This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa File: 1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa (raw, json) Hash identifier: NmPNOCnlOq4J9jRPSVe9AqahPbi72yXv6vfuK53ObQM= Subject key identifier: FA:3B:AB:50:1B:AF:43:5C:99:C1:4F:7B:DB:D8:DB:19:51:FF:0E:A7 Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019B7A5AB50639E1858C5C5086D7FE8CB440 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62294 IP address blocks: 37.114.57.0/24 maxlen: 24 176.100.34.0/24 maxlen: 24 2a00:ccc5::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b5:06:39:e1:85:8c:5c:50:86:d7:fe:8c:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa3bab501baf435c99c14f7bdbd8db1951ff0ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:35:93:c3:c5:9f:cc:69:15:d8:a2:1d:73: 79:42:81:c6:69:f2:7e:a0:0b:01:af:9b:77:f9:1d: 0f:73:2f:26:24:fe:32:05:83:01:d5:8d:95:ca:0f: 59:a5:89:40:0e:e9:99:18:df:62:a5:ee:18:c9:16: 40:36:0f:27:5a:9b:b5:65:46:79:42:ad:dc:5b:ae: 48:74:b1:c3:b9:d6:f1:f6:ba:f9:07:36:51:9b:c8: c7:5b:14:9c:9e:00:f4:2c:b6:43:ce:12:7d:72:71: a8:30:8f:e1:a5:6c:52:a8:ba:b8:33:b0:8a:30:50: 33:93:c0:0e:5a:5d:28:cb:60:39:ce:9a:f8:60:1d: b8:db:f1:8c:25:82:bc:50:3f:ee:34:13:c3:ca:97: d6:d7:2e:c9:c5:03:4c:16:a0:d0:0f:3f:7c:03:55: e7:f1:d5:84:66:67:40:5d:cf:4d:9c:61:c4:13:db: 0b:bd:1f:a3:04:58:57:98:94:4e:86:76:86:2e:6b: 40:9f:fd:65:48:5e:9d:19:7d:31:48:ab:ef:19:28: cd:a0:fd:fb:4e:86:18:00:cc:2d:88:60:d8:40:4e: cd:a3:80:44:12:a9:36:c0:fd:b9:79:4b:ea:3e:33: 53:1a:9b:7e:7e:47:da:d3:02:e2:bc:1f:69:26:c5: a0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3B:AB:50:1B:AF:43:5C:99:C1:4F:7B:DB:D8:DB:19:51:FF:0E:A7 X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/1-jurUBuvQ1yZwU9729jbGVH_Dqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.57.0/24 176.100.34.0/24 IPv6: 2a00:ccc5::/32 Signature Algorithm: sha256WithRSAEncryption 63:00:ca:9e:7f:c4:34:7f:66:0e:fe:c0:17:75:f3:ec:cd:ff: 80:44:80:7b:75:62:75:bf:5e:ea:1d:b9:17:57:89:12:58:5e: fa:0e:7a:4a:88:07:18:55:75:5d:44:c2:1b:af:1e:02:04:f8: 78:d9:7a:2f:9a:48:79:a0:83:0f:14:c6:45:8d:13:51:a9:e4: dd:01:ea:e5:c7:4e:c3:b9:ae:04:b9:48:51:63:c5:4f:02:e7: ad:3c:4b:e0:6b:ff:ea:3f:f5:0f:b7:ae:7f:20:5a:67:02:7c: 06:31:58:e9:ca:25:b0:6e:da:bb:58:4a:8d:d3:5f:2b:9e:75: 64:6d:82:ee:ee:98:26:c4:8c:ac:9d:16:51:68:d6:3d:f3:a3: 1c:32:23:ef:90:ba:6b:53:c1:bc:96:32:9d:e6:f7:86:aa:a5: 8b:b7:07:e2:75:00:e8:41:bb:b7:14:27:b7:0a:fa:dc:54:62: 46:32:2e:4c:52:6c:c4:8a:5d:c0:72:7c:5c:c2:c5:5c:38:23: 2b:21:80:81:82:bf:53:54:50:04:1a:ed:24:12:fb:33:10:13: 05:cf:4b:a4:bc:3e:35:f9:fd:83:64:16:4d:55:0b:84:bc:d0: c1:4e:e3:ac:2a:92:06:7a:98:2d:9f:fc:54:89:43:77:9c:05: 57:85:44:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt6WrUGOeGFjFxQhtf+jLRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTNiYWI1MDFiYWY0MzVjOTljMTRmN2JkYmQ4ZGIxOTUxZmYwZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEM1k8PFn8xpFdiiHXN5QoHGafJ+ oAsBr5t3+R0Pcy8mJP4yBYMB1Y2Vyg9ZpYlADumZGN9ipe4YyRZANg8nWpu1ZUZ5 Qq3cW65IdLHDudbx9rr5BzZRm8jHWxScngD0LLZDzhJ9cnGoMI/hpWxSqLq4M7CK MFAzk8AOWl0oy2A5zpr4YB242/GMJYK8UD/uNBPDypfW1y7JxQNMFqDQDz98A1Xn 8dWEZmdAXc9NnGHEE9sLvR+jBFhXmJROhnaGLmtAn/1lSF6dGX0xSKvvGSjNoP37 ToYYAMwtiGDYQE7No4BEEqk2wP25eUvqPjNTGpt+fkfa0wLivB9pJsWgDwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPo7q1Abr0NcmcFPe9vY2xlR/w6nMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvMS1qdXJVQnV2UTF5WndVOTcyOWpiR1ZIX0RxYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvYzU4YmRjLTE0ZTctNDk5Yy05ZDljLTFiN2NiYjA4ZDcz Zi8xL0tXV1R0MGZuYWxaSkpSRzdOaExrMWVUTDUtdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEACVyOQME ALBkIjANBAIAAjAHAwUAKgDMxTANBgkqhkiG9w0BAQsFAAOCAQEAYwDKnn/ENH9m Dv7AF3Xz7M3/gESAe3Vidb9e6h25F1eJElhe+g56SogHGFV1XUTCG68eAgT4eNl6 L5pIeaCDDxTGRY0TUank3QHq5cdOw7muBLlIUWPFTwLnrTxL4Gv/6j/1D7eufyBa ZwJ8BjFY6colsG7au1hKjdNfK551ZG2C7u6YJsSMrJ0WUWjWPfOjHDIj75C6a1PB vJYyneb3hqqli7cH4nUA6EG7txQntwr63FRiRjIuTFJsxIpdwHJ8XMLFXDgjKyGA gYK/U1RQBBrtJBL7MxATBc9LpLw+Nfn9g2QWTVULhLzQwU7jrCqSBnqYLZ/8VIlD d5wFV4VEdQ== -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:47 2026 by rpki-client