This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/B37ZLKtj14cuD-pdJFeTxpgnlo4.roa File: B37ZLKtj14cuD-pdJFeTxpgnlo4.roa (raw, json) Hash identifier: RjHd8q/rrwWBUD1P2o4ZQ5H8oNxRkf+ZFtauIfVCi3Q= Subject key identifier: 07:7E:D9:2C:AB:63:D7:87:2E:0F:EA:5D:24:57:93:C6:98:27:96:8E Certificate issuer: /CN=6951d4551d26a51c0f92b77c2d378fb34758b877 Certificate serial: 019B7F153F2185A2C86447CADB609481CC91 Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/B37ZLKtj14cuD-pdJFeTxpgnlo4.roa Signing time: Fri 02 Jan 2026 14:20:57 +0000 ROA not before: Fri 02 Jan 2026 14:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196658 IP address blocks: 91.213.102.0/24 maxlen: 24 146.0.88.0/21 maxlen: 21 185.195.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3f:21:85:a2:c8:64:47:ca:db:60:94:81:cc:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877 Validity Not Before: Jan 2 14:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=077ed92cab63d7872e0fea5d245793c69827968e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3a:92:42:d1:08:77:df:23:cb:5c:d4:8b:93: 49:43:dc:b2:00:b9:f4:12:e8:ca:d3:ca:9f:33:0d: 17:b4:5c:18:67:0a:f1:55:22:35:5a:c5:ad:a6:08: f3:12:74:05:15:1c:a3:6d:92:d2:66:73:bc:bf:c4: 8b:df:f2:58:96:50:66:3c:4d:5e:14:5a:04:e2:ca: 43:bd:2c:d6:68:88:d1:ff:51:42:0b:fe:63:5b:dc: b3:f3:be:a9:31:24:88:24:8e:27:15:41:2b:be:d0: 6f:e3:45:ea:0d:fd:e9:02:69:38:f9:c5:3d:b2:97: a9:e3:7c:f6:d6:d2:e8:26:d3:58:bb:95:42:e9:71: ad:d1:eb:c0:13:8f:51:c7:dc:59:78:bd:d4:a6:22: 4e:42:a6:2d:12:7a:cd:19:39:df:8a:e8:7a:1d:cb: d3:5f:c6:50:37:56:a3:36:3d:e1:30:04:5c:f9:9f: 2d:2b:fe:be:50:f3:21:46:0d:65:6a:bd:17:97:96: 92:60:c1:a6:db:03:64:5a:de:15:ad:e6:2f:29:56: 65:dd:ce:37:97:fa:34:69:a0:ea:64:6e:f1:47:4c: 43:db:48:30:78:69:9e:db:05:3e:d2:d2:13:07:17: a1:c1:e6:e9:59:fd:c4:28:9d:ff:c8:5b:95:f8:da: f8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7E:D9:2C:AB:63:D7:87:2E:0F:EA:5D:24:57:93:C6:98:27:96:8E X509v3 Authority Key Identifier: keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/B37ZLKtj14cuD-pdJFeTxpgnlo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.102.0/24 146.0.88.0/21 185.195.88.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:6b:64:f0:6b:d7:bb:6f:a8:ad:fb:fb:9e:7e:68:3f:e0:cf: 96:b2:9b:d3:d0:b6:12:97:a3:12:c8:3a:a3:e4:7b:df:68:2c: ae:a5:b4:b5:de:2e:90:5f:01:b4:e1:2f:ee:4a:e5:3a:51:d3: b3:cc:de:fb:e5:50:7a:d8:d5:ae:4a:82:cf:c7:c1:62:8c:27: 9a:02:8e:b2:ed:d5:ad:2c:79:55:f0:1a:f1:77:2a:b9:fe:d4: 02:18:b5:e6:6a:c3:7e:66:03:af:b5:57:d2:9a:15:09:56:3d: 72:ee:a1:3c:81:d5:ac:ec:12:80:11:f3:d6:5a:4c:f7:40:d0: cd:14:18:ef:f9:4b:4d:cc:04:46:21:b8:80:ea:bc:45:7a:3e: 54:e9:10:c8:ab:df:ec:42:c6:ce:fb:80:12:da:e6:7c:fb:d1: ca:07:48:73:7a:97:a6:ac:71:d6:e4:8a:48:d8:7a:93:36:7f: a4:27:f6:1b:ba:09:98:dd:bf:c7:af:d3:7e:c0:65:57:98:aa: 19:0e:c0:c4:3a:87:b8:26:da:3d:06:1f:e7:f1:9f:1c:94:7a: 8d:81:d2:33:4b:55:ff:ed:99:7e:41:2c:a8:8e:1e:a5:99:59: bf:28:a9:06:13:ed:ce:3a:9d:8f:be:dc:f9:08:ac:4b:0a:2e: 60:04:84:4a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FT8hhaLIZEfK22CUgcyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NTFkNDU1MWQyNmE1MWMwZjkyYjc3YzJkMzc4ZmIzNDc1 OGI4NzcwHhcNMjYwMTAyMTQyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzdlZDkyY2FiNjNkNzg3MmUwZmVhNWQyNDU3OTNjNjk4Mjc5NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjqSQtEId98jy1zUi5NJQ9yyALn0 EujK08qfMw0XtFwYZwrxVSI1WsWtpgjzEnQFFRyjbZLSZnO8v8SL3/JYllBmPE1e FFoE4spDvSzWaIjR/1FCC/5jW9yz876pMSSIJI4nFUErvtBv40XqDf3pAmk4+cU9 spep43z21tLoJtNYu5VC6XGt0evAE49Rx9xZeL3UpiJOQqYtEnrNGTnfiuh6HcvT X8ZQN1ajNj3hMARc+Z8tK/6+UPMhRg1lar0Xl5aSYMGm2wNkWt4VreYvKVZl3c43 l/o0aaDqZG7xR0xD20gweGme2wU+0tITBxehwebpWf3EKJ3/yFuV+Nr4UQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAd+2SyrY9eHLg/qXSRXk8aYJ5aOMB8GA1UdIwQY MBaAFGlR1FUdJqUcD5K3fC03j7NHWLh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wMjYxMGYtNjkxMy00MDQ5LTk3ZjAt YTJlZGE5NDZlZDI5LzEvQjM3WkxLdGoxNGN1RC1wZEpGZVR4cGdubG80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wMjYxMGYtNjkxMy00MDQ5LTk3ZjAtYTJlZGE5NDZlZDI5 LzEvYVZIVVZSMG1wUndQa3JkOExUZVBzMGRZdUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9VmAwQD kgBYAwQCucNYMA0GCSqGSIb3DQEBCwUAA4IBAQBda2Twa9e7b6it+/uefmg/4M+W spvT0LYSl6MSyDqj5HvfaCyupbS13i6QXwG04S/uSuU6UdOzzN775VB62NWuSoLP x8FijCeaAo6y7dWtLHlV8Brxdyq5/tQCGLXmasN+ZgOvtVfSmhUJVj1y7qE8gdWs 7BKAEfPWWkz3QNDNFBjv+UtNzARGIbiA6rxFej5U6RDIq9/sQsbO+4AS2uZ8+9HK B0hzepemrHHW5IpI2HqTNn+kJ/YbugmY3b/Hr9N+wGVXmKoZDsDEOoe4Jto9Bh/n 8Z8clHqNgdIzS1X/7Zl+QSyojh6lmVm/KKkGE+3OOp2Pvtz5CKxLCi5gBIRK -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:05 2026 by rpki-client