This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/1-vw_YpjLtL2osMGBDqhaMbBPjy0.roa File: 1-vw_YpjLtL2osMGBDqhaMbBPjy0.roa (raw, json) Hash identifier: y1eYYcI99eIq1QFUMBnmXcbeI9owv4tyUVDJFPBTheQ= Subject key identifier: FA:FC:3F:62:98:CB:B4:BD:A8:B0:C1:81:0E:A8:5A:31:B0:4F:8F:2D Certificate issuer: /CN=532414492bb2cfa408ff573aa068fcf9a5e778ee Certificate serial: 019B78A2C4151866CD401E03F0B45AB3B26A Authority key identifier: 53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/1-vw_YpjLtL2osMGBDqhaMbBPjy0.roa Signing time: Thu 01 Jan 2026 08:18:11 +0000 ROA not before: Thu 01 Jan 2026 08:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 37.140.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.mft rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c4:15:18:66:cd:40:1e:03:f0:b4:5a:b3:b2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532414492bb2cfa408ff573aa068fcf9a5e778ee Validity Not Before: Jan 1 08:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fafc3f6298cbb4bda8b0c1810ea85a31b04f8f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:90:72:78:0f:36:fd:2f:c3:87:47:a8:00:15: 1b:e5:2d:f9:67:77:5c:0e:19:fe:f9:d6:57:63:6b: 5b:1b:0b:63:57:b2:5d:34:85:0c:17:54:99:ff:8e: 0e:0a:47:35:88:ea:52:a2:07:85:85:39:b7:c9:55: f0:12:91:63:42:a3:b6:e1:ce:36:d3:8e:58:0b:0d: 61:d9:4a:7c:fb:1f:c8:a5:0c:5a:79:b3:77:0f:de: 4c:76:4b:25:d8:f4:ef:e4:30:df:cb:7a:71:00:9e: af:90:66:a0:33:d3:61:c7:30:d4:12:8d:7f:65:a2: 8d:4a:f3:de:20:2c:10:f6:1b:ca:b8:34:e9:ca:98: fd:19:84:a3:c1:90:ef:5e:88:3c:4f:4e:33:c5:d6: 5b:d1:49:ba:30:0b:38:b8:65:72:91:5a:7b:50:43: 63:31:02:57:80:d7:56:ae:80:a1:33:4b:b8:1a:85: e4:c8:82:bc:c1:9a:eb:79:89:65:f9:c0:67:60:77: c0:5b:4f:7d:a2:29:fc:6b:a6:29:31:96:af:e4:bf: f9:ea:a1:04:a5:40:98:de:f6:91:b5:45:e4:aa:05: 1f:2b:cd:bd:c8:f0:19:64:a8:2c:9c:3b:b5:1a:41: 27:9c:c9:08:43:85:b8:a4:21:0d:af:ed:59:8a:e7: 34:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FC:3F:62:98:CB:B4:BD:A8:B0:C1:81:0E:A8:5A:31:B0:4F:8F:2D X509v3 Authority Key Identifier: keyid:53:24:14:49:2B:B2:CF:A4:08:FF:57:3A:A0:68:FC:F9:A5:E7:78:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyQUSSuyz6QI_1c6oGj8-aXneO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/1-vw_YpjLtL2osMGBDqhaMbBPjy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/06e422-eb15-49a4-b916-cd6766c369a1/1/UyQUSSuyz6QI_1c6oGj8-aXneO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.220.0/24 Signature Algorithm: sha256WithRSAEncryption 