This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/IoZsqC7U-fQC_aty6wDytMhbNvQ.roa File: IoZsqC7U-fQC_aty6wDytMhbNvQ.roa (raw, json) Hash identifier: uSpnth7jpKViFNAUl0BHygMMK1vfeGylmztQwD5Bysw= Subject key identifier: 22:86:6C:A8:2E:D4:F9:F4:02:FD:AB:72:EB:00:F2:B4:C8:5B:36:F4 Certificate issuer: /CN=ad44be18ee3e0d2747670555e86b000965e8139b Certificate serial: 019B7C80D1BF9B9685E3597C7E2866630BBB Authority key identifier: AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/IoZsqC7U-fQC_aty6wDytMhbNvQ.roa Signing time: Fri 02 Jan 2026 02:19:35 +0000 ROA not before: Fri 02 Jan 2026 02:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43356 IP address blocks: 37.218.196.0/24 maxlen: 24 37.218.197.0/24 maxlen: 24 37.218.198.0/24 maxlen: 24 37.218.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.mft rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d1:bf:9b:96:85:e3:59:7c:7e:28:66:63:0b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad44be18ee3e0d2747670555e86b000965e8139b Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22866ca82ed4f9f402fdab72eb00f2b4c85b36f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:b1:81:1d:39:3a:84:cf:a1:c6:7b:6a:ef: d7:22:11:9a:bf:ce:26:a3:6c:04:b4:7c:62:45:07: f2:63:99:9b:a6:14:e9:ac:91:58:22:29:50:8a:40: a0:40:bd:c7:ae:e1:7c:7b:d2:6b:47:a6:81:fe:0f: aa:d2:3c:f3:bd:10:e5:dd:6c:bd:c1:97:63:7a:f2: 74:b5:e1:b7:30:80:64:17:d8:3e:a7:01:c6:77:50: f7:ea:93:94:af:05:10:02:ed:cc:4c:1c:8a:be:c0: 70:23:29:ce:b4:7f:45:70:70:c6:92:18:c7:e2:36: 08:f4:2a:a1:71:f4:da:64:37:d7:38:20:bc:54:a1: e3:9a:7e:96:36:4e:a6:1e:a2:19:99:90:58:9d:4e: a2:b7:1d:ce:12:d4:bc:a7:69:60:dc:ec:a0:00:42: a8:e4:78:db:33:34:cd:c6:11:54:cb:18:7b:3f:11: 1b:ab:5b:a8:7b:7f:49:fa:bd:08:29:93:29:61:cb: aa:28:0f:24:7e:39:61:82:84:6b:bd:5f:b5:ea:ae: 2a:87:6f:34:06:8d:49:20:43:e8:2a:66:e0:f0:41: 81:c9:ff:a2:39:6d:a2:62:ae:04:2b:e9:b4:72:dd: cc:d2:8d:11:c6:f3:59:c4:19:fa:73:4b:c1:37:41: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:86:6C:A8:2E:D4:F9:F4:02:FD:AB:72:EB:00:F2:B4:C8:5B:36:F4 X509v3 Authority Key Identifier: keyid:AD:44:BE:18:EE:3E:0D:27:47:67:05:55:E8:6B:00:09:65:E8:13:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUS-GO4-DSdHZwVV6GsACWXoE5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/IoZsqC7U-fQC_aty6wDytMhbNvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f8cf57-571f-49ee-a76d-13a8cb2587d4/1/rUS-GO4-DSdHZwVV6GsACWXoE5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.218.196.0/22 