This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/udPHT3MAHWQfgnKd8mzuLRmrdow.roa File: udPHT3MAHWQfgnKd8mzuLRmrdow.roa (raw, json) Hash identifier: R7o1ivace6EgMLJTJx+PqDPGE4a4R22iqkQzk7fDc0U= Subject key identifier: B9:D3:C7:4F:73:00:1D:64:1F:82:72:9D:F2:6C:EE:2D:19:AB:76:8C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38DEAE58DC67FD72E930A5754C6B86 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/udPHT3MAHWQfgnKd8mzuLRmrdow.roa Signing time: Fri 02 Jan 2026 10:20:14 +0000 ROA not before: Fri 02 Jan 2026 10:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397233 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:de:ae:58:dc:67:fd:72:e9:30:a5:75:4c:6b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9d3c74f73001d641f82729df26cee2d19ab768c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b4:79:e7:02:6f:14:3c:8a:2f:c8:16:d4:bb: fe:99:48:2a:14:5b:63:d5:29:b8:69:86:00:2c:c5: 5d:33:19:64:e8:95:fe:3e:a4:25:ac:ce:8f:1e:22: 32:fb:6b:ca:89:d9:33:0a:23:d7:cb:77:61:b5:8f: 4f:6d:65:ac:d7:ee:f9:45:72:3a:d7:33:76:bf:ed: 45:3b:ed:64:32:f0:d7:bc:b6:87:6c:0a:6f:a1:a3: fc:46:40:5d:2b:25:2c:72:02:a4:7c:e7:36:6d:3a: 88:ab:16:a9:a6:57:a7:33:c7:4d:03:2f:68:c9:7e: 79:b3:f3:36:8a:b2:b1:0b:70:a5:6f:74:c7:c8:e3: fc:05:b0:a0:ac:c3:63:6d:89:e2:b1:da:41:87:7f: cb:4b:dc:97:4c:05:1e:54:65:e7:4a:41:67:a0:aa: 20:aa:8f:ba:13:44:e3:8f:12:a8:ff:e6:1d:d5:27: b6:ae:0f:e4:f8:89:b0:72:7b:66:e6:6c:75:cc:74: eb:1c:58:01:62:c8:78:5f:c0:37:f3:a2:43:7d:6a: 9c:7d:5c:99:97:82:fe:e8:f8:b3:b2:eb:e8:a2:12: ef:54:8b:ba:87:55:5f:05:47:40:eb:dc:a1:ac:41: 45:41:0f:99:ec:32:a9:d5:a6:0f:7d:13:36:40:d1: c0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D3:C7:4F:73:00:1D:64:1F:82:72:9D:F2:6C:EE:2D:19:AB:76:8C X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/udPHT3MAHWQfgnKd8mzuLRmrdow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 32:a1:7b:2b:97:0d:5f:12:c0:13:60:8f:f8:fb:22:9d:00:97: d3:16:37:ae:79:e5:65:31:21:68:c2:32:57:37:65:0d:28:86: 93:95:96:b5:a4:25:97:3c:f1:93:5a:a4:80:b3:ba:91:bb:52: ef:5b:58:91:19:e6:ac:5a:fb:ad:d4:62:b1:ef:4a:d1:b8:05: 43:d9:13:5e:cc:d8:50:99:b0:87:3e:6c:65:49:82:dc:a4:3d: d4:2a:d0:6b:6b:c5:05:d4:84:15:3b:dc:39:ee:ac:05:a8:e9: 68:0e:91:40:9b:87:8a:a1:a2:31:31:70:e1:45:29:55:46:4e: d7:f8:ed:a8:61:23:65:4c:57:b1:a9:0a:1a:c1:ad:f4:c4:83: 5b:86:ed:03:60:14:c1:d1:2f:99:95:9d:fd:7e:17:3c:a0:17: 95:3f:d8:b2:01:d7:9b:d1:6a:ad:fe:c6:9f:88:34:8c:64:f4: 4f:aa:db:22:ab:3d:0c:f7:69:d9:45:e3:4f:6d:d6:93:b4:8f: 24:f5:de:6e:c7:3a:18:64:01:0e:81:93:9b:fb:f5:4d:af:99: 63:92:96:8c:b2:dc:c9:c8:6e:8d:e9:00:d3:b5:9c:e7:8a:13: 73:33:b9:00:9f:84:ff:df:52:c5:b5:78:c2:ce:44:73:97:58: 34:c4:97:be -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ON6uWNxn/XLpMKV1TGuGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWQzYzc0ZjczMDAxZDY0MWY4MjcyOWRmMjZjZWUyZDE5YWI3NjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bR55wJvFDyKL8gW1Lv+mUgqFFtj 1Sm4aYYALMVdMxlk6JX+PqQlrM6PHiIy+2vKidkzCiPXy3dhtY9PbWWs1+75RXI6 1zN2v+1FO+1kMvDXvLaHbApvoaP8RkBdKyUscgKkfOc2bTqIqxapplenM8dNAy9o yX55s/M2irKxC3Clb3THyOP8BbCgrMNjbYnisdpBh3/LS9yXTAUeVGXnSkFnoKog qo+6E0TjjxKo/+Yd1Se2rg/k+Imwcntm5mx1zHTrHFgBYsh4X8A386JDfWqcfVyZ l4L+6PizsuvoohLvVIu6h1VfBUdA69yhrEFFQQ+Z7DKp1aYPfRM2QNHA6QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLnTx09zAB1kH4JynfJs7i0Zq3aMMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvdWRQSFQzTUFIV1FmZ25LZDhtenVMUm1yZG93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQAyoXsrlw1fEsATYI/4 +yKdAJfTFjeueeVlMSFowjJXN2UNKIaTlZa1pCWXPPGTWqSAs7qRu1LvW1iRGeas Wvut1GKx70rRuAVD2RNezNhQmbCHPmxlSYLcpD3UKtBra8UF1IQVO9w57qwFqOlo DpFAm4eKoaIxMXDhRSlVRk7X+O2oYSNlTFexqQoawa30xINbhu0DYBTB0S+ZlZ39 fhc8oBeVP9iyAdeb0Wqt/safiDSMZPRPqtsiqz0M92nZReNPbdaTtI8k9d5uxzoY ZAEOgZOb+/VNr5ljkpaMstzJyG6N6QDTtZznihNzM7kAn4T/31LFtXjCzkRzl1g0 xJe+ -----END CERTIFICATE-----Generated at Mon Jan 5 14:27:59 2026 by rpki-client