This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V37GBknG3FvolquLoNEkX4ray6c.roa
File: V37GBknG3FvolquLoNEkX4ray6c.roa (raw, json)
Hash identifier: 9WFBrNi4mrsJY18dPcJfe5oW8HJMHTkDVqQkYSMqlV0=
Subject key identifier: 57:7E:C6:06:49:C6:DC:5B:E8:96:AB:8B:A0:D1:24:5F:8A:DA:CB:A7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019AD902C4AB2E482F6C9532C05C8A8C7F12
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V37GBknG3FvolquLoNEkX4ray6c.roa
Signing time: Mon 01 Dec 2025 08:23:48 +0000
ROA not before: Mon 01 Dec 2025 08:23:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
206.245.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:d9:02:c4:ab:2e:48:2f:6c:95:32:c0:5c:8a:8c:7f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 1 08:23:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=577ec60649c6dc5be896ab8ba0d1245f8adacba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:51:f7:f6:13:d0:b5:5e:da:4d:e3:f8:3a:
db:f8:49:e0:37:07:20:46:69:a8:96:df:f4:27:42:
a2:a7:b5:9b:43:a3:8c:6a:74:0f:d2:a6:40:8d:ba:
19:d1:e0:1a:38:16:3a:bb:b6:12:f5:a0:63:35:8e:
f4:ac:93:77:2e:06:6c:c6:c5:12:88:97:b8:22:bf:
42:07:0b:c6:55:3f:73:d7:60:8f:8f:73:11:cc:45:
43:7c:b6:8b:b6:1a:9e:ef:52:05:40:e5:18:1c:6d:
1c:b7:59:38:4b:f8:70:c5:87:e5:bc:bd:09:23:0c:
f0:05:fc:6c:fb:56:29:42:ba:ef:7d:05:e3:c9:33:
e0:5e:f2:e6:3f:a2:ff:54:4c:ff:d2:9e:ff:b0:65:
d4:12:0e:6a:f8:11:58:e8:5e:a1:9d:94:e3:40:0b:
1e:a6:28:95:33:f8:2d:c3:b2:d8:49:63:35:8c:a4:
7e:57:ab:e8:9f:59:de:f7:f0:94:91:05:4b:af:d9:
37:28:01:0e:ee:93:68:f5:f7:e2:ab:97:2b:b0:ac:
d9:8a:bf:11:d7:cc:c8:a3:06:ca:75:2a:58:5d:c8:
16:a2:7e:58:ec:c1:bf:4a:00:1b:69:45:4b:a8:1b:
5c:ee:c9:4b:31:b4:4e:41:f4:a1:7c:c5:2e:ee:8b:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7E:C6:06:49:C6:DC:5B:E8:96:AB:8B:A0:D1:24:5F:8A:DA:CB:A7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V37GBknG3FvolquLoNEkX4ray6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.106.0/24
93.114.183.0/24
93.115.106.0/24
194.58.47.0/24
206.245.158.0/24
Signature Algorithm: sha256WithRSAEncryption
07:32:de:fd:5b:36:b7:6e:f0:29:2a:f0:67:f7:87:12:5a:b2:
ca:57:cb:6a:3b:35:8e:96:5a:89:61:52:8a:6a:f7:23:e7:5d:
f0:bc:f8:a9:ed:53:5d:71:56:da:10:da:fd:bb:87:ef:6a:06:
03:71:f2:9e:d3:c4:32:1c:28:28:79:f8:3e:01:d1:19:69:c3:
95:d4:5a:85:3e:8c:50:97:28:1b:f3:fe:65:55:7d:c9:fe:f8:
15:fd:46:97:c0:f7:94:eb:1f:97:39:01:cd:3c:02:ff:ec:53:
b0:8f:2c:f3:aa:0d:0c:51:84:64:69:54:71:3c:20:f1:0c:47:
12:f4:d7:9f:1b:f3:c6:aa:47:13:56:ad:36:26:d8:50:e5:c9:
e8:40:7d:15:cf:76:ab:04:bd:ad:b9:d6:aa:88:bd:69:51:1a:
cd:e2:14:0c:a0:f4:ed:2d:f5:97:6e:80:b6:75:ac:a0:41:01:
15:b6:02:d9:75:b0:19:cf:4c:98:2e:d5:8d:1c:27:1a:58:f5:
65:64:34:8e:a8:3f:9a:34:5a:c8:36:85:89:88:6f:e2:1d:59:
cd:9f:71:c4:30:71:ed:65:c5:d7:5d:9a:ea:28:80:11:9b:20:
0b:7b:07:1f:4f:eb:ce:fb:78:7b:1d:73:a7:2a:6e:a8:e9:29:
32:d3:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:58:52 2025 by rpki-client