This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/uNRqwpIiIZEsgTyrEkw7uhF314Y.roa File: uNRqwpIiIZEsgTyrEkw7uhF314Y.roa (raw, json) Hash identifier: nuf882yOK7Gm1Xhr7tFICsJpWAnlPOnwhndnq27u30w= Subject key identifier: B8:D4:6A:C2:92:22:21:91:2C:81:3C:AB:12:4C:3B:BA:11:77:D7:86 Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Certificate serial: 019B7A5AB36FC8762848C101EE0A17506B0D Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/uNRqwpIiIZEsgTyrEkw7uhF314Y.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58212 IP address blocks: 37.114.35.0/24 maxlen: 24 37.114.43.0/24 maxlen: 24 37.114.44.0/23 maxlen: 24 103.252.89.0/24 maxlen: 24 103.252.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b3:6f:c8:76:28:48:c1:01:ee:0a:17:50:6b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8d46ac2922221912c813cab124c3bba1177d786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:31:fb:17:74:36:7a:03:66:53:de:ec:fb: 94:b4:e9:bc:6e:2b:01:21:ab:0f:45:36:a5:4f:ba: e6:b0:22:c7:25:88:8f:9a:6d:55:ba:b4:4e:a2:8c: c4:22:58:ed:b1:44:d0:48:60:ce:fe:cf:a0:de:73: 17:25:c1:e9:45:09:e3:9f:fc:fb:80:af:d4:64:5c: ca:81:85:97:6d:4d:c3:32:a6:74:5b:49:96:1b:93: c2:54:e1:5c:fa:d6:fd:7a:17:e1:1b:61:ea:33:b8: 48:18:08:49:70:37:f2:b7:41:7d:3e:73:5b:8c:50: 49:36:80:c2:ea:91:39:a2:dd:68:8e:5a:21:9e:48: 14:1a:e4:1c:9d:be:bb:3c:35:84:a0:fd:96:b2:1e: e8:9f:56:b0:59:f2:62:c3:3d:1e:47:9b:46:da:9c: fe:81:07:1d:80:ab:bf:30:14:d7:95:75:c8:e0:d3: c5:ad:73:e9:98:cb:4d:bd:65:a1:8b:e9:3b:cf:7c: 26:af:7a:06:3f:18:b1:d1:83:ad:3e:a0:d9:d6:59: 38:df:94:53:31:2f:04:2a:9b:2b:f3:90:53:d5:a2: 37:45:0d:a1:91:0e:53:88:fc:64:83:13:7b:fe:57: 19:53:9a:8c:b2:e6:fb:1c:80:f8:2a:95:c9:6c:aa: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D4:6A:C2:92:22:21:91:2C:81:3C:AB:12:4C:3B:BA:11:77:D7:86 X509v3 Authority Key Identifier: keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/uNRqwpIiIZEsgTyrEkw7uhF314Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.114.35.0/24 37.114.43.0-37.114.45.255 103.252.89.0-103.252.90.255 Signature Algorithm: sha256WithRSAEncryption 72:06:57:c0:43:3e:aa:07:26:5f:c8:f7:50:a1:63:2f:f6:aa: 43:ef:32:46:a6:98:8d:92:49:bd:ee:f5:74:55:5c:06:6c:7f: 7e:8a:34:f3:45:04:26:8d:57:89:ff:87:c6:28:f4:d3:67:b5: ff:44:94:69:d9:09:5f:93:ea:2f:1d:81:94:07:05:f0:c2:9b: 28:f9:df:36:b6:0d:94:bd:0d:6b:15:ff:13:f1:2e:f3:3e:2e: c3:43:31:89:f3:8c:05:1a:55:90:ad:51:23:67:81:05:6b:5b: 46:2b:b1:f6:22:91:1e:df:c9:d2:4d:9d:1f:1e:3f:ba:c0:74: c7:50:bb:83:67:d1:c3:8a:45:2a:97:c7:c7:0b:24:1a:7f:46: c9:29:69:9b:d0:29:17:f3:60:70:91:1d:17:a8:32:09:76:85: 69:fd:0d:41:09:53:df:c2:7b:f6:9a:33:2f:45:4b:3b:49:e0: 44:78:31:de:7c:eb:11:b4:49:39:23:c1:9e:69:b6:bc:70:f8: 65:4d:0b:f9:e3:d6:e6:ef:76:bb:ec:78:4b:60:a5:cd:61:03: 72:e8:4d:e5:fe:9d:8b:9a:b5:79:d8:68:e0:0b:87:61:4a:0a: 61:97:7b:20:98:69:3f:b0:9e:b3:bc:16:b1:a2:56:e9:fb:8e: 23:54:d8:b6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt6WrNvyHYoSMEB7goXUGsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj YmU3ZWMwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGQ0NmFjMjkyMjIyMTkxMmM4MTNjYWIxMjRjM2JiYTExNzdkNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJgx+xd0NnoDZlPe7PuUtOm8bisB IasPRTalT7rmsCLHJYiPmm1VurROoozEIljtsUTQSGDO/s+g3nMXJcHpRQnjn/z7 gK/UZFzKgYWXbU3DMqZ0W0mWG5PCVOFc+tb9ehfhG2HqM7hIGAhJcDfyt0F9PnNb jFBJNoDC6pE5ot1ojlohnkgUGuQcnb67PDWEoP2Wsh7on1awWfJiwz0eR5tG2pz+ gQcdgKu/MBTXlXXI4NPFrXPpmMtNvWWhi+k7z3wmr3oGPxix0YOtPqDZ1lk435RT MS8EKpsr85BT1aI3RQ2hkQ5TiPxkgxN7/lcZU5qMsub7HID4KpXJbKou1QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLjUasKSIiGRLIE8qxJMO7oRd9eGMB8GA1UdIwQY MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt MWI3Y2JiMDhkNzNmLzEvdU5ScXdwSWlJWkVzZ1R5ckVrdzd1aEYzMTRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAJXIjMAwD BAAlcisDBAElciwwDAMEAGf8WQMEAGf8WjANBgkqhkiG9w0BAQsFAAOCAQEAcgZX wEM+qgcmX8j3UKFjL/aqQ+8yRqaYjZJJve71dFVcBmx/foo080UEJo1Xif+Hxij0 02e1/0SUadkJX5PqLx2BlAcF8MKbKPnfNrYNlL0NaxX/E/Eu8z4uw0MxifOMBRpV kK1RI2eBBWtbRiux9iKRHt/J0k2dHx4/usB0x1C7g2fRw4pFKpfHxwskGn9GySlp m9ApF/NgcJEdF6gyCXaFaf0NQQlT38J79pozL0VLO0ngRHgx3nzrEbRJOSPBnmm2 vHD4ZU0L+ePW5u92u+x4S2ClzWEDcuhN5f6di5q1edho4AuHYUoKYZd7IJhpP7Ce s7wWsaJW6fuOI1TYtg== -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:54 2026 by rpki-client