This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/T1F3qk8LhawCDk9nTAf4naoGRg8.roa File: T1F3qk8LhawCDk9nTAf4naoGRg8.roa (raw, json) Hash identifier: aQgPYoClwrq8NkswlVpVaf501J/wYiiEJsgo08XzB5k= Subject key identifier: 4F:51:77:AA:4F:0B:85:AC:02:0E:4F:67:4C:07:F8:9D:AA:06:46:0F Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9977458F3E3234E7D3FA6EA1F937 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/T1F3qk8LhawCDk9nTAf4naoGRg8.roa Signing time: Fri 02 Jan 2026 04:18:24 +0000 ROA not before: Fri 02 Jan 2026 04:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198484 IP address blocks: 37.26.144.0/21 maxlen: 21 37.26.144.0/24 maxlen: 24 37.26.145.0/24 maxlen: 24 37.26.147.0/24 maxlen: 24 37.26.149.0/24 maxlen: 24 141.226.132.0/24 maxlen: 24 2a03:c5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:99:77:45:8f:3e:32:34:e7:d3:fa:6e:a1:f9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f5177aa4f0b85ac020e4f674c07f89daa06460f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:6f:07:dd:d5:3e:76:74:2b:fc:65:85:ef: aa:66:56:9f:80:65:61:d0:65:3f:74:15:be:d4:14: cd:19:47:0f:31:a9:2e:56:33:97:17:bb:0e:23:5a: db:04:4e:f1:8c:af:9a:6f:89:a4:ab:23:05:c8:ca: 28:90:1d:24:18:06:bc:b6:46:98:ae:84:55:4a:a6: e2:7a:8d:47:55:d8:d2:95:5a:13:d9:67:15:15:dd: 90:b8:b2:ee:72:39:7f:75:25:0b:1a:b1:d8:72:51: 7c:ba:19:7c:01:d5:fd:8c:6e:de:5a:a4:fe:b5:58: 41:e1:a5:e2:46:a4:1e:e5:00:eb:7d:2c:d6:b5:4f: 42:d0:32:95:7d:b1:53:0e:48:d2:77:67:74:61:97: ae:28:f0:2c:13:f1:72:73:37:c9:a5:37:02:9c:21: 30:af:11:dc:a8:00:1e:1a:76:09:f6:ce:81:3d:a2: 4d:7a:2b:6d:0f:44:fe:d8:67:65:01:55:4d:f3:da: a9:36:ed:e0:63:67:77:b0:65:1e:63:4f:58:c6:7f: e6:8b:39:1f:be:40:04:5b:57:a0:0e:e7:59:58:9e: d6:01:d2:95:ed:0c:36:ad:5c:79:4f:62:e1:3c:08: 60:c9:da:a9:eb:12:11:e5:9e:24:62:ae:ee:cf:cf: 4d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:51:77:AA:4F:0B:85:AC:02:0E:4F:67:4C:07:F8:9D:AA:06:46:0F X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/T1F3qk8LhawCDk9nTAf4naoGRg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.144.0/21 141.226.132.0/24 IPv6: 2a03:c5c0::/32 Signature Algorithm: sha256WithRSAEncryption b2:45:db:c7:2c:8b:15:b1:32:10:42:03:e2:4b:95:0c:08:24: b9:39:74:94:8e:ac:6b:2f:fb:e9:a3:a0:57:2e:bd:c8:98:08: 43:48:94:10:78:39:65:05:7e:a5:50:0b:65:81:01:ad:1b:df: c0:f4:5f:e2:aa:08:b1:0f:17:24:be:0a:1c:bf:14:56:2b:d7: 68:52:e6:60:94:32:77:a1:e9:e5:ca:88:98:a4:2d:81:b2:35: c5:ab:de:37:55:d1:4a:11:46:fc:9a:88:04:2c:b9:c5:13:78: ee:7e:45:5c:71:92:1c:a6:2b:f0:63:2c:ab:df:ab:b0:06:4f: 96:ad:13:9e:bf:59:b8:ad:3c:b4:c2:a5:18:9f:70:d5:1e:d8: c0:8c:19:63:66:3e:37:57:f0:00:c0:07:fd:bd:b9:1d:dc:c2: bf:20:c0:a8:2d:04:04:43:f8:8e:0e:c4:5c:36:9e:8b:36:c7: 30:db:cb:40:1c:35:90:6e:86:7e:77:6e:67:49:80:03:12:64: 6a:de:d3:64:58:bc:0f:ab:37:17:e3:1c:ae:7e:10:64:d2:00: 53:b5:6e:65:70:a1:c5:8c:48:28:3f:d1:57:ef:0f:b9:9a:5d: 76:4a:a3:4c:de:c2:87:9d:08:26:1e:e3:d2:d4:81:8a:13:d9: ff:5c:b2:05 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87Zl3RY8+MjTn0/puofk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjUxNzdhYTRmMGI4NWFjMDIwZTRmNjc0YzA3Zjg5ZGFhMDY0NjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/JvB93VPnZ0K/xlhe+qZlafgGVh 0GU/dBW+1BTNGUcPMakuVjOXF7sOI1rbBE7xjK+ab4mkqyMFyMookB0kGAa8tkaY roRVSqbieo1HVdjSlVoT2WcVFd2QuLLucjl/dSULGrHYclF8uhl8AdX9jG7eWqT+ tVhB4aXiRqQe5QDrfSzWtU9C0DKVfbFTDkjSd2d0YZeuKPAsE/FyczfJpTcCnCEw rxHcqAAeGnYJ9s6BPaJNeittD0T+2GdlAVVN89qpNu3gY2d3sGUeY09Yxn/mizkf vkAEW1egDudZWJ7WAdKV7Qw2rVx5T2LhPAhgydqp6xIR5Z4kYq7uz89N7QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFE9Rd6pPC4WsAg5PZ0wH+J2qBkYPMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvVDFGM3FrOExoYXdDRGs5blRBZjRuYW9HUmc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJRqQAwQA jeKEMA0EAgACMAcDBQAqA8XAMA0GCSqGSIb3DQEBCwUAA4IBAQCyRdvHLIsVsTIQ QgPiS5UMCCS5OXSUjqxrL/vpo6BXLr3ImAhDSJQQeDllBX6lUAtlgQGtG9/A9F/i qgixDxckvgocvxRWK9doUuZglDJ3oenlyoiYpC2BsjXFq943VdFKEUb8mogELLnF E3jufkVccZIcpivwYyyr36uwBk+WrROev1m4rTy0wqUYn3DVHtjAjBljZj43V/AA wAf9vbkd3MK/IMCoLQQEQ/iODsRcNp6LNscw28tAHDWQboZ+d25nSYADEmRq3tNk WLwPqzcX4xyufhBk0gBTtW5lcKHFjEgoP9FX7w+5ml12SqNM3sKHnQgmHuPS1IGK E9n/XLIF -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:54 2026 by rpki-client