This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/rPbMU-aau45qTiz17M_zjIB5EUw.roa File: rPbMU-aau45qTiz17M_zjIB5EUw.roa (raw, json) Hash identifier: sSxmH8z+l7H8b/IVkFCTNIwMvL7p69grfPfO19TYqI4= Subject key identifier: AC:F6:CC:53:E6:9A:BB:8E:6A:4E:2C:F5:EC:CF:F3:8C:80:79:11:4C Certificate issuer: /CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Certificate serial: 019B4FE72FF32EA181A9AEBE4B4C6C7A1DFB Authority key identifier: 6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/rPbMU-aau45qTiz17M_zjIB5EUw.roa Signing time: Wed 24 Dec 2025 10:28:29 +0000 ROA not before: Wed 24 Dec 2025 10:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57862 IP address blocks: 37.122.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.mft rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:e7:2f:f3:2e:a1:81:a9:ae:be:4b:4c:6c:7a:1d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6db30a41a6a6f21a9b2dd7e5856a20d5b5effe1c Validity Not Before: Dec 24 10:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=acf6cc53e69abb8e6a4e2cf5eccff38c8079114c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:ba:97:ca:b1:ef:c0:eb:9b:dc:d0:1f:d3: d3:0b:77:ff:ed:fc:49:2b:42:40:02:54:97:46:a6: 6b:37:90:b1:6b:18:e8:99:59:0c:15:77:32:e5:ab: f0:92:55:b2:f6:dc:76:33:7a:7a:be:c9:17:74:fd: 44:5c:87:61:24:9a:c6:5a:37:d3:65:69:dc:7a:6c: 4e:f7:00:78:55:70:0b:19:2d:f9:dd:f5:3a:7e:05: c4:b4:f6:ba:c8:03:6b:24:5c:04:e2:96:94:2b:ac: 15:5d:35:af:f5:37:d7:e9:f5:ae:14:09:1d:83:15: ba:4a:93:32:d9:b7:0f:59:74:9f:e3:b3:e7:21:6f: 77:15:47:6d:b3:26:d1:53:ce:0b:ea:20:86:13:a9: f8:ba:08:55:10:26:d6:4c:63:15:a7:26:99:65:2c: 6b:e3:9c:81:a9:c2:64:86:19:39:74:4d:1b:2a:2c: a6:7a:e8:01:a4:a1:b6:7a:0f:13:a8:1d:80:68:52: b7:68:42:fb:d5:18:cb:34:86:af:f2:9f:e3:64:a0: dd:79:b4:51:46:a9:31:7b:cd:0b:5f:fc:75:4c:5f: 70:df:c4:6a:cf:1b:87:18:77:46:c5:73:7e:df:e7: 8e:c8:4f:7f:82:35:0b:c1:c7:5b:e7:0f:b8:14:89: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F6:CC:53:E6:9A:BB:8E:6A:4E:2C:F5:EC:CF:F3:8C:80:79:11:4C X509v3 Authority Key Identifier: keyid:6D:B3:0A:41:A6:A6:F2:1A:9B:2D:D7:E5:85:6A:20:D5:B5:EF:FE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbMKQaam8hqbLdflhWog1bXv_hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/rPbMU-aau45qTiz17M_zjIB5EUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2b9296-6bd1-49fb-aea0-d893211e6719/1/bbMKQaam8hqbLdflhWog1bXv_hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.122.155.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:40:8f:12:3a:6e:df:f3:1f:49:bf:31:d3:ff:89:09:1d:83: 2a:f2:a9:e4:ef:0d:c7:69:da:b2:ba:34:8d:19:34:a3:8a:3b: 3a:36:3e:de:e1:99:93:16:c5:0c:7d:71:27:54:76:0b:ff:81: 9d:3b:4f:5b:47:4a:60:05:65:de:9e:2a:2b:f4:b1:d7:be:22: 11:ed:33:54:4b:fb:fb:cf:fd:7a:45:89:f4:fc:45:c0:c1:dd: f6:8a:61:08:b5:a1:f7:17:a2:b9:1e:a1:0d:a0:37:4a:b6:1b: ee:c4:f9:58:1f:77:2d:63:74:91:65:59:58:11:80:72:98:39: 6d:82:c6:db:79:12:5c:23:77:7b:ae:53:3a:23:a7:d1:73:26: 1f:c0:78:0b:30:90:6a:7c:44:a0:bf:e1:f3:5e:1c:8b:84:87: cb:4e:44:3e:b8:c3:c5:a4:1a:21:c4:80:2c:71:2c:75:01:a0: 28:51:d8:41:d3:99:f9:ae:d5:ce:68:3c:f8:b3:2c:d2:ec:d9: b8:35:27:20:68:31:77:ca:7b:20:f1:39:f7:ac:51:96:d7:b0: bf:bc:6e:b7:1c:3b:31:8b:c8:af:14:ea:62:ae:4c:2c:18:92: 82:61:03:0c:74:23:aa:a9:98:50:66:25:7f:42:28:45:ce:5f: 02:de:4b:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtP5y/zLqGBqa6+S0xseh37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYjMwYTQxYTZhNmYyMWE5YjJkZDdlNTg1NmEyMGQ1YjVl ZmZlMWMwHhcNMjUxMjI0MTAyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2Y2Y2M1M2U2OWFiYjhlNmE0ZTJjZjVlY2NmZjM4YzgwNzkxMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5O6l8qx78Drm9zQH9PTC3f/7fxJ K0JAAlSXRqZrN5CxaxjomVkMFXcy5avwklWy9tx2M3p6vskXdP1EXIdhJJrGWjfT ZWncemxO9wB4VXALGS353fU6fgXEtPa6yANrJFwE4paUK6wVXTWv9TfX6fWuFAkd gxW6SpMy2bcPWXSf47PnIW93FUdtsybRU84L6iCGE6n4ughVECbWTGMVpyaZZSxr 45yBqcJkhhk5dE0bKiymeugBpKG2eg8TqB2AaFK3aEL71RjLNIav8p/jZKDdebRR Rqkxe80LX/x1TF9w38RqzxuHGHdGxXN+3+eOyE9/gjULwcdb5w+4FIl1fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKz2zFPmmruOak4s9ezP84yAeRFMMB8GA1UdIwQY MBaAFG2zCkGmpvIamy3X5YVqINW17/4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAt ZDg5MzIxMWU2NzE5LzEvclBiTVUtYWF1NDVxVGl6MTdNX3pqSUI1RVV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yYjkyOTYtNmJkMS00OWZiLWFlYTAtZDg5MzIxMWU2NzE5 LzEvYmJNS1FhYW04aHFiTGRmbGhXb2cxYlh2X2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJXqbMA0G CSqGSIb3DQEBCwUAA4IBAQCbQI8SOm7f8x9JvzHT/4kJHYMq8qnk7w3HadqyujSN GTSjijs6Nj7e4ZmTFsUMfXEnVHYL/4GdO09bR0pgBWXenior9LHXviIR7TNUS/v7 z/16RYn0/EXAwd32imEItaH3F6K5HqENoDdKthvuxPlYH3ctY3SRZVlYEYBymDlt gsbbeRJcI3d7rlM6I6fRcyYfwHgLMJBqfESgv+HzXhyLhIfLTkQ+uMPFpBohxIAs cSx1AaAoUdhB05n5rtXOaDz4syzS7Nm4NScgaDF3ynsg8Tn3rFGW17C/vG63HDsx i8ivFOpirkwsGJKCYQMMdCOqqZhQZiV/QihFzl8C3kvq -----END CERTIFICATE-----Generated at Fri Dec 26 17:23:50 2025 by rpki-client