This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/37ovZ2hnSX5grcREq5tN4V1BfaQ.roa File: 37ovZ2hnSX5grcREq5tN4V1BfaQ.roa (raw, json) Hash identifier: YrRPkZiMPn0MGs5vlmASyvzKOP5xZ6fhans4OhfAr2U= Subject key identifier: DF:BA:2F:67:68:67:49:7E:60:AD:C4:44:AB:9B:4D:E1:5D:41:7D:A4 Certificate issuer: /CN=13230da70232f66784730fd6c1255135b7f8d09f Certificate serial: 019B7F85718B0E3FEBB57077C65D06676ABE Authority key identifier: 13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/37ovZ2hnSX5grcREq5tN4V1BfaQ.roa Signing time: Fri 02 Jan 2026 16:23:30 +0000 ROA not before: Fri 02 Jan 2026 16:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51090 IP address blocks: 185.77.192.0/22 maxlen: 24 195.43.74.0/23 maxlen: 23 2001:67c:21c::/48 maxlen: 48 2a03:5620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.mft rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:71:8b:0e:3f:eb:b5:70:77:c6:5d:06:67:6a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13230da70232f66784730fd6c1255135b7f8d09f Validity Not Before: Jan 2 16:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfba2f676867497e60adc444ab9b4de15d417da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:5e:dc:07:26:d1:e6:df:de:6c:2d:d5:b0: b1:ed:6f:f9:48:35:b2:42:54:3d:fe:cd:ac:e3:02: 95:e0:c4:be:10:62:20:53:56:7f:ac:7b:b3:62:ea: ae:01:9e:59:f8:9d:54:9e:f0:68:ed:1b:e3:51:52: 85:a9:45:51:b5:b0:a3:32:2a:97:99:db:e9:b6:d8: 39:ea:a9:4a:9c:a3:8a:4c:69:d7:a3:25:75:e9:1b: 4d:df:5c:77:63:68:cf:93:ff:59:70:b4:23:ff:0f: 35:b6:88:01:29:9f:48:da:e4:6d:8b:96:80:a2:bb: 18:b5:76:da:ce:e4:fd:6e:70:72:3b:91:cc:60:17: 64:9d:fb:2d:51:9c:ba:55:c4:10:57:1c:9d:7c:f1: 1d:25:9f:e4:41:cc:aa:c4:4e:7a:8c:90:33:68:ef: 4b:bd:60:0f:e2:63:30:19:7a:20:63:86:a9:f7:91: 51:04:fc:d0:50:2d:ee:9b:4e:2e:03:86:81:87:dd: 69:04:85:72:4a:42:4e:35:81:cc:95:75:f7:fa:53: 7d:48:04:90:24:41:f3:9a:13:b8:e2:d3:d8:ee:e0: b1:9f:2c:52:e0:e5:0e:52:b0:80:47:cc:2e:42:ae: 6d:22:99:ba:70:4e:82:1c:59:53:53:1d:ee:2b:34: db:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BA:2F:67:68:67:49:7E:60:AD:C4:44:AB:9B:4D:E1:5D:41:7D:A4 X509v3 Authority Key Identifier: keyid:13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/37ovZ2hnSX5grcREq5tN4V1BfaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.192.0/22 195.43.74.0/23 IPv6: 2001:67c:21c::/48 2a03:5620::/32 Signature Algorithm: sha256WithRSAEncryption 5c:15:b7:74:fc:88:c9:d2:3e:32:6e:1b:da:76:f2:eb:d9:e8: ad:88:71:5f:ae:48:89:95:0d:00:66:5e:91:86:e3:f0:c8:b8: 86:cb:cd:e2:5b:6e:e9:00:f8:e1:36:cd:2b:ce:d0:32:71:76: aa:d0:28:49:da:62:a2:1d:92:06:d4:6e:56:37:31:15:90:9f: dc:d7:2b:56:ab:7e:1a:0f:b5:b4:1d:2c:56:4f:48:ab:35:2a: 4c:41:52:b2:60:88:3a:99:c8:22:81:82:65:4a:31:f8:9f:5e: 9c:39:af:c7:ff:c5:78:a0:17:e0:dc:a5:8d:3b:6f:27:30:15: 60:1c:0e:63:f0:8a:0e:f3:e6:e9:7b:d7:d4:c3:75:6d:89:4d: 18:3e:d0:6a:d4:bb:5b:7d:7a:f8:3e:1f:48:9a:ca:32:9d:fe: 08:bf:a4:a4:a2:70:78:da:04:f2:f8:a1:b7:d9:ab:2d:58:3f: 8d:9c:5b:c3:07:fb:68:eb:bc:db:5c:b8:06:21:5b:34:a1:19: 1f:e9:19:c2:00:cb:59:38:3e:c0:87:ac:0c:78:d1:eb:7d:7c: f8:89:bd:53:b7:8c:13:42:c1:1e:c6:f2:8f:0d:78:c7:8a:46: e0:e5:f2:55:a0:9c:93:ec:5a:12:ff:ba:cc:e0:82:a6:54:3d: 93:5c:76:ff -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/hXGLDj/rtXB3xl0GZ2q+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMjMwZGE3MDIzMmY2Njc4NDczMGZkNmMxMjU1MTM1Yjdm OGQwOWYwHhcNMjYwMTAyMTYyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmJhMmY2NzY4Njc0OTdlNjBhZGM0NDRhYjliNGRlMTVkNDE3ZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq59e3Acm0ebf3mwt1bCx7W/5SDWy QlQ9/s2s4wKV4MS+EGIgU1Z/rHuzYuquAZ5Z+J1UnvBo7RvjUVKFqUVRtbCjMiqX mdvpttg56qlKnKOKTGnXoyV16RtN31x3Y2jPk/9ZcLQj/w81togBKZ9I2uRti5aA orsYtXbazuT9bnByO5HMYBdknfstUZy6VcQQVxydfPEdJZ/kQcyqxE56jJAzaO9L vWAP4mMwGXogY4ap95FRBPzQUC3um04uA4aBh91pBIVySkJONYHMlXX3+lN9SASQ JEHzmhO44tPY7uCxnyxS4OUOUrCAR8wuQq5tIpm6cE6CHFlTUx3uKzTbSwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFN+6L2doZ0l+YK3ERKubTeFdQX2kMB8GA1UdIwQY MBaAFBMjDacCMvZnhHMP1sElUTW3+NCfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXlNTnB3SXk5bWVFY3dfV3dTVlJOYmY0MEo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYmUyZjMtMTMzYy00NGQ1LThhYzgt ZWIwMWU4YThkNGIzLzEvMzdvdloyaG5TWDVncmNSRXE1dE40VjFCZmFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xYmUyZjMtMTMzYy00NGQ1LThhYzgtZWIwMWU4YThkNGIz LzEvRXlNTnB3SXk5bWVFY3dfV3dTVlJOYmY0MEo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuU3AAwQB wytKMBYEAgACMBADBwAgAQZ8AhwDBQAqA1YgMA0GCSqGSIb3DQEBCwUAA4IBAQBc Fbd0/IjJ0j4ybhvadvLr2eitiHFfrkiJlQ0AZl6RhuPwyLiGy83iW27pAPjhNs0r ztAycXaq0ChJ2mKiHZIG1G5WNzEVkJ/c1ytWq34aD7W0HSxWT0irNSpMQVKyYIg6 mcgigYJlSjH4n16cOa/H/8V4oBfg3KWNO28nMBVgHA5j8IoO8+bpe9fUw3VtiU0Y PtBq1LtbfXr4Ph9Imsoynf4Iv6SkonB42gTy+KG32astWD+NnFvDB/to67zbXLgG IVs0oRkf6RnCAMtZOD7Ah6wMeNHrfXz4ib1Tt4wTQsEexvKPDXjHikbg5fJVoJyT 7FoS/7rM4IKmVD2TXHb/ -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:29 2026 by rpki-client