Signature Algorithm: sha256WithRSAEncryption 22:b0:da:90:a9:24:78:7e:eb:e6:7d:0e:80:5c:0f:43:a1:51: 6b:8a:f0:9c:49:41:09:f1:74:85:2a:18:88:4d:d0:73:2b:c6: c8:a3:f4:8c:d7:b8:3a:09:bd:8a:b1:fc:70:f9:2b:1c:de:1e: d8:59:12:24:73:d5:3e:97:38:be:86:98:a5:81:c1:5f:8c:1c: 48:4c:77:30:11:79:f8:d5:51:0d:e3:e1:f5:71:b6:93:47:28: 8c:53:f1:d1:22:db:bc:86:a6:bb:d0:a4:26:e7:17:ec:8a:d5: 5b:29:98:68:6a:b2:6c:34:51:89:45:e8:02:24:fa:86:8d:88: 9b:ac:b8:0f:7c:de:16:51:38:ae:b0:43:c9:b1:59:68:a3:9a: d4:b3:89:bf:e8:23:e7:f6:d9:fd:5d:be:7e:8a:58:e9:c0:de: 14:1b:56:70:c8:d7:d4:09:6e:60:8c:68:25:5b:62:26:9d:2d: 7f:b5:b7:cd:8d:24:bd:11:62:4a:64:60:92:49:da:49:87:39: a8:13:11:75:fc:bd:53:35:c2:6c:44:27:9c:e5:0a:57:eb:47: 88:b8:46:25:b0:ca:12:db:2c:1d:8f:8e:c9:e3:54:d1:32:67: 99:08:26:4c:2f:3e:8b:c3:c4:4d:51:5a:af:79:07:6d:22:cb: df:1e:de:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gNG/m5aF41l8fihmYwu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNDRiZTE4ZWUzZTBkMjc0NzY3MDU1NWU4NmIwMDA5NjVl ODEzOWIwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjg2NmNhODJlZDRmOWY0MDJmZGFiNzJlYjAwZjJiNGM4NWIzNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEOxgR05OoTPocZ7au/XIhGav84m o2wEtHxiRQfyY5mbphTprJFYIilQikCgQL3HruF8e9JrR6aB/g+q0jzzvRDl3Wy9 wZdjevJ0teG3MIBkF9g+pwHGd1D36pOUrwUQAu3MTByKvsBwIynOtH9FcHDGkhjH 4jYI9CqhcfTaZDfXOCC8VKHjmn6WNk6mHqIZmZBYnU6itx3OEtS8p2lg3OygAEKo 5HjbMzTNxhFUyxh7PxEbq1uoe39J+r0IKZMpYcuqKA8kfjlhgoRrvV+16q4qh280 Bo1JIEPoKmbg8EGByf+iOW2iYq4EK+m0ct3M0o0RxvNZxBn6c0vBN0GpvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCKGbKgu1Pn0Av2rcusA8rTIWzb0MB8GA1UdIwQY MBaAFK1EvhjuPg0nR2cFVehrAAll6BObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mOGNmNTctNTcxZi00OWVlLWE3NmQt MTNhOGNiMjU4N2Q0LzEvSW9ac3FDN1UtZlFDX2F0eTZ3RHl0TWhiTnZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9mOGNmNTctNTcxZi00OWVlLWE3NmQtMTNhOGNiMjU4N2Q0 LzEvclVTLUdPNC1EU2RIWndWVjZHc0FDV1hvRTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJdrEMA0G CSqGSIb3DQEBCwUAA4IBAQAisNqQqSR4fuvmfQ6AXA9DoVFrivCcSUEJ8XSFKhiI TdBzK8bIo/SM17g6Cb2Ksfxw+Ssc3h7YWRIkc9U+lzi+hpilgcFfjBxITHcwEXn4 1VEN4+H1cbaTRyiMU/HRItu8hqa70KQm5xfsitVbKZhoarJsNFGJRegCJPqGjYib rLgPfN4WUTiusEPJsVloo5rUs4m/6CPn9tn9Xb5+iljpwN4UG1ZwyNfUCW5gjGgl W2ImnS1/tbfNjSS9EWJKZGCSSdpJhzmoExF1/L1TNcJsRCec5QpX60eIuEYlsMoS 2ywdj47J41TRMmeZCCZMLz6Lw8RNUVqveQdtIsvfHt5N -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:52 2026 by rpki-client