This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5romN8wGqFDOzczkctFm5Ekw5UE.roa File: 5romN8wGqFDOzczkctFm5Ekw5UE.roa (raw, json) Hash identifier: vRB8bpDWIKCdyIvCxIOPfhiIaJF+wmz91rEhtR9NVGE= Subject key identifier: E6:BA:26:37:CC:06:A8:50:CE:CD:CC:E4:72:D1:66:E4:49:30:E5:41 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83AEAE66F08D78AF86D093F11F471D Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5romN8wGqFDOzczkctFm5Ekw5UE.roa Signing time: Fri 02 Jan 2026 16:21:34 +0000 ROA not before: Fri 02 Jan 2026 16:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201825 IP address blocks: 37.230.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ae:ae:66:f0:8d:78:af:86:d0:93:f1:1f:47:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6ba2637cc06a850cecdcce472d166e44930e541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:3f:d0:9e:49:18:ec:a9:1f:29:0c:cc:4a: 39:df:65:22:17:6f:f5:46:37:23:2a:05:b6:8b:cb: 60:43:bf:17:90:d1:64:c7:e5:ff:54:b2:e1:33:89: 81:df:68:53:ed:d0:59:a3:bc:60:92:aa:f0:28:75: b4:c4:a6:2b:fe:cd:ea:77:00:52:09:4b:18:b8:a1: 36:81:9b:de:f1:96:5b:2f:b4:c2:ac:aa:85:7b:2d: 6d:97:65:c5:89:f3:58:17:45:38:33:8a:b1:1c:5b: 84:43:21:18:aa:e5:15:f5:e6:56:a9:c0:66:e6:ae: 08:29:41:a4:93:ab:6a:54:e3:60:fa:2f:43:b9:b5: 5a:c5:0a:02:c8:2d:ca:21:47:1c:6f:f2:3a:bb:7d: d9:d4:ac:67:29:4a:0a:13:e0:08:3b:d9:5e:a7:8c: c2:3b:96:e8:dd:7b:fe:e3:27:d5:c0:35:8b:6a:bf: d9:3c:a0:eb:b8:00:4e:5e:54:2f:75:75:8c:e9:ed: 0c:cc:7d:e0:68:e9:67:90:f0:a4:a3:36:f8:4a:43: 1a:2c:d2:a2:99:2c:35:9e:b6:0a:c6:ee:6f:04:67: 01:79:aa:ac:a4:98:d2:1d:ec:60:13:c8:dc:0a:78: 1b:9d:68:9b:4b:1a:3e:90:94:90:38:4d:00:d0:96: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BA:26:37:CC:06:A8:50:CE:CD:CC:E4:72:D1:66:E4:49:30:E5:41 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5romN8wGqFDOzczkctFm5Ekw5UE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.237.0/24 Signature Algorithm: sha256WithRSAEncryption 13:ec:ff:7b:16:c5:10:a4:99:7e:85:b1:6f:0c:30:b1:27:4a: 84:7e:e3:55:0b:10:26:c0:da:ee:4a:cd:3a:0f:c9:80:68:6c: f0:9b:19:5f:d9:31:61:e3:0f:74:43:a5:48:eb:7a:83:a1:29: 8b:ac:fd:fa:7a:ea:fb:0d:cd:f1:15:6c:75:15:2d:64:cb:56: 6d:ff:c5:4c:eb:00:ea:f6:81:a3:1f:c6:51:72:09:e3:62:8b: 14:51:dc:79:c6:1d:0e:e1:91:55:93:65:e4:6e:1a:1b:94:ed: 31:c5:b7:ae:95:9e:ea:ce:84:0f:e3:b4:be:ec:95:e7:06:08: 4a:70:33:10:99:2c:af:f3:cf:0c:03:ed:05:2b:ab:cf:39:a8: 0b:d1:cb:9d:d7:57:67:27:4d:d9:42:3c:aa:a5:a8:4c:ef:bb: fb:7b:6a:4c:40:48:21:56:fa:a0:97:f7:63:d5:87:82:0d:0e: f0:de:6d:55:a3:d9:02:bf:85:96:d5:d5:c8:f2:b6:86:25:48: dc:22:d0:12:a7:1b:f3:8e:ea:87:a2:6e:b6:38:4f:80:83:53: 4b:1e:7d:c6:0e:44:31:72:f9:e9:a8:64:1d:3e:c5:2e:18:15: 82:3f:1a:ab:4a:d9:0e:92:68:cd:13:5e:51:72:9d:39:06:5c: f1:50:9f:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g66uZvCNeK+G0JPxH0cdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmJhMjYzN2NjMDZhODUwY2VjZGNjZTQ3MmQxNjZlNDQ5MzBlNTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Y/0J5JGOypHykMzEo532UiF2/1 RjcjKgW2i8tgQ78XkNFkx+X/VLLhM4mB32hT7dBZo7xgkqrwKHW0xKYr/s3qdwBS CUsYuKE2gZve8ZZbL7TCrKqFey1tl2XFifNYF0U4M4qxHFuEQyEYquUV9eZWqcBm 5q4IKUGkk6tqVONg+i9DubVaxQoCyC3KIUccb/I6u33Z1KxnKUoKE+AIO9lep4zC O5bo3Xv+4yfVwDWLar/ZPKDruABOXlQvdXWM6e0MzH3gaOlnkPCkozb4SkMaLNKi mSw1nrYKxu5vBGcBeaqspJjSHexgE8jcCngbnWibSxo+kJSQOE0A0JYptQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOa6JjfMBqhQzs3M5HLRZuRJMOVBMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvNXJvbU44d0dxRkRPemN6a2N0Rm01RWt3NVVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJebtMA0G CSqGSIb3DQEBCwUAA4IBAQAT7P97FsUQpJl+hbFvDDCxJ0qEfuNVCxAmwNruSs06 D8mAaGzwmxlf2TFh4w90Q6VI63qDoSmLrP36eur7Dc3xFWx1FS1ky1Zt/8VM6wDq 9oGjH8ZRcgnjYosUUdx5xh0O4ZFVk2XkbhoblO0xxbeulZ7qzoQP47S+7JXnBghK cDMQmSyv888MA+0FK6vPOagL0cud11dnJ03ZQjyqpahM77v7e2pMQEghVvqgl/dj 1YeCDQ7w3m1Vo9kCv4WW1dXI8raGJUjcItASpxvzjuqHom62OE+Ag1NLHn3GDkQx cvnpqGQdPsUuGBWCPxqrStkOkmjNE15Rcp05BlzxUJ/w -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:35 2026 by rpki-client