This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa File: 7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa (raw, json) Hash identifier: S6k/+gtFBCC3b9KfwT6tZ5Xz1q+2dXqGcNdYKCd9ehg= Subject key identifier: ED:22:0C:BE:3D:64:E7:1B:0D:D6:1D:F1:91:2E:7F:0C:C5:B9:CB:84 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C808073BD10EF0947620681145AFB97 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201909 IP address blocks: 37.35.53.0/24 maxlen: 24 37.35.55.0/24 maxlen: 24 91.235.122.0/24 maxlen: 24 178.157.111.0/24 maxlen: 24 188.119.158.0/24 maxlen: 24 188.119.159.0/24 maxlen: 24 188.119.162.0/24 maxlen: 24 188.119.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:80:73:bd:10:ef:09:47:62:06:81:14:5a:fb:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed220cbe3d64e71b0dd61df1912e7f0cc5b9cb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:2d:b2:a9:f2:42:5b:30:e3:da:e9:15:f4: e4:fb:a3:89:79:01:2f:32:11:ef:01:ee:41:d8:7d: 9a:e3:d4:8b:5c:30:87:c0:31:d3:ed:46:68:dc:3b: 75:a0:bb:95:ec:72:32:af:fd:49:06:09:02:be:60: 5a:e1:fa:c1:52:0b:58:81:46:26:97:de:ce:70:5b: 37:cc:87:f0:c0:17:47:fa:e1:90:ba:a8:7a:50:da: 5b:0a:c6:e8:f8:f1:24:1c:b6:79:87:e2:ce:ac:a7: be:04:ce:8e:86:30:b3:49:10:f3:94:22:dd:bc:0c: b0:8e:60:6d:99:1a:81:88:a3:2f:8f:2c:4e:7f:70: d7:92:c7:5d:84:24:55:bb:36:3f:b0:5a:ed:ec:35: fb:60:9d:e4:99:30:db:e7:dc:fb:fe:25:a5:cc:ec: 5a:2a:15:31:0b:b5:10:a1:45:36:a3:ea:2e:e6:14: 69:97:be:e0:ac:ed:73:bb:c6:cb:a2:9b:d1:76:00: a9:7d:58:40:0d:76:c2:2b:99:d1:46:e4:b0:ab:9b: dd:3d:b3:c0:e5:9f:09:9e:8e:a3:5b:ea:05:25:87: 86:6c:e9:b5:6d:4a:99:c8:2b:38:cf:72:fa:9c:d8: 7c:5b:a4:22:c2:42:32:53:98:30:fd:21:60:e2:3f: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:22:0C:BE:3D:64:E7:1B:0D:D6:1D:F1:91:2E:7F:0C:C5:B9:CB:84 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/7SIMvj1k5xsN1h3xkS5_DMW5y4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.35.53.0/24 37.35.55.0/24 91.235.122.0/24 178.157.111.0/24 188.119.158.0/23 188.119.162.0/23 Signature Algorithm: sha256WithRSAEncryption 32:c9:eb:57:24:d7:e8:6f:37:9e:15:c7:75:34:36:36:be:3f: 02:03:77:27:ed:a3:6b:65:5d:6d:c0:26:a2:c9:ee:79:aa:2a: 8d:f1:52:32:50:d2:58:15:05:47:b8:0d:50:2f:dc:39:b4:1d: 75:e0:63:91:a5:9d:3e:88:72:3d:50:18:ae:5a:f5:21:43:a3: 51:2e:19:d1:47:b4:a0:40:49:8e:29:2b:c6:30:d4:21:6f:39: af:27:05:16:57:40:45:b8:9f:f9:3d:b3:49:2c:d9:28:48:13: 45:e9:d5:21:97:11:d0:dd:9b:31:65:82:c8:d5:2c:bb:4f:a1: 73:f4:90:fd:9c:04:af:90:3c:c0:9f:6a:e4:42:b7:b5:a5:79: 19:a1:a1:e9:9f:db:ef:4c:57:02:8c:2f:e8:74:d0:23:5b:f2: 88:49:d6:52:d5:f6:0d:b4:14:68:70:01:10:6d:a3:23:93:bc: b0:41:17:d0:4b:f9:ae:73:98:22:19:99:dc:35:62:8a:7c:f7: fa:85:25:2d:eb:e1:cf:c0:62:36:de:da:2d:35:df:da:c4:b4: 61:c4:84:35:00:d4:2a:16:3a:a2:62:b5:98:af:9d:24:99:c2: 1c:18:48:e8:ad:82:25:3f:ff:c1:53:93:29:ff:6c:19:16:08: 9c:0b:05:bc -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8gIBzvRDvCUdiBoEUWvuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDIyMGNiZTNkNjRlNzFiMGRkNjFkZjE5MTJlN2YwY2M1YjljYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOQtsqnyQlsw49rpFfTk+6OJeQEv MhHvAe5B2H2a49SLXDCHwDHT7UZo3Dt1oLuV7HIyr/1JBgkCvmBa4frBUgtYgUYm l97OcFs3zIfwwBdH+uGQuqh6UNpbCsbo+PEkHLZ5h+LOrKe+BM6OhjCzSRDzlCLd vAywjmBtmRqBiKMvjyxOf3DXksddhCRVuzY/sFrt7DX7YJ3kmTDb59z7/iWlzOxa KhUxC7UQoUU2o+ou5hRpl77grO1zu8bLopvRdgCpfVhADXbCK5nRRuSwq5vdPbPA 5Z8Jno6jW+oFJYeGbOm1bUqZyCs4z3L6nNh8W6QiwkIyU5gw/SFg4j9NEwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFO0iDL49ZOcbDdYd8ZEufwzFucuEMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvN1NJTXZqMWs1eHNOMWgzeGtTNV9ETVc1eTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJSM1AwQA JSM3AwQAW+t6AwQAsp1vAwQBvHeeAwQBvHeiMA0GCSqGSIb3DQEBCwUAA4IBAQAy yetXJNfobzeeFcd1NDY2vj8CA3cn7aNrZV1twCaiye55qiqN8VIyUNJYFQVHuA1Q L9w5tB114GORpZ0+iHI9UBiuWvUhQ6NRLhnRR7SgQEmOKSvGMNQhbzmvJwUWV0BF uJ/5PbNJLNkoSBNF6dUhlxHQ3ZsxZYLI1Sy7T6Fz9JD9nASvkDzAn2rkQre1pXkZ oaHpn9vvTFcCjC/odNAjW/KISdZS1fYNtBRocAEQbaMjk7ywQRfQS/muc5giGZnc NWKKfPf6hSUt6+HPwGI23totNd/axLRhxIQ1ANQqFjqiYrWYr50kmcIcGEjorYIl P//BU5Mp/2wZFgicCwW8 -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:05 2026 by rpki-client