This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa File: ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa (raw, json) Hash identifier: ufYZ4Au1+4D7CL0qz6B/FUig9GN1b/FI0Eb2tprJPcI= Subject key identifier: 45:E6:2E:44:6A:8F:D5:64:6B:CE:1F:C8:98:5E:3C:09:C0:C9:DD:12 Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac Certificate serial: 019B7AC7B097DC13D45F91EDCD09505556C3 Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa Signing time: Thu 01 Jan 2026 18:17:45 +0000 ROA not before: Thu 01 Jan 2026 18:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215329 IP address blocks: 185.37.100.0/24 maxlen: 24 2a13:c2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b0:97:dc:13:d4:5f:91:ed:cd:09:50:55:56:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45e62e446a8fd5646bce1fc8985e3c09c0c9dd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:2c:69:25:75:1f:38:1c:a5:00:b6:3b:93: e4:c5:a0:c8:7d:84:db:f1:a2:93:72:cb:4f:5a:64: 86:59:ca:1e:b7:48:88:67:eb:e8:e6:cc:35:93:f9: ae:69:fa:3b:0d:e9:38:84:62:8f:36:e4:2b:96:e3: eb:d2:4e:8c:6e:ce:ac:f7:2a:ad:c2:6b:60:97:ee: 0b:ee:7e:4d:f4:5b:86:cc:15:80:10:45:b4:b9:89: cd:df:5a:a0:f2:58:7d:da:2e:e8:89:e2:33:54:e6: 78:7b:87:a2:fc:49:2a:fa:c8:35:66:80:be:2a:d6: bf:2c:83:2b:93:9b:c3:e8:39:77:82:1d:38:6f:0a: 5a:8b:78:70:19:37:8f:f7:6b:d5:e8:15:96:c0:98: 54:56:fa:47:d0:a1:08:7f:77:f4:0f:df:75:bd:fa: 04:01:c3:df:39:10:8c:ed:9d:6d:97:1d:ea:04:6f: 51:79:5a:00:69:fb:90:62:df:7a:fa:d6:86:91:25: 94:69:27:b6:cc:71:a8:5b:7a:db:c9:05:e8:d0:df: 58:58:50:1e:15:e7:31:30:5c:c3:80:1d:9b:ae:10: 42:7d:6e:72:6d:49:7f:c0:e2:ab:93:f9:e1:48:81: 2a:4f:27:c6:37:7d:5f:91:c7:1b:3c:93:d1:58:91: 7a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E6:2E:44:6A:8F:D5:64:6B:CE:1F:C8:98:5E:3C:09:C0:C9:DD:12 X509v3 Authority Key Identifier: keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.100.0/24 IPv6: 2a13:c2c0::/32 Signature Algorithm: sha256WithRSAEncryption b5:ae:95:fa:66:53:f2:1f:76:90:84:ec:d9:95:bd:70:65:0b: 55:ae:5a:af:d0:db:53:b2:a8:ea:63:6f:64:35:b4:c1:6e:0e: ac:fd:6a:0a:4f:51:53:00:da:70:cc:b2:71:56:09:d8:2e:c8: ae:f9:d4:6d:17:c4:75:92:87:ec:d2:3e:ad:26:5e:6f:5c:ee: 87:4a:6b:b3:70:cf:5f:dd:91:ca:d6:00:d2:1c:94:8a:3d:8e: 1d:31:06:75:9b:e8:d1:71:7d:c9:11:16:ad:1b:c4:20:b6:a0: 7c:95:e3:9e:63:a0:90:db:17:e4:30:5c:05:97:3b:c5:ce:d8: 24:9f:4b:2a:c6:10:18:b9:17:d6:2a:31:fc:04:5f:a4:52:64: 6e:b8:0e:df:cd:e4:27:87:06:49:c7:9b:8c:56:d2:ce:2b:a9: ac:00:cb:65:53:40:49:2b:b9:22:26:93:bd:8b:73:e0:60:99: 3b:7a:48:ce:59:fc:23:08:51:cc:b5:b7:d6:5c:af:7d:ad:a9: b2:89:56:d2:07:c2:b4:92:f5:5f:64:9a:a5:70:3b:f1:3f:b9: 0b:cd:d4:8e:d7:b9:f5:3c:41:ec:48:3e:72:56:b5:ac:d3:41: 82:1f:9f:a5:a0:5d:aa:d4:4f:cc:bd:dd:1b:de:4a:bd:67:9a: ad:28:8a:25 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x7CX3BPUX5HtzQlQVVbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWNjNTdjYTg0NzIzYWVjMjg0MTE0NWY2ZjdkMzAxYmRm MzViYWMwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWU2MmU0NDZhOGZkNTY0NmJjZTFmYzg5ODVlM2MwOWMwYzlkZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wYsaSV1HzgcpQC2O5PkxaDIfYTb 8aKTcstPWmSGWcoet0iIZ+vo5sw1k/muafo7Dek4hGKPNuQrluPr0k6Mbs6s9yqt wmtgl+4L7n5N9FuGzBWAEEW0uYnN31qg8lh92i7oieIzVOZ4e4ei/Ekq+sg1ZoC+ Kta/LIMrk5vD6Dl3gh04bwpai3hwGTeP92vV6BWWwJhUVvpH0KEIf3f0D991vfoE AcPfORCM7Z1tlx3qBG9ReVoAafuQYt96+taGkSWUaSe2zHGoW3rbyQXo0N9YWFAe FecxMFzDgB2brhBCfW5ybUl/wOKrk/nhSIEqTyfGN31fkccbPJPRWJF6nwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEXmLkRqj9Vka84fyJhePAnAyd0SMB8GA1UdIwQY MBaAFIucxXyoRyOuwoQRRfb30wG981usMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5Nzct MDk3Y2I4ZGYyYTI0LzEvUmVZdVJHcVAxV1JyemhfSW1GNDhDY0RKM1JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zOGU2ZjctNGUzNS00YzJkLTk5NzctMDk3Y2I4ZGYyYTI0 LzEvaTV6RmZLaEhJNjdDaEJGRjl2ZlRBYjN6VzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuSVkMA0E AgACMAcDBQAqE8LAMA0GCSqGSIb3DQEBCwUAA4IBAQC1rpX6ZlPyH3aQhOzZlb1w ZQtVrlqv0NtTsqjqY29kNbTBbg6s/WoKT1FTANpwzLJxVgnYLsiu+dRtF8R1kofs 0j6tJl5vXO6HSmuzcM9f3ZHK1gDSHJSKPY4dMQZ1m+jRcX3JERatG8QgtqB8leOe Y6CQ2xfkMFwFlzvFztgkn0sqxhAYuRfWKjH8BF+kUmRuuA7fzeQnhwZJx5uMVtLO K6msAMtlU0BJK7kiJpO9i3PgYJk7ekjOWfwjCFHMtbfWXK99ramyiVbSB8K0kvVf ZJqlcDvxP7kLzdSO17n1PEHsSD5yVrWs00GCH5+loF2q1E/Mvd0b3kq9Z5qtKIol -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:41 2026 by rpki-client