This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/N7wIAVShGLQyli3xNuOZyqJnQO4.roa File: N7wIAVShGLQyli3xNuOZyqJnQO4.roa (raw, json) Hash identifier: AgMVywaJAsy8gUEhbniXUCBpJabLSJ38CmQWxUFEkEI= Subject key identifier: 37:BC:08:01:54:A1:18:B4:32:96:2D:F1:36:E3:99:CA:A2:67:40:EE Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D1D317B8CD5E5474A45620FD47F91 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/N7wIAVShGLQyli3xNuOZyqJnQO4.roa Signing time: Fri 02 Jan 2026 06:20:12 +0000 ROA not before: Fri 02 Jan 2026 06:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56322 IP address blocks: 5.182.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1d:31:7b:8c:d5:e5:47:4a:45:62:0f:d4:7f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37bc080154a118b432962df136e399caa26740ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:1e:46:42:d9:80:2c:77:86:2c:c1:2f:d7: a1:ef:41:20:14:d2:c2:9d:43:1f:d8:c5:b8:c3:e4: 59:e2:77:69:b2:e7:03:68:7b:a3:72:a9:22:f6:61: 15:27:7a:48:d2:45:95:54:02:ae:77:f6:43:cf:2b: 10:18:eb:db:37:81:d4:1d:d5:0e:a8:40:53:c4:f9: 9b:86:ac:4a:41:ed:65:15:8d:2a:23:97:89:78:42: 13:99:af:f0:47:1e:8a:0f:e7:cf:0f:00:85:3f:07: 68:01:45:88:a0:60:40:94:46:05:59:03:21:87:53: bd:1b:48:74:5e:7d:e8:d4:56:d4:27:a0:5e:7f:2e: d1:f8:07:e3:3f:42:f8:36:da:bb:23:27:25:f3:a9: 9c:46:65:e1:20:37:89:b3:80:f6:76:95:9d:b4:ac: 5c:ab:39:06:64:6f:35:b1:c3:00:dc:1f:c5:d3:a8: 28:1b:66:a8:5a:1d:31:49:ac:f1:23:90:87:62:b7: a2:20:4f:c2:b0:02:bf:2d:be:be:c5:11:35:8c:a2: 61:9a:b6:12:6e:31:20:1f:de:16:dd:8a:57:39:cd: 89:4b:d7:15:a4:34:de:05:8a:59:8c:dc:9e:8a:75: 82:da:ea:9f:cf:f7:8a:ae:84:46:7f:f7:63:1e:d8: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BC:08:01:54:A1:18:B4:32:96:2D:F1:36:E3:99:CA:A2:67:40:EE X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/N7wIAVShGLQyli3xNuOZyqJnQO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.38.0/24 Signature Algorithm: sha256WithRSAEncryption 02:2c:18:4d:00:0d:d0:66:41:45:c4:ad:b3:b1:40:e0:af:22: a8:4d:ea:70:6b:2a:0a:87:e9:35:66:a6:d1:b1:72:15:6b:8f: 65:d1:d1:e2:fa:fc:a7:89:f9:03:d9:15:00:60:07:72:11:53: 7f:07:cf:6c:40:ee:a1:9e:52:bf:2d:2f:05:b6:5e:9f:71:20: f0:0e:50:68:9d:4e:1b:e3:16:20:00:19:c4:ad:9d:60:23:7c: ad:f5:eb:77:17:bd:d0:2d:12:fa:e0:10:10:b4:29:1c:db:e7: 9f:70:ac:6b:93:bf:a6:15:79:87:ae:12:47:e2:01:7c:2f:ff: 3c:44:73:97:ec:ac:cc:18:ea:6a:f7:e5:f8:38:af:dd:79:d3: f6:69:3a:07:2e:38:d8:f2:0e:81:98:b3:38:20:3e:cb:4c:8c: d5:e7:b6:17:ce:3c:82:59:8d:f6:9f:d1:b2:4f:ee:46:21:39: 25:e7:a5:b0:3b:69:45:59:28:dd:8a:b3:16:50:fc:89:5e:3c: 4f:d3:4e:04:e1:31:44:8b:20:4c:b9:9c:d0:66:56:2a:17:cb: 91:18:18:ad:51:c0:3f:8e:bc:f3:74:be:c9:79:5d:36:f3:ff: 9d:50:1b:49:61:36:a4:eb:8c:07:4a:d3:8c:8e:f9:48:1b:8e: eb:fe:cc:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XR0xe4zV5UdKRWIP1H+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2JjMDgwMTU0YTExOGI0MzI5NjJkZjEzNmUzOTljYWEyNjc0MGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolUeRkLZgCx3hizBL9eh70EgFNLC nUMf2MW4w+RZ4ndpsucDaHujcqki9mEVJ3pI0kWVVAKud/ZDzysQGOvbN4HUHdUO qEBTxPmbhqxKQe1lFY0qI5eJeEITma/wRx6KD+fPDwCFPwdoAUWIoGBAlEYFWQMh h1O9G0h0Xn3o1FbUJ6Befy7R+AfjP0L4Ntq7Iycl86mcRmXhIDeJs4D2dpWdtKxc qzkGZG81scMA3B/F06goG2aoWh0xSazxI5CHYreiIE/CsAK/Lb6+xRE1jKJhmrYS bjEgH94W3YpXOc2JS9cVpDTeBYpZjNyeinWC2uqfz/eKroRGf/djHtjtSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDe8CAFUoRi0MpYt8TbjmcqiZ0DuMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvTjd3SUFWU2hHTFF5bGkzeE51T1p5cUpuUU80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbYmMA0G CSqGSIb3DQEBCwUAA4IBAQACLBhNAA3QZkFFxK2zsUDgryKoTepwayoKh+k1ZqbR sXIVa49l0dHi+vynifkD2RUAYAdyEVN/B89sQO6hnlK/LS8Ftl6fcSDwDlBonU4b 4xYgABnErZ1gI3yt9et3F73QLRL64BAQtCkc2+efcKxrk7+mFXmHrhJH4gF8L/88 RHOX7KzMGOpq9+X4OK/dedP2aToHLjjY8g6BmLM4ID7LTIzV57YXzjyCWY32n9Gy T+5GITkl56WwO2lFWSjdirMWUPyJXjxP004E4TFEiyBMuZzQZlYqF8uRGBitUcA/ jrzzdL7JeV028/+dUBtJYTak64wHStOMjvlIG47r/sya -----END CERTIFICATE-----Generated at Wed Jan 21 12:45:33 2026 by rpki-client