This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/aK-KiOW1egsjAqwNXfFKte8mrTM.roa File: aK-KiOW1egsjAqwNXfFKte8mrTM.roa (raw, json) Hash identifier: cMN/aBHsJKW/o3mLC7qajGiwbSYm63ebF4bSsFTDBjA= Subject key identifier: 68:AF:8A:88:E5:B5:7A:0B:23:02:AC:0D:5D:F1:4A:B5:EF:26:AD:33 Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d Certificate serial: 019B7C7F8AC97181449FA3DD4DB7F99B7A34 Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/aK-KiOW1egsjAqwNXfFKte8mrTM.roa Signing time: Fri 02 Jan 2026 02:18:12 +0000 ROA not before: Fri 02 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58081 IP address blocks: 37.75.240.0/24 maxlen: 24 37.75.241.0/24 maxlen: 24 37.75.242.0/24 maxlen: 24 2a03:49c0::/32 maxlen: 32 2a03:49c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8a:c9:71:81:44:9f:a3:dd:4d:b7:f9:9b:7a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d Validity Not Before: Jan 2 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68af8a88e5b57a0b2302ac0d5df14ab5ef26ad33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:64:b7:3a:ac:ef:d5:82:13:90:29:a6:72: 5f:a4:6a:6b:88:88:14:01:e2:64:16:48:0d:1b:11: 99:09:85:cf:45:a8:a8:3c:21:42:ae:14:ec:06:55: 31:aa:31:13:1c:a9:bc:c7:12:43:3a:5a:a5:9d:a8: e0:d2:a1:ba:60:27:be:c5:63:aa:b3:bf:2e:3f:4c: 1f:ac:26:99:21:eb:3c:f1:b7:c1:f6:75:fb:70:d4: dc:60:bf:ea:de:14:ba:4c:51:56:75:7e:bc:7f:e0: 45:a6:63:67:6a:ac:fa:50:00:7a:c9:f9:1c:c7:72: f9:bc:6c:85:ac:21:b5:11:3d:ca:9e:bf:d2:04:70: 3b:8c:c6:d9:2b:94:be:77:b5:73:65:97:ec:31:d3: ee:01:8b:0e:84:20:d2:01:8c:5c:bb:1e:05:c0:d6: 02:97:ea:ee:fe:d6:74:26:e4:c8:c7:18:18:6a:71: 25:35:c2:4e:72:53:3c:08:39:bd:7d:64:b9:5d:a1: ac:30:71:30:2e:86:9f:96:12:93:5d:06:88:22:a5: c3:a7:de:5d:5c:c4:13:7a:35:66:2f:74:3c:ca:16: 04:f4:aa:56:62:07:a6:0e:08:31:16:73:66:a3:23: e3:09:a2:f9:25:bd:37:c7:86:9a:10:5d:a0:23:0b: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AF:8A:88:E5:B5:7A:0B:23:02:AC:0D:5D:F1:4A:B5:EF:26:AD:33 X509v3 Authority Key Identifier: keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/aK-KiOW1egsjAqwNXfFKte8mrTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.240.0-37.75.242.255 IPv6: 2a03:49c0::/32 Signature Algorithm: sha256WithRSAEncryption 49:24:5d:74:a5:8a:4a:0d:6c:b0:fc:09:a0:42:7e:c4:4a:fe: 06:ea:49:3a:3c:a9:98:21:9e:be:01:c1:c9:3d:fc:c3:d6:a3: 58:9d:73:fe:86:bd:64:ad:b8:72:e9:9d:da:cf:a8:f7:d8:22: 57:8a:0f:03:a7:c7:71:de:89:7d:3d:68:8c:1a:44:6b:6e:43: 63:46:b8:78:cb:19:36:e4:a4:b7:1a:58:69:41:da:46:e2:61: ef:bb:d6:bf:cd:23:7e:82:da:03:f8:00:3c:bb:4a:37:c5:4a: ae:10:c7:7e:7e:1b:89:56:c3:19:13:e0:e7:03:f5:01:b8:5b: bf:48:50:47:ec:b7:4a:3d:4d:c5:7f:01:0d:98:b0:34:b6:b9: 09:bf:d2:a6:33:11:4c:ca:9c:61:f1:59:ab:ae:9c:1f:fb:f0: d2:8f:7a:ac:fe:fa:0b:33:c3:90:b1:a5:82:47:9a:e6:ed:4e: 78:ba:80:a0:f8:c4:76:b9:88:eb:a2:02:82:65:b2:4d:0a:74: 98:28:88:b0:56:3e:2a:05:1e:44:24:40:86:e6:5b:b3:46:9d: 16:40:32:38:48:74:20:42:a1:d0:91:0f:fd:ee:bc:b0:e9:5a: ef:c0:cb:0a:f4:d2:41:59:1d:22:85:5f:d9:0c:53:fc:5b:4a: 25:34:9d:e0 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8f4rJcYFEn6PdTbf5m3o0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OTYyYTMzZmQyMzQ4NzgxYWMxMjNhMTI3MjJhMDg2ZWU4 ZmJhN2QwHhcNMjYwMTAyMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGFmOGE4OGU1YjU3YTBiMjMwMmFjMGQ1ZGYxNGFiNWVmMjZhZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW9ktzqs79WCE5AppnJfpGpriIgU AeJkFkgNGxGZCYXPRaioPCFCrhTsBlUxqjETHKm8xxJDOlqlnajg0qG6YCe+xWOq s78uP0wfrCaZIes88bfB9nX7cNTcYL/q3hS6TFFWdX68f+BFpmNnaqz6UAB6yfkc x3L5vGyFrCG1ET3Knr/SBHA7jMbZK5S+d7VzZZfsMdPuAYsOhCDSAYxcux4FwNYC l+ru/tZ0JuTIxxgYanElNcJOclM8CDm9fWS5XaGsMHEwLoaflhKTXQaIIqXDp95d XMQTejVmL3Q8yhYE9KpWYgemDggxFnNmoyPjCaL5Jb03x4aaEF2gIwuDcwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFGiviojltXoLIwKsDV3xSrXvJq0zMB8GA1UdIwQY MBaAFCeWKjP9I0h4GsEjoScioIbuj7p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQt YmI2YmZmZTY2ZmYzLzEvYUstS2lPVzFlZ3NqQXF3TlhmRkt0ZThtclRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8xMTQ1ZDItYjFiZC00YTU3LWE0NGQtYmI2YmZmZTY2ZmYz LzEvSjVZcU1fMGpTSGdhd1NPaEp5S2dodTZQdW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAQlS/AD BAAlS/IwDQQCAAIwBwMFACoDScAwDQYJKoZIhvcNAQELBQADggEBAEkkXXSlikoN bLD8CaBCfsRK/gbqSTo8qZghnr4Bwck9/MPWo1idc/6GvWStuHLpndrPqPfYIleK DwOnx3HeiX09aIwaRGtuQ2NGuHjLGTbkpLcaWGlB2kbiYe+71r/NI36C2gP4ADy7 SjfFSq4Qx35+G4lWwxkT4OcD9QG4W79IUEfst0o9TcV/AQ2YsDS2uQm/0qYzEUzK nGHxWauunB/78NKPeqz++gszw5CxpYJHmubtTni6gKD4xHa5iOuiAoJlsk0KdJgo iLBWPioFHkQkQIbmW7NGnRZAMjhIdCBCodCRD/3uvLDpWu/Aywr00kFZHSKFX9kM U/xbSiU0neA= -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:19 2026 by rpki-client