This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b0-rTIWPbQxZ2SKPpxFm_joLzs8.roa File: b0-rTIWPbQxZ2SKPpxFm_joLzs8.roa (raw, json) Hash identifier: qjVk+zY/XioDF8Dk38qhY2Uo7O7rUMJlgTA/fl3T55o= Subject key identifier: 6F:4F:AB:4C:85:8F:6D:0C:59:D9:22:8F:A7:11:66:FE:3A:0B:CE:CF Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ECC09C78C7780FAAFA2032C30FDCB Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b0-rTIWPbQxZ2SKPpxFm_joLzs8.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60861 IP address blocks: 37.221.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cc:09:c7:8c:77:80:fa:af:a2:03:2c:30:fd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f4fab4c858f6d0c59d9228fa71166fe3a0bcecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:e1:98:d9:06:ab:a3:f4:96:4f:03:cf:6f: 05:ea:a1:2e:1e:49:85:30:4c:40:56:a1:72:14:c0: 55:b3:c1:13:30:56:d4:86:74:4e:2a:39:92:cb:1c: 6e:68:b9:d8:cd:37:4a:cd:09:30:bb:59:3d:15:48: cb:95:73:7a:6b:c8:8d:74:33:82:d5:5a:a4:11:78: af:8b:3c:40:5f:ee:f8:cd:42:b3:ef:53:33:43:d0: 33:7e:95:57:a2:91:ad:dd:63:17:19:3a:c2:20:4c: d5:f1:7a:cd:e8:a6:9d:38:14:94:c3:2a:74:33:55: f5:ec:b9:ff:d6:81:8a:e3:b8:aa:fa:35:af:8c:42: fa:ed:85:7d:cb:ad:03:72:ff:60:0d:88:25:bd:3f: 9d:d8:33:28:25:2d:e3:28:55:1a:11:6c:44:05:48: 46:f5:75:1d:b8:6c:05:14:1e:05:00:7a:91:09:72: 9e:e0:7d:61:2d:1a:b3:c1:c0:4a:86:9c:85:a7:56: 84:ba:44:ab:47:29:6f:ff:42:09:b8:a2:7e:da:ee: a6:ed:5a:d1:ed:ea:c9:7d:b3:d6:1e:49:7b:38:e8: 79:7a:50:b5:8b:5a:7f:5b:da:76:4f:bd:39:3d:10: b6:b9:9c:c9:02:be:3c:48:43:8b:9a:7c:af:a0:90: bd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:4F:AB:4C:85:8F:6D:0C:59:D9:22:8F:A7:11:66:FE:3A:0B:CE:CF X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b0-rTIWPbQxZ2SKPpxFm_joLzs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.180.0/24 Signature Algorithm: sha256WithRSAEncryption 38:22:ae:f9:9b:57:28:94:c4:55:71:2b:a5:4d:73:b9:ee:18: 23:5d:cf:47:38:e5:b4:31:af:8b:79:c0:7d:b8:0f:3e:35:b6: 2d:94:31:6b:7e:e8:0d:a2:ba:c9:32:f3:76:32:ed:50:06:50: 7f:b7:02:fc:22:84:0c:db:b8:45:7c:bc:57:e4:ee:bb:98:f4: b2:8e:e6:80:0a:d0:e7:11:57:d3:e3:71:09:c8:e1:dc:c2:e2: 23:77:8a:b2:4b:9c:ec:5f:31:1e:2a:f6:4e:13:0e:d3:31:d5: be:53:79:47:4a:3a:53:6e:15:db:95:16:1b:37:72:2b:4d:3c: 7e:1f:57:e3:d1:75:23:9f:b7:6b:e7:c1:9e:80:80:e1:df:c7: ed:4c:17:3b:fb:e9:6f:b2:22:00:23:9e:2e:b3:11:df:bf:06: 32:ff:28:56:7a:b3:2f:3f:bc:67:b6:db:5d:a2:55:e3:57:73: 41:e6:31:4b:9a:6b:c7:29:c8:fe:ed:1d:fa:92:00:90:74:01: 4f:a8:a6:9e:3e:c4:da:ce:f7:ab:54:ac:31:e1:55:7d:aa:8a: 64:c9:e1:07:08:80:b8:dc:e3:5e:a2:22:2e:c2:e5:2f:cf:fe: 06:20:fc:23:4f:7a:cf:c7:3f:da:dd:b7:1a:f9:04:cd:73:c8: ae:13:8b:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fswJx4x3gPqvogMsMP3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjRmYWI0Yzg1OGY2ZDBjNTlkOTIyOGZhNzExNjZmZTNhMGJjZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3DhmNkGq6P0lk8Dz28F6qEuHkmF MExAVqFyFMBVs8ETMFbUhnROKjmSyxxuaLnYzTdKzQkwu1k9FUjLlXN6a8iNdDOC 1VqkEXivizxAX+74zUKz71MzQ9AzfpVXopGt3WMXGTrCIEzV8XrN6KadOBSUwyp0 M1X17Ln/1oGK47iq+jWvjEL67YV9y60Dcv9gDYglvT+d2DMoJS3jKFUaEWxEBUhG 9XUduGwFFB4FAHqRCXKe4H1hLRqzwcBKhpyFp1aEukSrRylv/0IJuKJ+2u6m7VrR 7erJfbPWHkl7OOh5elC1i1p/W9p2T705PRC2uZzJAr48SEOLmnyvoJC9lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9Pq0yFj20MWdkij6cRZv46C87PMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvYjAtclRJV1BiUXhaMlNLUHB4Rm1fam9MenM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJd20MA0G CSqGSIb3DQEBCwUAA4IBAQA4Iq75m1colMRVcSulTXO57hgjXc9HOOW0Ma+LecB9 uA8+NbYtlDFrfugNorrJMvN2Mu1QBlB/twL8IoQM27hFfLxX5O67mPSyjuaACtDn EVfT43EJyOHcwuIjd4qyS5zsXzEeKvZOEw7TMdW+U3lHSjpTbhXblRYbN3IrTTx+ H1fj0XUjn7dr58GegIDh38ftTBc7++lvsiIAI54usxHfvwYy/yhWerMvP7xntttd olXjV3NB5jFLmmvHKcj+7R36kgCQdAFPqKaePsTazverVKwx4VV9qopkyeEHCIC4 3ONeoiIuwuUvz/4GIPwjT3rPxz/a3bca+QTNc8iuE4t6 -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:27 2026 by rpki-client