This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/SzyuS0eXnLwWeAGox-fMOKKRa0k.roa File: SzyuS0eXnLwWeAGox-fMOKKRa0k.roa (raw, json) Hash identifier: Dq+m+Q3Weeb2C27Qjb2pmSYSODOr7fQDIW223xJTttY= Subject key identifier: 4B:3C:AE:4B:47:97:9C:BC:16:78:01:A8:C7:E7:CC:38:A2:91:6B:49 Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f Certificate serial: 019B76EB4D2A0A5A4663755CA0171DCBB773 Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/SzyuS0eXnLwWeAGox-fMOKKRa0k.roa Signing time: Thu 01 Jan 2026 00:18:10 +0000 ROA not before: Thu 01 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35393 IP address blocks: 37.0.72.0/21 maxlen: 24 46.21.192.0/20 maxlen: 24 62.100.128.0/19 maxlen: 24 78.41.232.0/21 maxlen: 24 81.93.240.0/20 maxlen: 24 91.191.144.0/20 maxlen: 24 94.247.176.0/21 maxlen: 24 185.67.152.0/22 maxlen: 24 188.130.0.0/17 maxlen: 24 193.47.184.0/24 maxlen: 24 195.14.0.0/24 maxlen: 24 195.114.18.0/23 maxlen: 24 2001:758::/32 maxlen: 48 2001:900::/32 maxlen: 48 2a00:cb80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4d:2a:0a:5a:46:63:75:5c:a0:17:1d:cb:b7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f Validity Not Before: Jan 1 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b3cae4b47979cbc167801a8c7e7cc38a2916b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:bf:5c:f6:45:ed:e5:86:95:f9:9f:bf:00: 0d:17:58:9f:f2:41:36:f0:11:51:66:1d:fa:aa:d9: c2:bf:1a:1b:fa:90:e8:7a:1b:7a:f0:20:64:09:9a: 19:c1:21:e3:dc:63:29:01:a0:81:2c:7a:bc:7d:9d: b3:12:3b:03:f0:d9:71:05:35:d5:03:a4:dd:ed:34: 4b:c5:00:4a:83:83:b7:7e:4d:69:95:d1:a2:81:a9: 04:e0:30:5a:59:41:35:26:a3:a3:aa:2e:c7:26:4a: 94:c7:58:15:33:c9:7f:b8:e5:98:b4:e6:0b:c1:6e: 04:2b:c6:27:8c:6f:91:e1:a1:59:17:07:8b:60:38: 91:b2:df:dd:4d:ba:15:77:3c:b7:00:03:b3:a2:c1: 46:b0:e2:7e:18:bc:18:32:47:10:69:1c:c8:77:f9: 5d:0b:06:de:12:f1:23:5f:85:17:76:28:cf:91:79: 2b:a9:09:ea:57:bd:62:eb:16:34:e9:48:f4:cf:f9: d3:e7:04:8f:ba:85:c1:b6:d8:7d:41:14:e1:32:c3: 9a:ef:6c:7b:36:f2:71:74:e5:b8:56:ae:91:26:c9: 94:b0:e5:cf:6e:09:c2:29:7c:c3:e6:6a:ec:d2:87: 81:75:16:68:09:e5:54:42:8d:a1:f2:08:d1:12:90: 4d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3C:AE:4B:47:97:9C:BC:16:78:01:A8:C7:E7:CC:38:A2:91:6B:49 X509v3 Authority Key Identifier: keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/SzyuS0eXnLwWeAGox-fMOKKRa0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.72.0/21 46.21.192.0/20 62.100.128.0/19 78.41.232.0/21 81.93.240.0/20 91.191.144.0/20 94.247.176.0/21 185.67.152.0/22 188.130.0.0/17 193.47.184.0/24 195.14.0.0/24 195.114.18.0/23 