This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/37DphKuZfGTR2OxLvLU4Dft8uEo.roa File: 37DphKuZfGTR2OxLvLU4Dft8uEo.roa (raw, json) Hash identifier: elUGCMfkzo3RIzRHIYBYJxXm6Hp7OUvq5N29WG1Fifg= Subject key identifier: DF:B0:E9:84:AB:99:7C:64:D1:D8:EC:4B:BC:B5:38:0D:FB:7C:B8:4A Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019B7AC9512BF838A446370E820CC557FB19 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/37DphKuZfGTR2OxLvLU4Dft8uEo.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216346 IP address blocks: 109.230.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:51:2b:f8:38:a4:46:37:0e:82:0c:c5:57:fb:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfb0e984ab997c64d1d8ec4bbcb5380dfb7cb84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:4a:da:dd:96:ed:65:6b:e3:61:5c:9c:9a: ca:ed:42:08:bb:d7:82:fd:5a:3f:b6:d6:52:1a:53: ac:70:77:41:19:65:d7:50:1d:9d:8d:4e:01:35:45: 37:67:23:c2:2d:38:d7:61:2a:ea:46:47:53:c7:1a: 0b:e9:6f:e6:a8:c5:a9:91:60:02:98:82:f1:c1:06: 27:5e:35:b4:15:c8:3a:27:b9:55:3e:3e:17:5f:59: 0e:71:b4:0f:12:c0:5b:99:1d:fa:a0:ac:dc:da:a9: 06:42:00:94:90:e7:fb:55:d1:02:bc:fe:41:c1:dd: 01:5f:e3:7f:59:74:6a:89:b8:fb:43:96:09:fb:88: 37:87:fc:a8:66:aa:42:05:ed:74:9b:26:96:81:ce: c1:26:78:fa:f5:e6:60:2b:e4:a6:06:2b:68:ce:90: c5:5e:c6:eb:8c:b2:78:20:05:48:a1:61:6c:7d:0d: a4:40:59:f2:79:4e:a3:8b:4a:fa:0b:fd:1e:07:a2: 98:e8:d6:71:0c:5d:e1:5e:f8:b4:15:53:1f:32:46: 54:6d:1b:92:5b:bd:57:66:a1:bb:6b:80:a8:79:07: 7d:0e:2e:b2:9d:5d:92:08:f8:fd:71:d0:8a:0c:a4: 23:c2:b1:94:73:ca:84:0a:fc:ee:ef:c5:ea:59:4a: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B0:E9:84:AB:99:7C:64:D1:D8:EC:4B:BC:B5:38:0D:FB:7C:B8:4A X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/37DphKuZfGTR2OxLvLU4Dft8uEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.230.113.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:78:ae:5d:38:c5:85:b3:8e:cf:a6:87:74:b6:56:bb:4e:b7: 48:60:a7:0e:99:59:75:df:b5:bb:2b:40:e3:24:5b:c1:4d:49: f2:5a:c1:ed:08:88:e9:63:40:cb:42:bc:b4:78:b7:6e:0e:f5: d7:86:2e:aa:b6:a4:4b:94:fb:cb:79:0e:db:8e:4a:21:9b:e2: d0:b8:c0:58:29:6d:9d:4d:5c:63:cc:d7:0f:cd:6a:08:b6:9e: a6:26:25:36:42:ea:20:b0:7e:7c:48:2a:3c:f9:c3:b7:e3:db: 76:3f:02:82:06:b3:7f:90:8b:e7:e3:b2:3b:6b:2f:39:3f:c7: 0e:74:0a:fb:b8:42:cc:8b:16:01:fc:ff:fd:a4:7d:80:9d:ba: de:14:86:cb:fe:92:67:ff:53:c1:81:45:a3:76:ae:f1:bb:58: 61:68:9f:ca:72:ad:09:eb:28:01:7a:d7:8a:be:20:e6:ea:0f: b9:c0:39:85:08:23:62:15:59:ad:dc:79:58:3a:6e:b8:1e:f3: 71:39:f0:20:59:69:40:7b:ce:cb:d8:89:09:c7:a4:fa:96:06: 77:9f:36:66:c5:42:71:13:64:fe:7e:9d:2e:e0:c2:80:23:e0: e3:63:8c:71:c6:d4:e2:ab:34:c6:f7:ce:37:52:ee:6f:11:91: 07:bc:7a:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yVEr+DikRjcOggzFV/sZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmIwZTk4NGFiOTk3YzY0ZDFkOGVjNGJiY2I1MzgwZGZiN2NiODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3ZK2t2W7WVr42FcnJrK7UIIu9eC /Vo/ttZSGlOscHdBGWXXUB2djU4BNUU3ZyPCLTjXYSrqRkdTxxoL6W/mqMWpkWAC mILxwQYnXjW0Fcg6J7lVPj4XX1kOcbQPEsBbmR36oKzc2qkGQgCUkOf7VdECvP5B wd0BX+N/WXRqibj7Q5YJ+4g3h/yoZqpCBe10myaWgc7BJnj69eZgK+SmBitozpDF XsbrjLJ4IAVIoWFsfQ2kQFnyeU6ji0r6C/0eB6KY6NZxDF3hXvi0FVMfMkZUbRuS W71XZqG7a4CoeQd9Di6ynV2SCPj9cdCKDKQjwrGUc8qECvzu78XqWUocDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+w6YSrmXxk0djsS7y1OA37fLhKMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvMzdEcGhLdVpmR1RSMk94THZMVTREZnQ4dUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbeZxMA0G CSqGSIb3DQEBCwUAA4IBAQB9eK5dOMWFs47Ppod0tla7TrdIYKcOmVl137W7K0Dj JFvBTUnyWsHtCIjpY0DLQry0eLduDvXXhi6qtqRLlPvLeQ7bjkohm+LQuMBYKW2d TVxjzNcPzWoItp6mJiU2QuogsH58SCo8+cO349t2PwKCBrN/kIvn47I7ay85P8cO dAr7uELMixYB/P/9pH2AnbreFIbL/pJn/1PBgUWjdq7xu1hhaJ/Kcq0J6ygBeteK viDm6g+5wDmFCCNiFVmt3HlYOm64HvNxOfAgWWlAe87L2IkJx6T6lgZ3nzZmxUJx E2T+fp0u4MKAI+DjY4xxxtTiqzTG9843Uu5vEZEHvHqS -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:26 2026 by rpki-client