This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/D6gTiVO-9PFx1VXaAiVU2jihjro.roa File: D6gTiVO-9PFx1VXaAiVU2jihjro.roa (raw, json) Hash identifier: cxYog1EZCaoK2oy6il6DzlbbblthBZpzQajZ4Iuz3ss= Subject key identifier: 0F:A8:13:89:53:BE:F4:F1:71:D5:55:DA:02:25:54:DA:38:A1:8E:BA Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6 Certificate serial: 019B797EC9ED140B5D4ABA8F101F20FFB2E3 Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/D6gTiVO-9PFx1VXaAiVU2jihjro.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57811 IP address blocks: 37.247.235.0/24 maxlen: 24 37.247.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c9:ed:14:0b:5d:4a:ba:8f:10:1f:20:ff:b2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fa8138953bef4f171d555da022554da38a18eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:22:79:f5:a0:dd:d5:65:76:90:4f:1c:d5: 01:99:68:5f:ae:14:ff:f0:c8:36:11:bf:16:73:54: fc:90:c6:6d:d5:0e:9f:3e:0b:bc:e6:e5:1d:b4:f9: 1a:c9:9c:cd:4f:1d:09:b1:80:fa:c3:e0:30:be:49: c1:50:02:6a:3b:7c:00:dd:48:af:84:30:16:fa:33: 53:de:0e:78:b8:0f:cb:f0:ee:4c:e7:81:50:f0:1e: bc:17:08:f6:73:2e:b4:0b:72:aa:56:60:fb:88:78: 07:7e:a8:f8:25:36:0d:20:be:e3:8e:c0:b9:62:b3: 9f:28:f5:70:b9:49:ee:11:48:40:7b:57:00:ef:8e: 60:3b:8e:86:08:d7:71:d0:f4:92:c6:b3:c3:57:23: 80:31:61:fd:10:30:5d:8b:37:81:e5:0f:ef:cd:50: ee:b9:91:c3:8d:70:ad:da:2d:8c:09:92:08:0e:9e: 3a:aa:5a:f5:3c:23:d3:a2:1c:07:93:81:f7:82:13: 5d:08:70:49:b6:17:77:7d:bd:58:c5:26:cd:09:cc: e1:4d:f7:a1:de:a7:87:9a:63:16:f3:dc:95:40:6c: e1:1c:93:f4:b5:4e:8f:38:cb:96:8e:c6:5d:49:68: 64:21:cb:4c:b0:b8:a6:36:ab:1b:04:0e:d0:fa:c3: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A8:13:89:53:BE:F4:F1:71:D5:55:DA:02:25:54:DA:38:A1:8E:BA X509v3 Authority Key Identifier: keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/D6gTiVO-9PFx1VXaAiVU2jihjro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.247.235.0-37.247.236.255 Signature Algorithm: sha256WithRSAEncryption 0b:39:03:f1:91:c5:0c:83:41:ef:96:93:82:7c:43:24:e2:c6: 7d:7c:b3:75:7f:b7:ca:48:ef:cc:13:89:43:b9:67:94:3a:e2: fb:22:0f:9c:7a:8e:f2:62:df:9d:fb:85:f0:65:5b:39:f1:70: 13:6e:6f:ee:6d:68:1e:a8:27:b2:b2:da:e1:f8:1f:a6:b1:38: 5c:b4:2a:54:8c:34:63:2d:ac:99:01:a3:27:ae:75:94:8f:a8: 00:b2:33:d3:a1:a6:64:67:61:fb:0a:b4:ac:0b:32:0d:0f:06: 78:d9:be:69:13:88:d8:3e:84:92:f7:d0:d0:63:8d:f5:a5:d1: 25:c6:06:9d:68:0b:78:95:e9:da:fa:95:56:13:38:75:aa:0a: 8a:a3:66:c3:6d:54:f6:b4:d0:bc:aa:54:2c:4e:02:be:85:5d: 01:75:59:d6:98:29:e4:83:8f:83:55:2c:c5:03:58:8c:08:e8: a6:66:c0:86:f5:69:6b:2c:a6:d1:a6:42:f5:b8:a8:5f:75:0f: ef:e7:a5:e3:44:5a:89:cc:ae:af:2e:32:c4:69:8a:8f:e6:6a: 7c:67:50:be:cf:24:cd:f5:00:ed:65:6a:cd:98:14:aa:85:f4: bb:70:03:be:eb:91:8d:e3:7b:71:76:8a:cf:3c:11:02:73:4f: 19:c6:4f:5c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fsntFAtdSrqPEB8g/7LjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyOWI5YWMyZWY2MzFiOTJlODJmNTk1ZDczZTQ3OTJjODE2 ZWM2ZTYwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmE4MTM4OTUzYmVmNGYxNzFkNTU1ZGEwMjI1NTRkYTM4YTE4ZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc4iefWg3dVldpBPHNUBmWhfrhT/ 8Mg2Eb8Wc1T8kMZt1Q6fPgu85uUdtPkayZzNTx0JsYD6w+AwvknBUAJqO3wA3Uiv hDAW+jNT3g54uA/L8O5M54FQ8B68Fwj2cy60C3KqVmD7iHgHfqj4JTYNIL7jjsC5 YrOfKPVwuUnuEUhAe1cA745gO46GCNdx0PSSxrPDVyOAMWH9EDBdizeB5Q/vzVDu uZHDjXCt2i2MCZIIDp46qlr1PCPTohwHk4H3ghNdCHBJthd3fb1YxSbNCczhTfeh 3qeHmmMW89yVQGzhHJP0tU6POMuWjsZdSWhkIctMsLimNqsbBA7Q+sPcewIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFA+oE4lTvvTxcdVV2gIlVNo4oY66MB8GA1UdIwQY MBaAFOKbmsLvYxuS6C9ZXXPkeSyBbsbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYt OTE2NGUzNTJhODNjLzEvRDZnVGlWTy05UEZ4MVZYYUFpVlUyamloanJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82OTAzNTctZGZiZS00ZDg2LWFmZDYtOTE2NGUzNTJhODNj LzEvNHB1YXd1OWpHNUxvTDFsZGMtUjVMSUZ1eHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAl9+sD BAAl9+wwDQYJKoZIhvcNAQELBQADggEBAAs5A/GRxQyDQe+Wk4J8QyTixn18s3V/ t8pI78wTiUO5Z5Q64vsiD5x6jvJi3537hfBlWznxcBNub+5taB6oJ7Ky2uH4H6ax OFy0KlSMNGMtrJkBoyeudZSPqACyM9OhpmRnYfsKtKwLMg0PBnjZvmkTiNg+hJL3 0NBjjfWl0SXGBp1oC3iV6dr6lVYTOHWqCoqjZsNtVPa00LyqVCxOAr6FXQF1WdaY KeSDj4NVLMUDWIwI6KZmwIb1aWssptGmQvW4qF91D+/npeNEWonMrq8uMsRpio/m anxnUL7PJM31AO1las2YFKqF9LtwA77rkY3je3F2is88EQJzTxnGT1w= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:50 2026 by rpki-client