This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/jduoIfuNX3eaUl5mu4CdCj0unUU.roa File: jduoIfuNX3eaUl5mu4CdCj0unUU.roa (raw, json) Hash identifier: N1HIki9uzOLOpvfkwPn2Cb9BQ/V7gPNrS+CdWusx3Wo= Subject key identifier: 8D:DB:A8:21:FB:8D:5F:77:9A:52:5E:66:BB:80:9D:0A:3D:2E:9D:45 Certificate issuer: /CN=15628f9fdaab8b85494bc3388091a122b0bba5c8 Certificate serial: 019B7CED2BA8CB8CD2A7BBCD0912A82C8C22 Authority key identifier: 15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/jduoIfuNX3eaUl5mu4CdCj0unUU.roa Signing time: Fri 02 Jan 2026 04:17:56 +0000 ROA not before: Fri 02 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202964 IP address blocks: 37.208.89.0/24 maxlen: 24 37.208.90.0/24 maxlen: 24 37.208.91.0/24 maxlen: 24 37.208.92.0/24 maxlen: 24 37.208.93.0/24 maxlen: 24 37.208.94.0/24 maxlen: 24 37.208.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.mft rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:2b:a8:cb:8c:d2:a7:bb:cd:09:12:a8:2c:8c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15628f9fdaab8b85494bc3388091a122b0bba5c8 Validity Not Before: Jan 2 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ddba821fb8d5f779a525e66bb809d0a3d2e9d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:19:f8:dc:79:9f:3e:51:c7:81:42:be:b3:3b: 63:3b:d8:74:4a:a1:13:c5:fe:eb:bd:4d:4c:7d:16: dc:76:c2:62:16:fe:97:06:87:30:70:84:59:8c:a1: d9:59:fd:db:4b:79:a7:66:f5:8d:7d:73:9c:e1:35: c9:f3:75:90:a2:34:ba:c6:5e:8e:02:c1:45:fd:7d: 1e:44:c4:73:ed:3f:e9:e8:3f:c6:32:8a:2b:1a:a5: 85:6c:81:a6:57:9e:c8:33:38:9a:4e:ce:72:04:ef: d1:db:c2:43:43:1e:af:a5:98:aa:6c:79:32:c8:5a: cd:82:78:79:1b:f8:cc:65:52:70:2d:e3:ca:55:7b: 5d:34:c5:58:e6:e6:c0:99:85:44:6c:51:4d:76:6e: 8c:ab:07:96:25:e8:e4:2c:2a:ce:c8:2f:54:15:98: 91:01:80:3c:12:10:36:ed:3f:60:d8:51:6a:64:58: 40:29:d0:92:a9:09:e8:ab:d9:20:a3:ce:fa:5e:d1: 5e:39:71:04:cd:ce:e7:19:3c:35:f2:fa:70:9c:c3: 7b:43:9b:9c:c2:2f:ca:87:8f:d2:e5:93:48:28:e5: 87:27:5f:6d:ea:a0:e6:a4:be:f0:56:a4:10:07:24: 05:b9:50:1e:36:9d:13:3e:7b:be:ed:91:7a:ec:ff: c8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:DB:A8:21:FB:8D:5F:77:9A:52:5E:66:BB:80:9D:0A:3D:2E:9D:45 X509v3 Authority Key Identifier: keyid:15:62:8F:9F:DA:AB:8B:85:49:4B:C3:38:80:91:A1:22:B0:BB:A5:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWKPn9qri4VJS8M4gJGhIrC7pcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/jduoIfuNX3eaUl5mu4CdCj0unUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/db2692-4b71-43cb-a389-96f040bbba0d/1/FWKPn9qri4VJS8M4gJGhIrC7pcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.208.89.0-37.208.95.255 