This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/djYcUtesGEo6eXtApCancG1zlf0.roa File: djYcUtesGEo6eXtApCancG1zlf0.roa (raw, json) Hash identifier: 44l8vn7/ig8bOerFV7hDXQ04Yd8aH+DUwqLc2CBTt4I= Subject key identifier: 76:36:1C:52:D7:AC:18:4A:3A:79:7B:40:A4:26:A7:70:6D:73:95:FD Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31 Certificate serial: 019B791073D90D3FB7314F38887748DEA133 Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/djYcUtesGEo6eXtApCancG1zlf0.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398748 IP address blocks: 37.228.148.0/24 maxlen: 24 37.228.149.0/24 maxlen: 24 37.228.150.0/24 maxlen: 24 37.228.151.0/24 maxlen: 24 2a06:1c41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:73:d9:0d:3f:b7:31:4f:38:88:77:48:de:a1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76361c52d7ac184a3a797b40a426a7706d7395fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:65:ea:45:aa:63:e9:bc:0d:89:9b:9a:b9:50: 58:6a:52:84:e1:02:e3:02:a5:b8:8b:f5:ab:01:6f: c3:7c:f3:26:da:8f:6d:d3:be:2e:23:70:e9:19:cb: b7:45:12:72:62:bb:b8:27:ae:c6:0f:3b:0d:62:9f: 90:e9:50:d7:78:36:22:b2:20:92:6a:51:b9:1d:f5: c7:16:9a:f7:c3:0a:ae:ca:27:ea:46:98:84:a0:bc: 46:65:27:fe:21:4d:40:ed:09:db:8d:b7:6f:c2:36: 65:a8:40:fc:65:15:12:cd:64:45:4e:21:0d:b8:63: ea:d3:0d:cb:d2:6b:ae:c8:dc:62:4e:58:08:59:17: 27:5d:c0:c1:7a:82:29:86:76:1d:29:00:56:7f:dd: 09:8b:b2:05:dd:c3:d8:aa:59:35:bf:82:60:09:c9: 6a:c7:47:21:c0:27:27:3b:30:4d:a8:31:53:db:85: 82:ac:6c:37:ea:c2:4c:24:1f:ba:c3:93:aa:96:a3: 00:b7:8a:d8:d8:db:28:58:1f:08:a8:b5:84:ef:3e: 3e:f4:c8:26:d1:86:2d:78:20:9c:94:af:7a:00:70: c9:2c:e2:12:72:4e:c9:74:91:4f:02:af:f7:a0:bf: bb:63:a1:40:55:02:f4:62:a6:3c:8b:c5:3f:2e:20: 03:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:36:1C:52:D7:AC:18:4A:3A:79:7B:40:A4:26:A7:70:6D:73:95:FD X509v3 Authority Key Identifier: keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/djYcUtesGEo6eXtApCancG1zlf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.228.148.0/22 IPv6: 2a06:1c41::/32 Signature Algorithm: sha256WithRSAEncryption b2:03:9e:a7:72:8e:59:39:ab:b4:e4:e3:b2:f0:4c:c1:22:21: c3:c3:ce:49:d5:4d:2a:1c:96:69:33:6f:fe:07:e8:8b:01:1a: e9:bc:b6:a1:71:f2:ea:bd:01:8e:f0:cd:0b:10:9a:34:6b:5d: 10:e3:79:61:c3:f5:bd:97:42:c0:e4:8f:d5:b8:e1:e8:f2:c9: 87:ad:10:5c:3c:cf:83:dc:33:80:44:82:0a:37:a9:31:b5:9e: 76:88:38:50:75:40:b2:a6:73:90:4a:2d:8b:e6:ac:cd:5e:08: f1:ee:72:f7:80:0a:5e:a5:a9:8b:8f:95:58:16:4b:87:66:48: c7:b9:87:e4:ca:84:a6:e2:08:59:91:a1:eb:d3:3b:4d:eb:56: 9c:56:47:05:3d:b3:ed:43:ba:1f:08:1b:0d:be:b9:08:d1:ca: 7d:8e:60:9e:b3:5f:31:21:d3:d7:b6:b3:6a:b7:2b:26:55:0a: d9:2f:67:fa:a6:b0:3f:28:a7:94:b9:1b:8d:b3:f8:eb:df:fb: 92:60:1d:99:f8:9f:07:1c:52:90:2e:cd:27:b9:01:28:3c:da: a6:30:12:ac:27:43:51:a7:7e:10:f3:55:b5:3a:27:af:96:a6: fe:41:fe:f5:2b:b6:77:a9:05:65:ce:3d:6d:27:79:a1:d4:f4: fe:1a:95:43 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EHPZDT+3MU84iHdI3qEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwZDE4MTk2YjI5ZjYwZTg1ZDg3MTJkZTQwMzlhNTMxY2Zj MWFiMzEwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjM2MWM1MmQ3YWMxODRhM2E3OTdiNDBhNDI2YTc3MDZkNzM5NWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WXqRapj6bwNiZuauVBYalKE4QLj AqW4i/WrAW/DfPMm2o9t074uI3DpGcu3RRJyYru4J67GDzsNYp+Q6VDXeDYisiCS alG5HfXHFpr3wwquyifqRpiEoLxGZSf+IU1A7QnbjbdvwjZlqED8ZRUSzWRFTiEN uGPq0w3L0muuyNxiTlgIWRcnXcDBeoIphnYdKQBWf90Ji7IF3cPYqlk1v4JgCclq x0chwCcnOzBNqDFT24WCrGw36sJMJB+6w5OqlqMAt4rY2NsoWB8IqLWE7z4+9Mgm 0YYteCCclK96AHDJLOISck7JdJFPAq/3oL+7Y6FAVQL0YqY8i8U/LiADowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHY2HFLXrBhKOnl7QKQmp3Btc5X9MB8GA1UdIwQY MBaAFFDRgZayn2DoXYcS3kA5pTHPwasxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2Et YjRhMTgxY2Q0MGY2LzEvZGpZY1V0ZXNHRW82ZVh0QXBDYW5jRzF6bGYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9jYmVjZjQtYmNlZC00ZDgzLWJmY2EtYjRhMTgxY2Q0MGY2 LzEvVU5HQmxyS2ZZT2hkaHhMZVFEbWxNY19CcXpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCJeSUMA0E AgACMAcDBQAqBhxBMA0GCSqGSIb3DQEBCwUAA4IBAQCyA56nco5ZOau05OOy8EzB IiHDw85J1U0qHJZpM2/+B+iLARrpvLahcfLqvQGO8M0LEJo0a10Q43lhw/W9l0LA 5I/VuOHo8smHrRBcPM+D3DOARIIKN6kxtZ52iDhQdUCypnOQSi2L5qzNXgjx7nL3 gApepamLj5VYFkuHZkjHuYfkyoSm4ghZkaHr0ztN61acVkcFPbPtQ7ofCBsNvrkI 0cp9jmCes18xIdPXtrNqtysmVQrZL2f6prA/KKeUuRuNs/jr3/uSYB2Z+J8HHFKQ Ls0nuQEoPNqmMBKsJ0NRp34Q81W1Oievlqb+Qf71K7Z3qQVlzj1tJ3mh1PT+GpVD -----END CERTIFICATE-----Generated at Tue Feb 10 08:36:57 2026 by rpki-client