This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iCcAPAtaF_Z5vnRWAlQUtNmgymI.roa File: iCcAPAtaF_Z5vnRWAlQUtNmgymI.roa (raw, json) Hash identifier: 6F2aRUxPQcWQQ9IFaWmB2JhGDK/9NiOFM9pcKP8XqgM= Subject key identifier: 88:27:00:3C:0B:5A:17:F6:79:BE:74:56:02:54:14:B4:D9:A0:CA:62 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB58D11F2271AB6B0BD1F9D75C67B8 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iCcAPAtaF_Z5vnRWAlQUtNmgymI.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27176 IP address blocks: 37.16.76.0/24 maxlen: 24 37.16.79.0/24 maxlen: 24 91.188.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:58:d1:1f:22:71:ab:6b:0b:d1:f9:d7:5c:67:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8827003c0b5a17f679be7456025414b4d9a0ca62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:37:9c:af:6d:34:3d:17:55:02:56:f6:5b: 25:83:1b:1a:7d:d4:e9:97:e0:6f:47:83:6b:b2:a4: aa:45:c3:66:78:ad:5c:10:eb:e9:fa:15:66:37:59: ae:29:b1:4e:97:72:9a:ce:a8:2b:69:eb:f2:30:ec: ce:9d:81:67:ad:84:fa:16:08:87:c0:de:cd:da:74: f4:4f:80:ae:45:c7:58:2b:87:68:a1:b2:1b:51:3e: c6:57:3f:12:4b:d6:62:fc:e2:19:88:d6:87:43:fb: fd:52:91:04:e6:b4:70:e2:18:a3:af:6c:f6:67:b2: b5:01:62:39:0f:d5:9e:d6:46:47:06:75:49:46:ca: 75:b4:38:0c:89:7b:05:a7:d3:b4:5e:55:43:55:bc: ce:09:5a:74:2f:85:07:c5:07:da:3f:ad:1a:e7:97: 1f:53:38:68:d2:58:61:6a:2d:88:d0:9d:d1:c8:5c: 4d:31:44:f2:87:8f:23:b9:af:eb:c0:e8:a4:ff:2b: f5:40:5a:d5:0d:bf:a4:f5:bb:c5:d1:81:c7:97:9d: 5e:53:da:77:82:d9:d5:bd:03:3c:84:f0:c5:e5:bf: f3:75:2c:06:01:ad:49:d1:f3:4a:88:f1:81:8d:ff: d4:29:56:e2:d4:13:45:6a:85:f6:e8:51:99:6f:0d: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:27:00:3C:0B:5A:17:F6:79:BE:74:56:02:54:14:B4:D9:A0:CA:62 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/iCcAPAtaF_Z5vnRWAlQUtNmgymI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.76.0/24 37.16.79.0/24 91.188.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:5a:47:5a:80:16:2a:70:cd:0e:a0:3d:7e:86:e3:69:fd:48: 01:df:f7:d0:f6:a2:b0:53:ec:2b:7d:9c:cd:13:c1:82:68:c0: 34:22:64:ac:ed:a5:45:bf:5d:83:a3:dc:e0:94:75:7f:f1:95: eb:98:b4:b1:21:a3:a5:5f:2d:5c:6a:3a:18:a4:ae:41:3f:5e: 9e:d7:c5:1c:6e:82:ee:ba:d4:cd:88:d1:4c:ea:8d:3e:3c:7c: fe:64:bb:72:97:5c:18:20:1c:86:43:d9:e1:71:b8:78:96:e5: be:6a:92:35:af:e4:bc:cf:ca:86:fd:21:e9:99:2e:6f:52:ff: 6e:0a:fd:23:55:ec:85:2e:87:2b:d1:ed:98:ef:5b:fc:bd:73: 72:3e:f9:cf:40:bd:e7:ab:a7:66:13:f0:45:0a:7f:f3:11:54: b1:53:8e:8e:32:cd:aa:fd:0a:64:bb:98:f5:b2:fa:bb:6b:96: dd:0d:31:fc:7d:e8:18:40:89:03:a9:cd:bf:a2:71:fc:cc:43: 16:90:92:04:c4:a5:15:10:db:8c:46:0b:78:05:5e:05:a3:b9: 7f:46:06:88:84:27:62:a6:9b:3c:f5:9e:27:cc:b7:f7:18:33: e6:bd:58:a5:cd:04:ca:aa:f9:bf:b4:86:37:de:34:a1:77:23: b2:45:03:65 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9y1jRHyJxq2sL0fnXXGe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODI3MDAzYzBiNWExN2Y2NzliZTc0NTYwMjU0MTRiNGQ5YTBjYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2c3nK9tND0XVQJW9lslgxsafdTp l+BvR4NrsqSqRcNmeK1cEOvp+hVmN1muKbFOl3KazqgraevyMOzOnYFnrYT6FgiH wN7N2nT0T4CuRcdYK4doobIbUT7GVz8SS9Zi/OIZiNaHQ/v9UpEE5rRw4hijr2z2 Z7K1AWI5D9We1kZHBnVJRsp1tDgMiXsFp9O0XlVDVbzOCVp0L4UHxQfaP60a55cf Uzho0lhhai2I0J3RyFxNMUTyh48jua/rwOik/yv1QFrVDb+k9bvF0YHHl51eU9p3 gtnVvQM8hPDF5b/zdSwGAa1J0fNKiPGBjf/UKVbi1BNFaoX26FGZbw12ywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIgnADwLWhf2eb50VgJUFLTZoMpiMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvaUNjQVBBdGFGX1o1dm5SV0FsUVV0Tm1neW1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJRBMAwQA JRBPAwQCW7zsMA0GCSqGSIb3DQEBCwUAA4IBAQAsWkdagBYqcM0OoD1+huNp/UgB 3/fQ9qKwU+wrfZzNE8GCaMA0ImSs7aVFv12Do9zglHV/8ZXrmLSxIaOlXy1cajoY pK5BP16e18UcboLuutTNiNFM6o0+PHz+ZLtyl1wYIByGQ9nhcbh4luW+apI1r+S8 z8qG/SHpmS5vUv9uCv0jVeyFLocr0e2Y71v8vXNyPvnPQL3nq6dmE/BFCn/zEVSx U46OMs2q/Qpku5j1svq7a5bdDTH8fegYQIkDqc2/onH8zEMWkJIExKUVENuMRgt4 BV4Fo7l/RgaIhCdipps89Z4nzLf3GDPmvVilzQTKqvm/tIY33jShdyOyRQNl -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:57 2026 by rpki-client