This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/37_xZx_rqn-SxevogCkXP7-LgP8.roa File: 37_xZx_rqn-SxevogCkXP7-LgP8.roa (raw, json) Hash identifier: U8m9UfrkgvJAKqyZqlV5rXg6lWq/WBdZs8MhcoeLaIA= Subject key identifier: DF:BF:F1:67:1F:EB:AA:7F:92:C5:EB:E8:80:29:17:3F:BF:8B:80:FF Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0 Certificate serial: 019B7DCA8B00E5213D5220788ABF44B5147D Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/37_xZx_rqn-SxevogCkXP7-LgP8.roa Signing time: Fri 02 Jan 2026 08:19:44 +0000 ROA not before: Fri 02 Jan 2026 08:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199486 IP address blocks: 31.47.64.0/21 maxlen: 21 31.47.69.0/24 maxlen: 24 185.123.132.0/22 maxlen: 22 185.214.156.0/24 maxlen: 24 185.214.157.0/24 maxlen: 24 185.214.158.0/24 maxlen: 24 2a09:2e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:8b:00:e5:21:3d:52:20:78:8a:bf:44:b5:14:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0 Validity Not Before: Jan 2 08:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfbff1671febaa7f92c5ebe88029173fbf8b80ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:38:21:ba:77:4e:fe:ec:81:fb:f5:cd:14:52: 68:2d:bf:d2:21:58:b8:e3:77:a9:94:32:09:0c:a0: 47:a4:9c:fe:8a:3e:96:d5:0f:4b:8f:59:68:d3:46: 0e:b0:31:e3:10:bf:ab:e5:94:ff:6a:ab:c1:79:79: ac:8d:ee:e0:23:ae:d5:8c:1a:6f:47:1c:ad:04:4e: 3b:c0:3b:89:27:80:38:f1:60:fd:d7:ca:04:1b:af: c9:08:73:21:f2:f5:92:15:74:6e:f5:ae:c9:35:14: ff:45:a9:53:a1:f5:4d:50:f4:a3:93:71:5d:26:5d: d6:65:3c:52:c1:62:b5:5e:0d:ce:d8:79:3f:1e:fb: c4:bd:a9:2b:b4:56:55:98:75:9f:67:3b:fb:06:13: 9d:d5:6e:a2:9d:4c:9f:2c:24:8c:8a:e1:22:8b:66: d7:ca:ff:18:73:29:81:cd:5c:a3:27:b8:37:93:9a: a7:c7:da:0f:0a:c2:c6:4f:88:70:0f:1d:cc:75:28: d5:55:57:de:48:e3:29:52:9a:b1:50:68:42:f5:a8: fe:36:d3:95:76:dc:0d:f9:cc:f9:09:7b:0a:77:31: 0c:3c:da:55:b9:1c:53:30:ee:4f:c6:57:1a:8c:fb: 26:3a:6d:13:7b:cd:a0:d3:2e:60:45:86:87:ef:34: 95:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BF:F1:67:1F:EB:AA:7F:92:C5:EB:E8:80:29:17:3F:BF:8B:80:FF X509v3 Authority Key Identifier: keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/37_xZx_rqn-SxevogCkXP7-LgP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.47.64.0/21 185.123.132.0/22 185.214.156.0-185.214.158.255 IPv6: 2a09:2e80::/29 Signature Algorithm: sha256WithRSAEncryption 48:be:91:33:b1:4c:0f:14:64:47:d7:a5:7b:85:8f:69:5a:74: 