This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/uS3aCBTCgmOFRR-e5Oa-GF9u58w.roa File: uS3aCBTCgmOFRR-e5Oa-GF9u58w.roa (raw, json) Hash identifier: VFZbde4BpJH7vJHQREQUv2SxzTx2uzk4zvtDcg8reBk= Subject key identifier: B9:2D:DA:08:14:C2:82:63:85:45:1F:9E:E4:E6:BE:18:5F:6E:E7:CC Certificate issuer: /CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Certificate serial: 019B78343852A81BA9D114F0CAE81FA035F4 Authority key identifier: E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/uS3aCBTCgmOFRR-e5Oa-GF9u58w.roa Signing time: Thu 01 Jan 2026 06:17:26 +0000 ROA not before: Thu 01 Jan 2026 06:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44486 IP address blocks: 37.44.215.0/24 maxlen: 24 176.116.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.mft rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:38:52:a8:1b:a9:d1:14:f0:ca:e8:1f:a0:35:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1856c3082ab2fc8dd1b359a7b3991368538b4d0 Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b92dda0814c2826385451f9ee4e6be185f6ee7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:50:e4:87:34:a7:4c:6a:8b:30:41:2f:17:b7: 04:6c:a9:9a:b8:54:51:24:e2:b2:e4:51:b1:2a:9b: 5b:f8:e2:c1:a5:4f:51:a6:78:97:af:bc:ed:e9:e4: 72:51:5b:ca:47:73:0b:bb:7d:a5:14:40:5c:8b:d1: a5:a8:2e:57:98:a6:82:e4:1a:be:4c:85:38:9e:e2: ee:bb:b8:02:1f:84:02:fc:ed:d5:8e:50:ce:57:24: 9b:53:df:e1:52:74:d2:29:1a:8e:2d:8e:fe:dc:e9: 3d:aa:5a:e2:f0:62:f4:91:0a:94:37:dc:44:81:7f: 69:8f:31:4e:d1:cb:a6:ef:0f:54:9e:46:22:c0:1d: 8f:5f:c5:73:bd:ef:c3:e1:f5:90:4f:fe:fe:f5:4b: 28:b5:be:02:b0:4a:39:ac:85:e2:68:9e:30:b4:fc: b4:39:4d:27:f3:da:21:cb:23:87:8e:d4:4f:8a:e2: e0:d1:49:98:df:80:91:39:e5:fd:4b:aa:10:57:35: fd:89:fe:bc:f4:e1:f1:1c:3c:e2:6b:27:f7:af:2e: 57:dc:01:a5:5b:e7:d1:cb:5a:3a:21:96:b0:04:ba: 2f:16:62:aa:ec:3f:37:25:d6:13:9d:7f:b0:41:6c: 07:cf:cb:14:27:10:22:2d:16:bb:6a:6d:c9:5d:f8: 8c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2D:DA:08:14:C2:82:63:85:45:1F:9E:E4:E6:BE:18:5F:6E:E7:CC X509v3 Authority Key Identifier: keyid:E1:85:6C:30:82:AB:2F:C8:DD:1B:35:9A:7B:39:91:36:85:38:B4:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YVsMIKrL8jdGzWaezmRNoU4tNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/uS3aCBTCgmOFRR-e5Oa-GF9u58w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/564bd0-7b52-44dd-b56b-8eaa6bf40357/1/4YVsMIKrL8jdGzWaezmRNoU4tNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.215.0/24 