This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/N38diFMaV_i5hOP_4a67WmRtrIU.roa File: N38diFMaV_i5hOP_4a67WmRtrIU.roa (raw, json) Hash identifier: 19VwrhP7hE1gb5tfUqrl4XziM0lkIjbVr+V/P6vC97Y= Subject key identifier: 37:7F:1D:88:53:1A:57:F8:B9:84:E3:FF:E1:AE:BB:5A:64:6D:AC:85 Certificate issuer: /CN=98ccb184d128384e4f767d85258e0dea73f18e43 Certificate serial: 019B7834ED981417CB964780CFED7FAF0301 Authority key identifier: 98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/N38diFMaV_i5hOP_4a67WmRtrIU.roa Signing time: Thu 01 Jan 2026 06:18:13 +0000 ROA not before: Thu 01 Jan 2026 06:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49580 IP address blocks: 193.33.22.0/24 maxlen: 24 193.33.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ed:98:14:17:cb:96:47:80:cf:ed:7f:af:03:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98ccb184d128384e4f767d85258e0dea73f18e43 Validity Not Before: Jan 1 06:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=377f1d88531a57f8b984e3ffe1aebb5a646dac85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:ca:fe:ea:26:d1:0d:d5:5a:aa:0e:ac:36: 1b:24:4a:e8:ac:2b:3a:74:ae:98:37:54:98:e6:88: 0c:27:a5:25:14:07:d0:cf:60:36:f8:5f:70:9b:67: 0e:50:4b:31:8b:f3:51:cd:26:4b:86:7c:a8:17:6a: 65:cf:78:7c:3e:dc:1a:f7:fd:61:dd:50:5e:c4:ba: 20:d2:7b:1b:dd:f5:0c:ff:6a:30:98:ed:32:c9:51: 3b:cc:dd:4c:8e:29:b8:ab:01:8a:a7:c0:5f:0c:7f: e0:6c:03:b5:fd:34:00:c1:15:b7:a3:29:e0:12:60: a9:ee:a9:36:07:17:b5:fe:4f:2c:7f:b0:bb:7c:7c: 01:cc:6c:52:70:c7:a5:83:13:b8:11:3a:93:de:d1: ea:d3:16:db:77:98:fc:2e:8c:0e:44:87:a1:27:30: 2d:56:f9:54:1a:c2:d6:e6:b8:65:25:77:06:b4:35: cf:8c:51:a2:5f:97:7d:af:03:63:db:29:79:25:69: 31:c1:51:56:c9:6b:4f:de:b1:f1:40:83:66:f3:75: 2a:d2:1d:c4:ce:b7:c0:6d:ce:c2:e7:6f:a3:ec:a8: 0a:19:59:24:69:f6:30:1f:d6:ce:54:4f:51:f0:e3: 9a:aa:17:01:39:c6:95:ed:72:3a:ff:f2:d6:e6:fb: 4c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7F:1D:88:53:1A:57:F8:B9:84:E3:FF:E1:AE:BB:5A:64:6D:AC:85 X509v3 Authority Key Identifier: keyid:98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/N38diFMaV_i5hOP_4a67WmRtrIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.22.0/23 Signature Algorithm: sha256WithRSAEncryption 27:55:ca:c9:46:43:91:06:63:3c:f5:a2:94:69:47:ff:4b:6f: cb:9e:5d:b9:18:74:81:18:f5:f3:43:6e:db:64:07:23:91:8d: 40:ee:7e:44:b0:76:d4:fb:21:eb:7c:bc:ee:1a:01:91:fe:d2: e2:c4:4a:67:99:64:7c:d1:e3:ae:6b:7c:e0:45:77:30:7a:da: 05:58:75:b0:fb:f5:a0:68:f9:06:5b:9d:94:56:f3:76:c5:36: b3:b2:59:68:56:ad:d3:5d:8d:85:26:54:f4:f5:3a:3c:b0:7b: aa:3b:75:31:ad:33:ba:21:7c:46:ad:4d:11:80:4e:28:cd:54: 85:2e:56:58:a9:ad:6d:84:9c:57:24:c5:00:62:d4:50:50:dd: d1:9f:fc:ee:be:8f:62:ba:f0:fc:49:df:a4:9e:0d:09:c6:37: 99:36:71:48:17:c2:6b:bc:6a:49:41:d6:67:54:15:eb:f0:2e: 29:fb:05:66:1c:5e:a1:fd:8c:05:51:dc:e1:58:56:78:49:28: 8d:f0:c7:2d:e5:6e:7a:eb:fa:5e:0a:6a:0a:0d:6d:d3:38:30: d3:39:da:79:d9:25:b6:3f:a5:06:7c:d1:90:b0:c8:f7:13:99: 0d:b8:df:fd:88:65:d9:83:ce:76:82:63:8a:dd:5d:92:5c:63: 3a:ec:6e:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NO2YFBfLlkeAz+1/rwMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4Y2NiMTg0ZDEyODM4NGU0Zjc2N2Q4NTI1OGUwZGVhNzNm MThlNDMwHhcNMjYwMTAxMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzdmMWQ4ODUzMWE1N2Y4Yjk4NGUzZmZlMWFlYmI1YTY0NmRhYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EbK/uom0Q3VWqoOrDYbJErorCs6 dK6YN1SY5ogMJ6UlFAfQz2A2+F9wm2cOUEsxi/NRzSZLhnyoF2plz3h8Ptwa9/1h 3VBexLog0nsb3fUM/2owmO0yyVE7zN1Mjim4qwGKp8BfDH/gbAO1/TQAwRW3oyng EmCp7qk2Bxe1/k8sf7C7fHwBzGxScMelgxO4ETqT3tHq0xbbd5j8LowORIehJzAt VvlUGsLW5rhlJXcGtDXPjFGiX5d9rwNj2yl5JWkxwVFWyWtP3rHxQINm83Uq0h3E zrfAbc7C52+j7KgKGVkkafYwH9bOVE9R8OOaqhcBOcaV7XI6//LW5vtM1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDd/HYhTGlf4uYTj/+Guu1pkbayFMB8GA1UdIwQY MBaAFJjMsYTRKDhOT3Z9hSWODepz8Y5DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU15eGhORW9PRTVQZG4yRkpZNE42blB4amtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zNzI1M2QtMDJhMS00NmRmLTk0MTMt NTgwMDY4ZGYwZmQxLzEvTjM4ZGlGTWFWX2k1aE9QXzRhNjdXbVJ0cklVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zNzI1M2QtMDJhMS00NmRmLTk0MTMtNTgwMDY4ZGYwZmQx LzEvbU15eGhORW9PRTVQZG4yRkpZNE42blB4amtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSEWMA0G CSqGSIb3DQEBCwUAA4IBAQAnVcrJRkORBmM89aKUaUf/S2/Lnl25GHSBGPXzQ27b ZAcjkY1A7n5EsHbU+yHrfLzuGgGR/tLixEpnmWR80eOua3zgRXcwetoFWHWw+/Wg aPkGW52UVvN2xTazslloVq3TXY2FJlT09To8sHuqO3UxrTO6IXxGrU0RgE4ozVSF LlZYqa1thJxXJMUAYtRQUN3Rn/zuvo9iuvD8Sd+kng0JxjeZNnFIF8JrvGpJQdZn VBXr8C4p+wVmHF6h/YwFUdzhWFZ4SSiN8Mct5W566/peCmoKDW3TODDTOdp52SW2 P6UGfNGQsMj3E5kNuN/9iGXZg852gmOK3V2SXGM67G7X -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:02 2026 by rpki-client