48:bf:d2:ed:3a:98:0e:20:bc:c3:7d:fc:02:9f:51:e1:2c:1e: b6:0d:94:7b:0f:ee:1c:2d:dc:a6:fe:de:dc:0e:67:25:01:c2: 82:ca:a3:d0:9e:fa:3c:65:63:08:69:5f:5f:c3:20:cc:f2:8c: bc:bc:34:3e:88:c5:de:c6:57:38:ba:02:f7:8f:de:54:54:1d: ae:b8:28:0c:4e:f2:1d:29:de:36:32:68:03:e5:b4:f1:9b:ad: 00:30:f3:aa:de:fe:28:ab:06:b5:6b:77:0b:5a:24:d7:f4:b4: 98:e4:e9:ba:5f:ac:fe:12:5c:0c:68:ea:4c:3c:9f:e6:69:47: 51:57:c8:6a:75:2f:f0:11:dd:09:e0:71:9f:ef:60:f4:6b:02: a4:33:d0:8b:21:b1:3f:f9:78:76:71:dd:fb:01:ed:60:df:96: 50:fa:33:c4:d5:a4:9b:56:77:7c:5b:50:64:3c:21:6f:c4:0e: a4:38:d1:21:60:7c:73:a4:2e:c5:ba:81:97:5c:39:07:51:98: 87:79:cd:5f:a8:aa:53:ea:75:10:f6:6d:6b:cb:98:5e:af:59: ab:2f:db:4d:97:00:f8:ba:4d:30:72:b1:c3:2f:e6:4b:9f:e3: 38:db:34:61 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt9yosA5SE9UiB4ir9EtRR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNTc1NGU0ZDIwOGM2NDM1ZjFhYmVjOTM3Y2RlMjAwMDky MDRkYzAwHhcNMjYwMTAyMDgxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmJmZjE2NzFmZWJhYTdmOTJjNWViZTg4MDI5MTczZmJmOGI4MGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTghundO/uyB+/XNFFJoLb/SIVi4 43eplDIJDKBHpJz+ij6W1Q9Lj1lo00YOsDHjEL+r5ZT/aqvBeXmsje7gI67VjBpv RxytBE47wDuJJ4A48WD918oEG6/JCHMh8vWSFXRu9a7JNRT/RalTofVNUPSjk3Fd Jl3WZTxSwWK1Xg3O2Hk/HvvEvakrtFZVmHWfZzv7BhOd1W6inUyfLCSMiuEii2bX yv8YcymBzVyjJ7g3k5qnx9oPCsLGT4hwDx3MdSjVVVfeSOMpUpqxUGhC9aj+NtOV dtwN+cz5CXsKdzEMPNpVuRxTMO5PxlcajPsmOm0Te82g0y5gRYaH7zSVBwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFN+/8Wcf66p/ksXr6IApFz+/i4D/MB8GA1UdIwQY MBaAFHtXVOTSCMZDXxq+yTfN4gAJIE3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xZGQxYWMtNGE4Ny00YmYxLThkNTIt ZmQ0OTNjNmE1Yzc2LzEvMzdfeFp4X3Jxbi1TeGV2b2dDa1hQNy1MZ1A4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xZGQxYWMtNGE4Ny00YmYxLThkNTItZmQ0OTNjNmE1Yzc2 LzEvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQDHy9AAwQC uXuEMAwDBAK51pwDBAC51p4wDQQCAAIwBwMFAyoJLoAwDQYJKoZIhvcNAQELBQAD ggEBAEi+kTOxTA8UZEfXpXuFj2ladEi/0u06mA4gvMN9/AKfUeEsHrYNlHsP7hwt 3Kb+3twOZyUBwoLKo9Ce+jxlYwhpX1/DIMzyjLy8ND6Ixd7GVzi6AveP3lRUHa64 KAxO8h0p3jYyaAPltPGbrQAw86re/iirBrVrdwtaJNf0tJjk6bpfrP4SXAxo6kw8 n+ZpR1FXyGp1L/AR3QngcZ/vYPRrAqQz0IshsT/5eHZx3fsB7WDfllD6M8TVpJtW d3xbUGQ8IW/EDqQ40SFgfHOkLsW6gZdcOQdRmId5zV+oqlPqdRD2bWvLmF6vWasv 202XAPi6TTByscMv5kuf4zjbNGE= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:14 2026 by rpki-client