This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/U7Xzbmk0KKfocvxydq8VmFd5g0g.roa File: U7Xzbmk0KKfocvxydq8VmFd5g0g.roa (raw, json) Hash identifier: pPelJCCZZvo1A7j45CGl9+CiBnagu4yj9KWZxHJJWkc= Subject key identifier: 53:B5:F3:6E:69:34:28:A7:E8:72:FC:72:76:AF:15:98:57:79:83:48 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D9591EE918D3C06937E8C20D3465 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/U7Xzbmk0KKfocvxydq8VmFd5g0g.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397223 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d9:59:1e:e9:18:d3:c0:69:37:e8:c2:0d:34:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53b5f36e693428a7e872fc7276af159857798348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5f:5f:b3:ab:70:3a:19:f1:31:c8:9b:83:08: a8:67:d0:4d:42:23:05:cc:bf:e4:c2:e6:04:be:08: 95:fc:a4:e1:c4:e4:43:04:08:49:12:89:b9:0f:ff: 7e:e7:80:ff:69:91:fa:1f:d8:df:59:6c:97:3f:0f: 6f:5c:c6:de:20:d4:4b:1f:ea:68:af:df:c0:1b:d4: 9e:8d:e3:24:92:47:76:2a:c8:6c:6a:d3:d6:32:42: 1e:fd:3f:be:d9:52:ad:6f:32:ac:36:55:7b:07:1d: e6:22:fa:8a:22:e9:89:26:f0:97:8d:ba:de:bc:3b: c3:40:40:fa:b8:de:d2:e0:37:e9:3d:e3:e3:b1:2b: f9:86:8e:d6:9c:bf:cf:4e:1a:51:75:c2:1c:7a:66: 55:21:ee:9c:43:35:de:68:4d:8b:5c:8d:fb:9b:44: 88:a6:a1:e5:d1:7c:29:2a:1b:ef:fb:1c:26:46:5c: 92:c9:d9:9e:70:e9:24:50:21:1e:67:e5:67:0d:47: f7:be:1a:d1:ad:ad:71:36:ac:1b:00:2e:ee:b1:55: 42:b0:4d:b1:04:23:9b:6b:89:a1:21:c1:78:96:08: fb:eb:21:e0:23:ea:53:f9:d6:77:b5:74:e8:da:8f: 7d:96:f7:29:4b:b1:72:b0:dd:a5:7c:5d:35:13:70: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B5:F3:6E:69:34:28:A7:E8:72:FC:72:76:AF:15:98:57:79:83:48 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/U7Xzbmk0KKfocvxydq8VmFd5g0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 52:5d:01:f2:ad:2d:0e:5a:32:6a:89:07:07:53:4b:15:81:35: bc:ef:0e:26:d3:48:47:cb:38:5e:9b:59:8c:47:48:d2:0c:35: 55:56:69:d9:12:ff:ff:b2:1e:9e:2b:27:b0:1a:47:9c:47:d6: d1:16:87:43:27:51:9b:33:77:f0:db:2c:be:4b:93:52:c5:29: db:5b:14:7e:52:49:ff:93:77:81:33:60:76:ea:de:e4:6d:f7: 04:15:98:5a:3c:c5:ac:0e:34:8c:1e:19:e0:5e:7c:86:41:a4: 33:a1:b3:4f:55:3e:99:2b:15:b9:76:98:22:17:ed:c3:cf:d6: e3:07:72:24:ec:51:31:38:55:87:e1:56:77:ad:48:4e:31:df: 8c:31:3e:86:4b:fb:1b:ca:6d:99:71:4c:c8:90:33:f9:dc:f8: 1a:d7:cf:49:3d:d8:d6:2d:19:46:4a:34:9d:39:a9:2b:04:0a: 17:8e:25:89:41:e8:b1:16:c8:5f:d8:23:0f:1f:95:52:a4:93: 66:db:74:31:75:46:bb:19:a5:81:2f:6c:57:06:5a:7d:28:92: 58:f0:c4:f4:44:d0:3f:45:27:3f:10:d9:4c:f7:24:c8:15:c0: 33:eb:4d:55:f1:a4:c3:ef:53:a5:6e:dc:f1:44:57:9c:f7:8c: 32:f9:05:f6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONlZHukY08BpN+jCDTRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2I1ZjM2ZTY5MzQyOGE3ZTg3MmZjNzI3NmFmMTU5ODU3Nzk4MzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF9fs6twOhnxMcibgwioZ9BNQiMF zL/kwuYEvgiV/KThxORDBAhJEom5D/9+54D/aZH6H9jfWWyXPw9vXMbeINRLH+po r9/AG9SejeMkkkd2KshsatPWMkIe/T++2VKtbzKsNlV7Bx3mIvqKIumJJvCXjbre vDvDQED6uN7S4DfpPePjsSv5ho7WnL/PThpRdcIcemZVIe6cQzXeaE2LXI37m0SI pqHl0XwpKhvv+xwmRlySydmecOkkUCEeZ+VnDUf3vhrRra1xNqwbAC7usVVCsE2x BCOba4mhIcF4lgj76yHgI+pT+dZ3tXTo2o99lvcpS7FysN2lfF01E3AmTwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFO1825pNCin6HL8cnavFZhXeYNIMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvVTdYemJtazBLS2ZvY3Z4eWRxOFZtRmQ1ZzBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBSXQHyrS0OWjJqiQcH U0sVgTW87w4m00hHyzhem1mMR0jSDDVVVmnZEv//sh6eKyewGkecR9bRFodDJ1Gb M3fw2yy+S5NSxSnbWxR+Ukn/k3eBM2B26t7kbfcEFZhaPMWsDjSMHhngXnyGQaQz obNPVT6ZKxW5dpgiF+3Dz9bjB3Ik7FExOFWH4VZ3rUhOMd+MMT6GS/sbym2ZcUzI kDP53Pga189JPdjWLRlGSjSdOakrBAoXjiWJQeixFshf2CMPH5VSpJNm23QxdUa7 GaWBL2xXBlp9KJJY8MT0RNA/RSc/ENlM9yTIFcAz601V8aTD71OlbtzxRFec94wy +QX2 -----END CERTIFICATE-----Generated at Thu Jan 8 18:40:53 2026 by rpki-client