This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/BIg9g8urjWzblnNO_lVEgCU_0L4.roa File: BIg9g8urjWzblnNO_lVEgCU_0L4.roa (raw, json) Hash identifier: Zkf0cuxdTPBJNDfyoYR/TqE/qjZVNjVMgcTyzgopEr0= Subject key identifier: 04:88:3D:83:CB:AB:8D:6C:DB:96:73:4E:FE:55:44:80:25:3F:D0:BE Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b Certificate serial: 019B79108F5BB1969CCC152EB5B06D8E8096 Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/BIg9g8urjWzblnNO_lVEgCU_0L4.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 37.228.121.0/24 maxlen: 24 37.228.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8f:5b:b1:96:9c:cc:15:2e:b5:b0:6d:8e:80:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04883d83cbab8d6cdb96734efe554480253fd0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:2b:c0:ce:6b:87:c1:84:3c:45:21:cf:ae: 84:1c:8a:5d:15:38:cd:2f:35:cd:04:a3:d6:2d:6d: ee:9a:b7:32:c1:85:04:93:38:e9:60:97:00:94:cf: 4d:44:63:aa:33:a4:a4:28:4d:f0:b2:be:9e:b0:78: d2:51:03:09:f0:ab:3e:dc:7d:44:8b:95:61:22:4d: 7a:65:e4:b0:0f:6a:43:d8:b7:9b:63:cf:3c:c2:a1: 8c:7c:49:c6:18:40:32:a5:4d:a8:fe:ac:97:c6:11: 03:b4:bd:15:b8:06:d6:be:63:d9:56:3f:25:2d:00: 9f:9a:f9:e4:ae:a0:24:56:a1:5a:79:19:27:ce:24: f5:39:d4:e5:63:51:d1:19:5e:01:b5:7a:4a:a3:46: 40:26:83:44:c5:25:57:55:4f:75:78:9c:82:43:1e: 3b:b5:72:32:a4:a4:67:91:f7:ec:11:98:36:28:d1: e4:55:90:72:50:03:8a:99:b1:62:26:a1:75:ec:01: fa:22:4e:15:74:1a:06:be:b3:4d:0b:a6:22:96:5a: ef:ce:db:da:18:a7:0d:d8:9f:fa:a6:db:82:db:dc: 63:8a:bd:d8:2a:8e:d2:d0:4a:19:27:33:3e:85:a2: 67:20:12:cd:b2:83:a4:0d:81:7b:1d:6e:e6:34:4d: fb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:88:3D:83:CB:AB:8D:6C:DB:96:73:4E:FE:55:44:80:25:3F:D0:BE X509v3 Authority Key Identifier: keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/BIg9g8urjWzblnNO_lVEgCU_0L4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.228.121.0/24 37.228.126.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:cd:bd:75:26:7b:37:09:a0:ca:86:97:16:6e:bf:e9:a8:60: 4b:e5:5c:94:4e:5a:7e:37:d2:0d:58:76:64:59:3c:88:84:73: 42:fe:27:bd:b3:f6:ea:05:06:a4:d2:a2:e3:c5:29:25:02:15: 63:06:0d:45:62:b9:22:84:23:ee:99:05:6c:12:df:38:fe:07: 0f:c9:6a:1e:e6:0d:1d:92:d1:b3:a8:b1:5f:01:48:a5:d8:f0: c5:ab:a9:0d:c8:33:d2:3e:8a:30:17:25:4f:6a:42:4a:7a:03: 15:40:33:98:05:ac:32:8c:91:9e:13:f8:d1:fd:bb:56:37:89: 82:de:19:06:58:f1:b7:c9:4d:20:15:ed:88:39:ed:df:65:6b: ef:6b:a6:93:da:dc:0b:3d:d5:05:8b:28:a2:7f:6a:12:09:78: a7:df:bd:e7:fe:3d:17:f6:99:83:f9:f7:32:c8:23:60:d8:c2: 1b:16:af:32:eb:79:72:ec:0f:67:d3:31:07:f1:3d:57:f7:26: de:7e:87:89:a0:dc:1c:bd:d7:72:bd:d6:7a:d7:5c:32:2e:5f: a3:1d:d0:d4:63:64:3e:3e:e1:72:02:ce:dc:a9:63:2b:d4:e4: a8:3b:d2:71:82:3c:4a:a7:0f:a3:2e:9e:d1:03:10:36:47:da: 7c:cb:6b:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EI9bsZaczBUutbBtjoCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGI4MjVmMzZlOWNjMzMwMzE1Yzk0MGRlODAwY2JhYmNl MzM5N2IwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDg4M2Q4M2NiYWI4ZDZjZGI5NjczNGVmZTU1NDQ4MDI1M2ZkMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTYrwM5rh8GEPEUhz66EHIpdFTjN LzXNBKPWLW3umrcywYUEkzjpYJcAlM9NRGOqM6SkKE3wsr6esHjSUQMJ8Ks+3H1E i5VhIk16ZeSwD2pD2LebY888wqGMfEnGGEAypU2o/qyXxhEDtL0VuAbWvmPZVj8l LQCfmvnkrqAkVqFaeRknziT1OdTlY1HRGV4BtXpKo0ZAJoNExSVXVU91eJyCQx47 tXIypKRnkffsEZg2KNHkVZByUAOKmbFiJqF17AH6Ik4VdBoGvrNNC6Yillrvztva GKcN2J/6ptuC29xjir3YKo7S0EoZJzM+haJnIBLNsoOkDYF7HW7mNE377wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFASIPYPLq41s25ZzTv5VRIAlP9C+MB8GA1UdIwQY MBaAFMmLgl826cwzAxXJQN6ADLq84zl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUt Yjg5YTUxMWMzYmJkLzEvQklnOWc4dXJqV3pibG5OT19sVkVnQ1VfMEw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUtYjg5YTUxMWMzYmJk LzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJeR5AwQA JeR+MA0GCSqGSIb3DQEBCwUAA4IBAQBMzb11Jns3CaDKhpcWbr/pqGBL5VyUTlp+ N9INWHZkWTyIhHNC/ie9s/bqBQak0qLjxSklAhVjBg1FYrkihCPumQVsEt84/gcP yWoe5g0dktGzqLFfAUil2PDFq6kNyDPSPoowFyVPakJKegMVQDOYBawyjJGeE/jR /btWN4mC3hkGWPG3yU0gFe2IOe3fZWvva6aT2twLPdUFiyiif2oSCXin373n/j0X 9pmD+fcyyCNg2MIbFq8y63ly7A9n0zEH8T1X9ybefoeJoNwcvddyvdZ611wyLl+j HdDUY2Q+PuFyAs7cqWMr1OSoO9JxgjxKpw+jLp7RAxA2R9p8y2uB -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:36 2026 by rpki-client