This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/sK7iWd_IWdtBYlzIusErtM7RZEo.roa File: sK7iWd_IWdtBYlzIusErtM7RZEo.roa (raw, json) Hash identifier: E9yaNEt+sG4ikRZ0VOMP720zInpE25towLQ25YYLJFA= Subject key identifier: B0:AE:E2:59:DF:C8:59:DB:41:62:5C:C8:BA:C1:2B:B4:CE:D1:64:4A Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294 Certificate serial: 019B7CEE2A112F59465BBC4658187DFD33E0 Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/sK7iWd_IWdtBYlzIusErtM7RZEo.roa Signing time: Fri 02 Jan 2026 04:19:01 +0000 ROA not before: Fri 02 Jan 2026 04:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57951 IP address blocks: 37.188.88.0/21 maxlen: 21 2a00:c340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2a:11:2f:59:46:5b:bc:46:58:18:7d:fd:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294 Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0aee259dfc859db41625cc8bac12bb4ced1644a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:22:62:63:11:ff:34:c2:68:70:53:cf:00: c2:a4:ab:90:f0:2f:d1:6a:0b:09:d0:23:fc:77:58: 9a:5e:bb:8e:2c:fb:91:08:7a:38:13:5c:9e:cc:52: 28:ae:ed:c4:ce:bc:2d:81:32:c9:93:bc:7d:a2:f1: 03:5c:92:49:76:08:5e:27:03:a2:41:e3:d1:e4:6a: 87:2a:4a:78:e5:6b:9d:c7:83:ed:49:75:06:5a:bc: 6b:44:8c:87:dd:7b:75:69:4f:25:ff:18:67:0c:02: 0a:a6:57:63:40:af:d5:b5:f8:1a:3c:1c:8f:07:fa: 69:28:40:58:8a:36:65:16:2a:ee:90:3c:2b:da:12: ee:95:2c:1b:7e:db:88:8b:e6:27:e4:fe:1f:b4:7f: f3:ab:b3:2c:9b:0d:58:10:fd:61:e6:4b:67:7f:b5: fc:24:d6:13:b1:50:e5:6e:03:c5:d1:e4:f8:88:9d: d8:e1:f6:32:11:d5:93:42:e2:1c:fa:e9:47:cb:ab: 1f:53:1d:f6:81:0d:85:4a:84:23:d5:d6:8f:ac:9f: 04:68:a6:a7:57:4f:8e:70:5c:ac:08:e4:13:e8:1f: 32:b5:06:4b:14:ac:78:f0:0e:2a:88:bb:76:cb:9e: f4:e7:64:22:00:a3:2f:0a:11:57:d7:c1:f7:b7:da: 86:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AE:E2:59:DF:C8:59:DB:41:62:5C:C8:BA:C1:2B:B4:CE:D1:64:4A X509v3 Authority Key Identifier: keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/sK7iWd_IWdtBYlzIusErtM7RZEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.188.88.0/21 IPv6: 2a00:c340::/32 Signature Algorithm: sha256WithRSAEncryption b1:17:aa:0c:5a:f8:87:a1:76:4f:cd:f4:33:f5:96:46:67:19: 09:a7:c1:e5:02:b5:d5:04:cc:6b:fa:4f:37:70:f9:8e:f5:14: c6:ca:06:55:2a:3d:69:dd:1b:81:aa:17:1c:a3:2b:f3:af:13: 5d:df:fa:04:63:c2:d6:81:4b:44:a2:03:eb:46:50:3c:c6:78: 6a:2f:ad:f7:67:88:11:ab:aa:79:6d:73:f7:66:87:5f:6e:08: 8a:bf:ca:25:37:7b:c1:92:59:cf:f8:cb:34:2b:dd:48:74:f3: 14:10:52:11:64:f1:11:81:eb:e6:ab:5f:52:62:d5:64:fc:ee: 97:77:50:a0:44:03:11:b7:96:c9:6b:cf:4d:0f:93:41:f7:4f: 26:3e:29:7c:4f:4f:c2:60:90:66:e0:af:b1:71:71:2a:2b:4b: 6c:48:6c:9c:88:e0:0b:18:f5:34:22:78:37:35:a3:22:cb:34: a0:5e:d4:d3:f6:5b:4f:eb:8a:2d:62:87:ca:33:3b:38:29:bd: b1:76:86:14:89:00:3e:35:78:0d:ab:fd:95:a9:e5:1d:25:d9: 7c:7d:e6:2e:37:4d:44:fd:c0:f3:81:bc:23:c7:c7:46:1b:5f: 05:52:7f:54:b1:e0:f4:b3:55:70:d4:bf:fd:c7:77:44:9a:5e: 14:26:d9:17 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87ioRL1lGW7xGWBh9/TPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTI5Y2NiYjhjMjQxYTljOWIxZmYyMDczMGEyNjQ5NTZi NTAyOTQwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGFlZTI1OWRmYzg1OWRiNDE2MjVjYzhiYWMxMmJiNGNlZDE2NDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6kiYmMR/zTCaHBTzwDCpKuQ8C/R agsJ0CP8d1iaXruOLPuRCHo4E1yezFIoru3EzrwtgTLJk7x9ovEDXJJJdgheJwOi QePR5GqHKkp45Wudx4PtSXUGWrxrRIyH3Xt1aU8l/xhnDAIKpldjQK/VtfgaPByP B/ppKEBYijZlFirukDwr2hLulSwbftuIi+Yn5P4ftH/zq7Msmw1YEP1h5ktnf7X8 JNYTsVDlbgPF0eT4iJ3Y4fYyEdWTQuIc+ulHy6sfUx32gQ2FSoQj1daPrJ8EaKan V0+OcFysCOQT6B8ytQZLFKx48A4qiLt2y57052QiAKMvChFX18H3t9qGhwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLCu4lnfyFnbQWJcyLrBK7TO0WRKMB8GA1UdIwQY MBaAFPoSnMu4wkGpybH/IHMKJklWtQKUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oS2N5N2pDUWFuSnNmOGdjd29tU1ZhMUFwUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvMzAwODM5LTE5MmUtNGVhOS05OWYy LTE4ZmQ4NTZhNThiNy8xL3NLN2lXZF9JV2R0Qllsekl1c0VydE03UlpFby5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGMvMzAwODM5LTE5MmUtNGVhOS05OWYyLTE4ZmQ4NTZhNThi Ny8xLzEtaEtjeTdqQ1FhbkpzZjhnY3dvbVNWYTFBcFEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAMlvFgw DQQCAAIwBwMFACoAw0AwDQYJKoZIhvcNAQELBQADggEBALEXqgxa+Iehdk/N9DP1 lkZnGQmnweUCtdUEzGv6Tzdw+Y71FMbKBlUqPWndG4GqFxyjK/OvE13f+gRjwtaB S0SiA+tGUDzGeGovrfdniBGrqnltc/dmh19uCIq/yiU3e8GSWc/4yzQr3Uh08xQQ UhFk8RGB6+arX1Ji1WT87pd3UKBEAxG3lslrz00Pk0H3TyY+KXxPT8JgkGbgr7Fx cSorS2xIbJyI4AsY9TQieDc1oyLLNKBe1NP2W0/rii1ih8ozOzgpvbF2hhSJAD41 eA2r/ZWp5R0l2Xx95i43TUT9wPOBvCPHx0YbXwVSf1Sx4PSzVXDUv/3Hd0SaXhQm 2Rc= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:49 2026 by rpki-client