This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/1-nIDHjjDOfK0qkT3T38aF1CybZo.roa File: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (raw, json) Hash identifier: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA= Subject key identifier: FA:72:03:1E:38:C3:39:F2:B4:AA:44:F7:4F:7F:1A:17:50:B2:6D:9A Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e Certificate serial: 019B77C6E9BC7F5EAAFC14A37467478C31F2 Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/1-nIDHjjDOfK0qkT3T38aF1CybZo.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50540 IP address blocks: 37.58.16.0/24 maxlen: 24 37.58.18.0/24 maxlen: 24 37.58.22.0/24 maxlen: 24 95.128.59.0/24 maxlen: 24 185.56.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e9:bc:7f:5e:aa:fc:14:a3:74:67:47:8c:31:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa72031e38c339f2b4aa44f74f7f1a1750b26d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8b:8e:f2:6e:50:f7:11:32:ab:6d:5e:e8:66: 1f:1b:78:28:fd:ae:2a:48:fb:11:6f:21:52:48:92: f4:9c:c0:fd:e3:9a:f5:a4:9d:e3:1c:34:d9:6f:11: bc:d4:57:7f:bd:87:87:0e:75:da:e3:03:84:1f:0d: 41:7b:a4:cf:c5:d0:f0:cb:fd:33:52:22:75:10:f9: 92:ce:03:28:19:14:c2:97:93:a1:70:a7:30:57:b5: 57:fb:51:5a:7a:19:59:fb:61:e2:26:94:e0:d8:44: 13:4c:54:2b:c6:76:e7:be:23:ea:26:4d:33:33:44: 6d:22:9f:1a:0c:fb:37:db:88:3b:f5:87:21:75:08: 68:30:51:a7:21:35:7e:23:4c:79:3f:5c:ac:66:62: d6:dc:78:13:62:bd:d5:66:88:d8:e5:dc:6f:cc:c4: c6:40:23:09:ec:3f:74:ac:42:98:27:6a:ea:9d:ab: f9:34:9d:fd:bd:a8:6d:17:64:9d:c9:7a:13:2b:51: 5f:f3:56:38:c5:b6:4a:c2:b5:4c:01:81:87:c6:21: f9:65:c2:b1:2f:09:11:4c:59:b5:38:bb:a2:f5:85: f6:47:e7:c6:50:ed:01:5b:3c:e5:1a:83:5d:27:3c: 99:92:7a:1d:ad:b9:29:a2:e0:23:1c:e8:91:0b:19: 36:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:72:03:1E:38:C3:39:F2:B4:AA:44:F7:4F:7F:1A:17:50:B2:6D:9A X509v3 Authority Key Identifier: keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/1-nIDHjjDOfK0qkT3T38aF1CybZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.58.16.0/24 37.58.18.0/24 37.58.22.0/24 95.128.59.0/24 185.56.236.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:27:79:de:25:17:36:b8:b6:92:f2:97:cf:a2:17:c4:50:3a: 43:ce:8b:c9:ae:93:49:68:b6:9e:bc:7d:93:c6:85:a5:e4:44: b4:bd:d5:7a:26:3f:28:0d:0d:5c:32:33:8b:ad:6c:24:0d:4b: 73:04:95:2a:47:87:78:e2:52:02:03:6d:bc:b3:49:46:08:f9: 50:05:01:01:9a:d7:01:77:b0:1d:f8:ab:21:5f:e1:fd:7e:d7: ce:a9:6e:06:5a:bb:18:16:0d:a8:5b:c8:81:cb:c3:9c:10:52: 89:80:cc:af:3c:d0:32:3d:3f:86:49:01:32:61:19:5c:69:b8: ef:76:5a:f6:3d:4d:ab:a6:fa:c3:5a:2c:40:89:2c:88:c3:d6: 4b:da:6c:62:c8:80:83:93:bd:60:b2:46:e4:3c:2c:68:97:52: c1:5a:08:64:46:2e:49:52:a4:d9:c9:a8:1c:c6:b1:95:d9:b8: de:92:1c:1d:cd:d0:07:f1:20:6a:10:b9:0c:b3:7b:b3:c0:d5: d6:f7:ab:73:81:60:ea:cc:d6:da:3a:ff:fd:3b:6f:c2:a2:82: 9c:1a:1a:b6:2b:49:8a:cc:d8:b1:ee:f6:a6:9e:43:f9:b6:96: a5:cd:19:4e:b1:d6:17:81:2c:1e:bb:d2:50:65:9a:1d:58:4a: 48:4b:4a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3xum8f16q/BSjdGdHjDHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMTViZTQ1MzJlOTU4OGM0MDUzMWE3ZjMzMWVhYmZiZjQ3 NzBhNWUwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTcyMDMxZTM4YzMzOWYyYjRhYTQ0Zjc0ZjdmMWExNzUwYjI2ZDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIuO8m5Q9xEyq21e6GYfG3go/a4q SPsRbyFSSJL0nMD945r1pJ3jHDTZbxG81Fd/vYeHDnXa4wOEHw1Be6TPxdDwy/0z UiJ1EPmSzgMoGRTCl5OhcKcwV7VX+1FaehlZ+2HiJpTg2EQTTFQrxnbnviPqJk0z M0RtIp8aDPs324g79YchdQhoMFGnITV+I0x5P1ysZmLW3HgTYr3VZojY5dxvzMTG QCMJ7D90rEKYJ2rqnav5NJ39vahtF2SdyXoTK1Ff81Y4xbZKwrVMAYGHxiH5ZcKx LwkRTFm1OLui9YX2R+fGUO0BWzzlGoNdJzyZknodrbkpouAjHOiRCxk2oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpyAx44wznytKpE909/GhdQsm2aMB8GA1UdIwQY MBaAFOIVvkUy6ViMQFMafzMeq/v0dwpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGhXLVJUTHBXSXhBVXhwX014NnItX1IzQ2w0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZWU4NWUtMjJjYi00MmVkLTkwNzEt NDY1MWZkODAyNzM3LzEvMS1uSURIampET2ZLMHFrVDNUMzhhRjFDeWJaby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjUvNGVlODVlLTIyY2ItNDJlZC05MDcxLTQ2NTFmZDgwMjcz Ny8xLzRoVy1SVExwV0l4QVV4cF9NeDZyLV9SM0NsNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEACU6EAME ACU6EgMEACU6FgMEAF+AOwMEALk47DANBgkqhkiG9w0BAQsFAAOCAQEALSd53iUX Nri2kvKXz6IXxFA6Q86Lya6TSWi2nrx9k8aFpeREtL3VeiY/KA0NXDIzi61sJA1L cwSVKkeHeOJSAgNtvLNJRgj5UAUBAZrXAXewHfirIV/h/X7XzqluBlq7GBYNqFvI gcvDnBBSiYDMrzzQMj0/hkkBMmEZXGm473Za9j1Nq6b6w1osQIksiMPWS9psYsiA g5O9YLJG5DwsaJdSwVoIZEYuSVKk2cmoHMaxldm43pIcHc3QB/EgahC5DLN7s8DV 1verc4Fg6szW2jr//TtvwqKCnBoatitJiszYse72pp5D+baWpc0ZTrHWF4EsHrvS UGWaHVhKSEtKHw== -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:43 2026 by rpki-client