This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/mSRNwBt4HyvxOKDrOMFnswIgda4.roa File: mSRNwBt4HyvxOKDrOMFnswIgda4.roa (raw, json) Hash identifier: 7d61GNgLmLVgIgZ3h9dpanvVUYVfZYRsvyeUkivWWd4= Subject key identifier: 99:24:4D:C0:1B:78:1F:2B:F1:38:A0:EB:38:C1:67:B3:02:20:75:AE Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607 Certificate serial: 019B7B3639F643658F4D3EFB01881B8EDBF6 Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/mSRNwBt4HyvxOKDrOMFnswIgda4.roa Signing time: Thu 01 Jan 2026 20:18:29 +0000 ROA not before: Thu 01 Jan 2026 20:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58045 IP address blocks: 37.209.240.0/23 maxlen: 23 37.209.240.0/24 maxlen: 24 37.209.241.0/24 maxlen: 24 37.209.242.0/23 maxlen: 23 37.209.242.0/24 maxlen: 24 37.209.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:39:f6:43:65:8f:4d:3e:fb:01:88:1b:8e:db:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607 Validity Not Before: Jan 1 20:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99244dc01b781f2bf138a0eb38c167b3022075ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:5b:4f:7c:b7:90:a5:47:8c:d3:1d:4b:af: 24:26:ea:af:05:27:f2:c5:ec:78:31:d0:65:37:4c: 7b:3b:67:7f:e6:48:42:c7:57:65:38:9d:89:6d:cd: 5a:8e:e1:ae:2f:93:6a:b1:01:ce:8d:4a:fb:5e:29: c3:a1:1b:2c:bb:2c:11:4f:01:7d:d2:7a:5d:75:7a: cc:3c:10:4b:9c:ca:17:62:e7:d3:dc:71:be:be:82: 43:db:98:9b:03:ac:09:66:c0:d8:ef:e3:5f:99:b4: b9:64:d5:00:40:91:14:88:df:8b:88:7c:12:c5:4e: 21:44:5e:68:9a:05:ed:87:94:81:f8:ae:d2:cc:1f: 34:7c:40:31:e1:eb:f9:04:69:11:29:0c:bf:f7:5d: 7d:1d:a7:ab:bc:0c:6a:76:dd:cd:91:e9:54:1a:d0: 64:45:c9:c1:29:b0:a1:bb:c2:19:f2:e0:65:1c:38: 41:c8:d6:df:fc:fa:33:a7:08:77:e4:e8:b4:b7:1b: 3e:e9:ab:59:ee:32:99:51:5f:29:a3:d4:39:47:f8: c8:b8:24:b0:0a:ca:d0:04:94:61:e0:82:05:d1:ab: e5:d4:24:a2:99:88:ee:25:32:46:5d:12:ba:e7:72: 8a:87:de:5f:43:8f:57:0b:51:08:2f:5c:1d:65:41: 6a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:24:4D:C0:1B:78:1F:2B:F1:38:A0:EB:38:C1:67:B3:02:20:75:AE X509v3 Authority Key Identifier: keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/mSRNwBt4HyvxOKDrOMFnswIgda4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.240.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:19:42:e7:ab:f1:5d:85:0d:be:f6:41:c6:85:5c:32:37:48: 10:f3:de:02:80:90:ae:de:53:64:b3:80:c3:96:5f:fd:00:b9: 11:d0:49:8c:9d:4b:5c:e6:7e:c6:97:f4:86:b9:ab:c4:33:22: 27:14:6a:24:ed:6c:6b:7e:35:c9:72:d5:7c:92:8d:69:7e:57: 06:3f:29:e4:15:ba:78:aa:f5:31:c2:e4:07:71:c7:be:95:c5: 20:35:07:b2:2b:27:9f:34:00:13:20:8c:df:00:62:12:0f:6a: df:88:6a:16:78:f8:0d:41:ef:a7:c8:c2:4e:96:dd:5c:ed:cc: 8d:ea:e2:28:00:ad:21:c8:70:94:35:db:76:ce:e7:85:bd:0e: ae:72:3d:13:54:e5:b1:7a:68:e4:80:db:cb:22:6c:b7:17:c9: 77:b6:e8:82:88:35:25:f1:50:1b:0a:d5:0c:78:48:2d:27:4d: 20:01:f1:a8:f2:fb:94:c7:71:35:37:1f:ac:8d:ea:c4:10:69: 7d:41:b5:8d:30:29:76:15:20:29:e4:8d:27:85:8c:45:54:3d: eb:8a:1e:4f:60:ba:54:f2:00:6f:10:b6:46:b1:1c:be:63:d1: ae:5e:83:3c:87:c7:bd:d4:4b:00:58:32:14:fe:a7:3a:39:a7: 68:d7:b0:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Njn2Q2WPTT77AYgbjtv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0N2MwYWM4YTlkNWY2MmM0OTFkNGIxN2NiMjEyYjUyYzBl NzU2MDcwHhcNMjYwMTAxMjAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTI0NGRjMDFiNzgxZjJiZjEzOGEwZWIzOGMxNjdiMzAyMjA3NWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPVbT3y3kKVHjNMdS68kJuqvBSfy xex4MdBlN0x7O2d/5khCx1dlOJ2Jbc1ajuGuL5NqsQHOjUr7XinDoRssuywRTwF9 0npddXrMPBBLnMoXYufT3HG+voJD25ibA6wJZsDY7+NfmbS5ZNUAQJEUiN+LiHwS xU4hRF5omgXth5SB+K7SzB80fEAx4ev5BGkRKQy/9119HaervAxqdt3NkelUGtBk RcnBKbChu8IZ8uBlHDhByNbf/Pozpwh35Oi0txs+6atZ7jKZUV8po9Q5R/jIuCSw CsrQBJRh4IIF0avl1CSimYjuJTJGXRK653KKh95fQ49XC1EIL1wdZUFqOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJkkTcAbeB8r8Tig6zjBZ7MCIHWuMB8GA1UdIwQY MBaAFKR8Csip1fYsSR1LF8shK1LA51YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzkt NDIwY2MyNTFlNWViLzEvbVNSTndCdDRIeXZ4T0tEck9NRm5zd0lnZGE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yNWM5MWQtNWEwNS00NmEyLTlhNzktNDIwY2MyNTFlNWVi LzEvcEh3S3lLblY5aXhKSFVzWHl5RXJVc0RuVmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJdHwMA0G CSqGSIb3DQEBCwUAA4IBAQAuGULnq/FdhQ2+9kHGhVwyN0gQ894CgJCu3lNks4DD ll/9ALkR0EmMnUtc5n7Gl/SGuavEMyInFGok7WxrfjXJctV8ko1pflcGPynkFbp4 qvUxwuQHcce+lcUgNQeyKyefNAATIIzfAGISD2rfiGoWePgNQe+nyMJOlt1c7cyN 6uIoAK0hyHCUNdt2zueFvQ6ucj0TVOWxemjkgNvLImy3F8l3tuiCiDUl8VAbCtUM eEgtJ00gAfGo8vuUx3E1Nx+sjerEEGl9QbWNMCl2FSAp5I0nhYxFVD3rih5PYLpU 8gBvELZGsRy+Y9GuXoM8h8e91EsAWDIU/qc6Oado17BO -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:25 2026 by rpki-client