This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/rSs3oBRQGKpWvbw6FOXRc6TOFLk.roa File: rSs3oBRQGKpWvbw6FOXRc6TOFLk.roa (raw, json) Hash identifier: n8/JUrk12IuY4WimjIBxh1VJWwxTjOVeSQL6bKZGVyk= Subject key identifier: AD:2B:37:A0:14:50:18:AA:56:BD:BC:3A:14:E5:D1:73:A4:CE:14:B9 Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f Certificate serial: 019B7E38C6EA713687FE39A87EE6FF2B4972 Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/rSs3oBRQGKpWvbw6FOXRc6TOFLk.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29447 IP address blocks: 37.160.0.0/14 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c6:ea:71:36:87:fe:39:a8:7e:e6:ff:2b:49:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad2b37a0145018aa56bdbc3a14e5d173a4ce14b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:29:56:6a:a7:27:63:ed:cb:8f:a2:10:74: 31:5d:f6:6a:ad:aa:7b:72:42:9b:79:52:95:08:91: 3b:08:fc:9a:f5:65:77:b6:93:c0:77:2a:6e:52:af: 84:ac:72:53:ab:13:4e:06:6e:de:c4:4c:2b:15:93: 88:b0:57:f5:76:2d:e4:91:10:6a:3f:b3:ab:8b:36: 5d:c3:a5:b0:1d:f2:71:89:20:94:1c:3d:31:48:a1: d6:71:62:4e:ba:86:12:93:d3:2e:91:53:ef:99:94: bd:3e:6b:25:e5:e6:b5:4e:1e:8b:dc:af:5a:93:f2: 76:5b:9a:18:fc:0b:b0:aa:ff:04:b5:60:33:0c:7a: 0a:47:e8:1d:9b:50:d6:0d:32:7c:59:e6:aa:f9:b7: bc:e8:e4:06:c2:04:bb:00:3e:a8:b8:d5:41:9c:db: 6c:d6:6a:6f:72:77:e4:48:0e:43:9b:21:75:53:7c: cf:31:e2:d8:95:6b:fd:5e:3a:4a:c2:1d:b9:c1:ff: fa:38:6c:45:a9:3f:17:0c:82:a9:f5:88:cb:e5:56: 39:52:ea:81:1d:8a:8f:f7:71:50:f5:94:ad:16:37: a4:0f:35:bb:c5:2a:9d:8a:08:05:5c:44:3f:6f:bb: 97:49:05:78:e0:d1:69:c2:42:85:fa:9c:d6:f3:d5: fc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2B:37:A0:14:50:18:AA:56:BD:BC:3A:14:E5:D1:73:A4:CE:14:B9 X509v3 Authority Key Identifier: keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/rSs3oBRQGKpWvbw6FOXRc6TOFLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.160.0.0/14 Signature Algorithm: sha256WithRSAEncryption be:0c:6f:d4:da:29:14:d9:3b:32:b6:7e:79:ac:09:32:b0:b5: 78:63:70:15:26:4a:a4:01:f8:9d:32:d1:b3:75:6e:1a:99:d3: 2b:1f:08:23:52:c6:17:7b:59:4a:7f:14:19:03:69:9b:10:1b: 10:8e:f3:0c:6a:55:d3:7f:6a:9a:53:65:6d:e1:cf:9e:1b:ab: 52:1e:01:70:89:f2:e9:1b:55:b2:b6:e4:f3:cd:ff:12:b5:2d: f8:58:22:93:8b:35:5a:6f:38:b3:4c:13:d0:1b:55:e0:08:84: c2:59:40:49:c3:7a:c1:27:46:29:43:51:ed:af:37:33:7c:4e: 57:4c:b0:7c:93:4d:57:ee:01:20:70:ee:0e:d7:98:67:bf:e3: eb:52:eb:c3:c0:1d:f2:c0:2b:af:dc:70:53:d7:66:8b:4f:ce: 19:8c:5e:12:81:b6:c4:f9:92:38:7b:d5:df:7f:ad:a9:04:26: 8a:90:33:3a:73:5c:0e:53:82:f7:fd:e9:50:86:ee:a2:b8:58: 38:ea:de:6b:fc:6e:88:46:23:11:42:10:c4:06:da:1f:87:e7: c3:0a:db:6b:56:bd:ff:90:dc:42:00:20:cb:3e:47:17:8d:8b: 8a:47:02:d3:3f:f2:82:65:69:3a:f5:4e:76:85:51:ed:7a:2b: c3:d9:5b:86 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+OMbqcTaH/jmofub/K0lyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTdkNGY1OGFmODRmNTBjZTQyZjEzMjkzZWRlNGFmZjEy ZDE3M2YwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDJiMzdhMDE0NTAxOGFhNTZiZGJjM2ExNGU1ZDE3M2E0Y2UxNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EUpVmqnJ2Pty4+iEHQxXfZqrap7 ckKbeVKVCJE7CPya9WV3tpPAdypuUq+ErHJTqxNOBm7exEwrFZOIsFf1di3kkRBq P7OrizZdw6WwHfJxiSCUHD0xSKHWcWJOuoYSk9MukVPvmZS9Pmsl5ea1Th6L3K9a k/J2W5oY/Auwqv8EtWAzDHoKR+gdm1DWDTJ8Weaq+be86OQGwgS7AD6ouNVBnNts 1mpvcnfkSA5DmyF1U3zPMeLYlWv9XjpKwh25wf/6OGxFqT8XDIKp9YjL5VY5UuqB HYqP93FQ9ZStFjekDzW7xSqdiggFXEQ/b7uXSQV44NFpwkKF+pzW89X8+QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFK0rN6AUUBiqVr28OhTl0XOkzhS5MB8GA1UdIwQY MBaAFBUX1PWK+E9QzkLxMpPt5K/xLRc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQt ZTVmOThkZGFmYzk4LzEvclNzM29CUlFHS3BXdmJ3NkZPWFJjNlRPRkxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQtZTVmOThkZGFmYzk4 LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCJaAwDQYJ KoZIhvcNAQELBQADggEBAL4Mb9TaKRTZOzK2fnmsCTKwtXhjcBUmSqQB+J0y0bN1 bhqZ0ysfCCNSxhd7WUp/FBkDaZsQGxCO8wxqVdN/appTZW3hz54bq1IeAXCJ8ukb VbK25PPN/xK1LfhYIpOLNVpvOLNME9AbVeAIhMJZQEnDesEnRilDUe2vNzN8TldM sHyTTVfuASBw7g7XmGe/4+tS68PAHfLAK6/ccFPXZotPzhmMXhKBtsT5kjh71d9/ rakEJoqQMzpzXA5Tgvf96VCG7qK4WDjq3mv8bohGIxFCEMQG2h+H58MK22tWvf+Q 3EIAIMs+RxeNi4pHAtM/8oJlaTr1TnaFUe16K8PZW4Y= -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:40 2026 by rpki-client