This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ISp9QWuwBFWNWpTGWXKpOjrISzM.roa File: ISp9QWuwBFWNWpTGWXKpOjrISzM.roa (raw, json) Hash identifier: Z0OOUOdiG9qXCPvPHz7h4VNlbk+VhRmjlt/+Mjs7gCw= Subject key identifier: 21:2A:7D:41:6B:B0:04:55:8D:5A:94:C6:59:72:A9:3A:3A:C8:4B:33 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38E037B3A6D084423BE56AF76B250B Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ISp9QWuwBFWNWpTGWXKpOjrISzM.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397235 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 22:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e0:37:b3:a6:d0:84:42:3b:e5:6a:f7:6b:25:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=212a7d416bb004558d5a94c65972a93a3ac84b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:45:84:8b:ca:3b:24:c2:77:b4:3c:75:bd: 84:61:1c:b9:ed:a4:97:44:e0:93:6b:0b:82:78:73: 64:28:1c:8e:2c:2f:5d:19:31:7f:74:99:73:3b:4e: 03:00:44:ec:ad:5c:80:39:ca:41:0d:54:a4:30:82: 7d:aa:c2:12:ef:82:a4:09:07:3c:d5:9a:d6:2d:57: f8:d0:9d:ce:0a:c8:c0:cc:d2:14:44:68:db:c8:55: 75:1d:21:7c:1e:73:00:64:66:d4:c4:2c:00:7d:d6: 2d:91:d8:ba:db:c4:04:5c:48:5f:a4:3b:1c:74:9e: 91:d9:0e:b1:57:cf:52:e1:14:93:0f:b3:3f:66:6d: 72:4a:3e:70:e8:25:7b:12:9b:80:4c:5a:6e:ef:c5: 94:d3:5f:dc:b3:ca:34:ea:2f:01:72:19:40:04:5c: 68:d3:c8:e8:d1:51:bf:4f:4c:6a:a8:ae:e2:0b:da: 37:70:f2:3b:35:e1:e5:dd:78:ef:70:65:ed:40:f1: c9:6e:2a:00:86:8b:a1:bb:62:65:09:6e:ce:e0:16: 26:6b:2e:c3:ce:c8:da:1f:db:4c:27:99:8c:43:c3: 68:ec:d5:e6:36:bc:31:0a:5e:b0:20:ee:64:5c:44: cb:53:49:ae:60:5c:71:d7:89:79:6e:7d:2d:38:e7: 8c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:7D:41:6B:B0:04:55:8D:5A:94:C6:59:72:A9:3A:3A:C8:4B:33 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/ISp9QWuwBFWNWpTGWXKpOjrISzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 80:03:b7:9c:53:55:5d:2d:05:24:e0:b0:0b:d5:19:6a:a7:e5: 98:54:0a:f0:6a:d8:c4:8a:0a:6a:f5:26:b4:83:68:5d:1b:34: 33:65:46:4f:48:be:1f:e5:3c:84:30:27:0e:ed:0d:6a:7e:b3: cb:f3:d0:8e:96:46:84:6a:06:11:8f:61:67:7f:38:ce:8b:0b: 52:44:c3:53:3a:a2:af:cd:63:71:b8:cc:e6:c7:c4:dc:96:2f: a5:bf:06:c7:7f:a5:57:65:f1:b4:e6:21:30:21:e8:6f:be:15: 54:ea:73:e2:08:9b:f3:7d:d8:6f:54:c3:4d:16:26:9d:c2:3a: 26:f2:cb:2f:5a:10:8f:66:5e:49:39:f3:47:f9:38:3d:b6:7e: 58:9f:60:25:36:e6:ec:82:7d:b5:64:b0:d8:22:d0:9a:a1:5e: bb:13:41:ea:64:29:74:9e:2c:6d:50:9f:cd:ca:36:0c:84:25: 21:13:de:26:35:6e:07:4c:c9:dd:ee:32:db:05:40:1d:5f:18: 08:1d:11:a8:b1:2c:07:4d:aa:d7:be:5b:f0:c6:34:c0:27:44: f3:b8:20:58:44:e5:5d:1d:6c:91:d5:0e:81:76:64:f2:b7:53: b6:b0:43:1c:1d:7a:e6:75:3e:dd:9f:a9:1c:64:d6:76:73:92: 4f:99:b9:3f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OOA3s6bQhEI75Wr3ayULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTJhN2Q0MTZiYjAwNDU1OGQ1YTk0YzY1OTcyYTkzYTNhYzg0YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEZFhIvKOyTCd7Q8db2EYRy57aSX ROCTawuCeHNkKByOLC9dGTF/dJlzO04DAETsrVyAOcpBDVSkMIJ9qsIS74KkCQc8 1ZrWLVf40J3OCsjAzNIURGjbyFV1HSF8HnMAZGbUxCwAfdYtkdi628QEXEhfpDsc dJ6R2Q6xV89S4RSTD7M/Zm1ySj5w6CV7EpuATFpu78WU01/cs8o06i8BchlABFxo 08jo0VG/T0xqqK7iC9o3cPI7NeHl3XjvcGXtQPHJbioAhouhu2JlCW7O4BYmay7D zsjaH9tMJ5mMQ8No7NXmNrwxCl6wIO5kXETLU0muYFxx14l5bn0tOOeM1QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCEqfUFrsARVjVqUxllyqTo6yEszMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvSVNwOVFXdXdCRldOV3BUR1dYS3BPanJJU3pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQCAA7ecU1VdLQUk4LAL 1Rlqp+WYVArwatjEigpq9Sa0g2hdGzQzZUZPSL4f5TyEMCcO7Q1qfrPL89COlkaE agYRj2FnfzjOiwtSRMNTOqKvzWNxuMzmx8Tcli+lvwbHf6VXZfG05iEwIehvvhVU 6nPiCJvzfdhvVMNNFiadwjom8ssvWhCPZl5JOfNH+Tg9tn5Yn2AlNubsgn21ZLDY ItCaoV67E0HqZCl0nixtUJ/NyjYMhCUhE94mNW4HTMnd7jLbBUAdXxgIHRGosSwH TarXvlvwxjTAJ0TzuCBYROVdHWyR1Q6BdmTyt1O2sEMcHXrmdT7dn6kcZNZ2c5JP mbk/ -----END CERTIFICATE-----Generated at Wed Jan 7 06:55:30 2026 by rpki-client