This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/KeD4L6y8pe2jawoO0v_Iw05d7f0.roa File: KeD4L6y8pe2jawoO0v_Iw05d7f0.roa (raw, json) Hash identifier: MlHed28QjL1er2kf3lP9+8MfBm3P54VkdbgLne7YLtA= Subject key identifier: 29:E0:F8:2F:AC:BC:A5:ED:A3:6B:0A:0E:D2:FF:C8:C3:4E:5D:ED:FD Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4 Certificate serial: 019B7CEE44C5DC7C8FEFE7C18F84FB73FFD2 Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/KeD4L6y8pe2jawoO0v_Iw05d7f0.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198508 IP address blocks: 37.75.224.0/21 maxlen: 21 185.168.4.0/22 maxlen: 22 185.168.4.0/24 maxlen: 24 185.168.5.0/24 maxlen: 24 185.168.6.0/24 maxlen: 24 185.168.7.0/24 maxlen: 24 2a00:8440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:44:c5:dc:7c:8f:ef:e7:c1:8f:84:fb:73:ff:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29e0f82facbca5eda36b0a0ed2ffc8c34e5dedfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:22:a0:01:f6:e1:c3:9d:6e:7a:63:b2:30: 38:d8:e0:cc:89:64:4c:35:06:62:3b:24:6c:e3:55: fb:3f:56:e5:52:3e:d6:90:94:0f:01:b8:25:ca:f7: 4b:95:92:26:92:51:4d:a4:32:7d:61:88:96:90:be: 9f:94:29:02:11:c1:1a:f7:61:67:2e:6b:d7:98:4d: af:46:c8:82:11:a5:c2:26:8f:b0:00:44:e7:53:66: 0e:42:8e:5c:24:47:72:a5:29:94:ce:a3:b1:13:1a: c3:46:83:ca:f1:3f:ae:a0:50:57:b6:ee:3d:14:60: c5:af:90:34:9d:e7:0e:3c:45:d7:da:01:8b:3b:2d: 89:21:55:4b:1c:a7:68:e7:5a:d5:62:9b:ee:b9:4e: 38:59:68:3c:63:a1:82:06:89:30:50:39:fe:0f:11: 48:ef:d0:3d:f7:42:a2:e3:2d:ff:88:9a:ce:97:39: f4:41:3b:9f:14:0a:c2:43:c0:8f:ee:4f:89:c6:7d: d2:91:de:b6:3f:b5:b9:a5:0d:ae:76:93:8a:3b:b5: 9f:0b:2e:f3:ab:d4:ed:20:e9:6d:b0:b3:a8:f6:78: 75:7f:64:c7:1e:89:3b:ef:fd:0a:12:d1:4c:cb:90: 57:d1:b8:a7:4f:77:c3:1c:3e:2c:51:6c:8e:89:e5: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E0:F8:2F:AC:BC:A5:ED:A3:6B:0A:0E:D2:FF:C8:C3:4E:5D:ED:FD X509v3 Authority Key Identifier: keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/KeD4L6y8pe2jawoO0v_Iw05d7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.224.0/21 185.168.4.0/22 IPv6: 2a00:8440::/32 Signature Algorithm: sha256WithRSAEncryption 33:87:0d:9b:c2:41:73:b6:26:a4:65:2f:66:00:f7:9a:95:a8: 42:1a:a4:24:27:f4:d0:f2:33:61:78:6b:27:62:f7:17:76:99: 10:b5:85:e6:96:95:84:e2:d0:8a:da:fc:eb:b2:2c:89:b6:ed: 61:75:01:81:a9:13:fb:2f:2f:39:c6:0b:7f:7e:f7:1e:97:fd: f9:c4:22:00:b3:91:02:19:97:75:42:ac:ad:40:e6:20:52:b3: 2b:59:db:fd:ca:88:10:66:89:58:eb:e1:ff:5f:47:f9:73:26: 38:e9:37:7d:06:40:ec:6f:cc:b6:39:4d:39:3c:fa:45:99:1a: 98:37:7b:39:bc:f4:55:87:75:74:79:19:22:2e:68:ca:b8:5a: 2a:80:ad:72:04:ea:9c:90:88:e7:f2:e1:2a:48:c8:30:6f:d2: 75:6d:f4:e7:37:17:93:9c:e7:29:a4:30:f3:81:13:d0:bb:99: 95:c8:d7:f5:a6:43:8f:11:da:03:8d:1e:54:94:f7:8a:0f:a3: 63:28:23:3c:5f:66:88:c7:69:da:c1:62:49:e1:40:bd:05:06: 83:5e:58:53:15:62:cf:8d:7a:13:72:6c:76:c6:4e:4a:bb:23: bd:6a:c9:05:f2:12:b4:a1:e9:40:c6:c4:36:b0:e8:5a:42:1e: f8:d1:1c:61 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87kTF3HyP7+fBj4T7c//SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy YzA2ZjQwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWUwZjgyZmFjYmNhNWVkYTM2YjBhMGVkMmZmYzhjMzRlNWRlZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmQioAH24cOdbnpjsjA42ODMiWRM NQZiOyRs41X7P1blUj7WkJQPAbglyvdLlZImklFNpDJ9YYiWkL6flCkCEcEa92Fn LmvXmE2vRsiCEaXCJo+wAETnU2YOQo5cJEdypSmUzqOxExrDRoPK8T+uoFBXtu49 FGDFr5A0necOPEXX2gGLOy2JIVVLHKdo51rVYpvuuU44WWg8Y6GCBokwUDn+DxFI 79A990Ki4y3/iJrOlzn0QTufFArCQ8CP7k+Jxn3Skd62P7W5pQ2udpOKO7WfCy7z q9TtIOltsLOo9nh1f2THHok77/0KEtFMy5BX0binT3fDHD4sUWyOieWJuwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCng+C+svKXto2sKDtL/yMNOXe39MB8GA1UdIwQY MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt ZDZhMzA1Y2JmNDZjLzEvS2VENEw2eThwZTJqYXdvTzB2X0l3MDVkN2YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJUvgAwQC uagEMA0EAgACMAcDBQAqAIRAMA0GCSqGSIb3DQEBCwUAA4IBAQAzhw2bwkFztiak ZS9mAPealahCGqQkJ/TQ8jNheGsnYvcXdpkQtYXmlpWE4tCK2vzrsiyJtu1hdQGB qRP7Ly85xgt/fvcel/35xCIAs5ECGZd1QqytQOYgUrMrWdv9yogQZolY6+H/X0f5 cyY46Td9BkDsb8y2OU05PPpFmRqYN3s5vPRVh3V0eRkiLmjKuFoqgK1yBOqckIjn 8uEqSMgwb9J1bfTnNxeTnOcppDDzgRPQu5mVyNf1pkOPEdoDjR5UlPeKD6NjKCM8 X2aIx2nawWJJ4UC9BQaDXlhTFWLPjXoTcmx2xk5KuyO9askF8hK0oelAxsQ2sOha Qh740Rxh -----END CERTIFICATE-----Generated at Tue Jan 27 07:11:34 2026 by rpki-client