This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/gPMjhhmemxpOq_6aVVCJVdiEiCw.roa File: gPMjhhmemxpOq_6aVVCJVdiEiCw.roa (raw, json) Hash identifier: Awi0lJMvPZIsKzXkRn4khXQRzuK6j9oUkbHUvDLJIPw= Subject key identifier: 80:F3:23:86:19:9E:9B:1A:4E:AB:FE:9A:55:50:89:55:D8:84:88:2C Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019B7A5AB012E15DCECA706CC26BCD963102 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/gPMjhhmemxpOq_6aVVCJVdiEiCw.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 37.114.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b0:12:e1:5d:ce:ca:70:6c:c2:6b:cd:96:31:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80f32386199e9b1a4eabfe9a55508955d884882c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:e9:6c:3f:91:a8:bb:1a:72:31:00:bb:1f: f8:28:1f:8e:0f:70:e3:57:5e:d1:c6:55:b1:2d:ef: bc:b5:39:04:f9:65:69:c7:1f:93:9c:5e:57:5f:17: 26:55:3a:b7:cc:3b:72:0d:2d:cc:f8:a6:d2:d3:da: ca:f2:c5:3e:db:fb:b6:91:13:20:fb:58:1f:98:c0: 3b:56:e9:18:41:38:dc:50:78:4f:d3:d4:b3:e3:f9: 6b:57:fd:c5:d9:7f:12:8e:78:0f:e6:f7:dc:5f:5d: 4f:26:d7:19:74:da:92:90:52:ab:01:0f:41:9d:34: 1a:e5:20:4d:f7:ab:49:be:5c:03:1f:e8:b0:db:b1: 5b:ef:f7:17:90:4a:10:1c:23:bf:72:bf:f8:dc:ca: 1a:22:e0:e8:f9:f3:fa:de:59:df:35:01:1e:64:0e: b5:85:c3:60:31:f5:5c:2b:dd:bd:77:58:66:a2:76: 7c:7d:2e:9a:09:44:55:7f:4c:41:12:d4:86:57:98: fa:03:91:8f:8f:22:1d:f2:4e:01:32:82:6f:6b:96: 7c:6b:0f:cc:11:cb:20:45:74:b4:1b:a1:2a:77:d6: 9d:4d:b9:fd:c9:01:b1:69:08:15:f1:33:6e:e7:57: 32:cc:4a:7b:1a:dc:f0:6a:1a:28:57:37:2f:2f:30: 3d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F3:23:86:19:9E:9B:1A:4E:AB:FE:9A:55:50:89:55:D8:84:88:2C X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/gPMjhhmemxpOq_6aVVCJVdiEiCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.32.0/24 Signature Algorithm: sha256WithRSAEncryption 60:0f:e0:24:59:6a:88:cb:97:da:df:49:38:02:85:7c:96:64: ea:f2:f6:7d:f2:bb:2a:81:87:c0:c1:7a:fc:6f:2f:0b:4c:de: 85:3d:70:4a:48:51:20:8d:b9:0b:c4:25:46:83:f7:6c:b8:2e: 9a:8b:db:d1:c2:40:dd:54:6e:00:05:ec:1d:99:cd:5a:94:6e: 20:31:82:1c:89:52:79:35:75:05:17:16:0d:f6:9d:3f:56:09: 57:0a:3c:05:d8:c4:31:10:03:76:7b:d3:01:28:b0:43:18:3f: 2c:e3:cd:1d:81:80:0b:ef:50:08:03:e1:f2:f3:c9:73:26:d9: 34:9c:79:d4:7e:6f:fd:cf:84:ae:fc:ad:bd:bd:ec:7e:ef:5c: cb:c6:f4:23:d8:35:ab:56:62:86:6e:79:4c:43:c8:af:91:8f: e1:6f:5a:71:c1:2c:8e:44:70:c7:1d:d6:0c:88:f5:20:6a:d9: a9:7e:7e:4d:a1:4c:8a:c6:89:52:79:5a:3b:d2:30:78:e6:af: e1:07:26:6e:73:fc:2b:ba:c1:5b:81:de:a2:91:2b:af:3f:57: fb:48:5e:0b:53:70:df:0d:57:45:32:cf:55:f7:08:35:ed:1c: 59:fe:f0:65:41:57:91:f6:10:27:29:9b:61:f5:53:f6:73:be: a7:ff:91:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrAS4V3OynBswmvNljECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGYzMjM4NjE5OWU5YjFhNGVhYmZlOWE1NTUwODk1NWQ4ODQ4ODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+3pbD+RqLsacjEAux/4KB+OD3Dj V17RxlWxLe+8tTkE+WVpxx+TnF5XXxcmVTq3zDtyDS3M+KbS09rK8sU+2/u2kRMg +1gfmMA7VukYQTjcUHhP09Sz4/lrV/3F2X8SjngP5vfcX11PJtcZdNqSkFKrAQ9B nTQa5SBN96tJvlwDH+iw27Fb7/cXkEoQHCO/cr/43MoaIuDo+fP63lnfNQEeZA61 hcNgMfVcK929d1hmonZ8fS6aCURVf0xBEtSGV5j6A5GPjyId8k4BMoJva5Z8aw/M EcsgRXS0G6Eqd9adTbn9yQGxaQgV8TNu51cyzEp7GtzwahooVzcvLzA9lQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIDzI4YZnpsaTqv+mlVQiVXYhIgsMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvZ1BNamhobWVteHBPcV82YVZWQ0pWZGlFaUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJXIgMA0G CSqGSIb3DQEBCwUAA4IBAQBgD+AkWWqIy5fa30k4AoV8lmTq8vZ98rsqgYfAwXr8 by8LTN6FPXBKSFEgjbkLxCVGg/dsuC6ai9vRwkDdVG4ABewdmc1alG4gMYIciVJ5 NXUFFxYN9p0/VglXCjwF2MQxEAN2e9MBKLBDGD8s480dgYAL71AIA+Hy88lzJtk0 nHnUfm/9z4Su/K29vex+71zLxvQj2DWrVmKGbnlMQ8ivkY/hb1pxwSyORHDHHdYM iPUgatmpfn5NoUyKxolSeVo70jB45q/hByZuc/wrusFbgd6ikSuvP1f7SF4LU3Df DVdFMs9V9wg17RxZ/vBlQVeR9hAnKZth9VP2c76n/5GL -----END CERTIFICATE-----Generated at Mon Jan 19 17:46:27 2026 by rpki-client