IPv6: 2001:758::/32 2001:900::/32 2a00:cb80::/32 Signature Algorithm: sha256WithRSAEncryption 90:4f:28:94:9f:41:8d:4c:f5:bf:8d:b9:90:63:c3:e6:d9:95: db:ec:87:30:02:89:5b:3c:36:37:e4:0b:38:a8:69:03:a3:43: 5e:a0:2b:df:c4:24:a6:88:e0:fe:05:28:a1:85:aa:d7:97:2e: 48:d2:a2:90:4b:8a:a7:4f:fa:41:cd:08:40:bf:39:72:38:54: 7c:7d:6a:8f:84:8c:45:20:99:4c:2b:8b:13:dc:2d:f1:ec:8e: 28:b7:81:6c:ac:07:0f:8a:99:08:cf:96:22:a3:bd:37:eb:94: 8f:93:5a:da:f2:08:8a:97:df:04:3a:f7:1a:71:7b:3d:2a:a3: 6e:bd:6a:bf:35:bc:9a:9f:d5:67:38:12:cd:28:88:fb:bf:b1: d5:4b:ec:46:4c:2f:09:1c:7c:55:f1:3c:a6:02:55:a8:dd:3a: d6:5e:85:b5:db:7d:42:54:10:a7:20:32:58:ec:d8:70:20:6a: 64:4b:28:90:3c:16:fc:20:87:e1:da:8a:cb:11:3f:c4:e5:47: 9c:73:19:78:f2:b8:06:ea:38:00:ca:0b:49:87:4d:c6:f7:7d: 95:e5:e4:16:1c:09:65:84:cc:01:b9:cf:bd:16:ff:29:dd:7d: ec:3b:d7:0a:88:2b:96:1c:51:c9:17:1b:0c:c2:5f:ed:6a:8b: 8f:0f:1e:74 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZt2600qClpGY3VcoBcdy7dzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzhjMjBlNjVkY2QzM2ZmOGE1ZTNjMzBhNjQ1OTI1YzVj OWY5NWYwHhcNMjYwMTAxMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjNjYWU0YjQ3OTc5Y2JjMTY3ODAxYThjN2U3Y2MzOGEyOTE2YjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly+/XPZF7eWGlfmfvwANF1if8kE2 8BFRZh36qtnCvxob+pDoeht68CBkCZoZwSHj3GMpAaCBLHq8fZ2zEjsD8NlxBTXV A6Td7TRLxQBKg4O3fk1pldGigakE4DBaWUE1JqOjqi7HJkqUx1gVM8l/uOWYtOYL wW4EK8YnjG+R4aFZFweLYDiRst/dTboVdzy3AAOzosFGsOJ+GLwYMkcQaRzId/ld CwbeEvEjX4UXdijPkXkrqQnqV71i6xY06Uj0z/nT5wSPuoXBtth9QRThMsOa72x7 NvJxdOW4Vq6RJsmUsOXPbgnCKXzD5mrs0oeBdRZoCeVUQo2h8gjREpBNmwIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFEs8rktHl5y8FngBqMfnzDiikWtJMB8GA1UdIwQY MBaAFD7Iwg5l3NM/+KXjwwpkWSXFyflfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYt ZGZjNWNjNjRhODFlLzEvU3p5dVMwZVhuTHdXZUFHb3gtZk1PS0tSYTBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYtZGZjNWNjNjRhODFl LzEvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBOBAIAATBIAwQDJQBIAwQE LhXAAwQFPmSAAwQDTinoAwQEUV3wAwQEW7+QAwQDXvewAwQCuUOYAwQHvIIAAwQA wS+4AwQAww4AAwQBw3ISMBsEAgACMBUDBQAgAQdYAwUAIAEJAAMFACoAy4AwDQYJ KoZIhvcNAQELBQADggEBAJBPKJSfQY1M9b+NuZBjw+bZldvshzACiVs8NjfkCzio aQOjQ16gK9/EJKaI4P4FKKGFqteXLkjSopBLiqdP+kHNCEC/OXI4VHx9ao+EjEUg mUwrixPcLfHsjii3gWysBw+KmQjPliKjvTfrlI+TWtryCIqX3wQ69xpxez0qo269 ar81vJqf1Wc4Es0oiPu/sdVL7EZMLwkcfFXxPKYCVajdOtZehbXbfUJUEKcgMljs 2HAgamRLKJA8Fvwgh+HaissRP8TlR5xzGXjyuAbqOADKC0mHTcb3fZXl5BYcCWWE zAG5z70W/yndfew71wqIK5YcUckXGwzCX+1qi48PHnQ= -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:10 2026 by rpki-client