176.116.18.0/24 Signature Algorithm: sha256WithRSAEncryption 97:0e:32:c2:4a:f2:4b:3c:df:e4:d8:62:27:50:4e:67:7b:60: 97:be:8b:17:8c:10:4c:e6:eb:9d:5b:c1:6f:0a:7a:27:4d:be: 6b:9c:4c:d2:34:97:ee:1e:83:07:52:ea:a3:56:eb:f5:e3:6e: f7:c9:84:c2:60:57:bc:1e:a7:f5:4b:1f:3b:2a:f7:33:3f:a7: f0:2a:b6:5e:c8:54:6c:b9:f8:2e:d1:bd:4a:93:58:80:42:4d: d0:02:3d:2e:e1:d0:5f:bb:be:db:20:22:57:73:c5:a0:5c:8a: 3a:f5:23:74:1f:3c:83:e6:75:3f:41:d6:6e:5c:7b:cc:58:05: 40:36:9c:fa:4a:57:00:e7:7a:77:9f:e8:fb:01:dd:f0:4a:94: fc:44:e0:40:6f:cb:e9:8e:0f:72:b6:78:ab:47:46:bc:a2:1c: a2:da:50:cd:d8:18:50:68:e4:2c:d1:c1:eb:2e:d4:08:8e:61: c7:92:1f:dc:1d:79:ab:48:20:6c:c8:59:e8:b1:55:49:50:c6: 1e:dd:ca:c2:e7:03:12:80:77:a5:fe:11:be:8b:d5:b4:47:1c: 48:58:1a:6c:78:4d:98:bc:af:11:b5:3d:78:6f:41:80:48:70: 9b:72:3d:96:75:9f:81:6f:a9:c3:82:7e:e1:16:7a:a6:d6:9d: 1f:19:ca:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NDhSqBup0RTwyugfoDX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxODU2YzMwODJhYjJmYzhkZDFiMzU5YTdiMzk5MTM2ODUz OGI0ZDAwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTJkZGEwODE0YzI4MjYzODU0NTFmOWVlNGU2YmUxODVmNmVlN2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lDkhzSnTGqLMEEvF7cEbKmauFRR JOKy5FGxKptb+OLBpU9RpniXr7zt6eRyUVvKR3MLu32lFEBci9GlqC5XmKaC5Bq+ TIU4nuLuu7gCH4QC/O3VjlDOVySbU9/hUnTSKRqOLY7+3Ok9qlri8GL0kQqUN9xE gX9pjzFO0cum7w9UnkYiwB2PX8Vzve/D4fWQT/7+9Usotb4CsEo5rIXiaJ4wtPy0 OU0n89ohyyOHjtRPiuLg0UmY34CROeX9S6oQVzX9if689OHxHDziayf3ry5X3AGl W+fRy1o6IZawBLovFmKq7D83JdYTnX+wQWwHz8sUJxAiLRa7am3JXfiM3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLkt2ggUwoJjhUUfnuTmvhhfbufMMB8GA1UdIwQY MBaAFOGFbDCCqy/I3Rs1mns5kTaFOLTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmIt OGVhYTZiZjQwMzU3LzEvdVMzYUNCVENnbU9GUlItZTVPYS1HRjl1NTh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81NjRiZDAtN2I1Mi00NGRkLWI1NmItOGVhYTZiZjQwMzU3 LzEvNFlWc01JS3JMOGpkR3pXYWV6bVJOb1U0dE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJSzXAwQA sHQSMA0GCSqGSIb3DQEBCwUAA4IBAQCXDjLCSvJLPN/k2GInUE5ne2CXvosXjBBM 5uudW8FvCnonTb5rnEzSNJfuHoMHUuqjVuv14273yYTCYFe8Hqf1Sx87KvczP6fw KrZeyFRsufgu0b1Kk1iAQk3QAj0u4dBfu77bICJXc8WgXIo69SN0HzyD5nU/QdZu XHvMWAVANpz6SlcA53p3n+j7Ad3wSpT8ROBAb8vpjg9ytnirR0a8ohyi2lDN2BhQ aOQs0cHrLtQIjmHHkh/cHXmrSCBsyFnosVVJUMYe3crC5wMSgHel/hG+i9W0RxxI WBpseE2YvK8RtT14b0GASHCbcj2WdZ+Bb6nDgn7hFnqm1p0fGcpo -----END CERTIFICATE-----Generated at Sun Jan 18 08:32:43 2026 by rpki-client