This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa File: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (raw, json) Hash identifier: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw= Subject key identifier: 68:05:64:03:F2:7B:55:9F:95:9F:78:E4:BE:76:82:5E:59:C5:78:7F Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Certificate serial: 019B7AC7A9684E2FF8839DA2A9C9C4C54375 Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa Signing time: Thu 01 Jan 2026 18:17:43 +0000 ROA not before: Thu 01 Jan 2026 18:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 37.44.228.0/22 maxlen: 24 37.44.228.0/24 maxlen: 24 165.84.224.0/22 maxlen: 22 165.84.228.0/22 maxlen: 22 192.145.53.0/24 maxlen: 24 192.145.54.0/24 maxlen: 24 192.145.55.0/24 maxlen: 24 194.15.32.0/24 maxlen: 24 194.15.33.0/24 maxlen: 24 194.15.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a9:68:4e:2f:f8:83:9d:a2:a9:c9:c4:c5:43:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3 Validity Not Before: Jan 1 18:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68056403f27b559f959f78e4be76825e59c5787f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:a7:a0:81:6e:aa:df:c0:6c:96:10:31:94: 7a:43:a6:50:26:c9:53:04:4f:24:3e:e5:9b:94:92: b1:12:70:31:7e:ec:dd:88:3c:b9:77:16:b3:07:37: 60:96:cb:fa:0b:51:37:3e:0c:72:c7:af:f8:a8:c6: 35:14:a5:ca:76:df:a4:eb:69:68:55:ae:71:d1:ad: b7:61:23:79:c7:3e:f6:ab:b2:73:c3:77:78:03:d2: 19:63:23:c0:60:38:5e:54:3d:6f:b5:cb:a8:cd:d9: b5:fb:d5:9e:54:99:64:0c:24:74:c3:6a:90:b2:4e: 2d:9b:5e:a4:70:cd:4f:0f:9f:c0:05:0f:3e:5a:43: 04:d5:8b:ff:c2:0d:0f:b9:94:b6:d4:e5:48:34:74: a1:7e:03:d4:7d:50:bf:80:40:e3:14:49:cc:7a:10: 79:39:ea:7b:a2:cb:b0:c8:75:bf:39:53:94:aa:1a: c3:33:07:7f:f6:dc:6f:96:47:a8:4d:a9:9d:e1:04: 10:23:f5:8b:d4:3e:a1:5f:e2:ca:3c:f0:69:c3:f5: cd:79:4b:d3:a8:8d:35:82:33:e2:ee:b4:5b:d2:c4: 29:89:db:b6:2f:eb:3c:f3:6a:ef:c9:d5:cd:d3:a9: 2d:64:61:b2:f2:cf:f2:7d:d4:54:45:94:5f:26:cd: 0f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:05:64:03:F2:7B:55:9F:95:9F:78:E4:BE:76:82:5E:59:C5:78:7F X509v3 Authority Key Identifier: keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.228.0/22 165.84.224.0/21 192.145.53.0-192.145.55.255 194.15.32.0/22 Signature Algorithm: sha256WithRSAEncryption 49:6d:93:da:09:ed:82:86:e0:19:5a:37:3c:0b:e8:d2:a4:02: b3:6a:81:f2:f1:7c:0e:89:97:7d:55:7f:2b:cd:3a:33:7c:61: 6e:cd:cb:79:01:87:15:58:a5:d3:49:dd:f5:ae:00:33:c7:6e: 81:ae:e2:6c:26:b1:e4:71:14:53:a9:1d:11:d8:cc:c7:26:6c: c8:86:9b:fb:37:83:84:b4:23:f6:7c:09:cc:4b:45:d0:64:99: 01:58:b3:95:2f:39:19:42:e8:df:48:a7:b0:24:e7:40:bc:a3: 42:2d:06:e2:63:ec:b8:cc:ff:04:dc:40:00:5b:c5:1c:40:fe: 44:9a:ff:c1:1e:1d:d7:b9:f2:d2:2d:63:00:a9:3f:fe:79:09: 3d:30:1e:53:ba:63:11:57:42:fd:4e:5f:10:18:13:f3:70:48: 7a:ce:f8:b6:1d:03:c2:9a:3e:9e:ba:86:ea:a8:6c:11:4d:d4: 29:e2:c0:e6:84:38:47:3b:55:4c:a0:6e:ae:08:7c:a5:e5:f2: fe:68:7f:9f:44:bd:7f:ea:45:d9:27:d7:55:3a:94:e8:34:6a: fd:f2:cd:39:d7:3d:b3:b7:e4:3d:c5:0a:98:2a:76:9b:e6:b2: 98:0a:a1:6f:2f:42:d3:6d:69:ad:b1:a0:7d:70:a7:e3:6d:0f: 89:c3:bf:2f -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6x6loTi/4g52iqcnExUN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl M2ZlZjMwHhcNMjYwMTAxMTgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODA1NjQwM2YyN2I1NTlmOTU5Zjc4ZTRiZTc2ODI1ZTU5YzU3ODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJKnoIFuqt/AbJYQMZR6Q6ZQJslT BE8kPuWblJKxEnAxfuzdiDy5dxazBzdglsv6C1E3Pgxyx6/4qMY1FKXKdt+k62lo Va5x0a23YSN5xz72q7Jzw3d4A9IZYyPAYDheVD1vtcuozdm1+9WeVJlkDCR0w2qQ sk4tm16kcM1PD5/ABQ8+WkME1Yv/wg0PuZS21OVINHShfgPUfVC/gEDjFEnMehB5 Oep7osuwyHW/OVOUqhrDMwd/9txvlkeoTamd4QQQI/WL1D6hX+LKPPBpw/XNeUvT qI01gjPi7rRb0sQpidu2L+s882rvydXN06ktZGGy8s/yfdRURZRfJs0PAQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFGgFZAPye1WflZ945L52gl5ZxXh/MB8GA1UdIwQY MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt NTk1ZTBiZjVjNjEzLzEvYUFWa0FfSjdWWi1WbjNqa3ZuYUNYbG5GZUg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCJSzkAwQD pVTgMAwDBADAkTUDBAPAkTADBALCDyAwDQYJKoZIhvcNAQELBQADggEBAEltk9oJ 7YKG4BlaNzwL6NKkArNqgfLxfA6Jl31VfyvNOjN8YW7Ny3kBhxVYpdNJ3fWuADPH boGu4mwmseRxFFOpHRHYzMcmbMiGm/s3g4S0I/Z8CcxLRdBkmQFYs5UvORlC6N9I p7Ak50C8o0ItBuJj7LjM/wTcQABbxRxA/kSa/8EeHde58tItYwCpP/55CT0wHlO6 YxFXQv1OXxAYE/NwSHrO+LYdA8KaPp66huqobBFN1CniwOaEOEc7VUygbq4IfKXl 8v5of59EvX/qRdkn11U6lOg0av3yzTnXPbO35D3FCpgqdpvmspgKoW8vQtNtaa2x oH1wp+NtD4nDvy8= -----END CERTIFICATE-----Generated at Tue Jan 6 20:31:30 2026 by rpki-client