This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/roUgq1WWF-4-EBD-mSjF2FqhNuM.roa File: roUgq1WWF-4-EBD-mSjF2FqhNuM.roa (raw, json) Hash identifier: O7LaxZ0YLI1xv3D+p2716Dcd2hVN4y4qQfPRDb1TsUg= Subject key identifier: AE:85:20:AB:55:96:17:EE:3E:10:10:FE:99:28:C5:D8:5A:A1:36:E3 Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019B7A5AB5C0C92658A3F1D8CBA6AD9D3FD8 Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/roUgq1WWF-4-EBD-mSjF2FqhNuM.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200482 IP address blocks: 37.114.35.0/24 maxlen: 32 37.114.38.0/24 maxlen: 24 37.114.60.0/24 maxlen: 24 37.114.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b5:c0:c9:26:58:a3:f1:d8:cb:a6:ad:9d:3f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae8520ab559617ee3e1010fe9928c5d85aa136e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e8:4f:0e:1a:90:a3:e1:7f:1b:00:92:3e:a2: ed:b8:fe:f5:95:7d:80:6f:e6:28:8b:a9:d4:18:39: 95:35:9c:20:bc:5c:0b:4a:04:24:28:f3:7b:dc:1b: dd:18:b2:7c:43:ca:0d:ce:f7:72:10:04:a9:da:53: c5:16:48:ff:79:9e:94:e1:0c:7e:c8:bf:5e:2f:74: 21:5b:4c:8c:d9:be:9a:62:8e:ca:e3:25:4c:bf:9c: bf:2e:d2:00:47:c7:91:df:37:56:4b:28:b6:43:88: a6:9a:8f:0c:a6:b8:a3:e7:6d:20:70:0c:1f:cc:72: 3b:08:7c:ac:82:f3:cc:d4:7b:cc:af:ec:7a:bd:2e: bf:00:07:b8:35:c2:0c:12:28:4f:87:8a:2e:3a:e0: c3:35:31:49:fb:a7:10:e3:a3:25:c9:37:11:ec:57: f1:00:ec:84:21:05:57:a7:d0:f7:1b:11:9a:e7:bb: ab:53:c3:97:cb:d8:89:da:46:cc:50:61:08:88:1b: 87:36:80:81:07:96:12:ff:bf:b5:f7:5c:c7:16:c5: fe:1a:62:c7:4a:8f:56:9e:05:36:79:7a:e1:7d:e6: dd:57:e1:d7:36:b3:d4:21:df:d7:af:96:cb:4e:70: 70:03:63:98:55:c1:ac:b8:63:12:de:ec:5b:c4:6f: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:85:20:AB:55:96:17:EE:3E:10:10:FE:99:28:C5:D8:5A:A1:36:E3 X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/roUgq1WWF-4-EBD-mSjF2FqhNuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.35.0/24 37.114.38.0/24 37.114.60.0/23 Signature Algorithm: sha256WithRSAEncryption 80:c6:b6:26:16:5b:ee:a4:1a:8c:08:da:55:e5:ef:55:0e:19: 84:9b:8e:48:cc:0e:5f:ce:9b:41:b4:6a:c3:1a:0a:bd:cf:3b: 14:bd:13:d5:b9:9a:a2:d0:08:f8:27:8b:c1:57:52:8d:b8:5d: a1:df:54:2c:66:6b:60:22:66:40:1f:6c:8b:f5:91:ce:b2:f5: 4b:ce:34:3f:3b:8e:0d:e0:5c:6d:b5:5b:5b:fa:d1:56:e5:2d: 85:6f:9e:2a:8b:98:98:4e:30:88:ba:cd:6e:45:07:e9:31:c3: 7e:24:8a:69:89:b0:3e:0b:5d:fc:e1:8e:66:62:f3:6b:52:7e: 1b:4e:e1:36:d6:fa:c3:d0:35:cb:e6:2a:3f:74:69:16:b0:94: 03:b6:a8:96:cd:30:c9:be:1f:e4:e7:cc:da:1e:d5:37:a7:03: ed:71:f9:f0:e9:88:68:80:8c:d2:c3:b0:cc:4b:98:55:02:16: a6:f5:ec:3d:38:4a:6f:af:8d:a9:ff:dd:64:de:0c:f4:75:68: 96:22:9c:f2:c9:11:6b:bd:41:16:c0:97:b3:3d:9a:40:ac:d5: 37:e8:44:90:ec:3a:cf:d7:03:f0:81:64:5b:3c:b9:a8:d5:7d: 39:b5:2f:ed:71:b7:ca:ab:f3:a4:5e:df:b7:1e:e0:5b:f5:e5: bd:5d:97:b9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6WrXAySZYo/HYy6atnT/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTg1MjBhYjU1OTYxN2VlM2UxMDEwZmU5OTI4YzVkODVhYTEzNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuhPDhqQo+F/GwCSPqLtuP71lX2A b+Yoi6nUGDmVNZwgvFwLSgQkKPN73BvdGLJ8Q8oNzvdyEASp2lPFFkj/eZ6U4Qx+ yL9eL3QhW0yM2b6aYo7K4yVMv5y/LtIAR8eR3zdWSyi2Q4immo8Mprij520gcAwf zHI7CHysgvPM1HvMr+x6vS6/AAe4NcIMEihPh4ouOuDDNTFJ+6cQ46MlyTcR7Ffx AOyEIQVXp9D3GxGa57urU8OXy9iJ2kbMUGEIiBuHNoCBB5YS/7+191zHFsX+GmLH So9WngU2eXrhfebdV+HXNrPUId/Xr5bLTnBwA2OYVcGsuGMS3uxbxG+4gQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK6FIKtVlhfuPhAQ/pkoxdhaoTbjMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvcm9VZ3ExV1dGLTQtRUJELW1TakYyRnFoTnVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJXIjAwQA JXImAwQBJXI8MA0GCSqGSIb3DQEBCwUAA4IBAQCAxrYmFlvupBqMCNpV5e9VDhmE m45IzA5fzptBtGrDGgq9zzsUvRPVuZqi0Aj4J4vBV1KNuF2h31QsZmtgImZAH2yL 9ZHOsvVLzjQ/O44N4FxttVtb+tFW5S2Fb54qi5iYTjCIus1uRQfpMcN+JIppibA+ C1384Y5mYvNrUn4bTuE21vrD0DXL5io/dGkWsJQDtqiWzTDJvh/k58zaHtU3pwPt cfnw6YhogIzSw7DMS5hVAham9ew9OEpvr42p/91k3gz0dWiWIpzyyRFrvUEWwJez PZpArNU36ESQ7DrP1wPwgWRbPLmo1X05tS/tcbfKq/OkXt+3HuBb9eW9XZe5 -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:27 2026 by rpki-client