This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vOPqt47l9lNKoncWWOR0fRovi14.roa File: vOPqt47l9lNKoncWWOR0fRovi14.roa (raw, json) Hash identifier: +f4/leBi+v7rKE5SEFDE/3UpivRr7YPW3I5QEYEOhd0= Subject key identifier: BC:E3:EA:B7:8E:E5:F6:53:4A:A2:77:16:58:E4:74:7D:1A:2F:8B:5E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB12458BF762BA6CC28CC63CB50ABE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vOPqt47l9lNKoncWWOR0fRovi14.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11878 IP address blocks: 37.202.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:12:45:8b:f7:62:ba:6c:c2:8c:c6:3c:b5:0a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bce3eab78ee5f6534aa2771658e4747d1a2f8b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:54:02:4d:91:e2:1e:6a:e8:b0:1f:f6:60: 9f:f5:1d:df:15:d5:12:5f:9e:61:43:0c:82:76:b4: 0a:0a:ce:0a:a2:5b:26:b0:5a:e9:2d:e3:a2:16:d8: dc:dd:94:30:0d:e3:00:98:39:50:c7:90:73:c2:6f: 8a:76:23:e2:72:ad:8c:e2:41:8b:cc:44:c6:59:1d: 06:ef:64:7a:8e:3c:1a:fd:13:23:c4:b1:ef:c7:14: a5:d4:8f:2c:a0:c6:7b:6f:fe:35:12:0f:ca:46:05: e3:c6:ed:6b:02:e7:67:75:d0:20:5f:6d:92:b9:40: b9:57:c8:6f:de:9d:3e:7c:1b:c0:63:cc:b6:12:9d: 9c:f5:d8:7b:a2:bf:8d:41:25:b8:e6:12:1e:32:3f: aa:be:19:12:b4:17:fd:35:30:e5:ea:88:10:52:2d: 76:3c:fe:4e:90:2d:ab:83:fd:21:9a:37:5f:e9:22: 8b:10:a5:18:13:7b:cd:4d:28:33:37:68:e5:e9:2e: d6:f1:7c:ad:8a:01:6a:0c:6c:cd:c9:ba:cc:16:2c: 7c:de:c5:e8:57:51:0b:08:08:9a:07:d8:a1:2b:10: 5d:5e:89:ef:70:04:ae:33:29:1f:1a:ee:e8:41:94: cd:2e:c7:d5:bc:35:89:a8:a6:ce:ae:81:09:0c:86: 62:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E3:EA:B7:8E:E5:F6:53:4A:A2:77:16:58:E4:74:7D:1A:2F:8B:5E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vOPqt47l9lNKoncWWOR0fRovi14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.204.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:18:cf:1d:19:5f:27:70:54:ef:67:07:57:62:42:3e:97:8c: a3:d3:f1:e8:ef:b4:19:51:c0:6f:14:49:04:24:08:9b:f6:4e: a0:63:34:99:c4:64:c8:dd:aa:a1:47:3e:d1:b1:f2:f2:53:96: bc:27:eb:09:ef:91:35:f6:2c:38:de:1c:b0:45:97:b0:b1:0f: e4:56:93:74:07:fc:94:33:da:7c:27:08:f4:19:0e:3c:7e:c4: af:cf:60:3e:74:80:bd:16:39:1a:9e:68:49:ad:ec:3d:fc:96: 60:e0:4b:89:28:c8:5d:da:39:ab:74:53:5a:7b:32:38:88:8d: 1c:9d:08:51:e5:e5:c7:87:cc:e4:4e:fb:21:b2:a7:d8:c4:0f: 38:28:c2:94:e6:df:51:d3:5d:42:4b:cf:d9:57:15:f6:42:4f: 3a:41:5f:28:7f:25:f6:59:40:b8:b7:e7:06:4e:c0:69:60:02: 25:a4:a9:4a:59:ca:af:26:27:14:2a:a9:a9:21:6e:ff:72:06: 03:42:94:59:94:da:d9:26:39:a8:ff:d3:bf:74:2a:ee:8c:82: 02:b0:73:cb:1d:b4:eb:34:2b:f5:f9:f1:73:58:ac:34:c0:c6: d9:b1:e4:ed:9f:33:f1:db:ae:40:2e:a8:a3:84:62:f1:66:f7: 8a:3e:88:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxJFi/diumzCjMY8tQq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiY2UzZWFiNzhlZTVmNjUzNGFhMjc3MTY1OGU0NzQ3ZDFhMmY4YjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqdUAk2R4h5q6LAf9mCf9R3fFdUS X55hQwyCdrQKCs4KolsmsFrpLeOiFtjc3ZQwDeMAmDlQx5Bzwm+KdiPicq2M4kGL zETGWR0G72R6jjwa/RMjxLHvxxSl1I8soMZ7b/41Eg/KRgXjxu1rAudnddAgX22S uUC5V8hv3p0+fBvAY8y2Ep2c9dh7or+NQSW45hIeMj+qvhkStBf9NTDl6ogQUi12 PP5OkC2rg/0hmjdf6SKLEKUYE3vNTSgzN2jl6S7W8XytigFqDGzNybrMFix83sXo V1ELCAiaB9ihKxBdXonvcASuMykfGu7oQZTNLsfVvDWJqKbOroEJDIZilwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLzj6reO5fZTSqJ3FljkdH0aL4teMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdk9QcXQ0N2w5bE5Lb25jV1dPUjBmUm92aTE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrMMA0G CSqGSIb3DQEBCwUAA4IBAQAdGM8dGV8ncFTvZwdXYkI+l4yj0/Ho77QZUcBvFEkE JAib9k6gYzSZxGTI3aqhRz7RsfLyU5a8J+sJ75E19iw43hywRZewsQ/kVpN0B/yU M9p8Jwj0GQ48fsSvz2A+dIC9FjkanmhJrew9/JZg4EuJKMhd2jmrdFNaezI4iI0c nQhR5eXHh8zkTvshsqfYxA84KMKU5t9R011CS8/ZVxX2Qk86QV8ofyX2WUC4t+cG TsBpYAIlpKlKWcqvJicUKqmpIW7/cgYDQpRZlNrZJjmo/9O/dCrujIICsHPLHbTr NCv1+fFzWKw0wMbZseTtnzPx265ALqijhGLxZveKPogY -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:59 2026 by rpki-client