This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/CwIjYjnTILTtmzxjO1L06aXYXx0.roa File: CwIjYjnTILTtmzxjO1L06aXYXx0.roa (raw, json) Hash identifier: eJSJ7vi3vMU6tYUCxmim/j5RdYogwWkRqmaPqZMw+kY= Subject key identifier: 0B:02:23:62:39:D3:20:B4:ED:9B:3C:63:3B:52:F4:E9:A5:D8:5F:1D Certificate issuer: /CN=0f671fec38f00c402f3066f13c792e1a0ed16db3 Certificate serial: 019B7BA32E15F67E230116385F037155D70F Authority key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/CwIjYjnTILTtmzxjO1L06aXYXx0.roa Signing time: Thu 01 Jan 2026 22:17:30 +0000 ROA not before: Thu 01 Jan 2026 22:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 37.9.176.0/21 maxlen: 24 185.20.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2e:15:f6:7e:23:01:16:38:5f:03:71:55:d7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3 Validity Not Before: Jan 1 22:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b02236239d320b4ed9b3c633b52f4e9a5d85f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:68:4f:89:b7:7a:16:1f:c1:61:64:ab:a2: f4:a3:be:e6:72:9f:ad:dd:c6:87:35:b9:6e:28:f0: d2:58:0f:89:53:55:93:4f:e4:57:c6:d6:57:25:0c: 48:9d:e9:55:a1:66:8e:dd:99:50:6f:e2:9a:98:17: 6d:c3:9d:d7:0f:54:0c:01:ae:02:ac:fe:8a:2a:37: ad:66:2d:4c:05:e2:ee:56:dd:e7:33:f3:1a:73:c8: 37:cd:ac:1f:1a:ad:f8:f2:09:f0:15:ed:46:3d:fa: c6:2b:3e:b6:4a:d6:47:59:10:44:b8:83:24:67:e8: fa:ae:b8:28:b2:f0:d2:f3:0e:d2:e2:dc:b1:9c:79: 23:86:e3:89:7b:5b:b5:70:3a:b6:06:be:06:00:06: f6:31:49:49:fe:8a:2a:5a:fb:b5:65:6c:da:a3:e4: d1:40:42:7b:6a:bc:2a:3f:7d:58:f7:f4:f3:cc:80: 2a:f2:20:44:5e:91:fd:10:f3:ef:72:e7:58:05:1f: 13:5b:5d:bd:94:68:53:77:a5:df:0a:f1:3d:e6:4f: d7:e9:4f:3a:04:df:64:e3:0f:39:ae:84:42:60:bd: b1:5f:c0:f7:ec:a4:17:fb:ca:d3:27:87:16:b0:41: 0e:77:6f:fa:0f:92:4d:89:d1:6d:1e:09:71:25:26: f9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:02:23:62:39:D3:20:B4:ED:9B:3C:63:3B:52:F4:E9:A5:D8:5F:1D X509v3 Authority Key Identifier: keyid:0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/CwIjYjnTILTtmzxjO1L06aXYXx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.9.176.0/21 185.20.212.0/22 Signature Algorithm: sha256WithRSAEncryption 73:af:75:37:2d:96:00:b2:fd:23:81:7b:ff:21:4b:19:46:97: bd:4b:db:b7:69:c8:2a:18:b5:c7:ab:cf:54:51:ce:12:94:06: 67:9d:bf:fa:05:15:a7:65:97:02:f9:56:a2:b5:ed:1b:22:02: 19:40:28:d7:72:16:8c:09:1c:d2:2f:a0:e9:d3:77:ce:f4:6f: c9:57:ab:41:34:66:d7:b4:57:2e:b9:fc:9c:f9:04:a3:ad:9e: b9:ac:b8:bc:da:d8:c1:71:8d:23:0e:0c:4e:2b:68:01:b5:7f: 23:a8:fa:1d:ec:43:97:7e:ca:1c:75:be:e0:17:a5:cd:a3:7a: d0:e1:77:1d:82:1c:70:58:3f:78:e0:f8:5e:19:aa:64:7e:4c: 6b:b4:0b:8f:00:8a:44:12:7e:6f:28:ad:87:b2:d3:6d:e6:5d: d8:6f:1d:1b:2a:cd:aa:16:5b:bc:35:20:34:02:c9:4e:3c:93: 23:de:69:79:9b:70:1c:8c:b9:87:5e:e5:ea:48:fa:1e:01:e5: 1c:15:12:62:eb:9f:f0:72:17:cb:78:bf:fc:11:42:69:8a:4c: e2:b1:28:1a:f3:5e:d0:8f:40:3f:55:4d:56:20:9e:4f:39:06: 96:cf:41:6f:0a:4c:45:e7:a6:0b:13:2c:fe:79:e1:31:d0:45: bb:c9:b1:88 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7oy4V9n4jARY4XwNxVdcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjcxZmVjMzhmMDBjNDAyZjMwNjZmMTNjNzkyZTFhMGVk MTZkYjMwHhcNMjYwMTAxMjIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjAyMjM2MjM5ZDMyMGI0ZWQ5YjNjNjMzYjUyZjRlOWE1ZDg1ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIpoT4m3ehYfwWFkq6L0o77mcp+t 3caHNbluKPDSWA+JU1WTT+RXxtZXJQxInelVoWaO3ZlQb+KamBdtw53XD1QMAa4C rP6KKjetZi1MBeLuVt3nM/Mac8g3zawfGq348gnwFe1GPfrGKz62StZHWRBEuIMk Z+j6rrgosvDS8w7S4tyxnHkjhuOJe1u1cDq2Br4GAAb2MUlJ/ooqWvu1ZWzao+TR QEJ7arwqP31Y9/TzzIAq8iBEXpH9EPPvcudYBR8TW129lGhTd6XfCvE95k/X6U86 BN9k4w85roRCYL2xX8D37KQX+8rTJ4cWsEEOd2/6D5JNidFtHglxJSb5nQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAsCI2I50yC07Zs8YztS9Oml2F8dMB8GA1UdIwQY MBaAFA9nH+w48AxALzBm8Tx5LhoO0W2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJjZjdEandERUF2TUdieFBIa3VHZzdSYmJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80OWJiNjktZGZmOS00NDhlLWE4YTIt OTc3MzA1YzcwMDUxLzEvQ3dJallqblRJTFR0bXp4ak8xTDA2YVhZWHgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS80OWJiNjktZGZmOS00NDhlLWE4YTItOTc3MzA1YzcwMDUx LzEvRDJjZjdEandERUF2TUdieFBIa3VHZzdSYmJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDJQmwAwQC uRTUMA0GCSqGSIb3DQEBCwUAA4IBAQBzr3U3LZYAsv0jgXv/IUsZRpe9S9u3acgq GLXHq89UUc4SlAZnnb/6BRWnZZcC+Vaite0bIgIZQCjXchaMCRzSL6Dp03fO9G/J V6tBNGbXtFcuufyc+QSjrZ65rLi82tjBcY0jDgxOK2gBtX8jqPod7EOXfsocdb7g F6XNo3rQ4XcdghxwWD944PheGapkfkxrtAuPAIpEEn5vKK2HstNt5l3Ybx0bKs2q Flu8NSA0AslOPJMj3ml5m3AcjLmHXuXqSPoeAeUcFRJi65/wchfLeL/8EUJpikzi sSga817Qj0A/VU1WIJ5POQaWz0FvCkxF56YLEyz+eeEx0EW7ybGI -----END CERTIFICATE-----Generated at Tue Jan 27 04:23:13 2026 by rpki-client