This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/37nBPcU451HQlUl0uacWDYQGvA8.roa File: 37nBPcU451HQlUl0uacWDYQGvA8.roa (raw, json) Hash identifier: TDhIz0QGXINJqgJRTB4Yk7ckzNjSTwoBFWF/TjcxIyc= Subject key identifier: DF:B9:C1:3D:C5:38:E7:51:D0:95:49:74:B9:A7:16:0D:84:06:BC:0F Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452 Certificate serial: 019B76EAEEDC724EA4906359895FC826CA01 Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/37nBPcU451HQlUl0uacWDYQGvA8.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 46.102.240.0/21 maxlen: 21 77.81.240.0/21 maxlen: 21 2a06:cd40:300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ee:dc:72:4e:a4:90:63:59:89:5f:c8:26:ca:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5336107179715609dca422bc07a098468c529452 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfb9c13dc538e751d0954974b9a7160d8406bc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ce:df:c5:90:3a:69:54:f2:19:62:7b:4e:9b: d9:6e:e3:ee:e2:92:c7:4b:26:f0:20:49:c6:d7:2a: 55:d6:64:bb:bb:0f:5d:2b:f0:ea:2a:1d:d1:53:86: 74:0f:f3:ed:e3:57:53:eb:93:41:84:4e:a4:fb:8a: 70:14:39:7e:eb:86:1f:d4:b1:c1:13:d3:8e:56:3f: 77:0d:7c:61:7c:e1:eb:9d:04:09:5a:a6:7b:12:59: 03:a4:4e:62:ff:a9:6a:f0:1a:b5:1f:f7:12:60:e2: 9b:30:58:48:a3:6d:0a:d1:0f:c1:a9:69:df:5b:7c: 4d:b2:7e:fd:73:03:9d:02:b7:2c:ef:a9:33:23:51: c1:ed:b7:55:50:a5:1c:01:dc:28:53:b1:8c:ba:1d: fd:84:09:67:69:fd:0e:3f:09:48:90:9c:be:42:cb: d8:39:92:be:53:21:7a:d2:46:84:9d:92:e9:e7:40: aa:02:f9:2e:42:db:7f:2d:53:68:95:c9:8b:f6:74: 89:2c:24:2f:04:e4:6f:fe:bd:bb:e6:8f:8a:5f:c3: fd:81:9a:45:e7:a5:f1:67:c0:4e:9e:7d:74:ea:a9: 7a:9e:d9:1c:34:e8:5a:9c:f6:24:86:f3:d1:fa:a6: fc:7d:9f:e9:aa:46:93:ec:e4:44:12:58:58:8b:de: 0f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B9:C1:3D:C5:38:E7:51:D0:95:49:74:B9:A7:16:0D:84:06:BC:0F X509v3 Authority Key Identifier: keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/37nBPcU451HQlUl0uacWDYQGvA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.240.0/21 77.81.240.0/21 IPv6: 2a06:cd40:300::/48 Signature Algorithm: sha256WithRSAEncryption 56:aa:a0:1c:6a:b0:59:78:7b:b1:a2:af:01:36:6e:26:db:48: 81:23:c7:62:a8:c7:ec:a5:1f:32:39:f5:57:e4:2f:a2:84:cb: e4:b2:87:4c:ef:56:05:04:87:64:a6:4b:ff:47:bf:f8:99:31: 03:71:a5:ab:58:d9:82:09:26:a7:53:9a:8c:8c:bd:04:77:0b: 70:32:36:5f:6f:41:1e:b3:19:18:94:6f:54:44:fb:c2:66:4b: d4:1e:a8:68:2d:f9:cd:ea:27:c3:01:7e:5d:2b:ab:86:02:05: f7:9b:f3:22:0b:13:e7:46:8c:2d:ef:51:e0:49:9e:d7:87:8a: 54:f9:b4:e0:b6:1f:90:de:86:30:52:d7:35:b8:5f:0b:e4:3b: c1:e4:ab:84:5c:9b:02:1d:79:20:64:b8:04:84:95:70:27:ec: c0:00:e2:16:6d:7d:70:b4:a8:e7:16:16:fa:a6:ef:f5:6f:47: 04:f0:da:83:2f:46:54:cc:10:47:28:27:60:cf:17:e9:7b:67: 3b:28:6c:57:43:fa:7b:c0:78:5a:42:85:a8:69:e7:a3:6a:f5: 02:54:92:82:cf:3a:93:db:c3:d4:fb:2f:fc:7d:29:e4:9c:87: 8f:39:c3:26:7e:23:9c:78:d0:ed:cf:f5:d5:ae:dd:01:58:b5: 11:29:d2:bb -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt26u7cck6kkGNZiV/IJsoBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzYxMDcxNzk3MTU2MDlkY2E0MjJiYzA3YTA5ODQ2OGM1 Mjk0NTIwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmI5YzEzZGM1MzhlNzUxZDA5NTQ5NzRiOWE3MTYwZDg0MDZiYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl87fxZA6aVTyGWJ7TpvZbuPu4pLH SybwIEnG1ypV1mS7uw9dK/DqKh3RU4Z0D/Pt41dT65NBhE6k+4pwFDl+64Yf1LHB E9OOVj93DXxhfOHrnQQJWqZ7ElkDpE5i/6lq8Bq1H/cSYOKbMFhIo20K0Q/BqWnf W3xNsn79cwOdArcs76kzI1HB7bdVUKUcAdwoU7GMuh39hAlnaf0OPwlIkJy+QsvY OZK+UyF60kaEnZLp50CqAvkuQtt/LVNolcmL9nSJLCQvBORv/r275o+KX8P9gZpF 56XxZ8BOnn106ql6ntkcNOhanPYkhvPR+qb8fZ/pqkaT7OREElhYi94P0QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFN+5wT3FOOdR0JVJdLmnFg2EBrwPMB8GA1UdIwQY MBaAFFM2EHF5cVYJ3KQivAegmEaMUpRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUt ZDE4NjEwMDc1ZWZjLzEvMzduQlBjVTQ1MUhRbFVsMHVhY1dEWVFHdkE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUtZDE4NjEwMDc1ZWZj LzEvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDLmbwAwQD TVHwMA8EAgACMAkDBwAqBs1AAwAwDQYJKoZIhvcNAQELBQADggEBAFaqoBxqsFl4 e7GirwE2bibbSIEjx2Kox+ylHzI59VfkL6KEy+Syh0zvVgUEh2SmS/9Hv/iZMQNx patY2YIJJqdTmoyMvQR3C3AyNl9vQR6zGRiUb1RE+8JmS9QeqGgt+c3qJ8MBfl0r q4YCBfeb8yILE+dGjC3vUeBJnteHilT5tOC2H5DehjBS1zW4XwvkO8Hkq4RcmwId eSBkuASElXAn7MAA4hZtfXC0qOcWFvqm7/VvRwTw2oMvRlTMEEcoJ2DPF+l7Zzso bFdD+nvAeFpChahp56Nq9QJUkoLPOpPbw9T7L/x9KeSch485wyZ+I5x40O3P9dWu 3QFYtREp0rs= -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:16 2026 by rpki-client