This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L4b5xSnfY6Rp5Gm2fEG0wrVh8IU.roa File: L4b5xSnfY6Rp5Gm2fEG0wrVh8IU.roa (raw, json) Hash identifier: S+xP+Xq9OOd9KpQLLJxq/bpdh7q5J3hyne/dnRf1S5c= Subject key identifier: 2F:86:F9:C5:29:DF:63:A4:69:E4:69:B6:7C:41:B4:C2:B5:61:F0:85 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA155DBEAF2D9685594FD6B559096 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L4b5xSnfY6Rp5Gm2fEG0wrVh8IU.roa Signing time: Fri 02 Jan 2026 08:20:55 +0000 ROA not before: Fri 02 Jan 2026 08:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215951 IP address blocks: 37.202.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a1:55:db:ea:f2:d9:68:55:94:fd:6b:55:90:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f86f9c529df63a469e469b67c41b4c2b561f085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:31:b3:c5:24:b7:84:be:f5:41:e2:af:16:15: da:ac:09:7a:2f:96:46:19:85:db:34:3c:75:9e:27: ed:bb:ce:a2:54:d0:5f:82:0f:1f:d2:71:82:f9:32: ab:13:60:dd:ef:5e:78:e0:10:16:09:9d:13:9c:53: 7b:e6:25:08:e8:69:48:c8:fd:4e:60:8b:44:a2:be: 24:98:4e:88:4e:db:ed:28:49:a5:65:ce:88:14:c6: 7a:0c:60:b9:f6:d0:19:0d:96:d1:9f:06:a4:f9:f3: 3e:3e:b7:f4:2a:94:29:0d:df:e4:3d:3d:46:11:4c: f1:a3:ae:84:8f:e3:fa:96:14:61:36:b6:f4:83:6c: 74:ce:8b:2f:64:10:f0:95:7a:66:db:6f:7c:24:41: 0f:82:f4:66:ca:eb:d8:3b:64:31:0b:47:d3:d4:0b: 77:69:60:52:8f:05:8a:af:c0:33:b7:fa:5a:38:40: de:ec:ff:eb:c4:3f:f1:78:19:35:7d:58:77:00:ea: 7a:5d:9c:d9:99:7a:3f:2b:3f:0b:7f:8c:fd:f3:ec: 2a:2e:23:4f:86:85:e4:c4:81:9e:5b:db:3c:97:63: e4:b4:f0:b4:91:57:b0:6d:5f:a5:b7:d7:6f:53:f3: b1:a3:b1:13:eb:e7:54:25:45:61:7c:72:0b:e6:94: aa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:86:F9:C5:29:DF:63:A4:69:E4:69:B6:7C:41:B4:C2:B5:61:F0:85 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L4b5xSnfY6Rp5Gm2fEG0wrVh8IU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.195.0/24 Signature Algorithm: sha256WithRSAEncryption aa:fa:27:d7:cf:34:98:4c:5c:04:d2:23:fa:55:0b:5c:a2:e8: 19:59:e2:10:ea:67:42:c3:01:85:92:04:21:42:1a:09:8f:ac: 2f:e6:4d:c5:56:1d:c6:79:5f:e5:6d:33:e3:6f:22:51:32:d8: 37:27:7b:9a:ee:d4:96:06:61:35:71:f9:97:4e:23:99:2f:74: b7:0e:65:3f:07:e2:62:12:c8:14:b6:44:c9:c1:de:97:76:0a: 9f:4b:3b:ec:b4:a0:06:bb:2b:c7:13:67:e7:3f:71:e9:5d:af: 3c:94:39:ee:22:28:af:e0:83:76:db:7f:4d:7b:6b:a3:da:b7: 06:c0:77:76:46:88:6b:5c:78:d2:ba:1d:1f:06:a5:a6:12:1a: 9f:13:97:3d:82:12:e3:4d:f2:c0:6a:2d:dd:07:9f:79:46:b1: 72:2c:da:fb:d4:97:c9:be:98:11:60:3c:3f:3b:dd:1c:4e:42: 7d:34:3a:1f:4b:30:e1:89:63:2b:28:b1:af:e0:2c:7a:3b:26: c3:05:5f:5c:e9:38:56:85:56:f8:39:e0:90:a5:46:9a:af:f8: 55:f3:3f:ce:e8:0e:47:48:b5:ba:2d:df:70:0b:a6:92:11:16: 02:b5:4c:c5:d0:b8:44:bc:ba:95:52:aa:bf:92:e0:a0:af:af: 1c:96:04:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y6FV2+ry2WhVlP1rVZCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjg2ZjljNTI5ZGY2M2E0NjllNDY5YjY3YzQxYjRjMmI1NjFmMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzGzxSS3hL71QeKvFhXarAl6L5ZG GYXbNDx1niftu86iVNBfgg8f0nGC+TKrE2Dd71544BAWCZ0TnFN75iUI6GlIyP1O YItEor4kmE6ITtvtKEmlZc6IFMZ6DGC59tAZDZbRnwak+fM+Prf0KpQpDd/kPT1G EUzxo66Ej+P6lhRhNrb0g2x0zosvZBDwlXpm2298JEEPgvRmyuvYO2QxC0fT1At3 aWBSjwWKr8Azt/paOEDe7P/rxD/xeBk1fVh3AOp6XZzZmXo/Kz8Lf4z98+wqLiNP hoXkxIGeW9s8l2PktPC0kVewbV+lt9dvU/Oxo7ET6+dUJUVhfHIL5pSq/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC+G+cUp32OkaeRptnxBtMK1YfCFMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTDRiNXhTbmZZNlJwNUdtMmZFRzB3clZoOElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrDMA0G CSqGSIb3DQEBCwUAA4IBAQCq+ifXzzSYTFwE0iP6VQtcougZWeIQ6mdCwwGFkgQh QhoJj6wv5k3FVh3GeV/lbTPjbyJRMtg3J3ua7tSWBmE1cfmXTiOZL3S3DmU/B+Ji EsgUtkTJwd6XdgqfSzvstKAGuyvHE2fnP3HpXa88lDnuIiiv4IN2239Ne2uj2rcG wHd2RohrXHjSuh0fBqWmEhqfE5c9ghLjTfLAai3dB595RrFyLNr71JfJvpgRYDw/ O90cTkJ9NDofSzDhiWMrKLGv4Cx6OybDBV9c6ThWhVb4OeCQpUaar/hV8z/O6A5H SLW6Ld9wC6aSERYCtUzF0LhEvLqVUqq/kuCgr68clgRN -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:52 2026 by rpki-client