This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2J37GDvebVa-GYMYju9keYBxUDc.roa File: 2J37GDvebVa-GYMYju9keYBxUDc.roa (raw, json) Hash identifier: an57s/zAjYuoy6qYTQACgf5/kwTjlNkZFkhCxXvH6m0= Subject key identifier: D8:9D:FB:18:3B:DE:6D:56:BE:19:83:18:8E:EF:64:79:80:71:50:37 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910BAD1F91353A501783732A0AC3DA9 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2J37GDvebVa-GYMYju9keYBxUDc.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215290 IP address blocks: 2a12:bec4:10e0::/44 maxlen: 48 2a12:bec4:1130::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ba:d1:f9:13:53:a5:01:78:37:32:a0:ac:3d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d89dfb183bde6d56be1983188eef647980715037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:0a:12:e1:71:14:fd:24:44:48:3a:f8:51: 14:6a:0f:82:ea:02:9a:ea:4d:79:35:26:ba:45:6f: b4:95:18:5c:1d:29:f0:6f:1f:cd:1b:13:ee:1b:7a: ab:ad:e6:1a:f8:22:3d:e8:b8:03:49:ed:d6:2d:2d: 6d:36:28:cb:4b:17:e8:e3:e9:d1:72:b5:ab:26:30: 42:4e:6e:33:0e:8c:f5:77:8c:25:ef:2d:57:cf:ea: 8a:40:28:6c:ed:0c:d9:d7:9e:79:1f:c7:e4:14:b9: fb:0f:75:7f:98:bd:2f:2e:51:c7:4b:f0:2a:2a:a7: 83:da:40:03:11:1d:29:72:33:86:60:4d:d3:2c:59: 45:2b:9b:18:03:9f:8f:eb:c7:96:55:86:b2:83:75: c8:83:e2:9a:2d:5f:d3:fd:be:f4:ba:e7:c8:c4:ff: 5a:fe:f6:7a:0b:96:55:5c:22:a2:c7:d9:43:99:b1: d0:dc:dd:a5:29:25:9a:0c:6e:f3:79:18:ba:15:d7: df:4d:68:5b:b9:4f:ae:df:f0:91:71:c9:ef:93:61: 32:ff:3f:e6:c9:b8:8a:89:e5:db:1d:15:cd:4f:8a: 33:37:e2:69:e6:c8:76:f6:f8:4a:30:cd:dc:47:c5: 97:c3:f1:b1:c8:6f:94:72:e1:a0:59:02:d9:df:d1: 3f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9D:FB:18:3B:DE:6D:56:BE:19:83:18:8E:EF:64:79:80:71:50:37 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2J37GDvebVa-GYMYju9keYBxUDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:10e0::/44 2a12:bec4:1130::/44 Signature Algorithm: sha256WithRSAEncryption aa:06:25:35:28:bd:4a:98:5f:ad:59:ee:1d:b6:09:71:68:35: 89:a3:98:4f:db:df:45:dc:00:30:b9:9f:ea:7d:b4:19:99:51: ab:26:26:66:96:17:07:b6:4d:55:56:e5:47:a5:ae:1a:f0:1d: fc:58:b0:c7:62:08:b9:fb:65:bd:f0:ca:b1:c4:58:6e:f0:8b: 46:a9:7d:ab:a9:69:98:df:a3:9d:84:8c:34:2d:74:40:d2:03: f2:a5:9a:d7:f6:26:46:d6:59:d6:68:c9:4b:8d:62:5e:36:32: 55:7d:ca:42:0b:22:ed:85:9a:01:dc:9d:84:9d:01:22:41:fb: 8b:97:e5:51:9c:e2:d9:4f:21:79:42:c0:ed:66:38:19:40:5b: ec:2d:34:2e:4a:1a:24:80:a6:4f:55:ec:b6:c1:8d:73:36:5c: 96:43:a4:e0:fa:25:59:d6:ca:2f:53:c0:d2:4b:bb:4c:20:a6: d1:11:72:d5:e8:b0:78:4d:85:42:9d:c8:3e:8d:1d:15:fc:de: ef:1e:d0:20:64:23:d0:28:9a:8c:f7:30:b2:45:dd:aa:91:8c: e1:d4:2c:84:bf:59:04:2b:88:68:3b:c3:57:18:80:bc:b9:72: 3e:28:7d:25:00:5b:d5:77:73:49:80:ba:bb:17:ce:7d:bc:41: 94:ba:d3:e8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ELrR+RNTpQF4NzKgrD2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODlkZmIxODNiZGU2ZDU2YmUxOTgzMTg4ZWVmNjQ3OTgwNzE1MDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqQKEuFxFP0kREg6+FEUag+C6gKa 6k15NSa6RW+0lRhcHSnwbx/NGxPuG3qrreYa+CI96LgDSe3WLS1tNijLSxfo4+nR crWrJjBCTm4zDoz1d4wl7y1Xz+qKQChs7QzZ1555H8fkFLn7D3V/mL0vLlHHS/Aq KqeD2kADER0pcjOGYE3TLFlFK5sYA5+P68eWVYayg3XIg+KaLV/T/b70uufIxP9a /vZ6C5ZVXCKix9lDmbHQ3N2lKSWaDG7zeRi6FdffTWhbuU+u3/CRccnvk2Ey/z/m ybiKieXbHRXNT4ozN+Jp5sh29vhKMM3cR8WXw/GxyG+UcuGgWQLZ39E/dQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNid+xg73m1WvhmDGI7vZHmAcVA3MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMkozN0dEdmViVmEtR1lNWWp1OWtlWUJ4VURjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+xBDg AwcEKhK+xBEwMA0GCSqGSIb3DQEBCwUAA4IBAQCqBiU1KL1KmF+tWe4dtglxaDWJ o5hP299F3AAwuZ/qfbQZmVGrJiZmlhcHtk1VVuVHpa4a8B38WLDHYgi5+2W98Mqx xFhu8ItGqX2rqWmY36OdhIw0LXRA0gPypZrX9iZG1lnWaMlLjWJeNjJVfcpCCyLt hZoB3J2EnQEiQfuLl+VRnOLZTyF5QsDtZjgZQFvsLTQuShokgKZPVey2wY1zNlyW Q6Tg+iVZ1sovU8DSS7tMIKbREXLV6LB4TYVCncg+jR0V/N7vHtAgZCPQKJqM9zCy Rd2qkYzh1CyEv1kEK4hoO8NXGIC8uXI+KH0lAFvVd3NJgLq7F859vEGUutPo -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:21 2026 by rpki-client