS2sD0k4Jt_ZE.roa (raw, json) Hash identifier: mY6mYXYQ4K5PM2uPNU+6oG0dpv7WtKGufi0n4lAh1iI= Subject key identifier: AF:F2:96:A7:A2:05:2B:0C:3D:A5:AA:D2:DA:C0:F4:93:82:6D:FD:91 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B360079E45F0B7148B920A46D1CAC41 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/r_KWp6IFKww9parS2sD0k4Jt_ZE.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48199 IP address blocks: 37.77.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:00:79:e4:5f:0b:71:48:b9:20:a4:6d:1c:ac:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aff296a7a2052b0c3da5aad2dac0f493826dfd91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:14:b1:e4:d7:f0:fd:ed:13:d8:92:51:a3: 0d:5a:53:b0:7b:bb:34:f7:6c:06:4b:e9:cc:1f:94: 17:28:09:9d:08:12:ed:bd:fa:b0:6f:6b:e1:a2:6c: c5:68:04:e3:b6:02:98:2f:35:6a:9a:a8:e0:fd:3c: 37:26:a4:73:2e:2b:63:e7:f1:8b:64:e8:89:7b:d6: 6f:7b:d1:35:fa:84:2c:93:36:5e:a3:07:59:fc:14: f0:4f:e8:eb:e0:4a:8b:51:3e:14:42:ab:45:0d:bb: bd:08:48:f2:87:c5:67:ee:91:c2:1a:29:96:2b:9b: 22:9a:97:7a:4e:15:6d:a4:70:5d:84:fc:25:37:37: 9c:f3:61:72:93:f7:ee:8b:96:41:fe:b6:54:4f:6e: 5f:76:dc:bc:b2:a1:be:50:45:8a:d8:ea:44:d7:78: 08:56:1a:7e:cb:45:ef:1f:d2:7d:51:b2:fe:38:d0: cc:4b:b2:32:1a:ee:d7:43:72:86:62:f7:65:2b:a3: 30:0d:cb:9d:a6:f7:ad:88:db:df:98:47:db:ef:55: ce:70:a7:9b:f7:ae:ec:bd:fe:17:07:4d:5b:4f:4a: 41:1c:99:e3:fe:20:2b:dc:fe:80:d2:3a:b6:f3:e5: 46:32:5e:8b:4f:83:59:1f:68:27:8a:6d:b1:d2:46: 47:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F2:96:A7:A2:05:2B:0C:3D:A5:AA:D2:DA:C0:F4:93:82:6D:FD:91 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/r_KWp6IFKww9parS2sD0k4Jt_ZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.148.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:06:41:2e:db:f2:09:c1:11:8c:b2:e1:55:45:8b:4e:7a:9a: 94:a9:b5:20:87:df:11:f8:e6:dd:50:54:39:98:81:88:c1:44: c4:7d:d5:ef:de:ce:bf:4a:55:97:13:2c:bb:e6:d5:22:c5:84: a4:0f:fd:cb:77:1f:47:0a:b8:04:db:01:f2:ad:ca:c9:c4:28: 0e:ca:26:72:a9:3f:b5:da:87:b5:8a:03:70:94:91:6a:3c:71: 23:e7:68:f0:09:2f:62:48:f8:9e:97:96:37:97:2b:fd:fc:b6: d5:ae:93:57:5d:77:39:cc:67:80:38:88:8b:c3:bf:13:32:f8: b6:9d:94:70:0b:13:1d:e6:b6:b1:36:f6:d4:01:59:52:e3:7c: 0d:fa:5d:df:77:79:7d:83:73:f7:a9:66:52:e0:8d:86:79:ff: 89:b4:5a:88:49:6a:8e:1b:4b:e3:71:85:9d:7d:7c:41:c8:56: 55:f3:60:7b:c3:44:68:a8:0a:9d:1f:27:ee:b2:e4:55:84:0c: b6:8f:6b:6f:88:31:b7:17:8c:5b:84:10:ae:93:e3:2c:e8:8d: 75:d9:e1:34:24:66:ef:a8:44:2d:50:a4:4f:8a:ba:42:cb:d6: ec:ff:4e:53:84:8f:53:31:18:6b:31:65:08:50:fb:70:0c:c4: 93:73:ec:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgB55F8LcUi5IKRtHKxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmYyOTZhN2EyMDUyYjBjM2RhNWFhZDJkYWMwZjQ5MzgyNmRmZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoEUseTX8P3tE9iSUaMNWlOwe7s0 92wGS+nMH5QXKAmdCBLtvfqwb2vhomzFaATjtgKYLzVqmqjg/Tw3JqRzLitj5/GL ZOiJe9Zve9E1+oQskzZeowdZ/BTwT+jr4EqLUT4UQqtFDbu9CEjyh8Vn7pHCGimW K5simpd6ThVtpHBdhPwlNzec82Fyk/fui5ZB/rZUT25fdty8sqG+UEWK2OpE13gI Vhp+y0XvH9J9UbL+ONDMS7IyGu7XQ3KGYvdlK6MwDcudpvetiNvfmEfb71XOcKeb 967svf4XB01bT0pBHJnj/iAr3P6A0jq28+VGMl6LT4NZH2gnim2x0kZHUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/ylqeiBSsMPaWq0trA9JOCbf2RMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvcl9LV3A2SUZLd3c5cGFyUzJzRDBrNEp0X1pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJU2UMA0G CSqGSIb3DQEBCwUAA4IBAQAPBkEu2/IJwRGMsuFVRYtOepqUqbUgh98R+ObdUFQ5 mIGIwUTEfdXv3s6/SlWXEyy75tUixYSkD/3Ldx9HCrgE2wHyrcrJxCgOyiZyqT+1 2oe1igNwlJFqPHEj52jwCS9iSPiel5Y3lyv9/LbVrpNXXXc5zGeAOIiLw78TMvi2 nZRwCxMd5raxNvbUAVlS43wN+l3fd3l9g3P3qWZS4I2Gef+JtFqISWqOG0vjcYWd fXxByFZV82B7w0RoqAqdHyfusuRVhAy2j2tviDG3F4xbhBCuk+Ms6I112eE0JGbv qEQtUKRPirpCy9bs/05ThI9TMRhrMWUIUPtwDMSTc+zC -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:29 2026 by rpki-client