76:f9:e2:2d:bf:6c:de:34:11:ce:f3:d0:0c:92:1f:0e:24:25: c3:80:c4:43:7a:92:87:e5:27:f8:df:ef:fb:24:fc:d9:17:62: 24:b7:9e:3f:bf:1c:9c:91:ac:46:0d:6a:cf:a0:8c:08:16:99: 1b:a7:03:e0:3d:5d:75:2e:4b:27:fe:1b:17:1e:f3:41:62:c1: cd:4c:f0:8e:b2:7b:d7:7c:04:7e:9c:ba:c4:e9:e9:02:50:30: 69:df:93:80:9d:3f:77:95:c2:77:a9:2f:35:9b:9b:72:61:8b: 73:e7:cd:d4:4e:3c:d9:5e:30:9f:1b:3d:07:d5:89:92:12:e8: da:11:de:10:98:0d:16:b6:c1:fe:18:69:58:93:a7:91:1a:7b: 73:63:bb:08:78:72:7f:f8:99:2b:c5:2f:6e:76:60:0a:5f:5a: 9d:2f:95:ce:30:96:09:23:5c:05:f6:aa:89:79:db:ad:40:19: f0:0d:7f:e5:34:51:22:85:fd:5e:31:5e:8c:54:e0:3a:ce:2a: 58:8e:29:e4:1b:e4:60:86:15:24:e4:3f:44:3e:e3:b1:4a:de: 41:93:e5:79:20:d5:b1:09:cf:62:a2:e2:bf:5f:bc:48:cc:b4: f2:8c:d0:ef:41:a7:3a:5a:ac:c8:d0:a5:45:34:f2:fb:76:66: 10:7c:0d:af -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4osQVGGbNQB4D8LRas7JqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMjQxNDQ5MmJiMmNmYTQwOGZmNTczYWEwNjhmY2Y5YTVl Nzc4ZWUwHhcNMjYwMTAxMDgxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWZjM2Y2Mjk4Y2JiNGJkYThiMGMxODEwZWE4NWEzMWIwNGY4ZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpByeA82/S/Dh0eoABUb5S35Z3dc Dhn++dZXY2tbGwtjV7JdNIUMF1SZ/44OCkc1iOpSogeFhTm3yVXwEpFjQqO24c42 045YCw1h2Up8+x/IpQxaebN3D95Mdksl2PTv5DDfy3pxAJ6vkGagM9NhxzDUEo1/ ZaKNSvPeICwQ9hvKuDTpypj9GYSjwZDvXog8T04zxdZb0Um6MAs4uGVykVp7UENj MQJXgNdWroChM0u4GoXkyIK8wZrreYll+cBnYHfAW099oin8a6YpMZav5L/56qEE pUCY3vaRtUXkqgUfK829yPAZZKgsnDu1GkEnnMkIQ4W4pCENr+1Ziuc0wQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPr8P2KYy7S9qLDBgQ6oWjGwT48tMB8GA1UdIwQY MBaAFFMkFEkrss+kCP9XOqBo/Pml53juMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXlRVVNTdXl6NlFJXzFjNm9HajgtYVhuZU80LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wNmU0MjItZWIxNS00OWE0LWI5MTYt Y2Q2NzY2YzM2OWExLzEvMS12d19ZcGpMdEwyb3NNR0JEcWhhTWJCUGp5MC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTkvMDZlNDIyLWViMTUtNDlhNC1iOTE2LWNkNjc2NmMzNjlh MS8xL1V5UVVTU3V5ejZRSV8xYzZvR2o4LWFYbmVPNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACWM3DAN BgkqhkiG9w0BAQsFAAOCAQEAdvniLb9s3jQRzvPQDJIfDiQlw4DEQ3qSh+Un+N/v +yT82RdiJLeeP78cnJGsRg1qz6CMCBaZG6cD4D1ddS5LJ/4bFx7zQWLBzUzwjrJ7 13wEfpy6xOnpAlAwad+TgJ0/d5XCd6kvNZubcmGLc+fN1E482V4wnxs9B9WJkhLo 2hHeEJgNFrbB/hhpWJOnkRp7c2O7CHhyf/iZK8UvbnZgCl9anS+VzjCWCSNcBfaq iXnbrUAZ8A1/5TRRIoX9XjFejFTgOs4qWI4p5BvkYIYVJOQ/RD7jsUreQZPleSDV sQnPYqLiv1+8SMy08ozQ70GnOlqsyNClRTTy+3ZmEHwNrw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:09:25 2026 by rpki-client