Signature Algorithm: sha256WithRSAEncryption 23:5c:ed:34:b8:25:9e:db:ad:ee:ca:c5:ac:61:98:ef:ae:ea: db:6e:e5:53:e6:29:bb:d7:10:44:d7:01:82:b4:72:34:8b:9d: 8e:f4:31:9e:f8:1e:69:a5:66:dc:a1:0d:86:3a:2d:c3:2f:cf: 19:cc:27:c9:9d:ca:70:a4:88:54:95:36:4e:74:e5:36:07:61: 64:d5:fa:a0:c8:be:e3:c5:86:01:60:9c:50:ca:0b:40:76:be: 06:79:e1:2f:a2:2a:0e:1d:de:55:d9:7c:c3:fb:a8:3b:6e:91: d8:49:1d:97:03:97:46:db:61:78:bb:f9:62:71:eb:81:c7:03: e4:e7:43:25:40:4b:66:85:ab:b7:5f:88:02:48:5e:36:28:45: 2f:7b:0f:6c:17:ed:3f:bc:33:56:5c:e4:83:9a:06:30:98:c0: d8:b5:be:c8:1c:62:8d:10:ea:af:18:3e:e9:bb:fc:fb:49:02: 53:6e:e2:e6:15:d7:41:74:5d:e9:75:c5:18:97:6d:f1:2e:72: eb:3a:e6:66:7a:4a:38:f2:84:44:88:86:32:b6:8b:84:bc:a1: 45:0b:c8:dc:60:b7:c8:59:c8:38:b9:2b:3f:b2:4a:5f:74:44: 40:b1:6b:2e:1e:c1:70:e4:cd:71:59:4d:29:a4:47:42:d3:67: 14:29:35:63 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87Suoy4zSp7vNCRKoLIwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NjI4ZjlmZGFhYjhiODU0OTRiYzMzODgwOTFhMTIyYjBi YmE1YzgwHhcNMjYwMTAyMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGRiYTgyMWZiOGQ1Zjc3OWE1MjVlNjZiYjgwOWQwYTNkMmU5ZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxn43HmfPlHHgUK+sztjO9h0SqET xf7rvU1MfRbcdsJiFv6XBocwcIRZjKHZWf3bS3mnZvWNfXOc4TXJ83WQojS6xl6O AsFF/X0eRMRz7T/p6D/GMoorGqWFbIGmV57IMziaTs5yBO/R28JDQx6vpZiqbHky yFrNgnh5G/jMZVJwLePKVXtdNMVY5ubAmYVEbFFNdm6MqweWJejkLCrOyC9UFZiR AYA8EhA27T9g2FFqZFhAKdCSqQnoq9kgo876XtFeOXEEzc7nGTw18vpwnMN7Q5uc wi/Kh4/S5ZNIKOWHJ19t6qDmpL7wVqQQByQFuVAeNp0TPnu+7ZF67P/IPwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFI3bqCH7jV93mlJeZruAnQo9Lp1FMB8GA1UdIwQY MBaAFBVij5/aq4uFSUvDOICRoSKwu6XIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRldLUG45cXJpNFZKUzhNNGdKR2hJckM3cGNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kYjI2OTItNGI3MS00M2NiLWEzODkt OTZmMDQwYmJiYTBkLzEvamR1b0lmdU5YM2VhVWw1bXU0Q2RDajB1blVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kYjI2OTItNGI3MS00M2NiLWEzODktOTZmMDQwYmJiYTBk LzEvRldLUG45cXJpNFZKUzhNNGdKR2hJckM3cGNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAl0FkD BAUl0EAwDQYJKoZIhvcNAQELBQADggEBACNc7TS4JZ7bre7KxaxhmO+u6ttu5VPm KbvXEETXAYK0cjSLnY70MZ74HmmlZtyhDYY6LcMvzxnMJ8mdynCkiFSVNk505TYH YWTV+qDIvuPFhgFgnFDKC0B2vgZ54S+iKg4d3lXZfMP7qDtukdhJHZcDl0bbYXi7 +WJx64HHA+TnQyVAS2aFq7dfiAJIXjYoRS97D2wX7T+8M1Zc5IOaBjCYwNi1vsgc Yo0Q6q8YPum7/PtJAlNu4uYV10F0Xel1xRiXbfEucus65mZ6SjjyhESIhjK2i4S8 oUULyNxgt8hZyDi5Kz+ySl90RECxay4ewXDkzXFZTSmkR0LTZxQpNWM= -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:16 2026 by rpki-client