This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/rolQSHMJbUtW_hNeTCuJrWbYpG4.roa File: rolQSHMJbUtW_hNeTCuJrWbYpG4.roa (raw, json) Hash identifier: DOYDiq7YGxpusRq0h+LSdRAPCbEBk+UMLmN2kuSz54c= Subject key identifier: AE:89:50:48:73:09:6D:4B:56:FE:13:5E:4C:2B:89:AD:66:D8:A4:6E Certificate issuer: /CN=3de4598e21736501a73944c107114c850c7d8b09 Certificate serial: 019B7A59D0A41C15F2017C9942A02486D280 Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/rolQSHMJbUtW_hNeTCuJrWbYpG4.roa Signing time: Thu 01 Jan 2026 16:17:44 +0000 ROA not before: Thu 01 Jan 2026 16:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196750 IP address blocks: 37.153.0.0/18 maxlen: 18 37.153.64.0/21 maxlen: 21 2a0e:ba00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:d0:a4:1c:15:f2:01:7c:99:42:a0:24:86:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09 Validity Not Before: Jan 1 16:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae89504873096d4b56fe135e4c2b89ad66d8a46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d7:5b:39:9f:f4:12:7b:0c:c0:ab:b6:a7:e4: a8:7b:e7:0f:71:fe:ba:43:8f:c1:c2:ac:5a:c7:d8: 3c:e2:eb:df:0e:20:83:85:bd:f6:cc:b2:ae:12:f6: d2:1a:4b:8d:6a:2c:de:25:9d:8c:1b:92:a5:58:de: a2:6c:00:60:a4:6b:df:3b:4d:a6:14:db:a5:ed:1e: 1c:c3:e8:c8:97:bc:ed:b5:63:0a:b6:84:4e:45:9b: 6c:34:72:5a:e8:f2:d4:c4:09:e5:41:c9:9b:b3:d0: b0:7a:4a:50:0f:99:65:1b:99:21:31:1d:8e:fd:8e: c6:34:31:8c:8c:8c:67:55:dd:4c:b3:d0:ed:5b:fd: cd:0e:bc:6e:48:fc:df:e7:cb:18:75:73:2f:d8:af: a4:7e:9a:83:78:5b:c1:c5:06:9e:5c:f3:57:b7:e1: 04:b9:c7:dd:2f:3b:e1:25:d6:03:fe:c9:74:5f:5f: 73:a0:b3:17:04:1f:0d:1d:ad:57:74:c3:08:fd:b2: 55:1b:bb:84:f0:c3:9d:8f:75:92:e9:e9:76:9f:16: 7b:3c:a4:a8:06:74:85:a9:83:de:06:40:1b:cb:27: e2:d7:79:92:e6:3c:50:20:67:0e:a6:75:97:ee:80: 07:61:cd:52:e7:5d:1f:9c:dc:db:79:3f:29:a6:b4: a4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:89:50:48:73:09:6D:4B:56:FE:13:5E:4C:2B:89:AD:66:D8:A4:6E X509v3 Authority Key Identifier: keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/rolQSHMJbUtW_hNeTCuJrWbYpG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.153.0.0-37.153.71.255 IPv6: 2a0e:ba00::/29 Signature Algorithm: sha256WithRSAEncryption 49:9a:d9:e3:7c:38:9f:8f:4d:c2:2c:8b:f6:0c:f9:3e:73:51: e9:d9:09:8b:6b:fd:04:73:ef:2a:d1:0e:f8:8f:33:d2:3c:39: 33:35:c7:47:0e:be:c2:44:af:2b:80:85:8e:5b:e2:42:01:6c: df:ee:93:b6:bb:5e:77:d9:af:5a:15:a9:4a:61:18:9b:8a:20: 97:f7:59:4d:25:10:01:ae:b3:b9:11:a4:09:63:ff:12:d8:bb: a6:75:b6:8b:f2:26:1c:c3:47:66:73:ed:72:2a:43:1f:f1:a9: 4a:18:c4:aa:47:80:6d:32:66:e2:7e:ac:44:ca:8f:1c:de:67: 42:fd:85:22:97:2c:fe:84:7c:01:4b:bb:49:84:86:8a:ed:52: 67:a3:f4:87:13:de:8b:db:d5:50:24:f7:c8:d9:4a:86:e7:42: 15:a6:47:e1:1a:b4:25:41:00:12:9d:66:1d:02:92:e0:6d:fc: 32:04:43:b7:55:2f:38:8a:32:2b:fc:bd:c6:4d:5d:85:59:9c: 92:c0:77:67:b6:fe:da:03:90:f3:53:55:be:0f:8a:77:27:40: c5:2b:35:a2:7d:77:c3:03:fe:8a:2b:29:37:ca:ea:de:77:a5: 58:58:ba:7b:9f:b1:6c:67:67:e1:3d:57:96:66:6a:98:2a:d8: ed:7e:64:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt6WdCkHBXyAXyZQqAkhtKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZTQ1OThlMjE3MzY1MDFhNzM5NDRjMTA3MTE0Yzg1MGM3 ZDhiMDkwHhcNMjYwMTAxMTYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTg5NTA0ODczMDk2ZDRiNTZmZTEzNWU0YzJiODlhZDY2ZDhhNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tdbOZ/0EnsMwKu2p+Soe+cPcf66 Q4/Bwqxax9g84uvfDiCDhb32zLKuEvbSGkuNaizeJZ2MG5KlWN6ibABgpGvfO02m FNul7R4cw+jIl7zttWMKtoRORZtsNHJa6PLUxAnlQcmbs9CwekpQD5llG5khMR2O /Y7GNDGMjIxnVd1Ms9DtW/3NDrxuSPzf58sYdXMv2K+kfpqDeFvBxQaeXPNXt+EE ucfdLzvhJdYD/sl0X19zoLMXBB8NHa1XdMMI/bJVG7uE8MOdj3WS6el2nxZ7PKSo BnSFqYPeBkAbyyfi13mS5jxQIGcOpnWX7oAHYc1S510fnNzbeT8pprSkpwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFK6JUEhzCW1LVv4TXkwria1m2KRuMB8GA1UdIwQY MBaAFD3kWY4hc2UBpzlEwQcRTIUMfYsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMt N2Q2MDhiZWUzMTY3LzEvcm9sUVNITUpiVXRXX2hOZVRDdUpyV2JZcEc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMtN2Q2MDhiZWUzMTY3 LzEvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDATBAIAATANMAsDAwAlmQME AyWZQDANBAIAAjAHAwUDKg66ADANBgkqhkiG9w0BAQsFAAOCAQEASZrZ43w4n49N wiyL9gz5PnNR6dkJi2v9BHPvKtEO+I8z0jw5MzXHRw6+wkSvK4CFjlviQgFs3+6T trted9mvWhWpSmEYm4ogl/dZTSUQAa6zuRGkCWP/Eti7pnW2i/ImHMNHZnPtcipD H/GpShjEqkeAbTJm4n6sRMqPHN5nQv2FIpcs/oR8AUu7SYSGiu1SZ6P0hxPei9vV UCT3yNlKhudCFaZH4Rq0JUEAEp1mHQKS4G38MgRDt1UvOIoyK/y9xk1dhVmcksB3 Z7b+2gOQ81NVvg+KdydAxSs1on13wwP+iispN8rq3nelWFi6e5+xbGdn4T1XlmZq mCrY7X5k9w== -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:55 2026 by rpki-client