This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/iY5AUZ3oRD8enxE2YfRVgLOVchA.roa File: iY5AUZ3oRD8enxE2YfRVgLOVchA.roa (raw, json) Hash identifier: qdLguy24Q8ECPU9WacB+CHbkQyPvE/BjpYZ7lL8qnf4= Subject key identifier: 89:8E:40:51:9D:E8:44:3F:1E:9F:11:36:61:F4:55:80:B3:95:72:10 Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019B7A5AB0AB65E40A32DF21976609E72693 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/iY5AUZ3oRD8enxE2YfRVgLOVchA.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47637 IP address blocks: 37.114.37.0/24 maxlen: 24 37.114.41.0/24 maxlen: 24 94.154.49.0/24 maxlen: 24 176.100.32.0/21 maxlen: 32 176.100.33.0/24 maxlen: 24 176.100.36.0/24 maxlen: 24 176.100.37.0/24 maxlen: 24 2a00:ccc4::/32 maxlen: 32 2a00:ccc6::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b0:ab:65:e4:0a:32:df:21:97:66:09:e7:26:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=898e40519de8443f1e9f113661f45580b3957210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:7b:cf:9b:6b:15:73:09:29:58:51:b0:f6: 59:93:bf:53:63:02:05:31:de:ac:ca:16:90:a8:2c: 43:18:06:f6:27:fc:b0:c9:22:1e:a5:3c:7b:19:e1: 24:07:25:72:15:52:96:5f:23:da:ca:4b:59:56:e1: f4:a4:3f:e5:4a:6b:8f:32:98:06:48:3f:20:6b:7b: d5:f0:a2:e8:d1:75:b0:16:36:6c:84:ab:c6:d6:32: d1:2b:e5:9c:f0:80:c2:44:ad:ff:c7:ac:65:4a:22: 9f:46:89:7c:93:76:68:70:fb:3c:72:28:3e:c8:ae: 33:e9:e0:ae:35:ae:1e:27:33:63:27:db:69:54:60: 41:1f:5e:11:f7:0e:fa:39:9a:fa:87:82:e4:29:7e: ba:40:7a:ee:b8:d9:1e:6c:ef:f7:3d:e9:90:ed:10: ff:9e:e3:8f:c6:fd:bb:4f:d7:f3:af:50:28:59:77: db:18:af:de:0a:f2:5b:69:9b:9d:0c:e6:cc:cf:41: 79:10:56:bb:c0:00:68:8e:fc:fd:b5:f1:e7:b8:08: a2:ca:72:2c:1b:eb:23:f0:ac:46:b4:fb:32:74:4d: e4:0d:75:a3:af:fc:9e:4e:d8:25:ec:27:06:8a:c7: aa:5a:a3:35:7c:c0:83:9e:bb:ec:0b:8b:73:da:7c: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8E:40:51:9D:E8:44:3F:1E:9F:11:36:61:F4:55:80:B3:95:72:10 X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/iY5AUZ3oRD8enxE2YfRVgLOVchA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.37.0/24 37.114.41.0/24 94.154.49.0/24 176.100.32.0/21 IPv6: 2a00:ccc4::/32 2a00:ccc6::/32 Signature Algorithm: sha256WithRSAEncryption c2:a7:3d:24:58:37:0a:9c:0b:79:43:d6:c5:4a:22:43:fb:67: 24:ee:d1:5a:32:32:e9:73:73:dc:ba:4f:e0:86:60:7a:bf:52: e0:fd:bb:af:8f:72:a2:34:26:f4:0b:d8:cc:c7:1a:fa:0e:31: 0c:ed:31:50:2f:02:b5:85:31:fb:e6:63:78:1b:ea:88:83:dd: f3:04:2c:96:1e:df:f2:e9:0e:4a:6d:52:9a:2f:8b:cd:a0:d5: 15:03:df:99:57:e4:63:84:20:df:cb:4d:94:8b:60:2f:9f:e0: 31:97:78:ec:f4:9b:d3:48:91:a8:bd:58:d4:94:a8:8e:59:39: a6:6e:91:af:5d:ff:3f:35:8f:0f:c0:bf:a4:0c:a9:fb:ae:9e: e3:9e:ae:82:9e:a4:e5:b9:11:f0:71:e3:6c:34:b5:0a:8e:9e: 20:42:ca:14:d7:03:2b:6c:b0:aa:ac:f5:6b:e3:8a:09:5d:ee: f6:4b:eb:4c:3d:fd:1b:04:31:e2:a5:6c:e4:ce:31:d2:3a:34: 25:e0:1e:0e:c4:9f:63:3c:c3:72:c1:ca:0e:db:0a:37:06:0e: 57:fa:07:69:80:25:61:2f:3e:b7:20:6e:fe:2d:d2:f8:95:b4: 5b:e0:ed:12:e4:83:ed:4b:07:86:2a:df:8f:43:87:9b:d6:50: 97:4c:b1:ca -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt6WrCrZeQKMt8hl2YJ5yaTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OThlNDA1MTlkZTg0NDNmMWU5ZjExMzY2MWY0NTU4MGIzOTU3MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq97z5trFXMJKVhRsPZZk79TYwIF Md6syhaQqCxDGAb2J/ywySIepTx7GeEkByVyFVKWXyPayktZVuH0pD/lSmuPMpgG SD8ga3vV8KLo0XWwFjZshKvG1jLRK+Wc8IDCRK3/x6xlSiKfRol8k3ZocPs8cig+ yK4z6eCuNa4eJzNjJ9tpVGBBH14R9w76OZr6h4LkKX66QHruuNkebO/3PemQ7RD/ nuOPxv27T9fzr1AoWXfbGK/eCvJbaZudDObMz0F5EFa7wABojvz9tfHnuAiiynIs G+sj8KxGtPsydE3kDXWjr/yeTtgl7CcGiseqWqM1fMCDnrvsC4tz2nzcgQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFImOQFGd6EQ/Hp8RNmH0VYCzlXIQMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvaVk1QVVaM29SRDhlbnhFMllmUlZnTE9WY2hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQAJXIlAwQA JXIpAwQAXpoxAwQDsGQgMBQEAgACMA4DBQAqAMzEAwUAKgDMxjANBgkqhkiG9w0B AQsFAAOCAQEAwqc9JFg3CpwLeUPWxUoiQ/tnJO7RWjIy6XNz3LpP4IZger9S4P27 r49yojQm9AvYzMca+g4xDO0xUC8CtYUx++ZjeBvqiIPd8wQslh7f8ukOSm1Smi+L zaDVFQPfmVfkY4Qg38tNlItgL5/gMZd47PSb00iRqL1Y1JSojlk5pm6Rr13/PzWP D8C/pAyp+66e456ugp6k5bkR8HHjbDS1Co6eIELKFNcDK2ywqqz1a+OKCV3u9kvr TD39GwQx4qVs5M4x0jo0JeAeDsSfYzzDcsHKDtsKNwYOV/oHaYAlYS8+tyBu/i3S +JW0W+DtEuSD7UsHhirfj0OHm9ZQl0yxyg== -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:27 2026 by rpki-client