This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/r0DjM6D3Jrww-wRyKsk5TEQhi7U.roa File: r0DjM6D3Jrww-wRyKsk5TEQhi7U.roa (raw, json) Hash identifier: Y5j/00qY/cneeICs86FfUfsywSMy7I5D1C1wtJI7Cuw= Subject key identifier: AF:40:E3:33:A0:F7:26:BC:30:FB:04:72:2A:C9:39:4C:44:21:8B:B5 Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff Certificate serial: 019B79112164D7E412B0841C61908D554E6A Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/r0DjM6D3Jrww-wRyKsk5TEQhi7U.roa Signing time: Thu 01 Jan 2026 10:18:44 +0000 ROA not before: Thu 01 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35236 IP address blocks: 37.221.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:21:64:d7:e4:12:b0:84:1c:61:90:8d:55:4e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af40e333a0f726bc30fb04722ac9394c44218bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:a6:36:23:8f:bc:da:ea:f7:68:ec:cd:f7: cd:9a:17:21:6b:bb:94:a8:3e:be:57:ef:83:2b:c4: 6d:5b:04:34:90:63:62:33:c6:f0:4e:5a:82:42:53: 80:dc:e6:48:12:f6:cc:f0:45:43:0a:26:d0:e8:5c: 7c:d6:de:45:c0:0d:12:bd:f3:fb:2f:a0:b9:7c:28: 31:e1:77:78:b8:e9:be:81:e7:67:09:a3:ef:a4:64: ba:fa:48:5a:d8:27:a4:c2:b7:99:b7:43:5a:99:18: 2a:da:36:70:1d:1d:bf:65:a7:0e:6c:7e:8a:ff:9b: d3:a5:4a:6f:16:60:ed:cf:2a:bc:6a:9c:13:0f:29: 0f:cc:23:9d:33:4a:68:87:a5:ec:fa:9d:95:92:6c: a2:6c:44:97:e6:cb:b9:0d:a6:53:b5:b3:c4:dd:e7: 2e:06:1e:cf:00:8c:9b:05:67:f4:5e:fe:11:fa:88: 46:d7:2a:8c:03:0f:bd:07:a3:dc:42:35:2e:5d:96: 89:e4:ff:44:84:91:a8:74:4d:c7:f4:89:9f:ef:7f: d3:44:ff:82:d0:0a:48:e7:a1:b7:a8:7d:7c:d5:0f: 49:e6:6e:67:36:ca:a4:35:47:78:75:78:a8:78:3f: c2:a8:3e:17:68:c3:90:d8:1a:c2:7e:a8:ed:08:0c: 8b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:40:E3:33:A0:F7:26:BC:30:FB:04:72:2A:C9:39:4C:44:21:8B:B5 X509v3 Authority Key Identifier: keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/r0DjM6D3Jrww-wRyKsk5TEQhi7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.117.0/24 Signature Algorithm: sha256WithRSAEncryption 74:7b:53:9f:f0:36:44:68:16:34:52:90:cb:aa:db:3d:38:33: 40:2d:e4:8d:9b:78:ca:17:85:d4:3c:d5:43:a2:53:96:8a:78: f3:15:5d:e3:29:43:be:0a:76:b4:2c:45:32:6e:8b:31:fb:74: 3f:21:17:fd:89:1f:47:5f:bc:f9:31:8a:77:e1:85:f6:38:b4: b6:97:13:40:5f:96:45:bd:82:2f:9c:32:53:2f:c3:57:ea:aa: 08:ba:dd:94:6c:56:17:2b:09:05:cf:a8:69:ad:d7:5a:0c:3d: d4:9c:af:47:df:26:ec:0f:6c:82:4e:9e:c3:54:4a:b0:77:b1: a7:18:80:1b:0a:55:ce:cd:d0:e6:82:c7:3d:ac:14:31:86:22: b2:05:a0:23:55:79:a8:9b:d8:b3:7b:26:70:5a:27:65:a3:69: 83:90:2a:ee:d3:0e:44:e9:1f:3b:15:02:d3:80:a6:b1:5c:b6: 7d:68:01:59:2e:eb:ae:72:18:3b:21:f3:89:4d:48:e5:1f:98: 93:0a:3b:07:b1:0f:06:a4:6e:94:0d:f0:22:cf:3b:ea:98:be: 74:db:de:23:ca:91:60:c4:e0:bf:5f:31:a9:6b:1c:cb:c7:7d: c4:44:cd:66:68:63:29:6f:96:a2:5e:ac:b7:62:6a:94:d8:c5: 55:be:33:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESFk1+QSsIQcYZCNVU5qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0OWZmNDA4MzFjYTY2Zjk5NmM3NmVhNDY2YWY0OTQ3NmZl Y2QxZmYwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjQwZTMzM2EwZjcyNmJjMzBmYjA0NzIyYWM5Mzk0YzQ0MjE4YmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6GmNiOPvNrq92jszffNmhcha7uU qD6+V++DK8RtWwQ0kGNiM8bwTlqCQlOA3OZIEvbM8EVDCibQ6Fx81t5FwA0SvfP7 L6C5fCgx4Xd4uOm+gednCaPvpGS6+kha2CekwreZt0NamRgq2jZwHR2/ZacObH6K /5vTpUpvFmDtzyq8apwTDykPzCOdM0poh6Xs+p2VkmyibESX5su5DaZTtbPE3ecu Bh7PAIybBWf0Xv4R+ohG1yqMAw+9B6PcQjUuXZaJ5P9EhJGodE3H9Imf73/TRP+C 0ApI56G3qH181Q9J5m5nNsqkNUd4dXioeD/CqD4XaMOQ2BrCfqjtCAyLdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK9A4zOg9ya8MPsEcirJOUxEIYu1MB8GA1UdIwQY MBaAFJSf9Agxymb5lsdupGavSUdv7NH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgt MTQ3YWRjOTBjYTBmLzEvcjBEak02RDNKcnd3LXdSeUtzazVURVFoaTdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81NWQxMGQtYjQ0OC00YjQ3LWJhNTgtMTQ3YWRjOTBjYTBm LzEvbEpfMENESEtadm1XeDI2a1pxOUpSMl9zMGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJd11MA0G CSqGSIb3DQEBCwUAA4IBAQB0e1Of8DZEaBY0UpDLqts9ODNALeSNm3jKF4XUPNVD olOWinjzFV3jKUO+Cna0LEUybosx+3Q/IRf9iR9HX7z5MYp34YX2OLS2lxNAX5ZF vYIvnDJTL8NX6qoIut2UbFYXKwkFz6hprddaDD3UnK9H3ybsD2yCTp7DVEqwd7Gn GIAbClXOzdDmgsc9rBQxhiKyBaAjVXmom9izeyZwWidlo2mDkCru0w5E6R87FQLT gKaxXLZ9aAFZLuuuchg7IfOJTUjlH5iTCjsHsQ8GpG6UDfAizzvqmL50294jypFg xOC/XzGpaxzLx33ERM1maGMpb5aiXqy3YmqU2MVVvjMQ -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:52 2026 by rpki-client