This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/Fh8dU1sk5ALM7kpiO6BAeJeWRH0.roa File: Fh8dU1sk5ALM7kpiO6BAeJeWRH0.roa (raw, json) Hash identifier: jOyoK8xyNESHxZoIIJYDR0iqgib05HyciYjF8KZpxgY= Subject key identifier: 16:1F:1D:53:5B:24:E4:02:CC:EE:4A:62:3B:A0:40:78:97:96:44:7D Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b Certificate serial: 019B7B36C94D84B2EF0DDCFB6B708BB80A9A Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/Fh8dU1sk5ALM7kpiO6BAeJeWRH0.roa Signing time: Thu 01 Jan 2026 20:19:06 +0000 ROA not before: Thu 01 Jan 2026 20:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 37.1.160.0/21 maxlen: 24 37.252.104.0/21 maxlen: 24 185.19.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c9:4d:84:b2:ef:0d:dc:fb:6b:70:8b:b8:0a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b Validity Not Before: Jan 1 20:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=161f1d535b24e402ccee4a623ba040789796447d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:8c:eb:69:f4:5c:c5:60:ea:59:aa:17:9a: 47:e7:62:e0:60:f5:76:31:7a:18:65:a5:6d:0a:a0: 64:63:36:f0:29:9a:12:4a:94:36:2f:4d:3c:e4:a8: 36:9f:16:6b:69:96:42:fc:19:7f:d7:e1:ef:81:87: 2a:aa:75:3b:1c:43:6d:b2:05:22:cf:46:b5:e7:cd: e2:71:84:b2:81:fd:7b:a8:68:e2:54:70:c5:ab:2a: 7d:8b:67:56:fe:e9:9d:7c:f6:66:9f:03:d1:e3:5d: 0a:84:20:95:13:8a:5a:d3:1f:3b:80:37:fa:eb:e1: 90:44:85:a3:06:88:72:24:9b:d5:b1:6c:97:a7:b2: 0a:5e:b3:d6:95:82:7d:5c:eb:da:dc:0c:ca:52:13: da:80:30:f3:38:9e:52:aa:9f:50:e5:fb:bb:29:ec: 3f:2c:88:9c:ef:92:94:27:30:8e:8f:92:55:0f:da: eb:55:0b:ab:b4:ba:6a:b4:00:d7:0c:3c:3e:7b:26: 54:0e:82:28:38:d6:20:92:6d:63:77:e9:fb:53:00: ec:17:b9:0a:27:d9:0c:41:11:40:c2:7a:13:b9:40: 2a:5a:c6:34:60:ba:ff:87:85:06:24:d2:42:a9:a2: 45:6b:60:a3:6f:0e:f0:0f:77:56:91:d3:45:5e:af: 48:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1F:1D:53:5B:24:E4:02:CC:EE:4A:62:3B:A0:40:78:97:96:44:7D X509v3 Authority Key Identifier: keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/Fh8dU1sk5ALM7kpiO6BAeJeWRH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.160.0/21 37.252.104.0/21 185.19.36.0/22 Signature Algorithm: sha256WithRSAEncryption a1:e6:8c:65:a0:e7:d9:5a:38:2e:ac:5c:6e:f6:42:54:8e:d9: e2:18:10:84:b2:63:a5:c3:a4:44:cf:ef:9b:b3:34:48:8f:59: 71:3e:61:04:4d:9b:a4:de:15:aa:41:d6:d4:d9:e2:4c:f3:bd: f1:92:9c:d2:72:14:3d:56:d6:4e:f6:d5:99:65:16:37:76:62: 91:20:46:52:3c:aa:cd:5c:d6:75:ab:10:68:db:61:e9:02:a7: cd:b1:52:0b:22:a7:80:1c:f5:51:a0:56:4a:17:03:a6:10:b5: f3:c3:de:0c:6a:cd:fb:93:77:23:d5:34:59:d7:dd:5c:43:ea: bb:81:a1:68:15:c5:72:9c:33:e6:8b:6b:12:42:25:fb:8d:03: 6b:80:60:1a:19:ec:cf:d6:73:f3:94:44:ef:16:64:2a:0f:18: d4:50:fe:c4:a3:0f:d6:d4:f5:87:ed:3f:b4:00:0b:9a:a6:92: e6:29:d8:af:54:4c:72:1d:5e:ef:23:81:9d:bc:5a:86:6f:da: c8:51:8d:f4:ab:40:84:8a:a9:e4:46:23:08:eb:d4:bd:11:25: e4:64:d0:6b:b6:8b:cf:91:51:9e:36:00:50:72:bb:c9:2e:5e: b4:af:dd:84:6a:1f:15:13:32:72:f1:89:37:b2:19:f6:02:d1: af:b2:5a:40 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NslNhLLvDdz7a3CLuAqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGEzMzllNWNkM2MxYmUwMmNlNjgwMmEwNDIxODU2YWEw YjU0N2IwHhcNMjYwMTAxMjAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjFmMWQ1MzViMjRlNDAyY2NlZTRhNjIzYmEwNDA3ODk3OTY0NDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmKM62n0XMVg6lmqF5pH52LgYPV2 MXoYZaVtCqBkYzbwKZoSSpQ2L0085Kg2nxZraZZC/Bl/1+HvgYcqqnU7HENtsgUi z0a1583icYSygf17qGjiVHDFqyp9i2dW/umdfPZmnwPR410KhCCVE4pa0x87gDf6 6+GQRIWjBohyJJvVsWyXp7IKXrPWlYJ9XOva3AzKUhPagDDzOJ5Sqp9Q5fu7Kew/ LIic75KUJzCOj5JVD9rrVQurtLpqtADXDDw+eyZUDoIoONYgkm1jd+n7UwDsF7kK J9kMQRFAwnoTuUAqWsY0YLr/h4UGJNJCqaJFa2Cjbw7wD3dWkdNFXq9I1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBYfHVNbJOQCzO5KYjugQHiXlkR9MB8GA1UdIwQY MBaAFAfaM55c08G+As5oAqBCGFaqC1R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMt ODE2NzRkOTUzZDU2LzEvRmg4ZFUxc2s1QUxNN2twaU82QkFlSmVXUkgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMtODE2NzRkOTUzZDU2 LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDJQGgAwQD JfxoAwQCuRMkMA0GCSqGSIb3DQEBCwUAA4IBAQCh5oxloOfZWjgurFxu9kJUjtni GBCEsmOlw6REz++bszRIj1lxPmEETZuk3hWqQdbU2eJM873xkpzSchQ9VtZO9tWZ ZRY3dmKRIEZSPKrNXNZ1qxBo22HpAqfNsVILIqeAHPVRoFZKFwOmELXzw94Mas37 k3cj1TRZ191cQ+q7gaFoFcVynDPmi2sSQiX7jQNrgGAaGezP1nPzlETvFmQqDxjU UP7Eow/W1PWH7T+0AAuappLmKdivVExyHV7vI4GdvFqGb9rIUY30q0CEiqnkRiMI 69S9ESXkZNBrtovPkVGeNgBQcrvJLl60r92Eah8VEzJy8Yk3shn2AtGvslpA -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:14 2026 by rpki-client