This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/2gqlsGsP5E3zQaUrsSMd4u59_T0.roa File: 2gqlsGsP5E3zQaUrsSMd4u59_T0.roa (raw, json) Hash identifier: cgB36bs+4+JA2uFggV/46xULEosQv+C5+2WBUm6ME/g= Subject key identifier: DA:0A:A5:B0:6B:0F:E4:4D:F3:41:A5:2B:B1:23:1D:E2:EE:7D:FD:3D Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6 Certificate serial: 019B76EBA697EEC552BCBA4F6809FE54FA65 Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/2gqlsGsP5E3zQaUrsSMd4u59_T0.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 37.235.8.0/21 maxlen: 21 80.112.192.0/18 maxlen: 18 83.137.136.0/21 maxlen: 21 83.167.192.0/19 maxlen: 19 85.88.96.0/19 maxlen: 19 85.146.192.0/18 maxlen: 18 93.117.192.0/18 maxlen: 18 159.100.64.0/18 maxlen: 18 212.78.192.0/19 maxlen: 19 213.34.128.0/19 maxlen: 19 2a00:18c8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a6:97:ee:c5:52:bc:ba:4f:68:09:fe:54:fa:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da0aa5b06b0fe44df341a52bb1231de2ee7dfd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:9d:a7:d1:7e:60:9a:2e:37:22:8a:e7:1a: 91:79:2e:86:50:37:c4:af:58:b8:1a:65:a1:dd:a3: be:d1:5a:1d:be:c7:39:9d:8e:66:fb:e0:ac:58:c2: e3:23:bb:51:01:87:50:a6:3b:ab:f0:b2:d3:68:37: 5b:03:e2:68:59:ef:7a:9e:44:53:51:33:fc:11:b8: e2:ef:81:09:81:82:36:7a:52:c7:7f:68:6a:f1:87: c5:84:43:3e:20:f1:c8:c3:e2:36:a5:0a:37:d9:a3: ea:4e:08:25:ac:d0:a8:50:2f:7f:4b:c1:d3:c0:65: ea:90:b7:79:f7:8c:20:22:67:12:4f:87:4b:39:bb: 2d:76:e6:b7:f4:ed:6c:84:1f:87:2d:5c:23:f3:2a: 38:36:f7:33:7d:0c:6b:d0:1f:31:1c:ac:8a:bf:60: 98:c5:e4:8a:d0:fc:de:6a:94:c7:47:8b:2a:17:ac: b3:87:8b:55:ee:38:f6:f8:c5:1d:a2:6c:82:b2:fa: d4:fa:11:2f:7b:60:63:0f:20:38:38:a4:95:6d:0a: e8:27:23:dc:97:fc:e0:43:0c:45:a1:9f:e9:ea:7e: c2:5d:ae:cf:31:ab:ff:32:dc:52:25:0e:72:23:0b: bd:70:b6:a6:ed:bb:5c:3c:67:17:2e:f5:1f:25:ee: 20:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0A:A5:B0:6B:0F:E4:4D:F3:41:A5:2B:B1:23:1D:E2:EE:7D:FD:3D X509v3 Authority Key Identifier: keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/2gqlsGsP5E3zQaUrsSMd4u59_T0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.235.8.0/21 80.112.192.0/18 83.137.136.0/21 83.167.192.0/19 85.88.96.0/19 85.146.192.0/18 93.117.192.0/18 159.100.64.0/18 212.78.192.0/19 213.34.128.0/19 IPv6: 2a00:18c8::/29 Signature Algorithm: sha256WithRSAEncryption 64:95:30:4f:73:0e:47:06:f2:0e:e9:c0:43:41:b5:f0:77:45: 5d:c1:43:eb:04:0d:bd:cf:bd:5f:5e:4b:5a:d2:02:e3:0d:08: d1:3e:85:03:86:38:3b:3f:df:80:83:0c:62:59:cd:4d:ee:67: 8c:22:61:3c:87:cd:c4:75:32:e4:6f:4d:ef:cb:89:7b:4c:a1: c0:22:a5:9a:26:bc:9f:3a:1a:01:6d:4b:61:e6:d6:3a:b6:96: 7a:f0:9a:e4:bd:ac:e4:4a:48:05:4e:21:23:19:bb:99:e6:c4: 43:1a:ae:1b:56:48:4f:17:dc:48:22:59:cf:15:c4:9a:0a:f5: 04:43:40:0d:24:e4:07:03:93:df:ac:b8:16:cd:7a:49:0e:19: 6b:65:e8:d0:5a:bb:fd:ff:eb:c0:1d:75:f4:56:07:f9:e4:8b: 62:ce:5d:6b:1d:f1:7e:b7:81:12:f8:1e:11:74:8a:5a:31:3c: a1:63:38:40:fc:c0:00:0a:67:1c:ad:c0:e3:2a:44:a2:6f:0b: ab:11:94:f5:47:82:e4:62:57:d7:0f:8f:3a:7e:fa:64:96:91: b6:db:a1:ec:38:ac:bc:59:eb:40:6a:1c:26:b3:2e:1b:eb:14: cb:4d:d9:71:36:a9:45:d6:c4:cf:34:4e:48:26:eb:06:fa:ae: 45:8f:d8:14 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt266aX7sVSvLpPaAn+VPplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxOWY3NWIyNTkzY2EyYjFiMGE1ZmQwYzU0MDE1ZGUzMDZj NDdlZTYwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTBhYTViMDZiMGZlNDRkZjM0MWE1MmJiMTIzMWRlMmVlN2RmZDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBCdp9F+YJouNyKK5xqReS6GUDfE r1i4GmWh3aO+0Vodvsc5nY5m++CsWMLjI7tRAYdQpjur8LLTaDdbA+JoWe96nkRT UTP8Ebji74EJgYI2elLHf2hq8YfFhEM+IPHIw+I2pQo32aPqTgglrNCoUC9/S8HT wGXqkLd594wgImcST4dLObstdua39O1shB+HLVwj8yo4NvczfQxr0B8xHKyKv2CY xeSK0PzeapTHR4sqF6yzh4tV7jj2+MUdomyCsvrU+hEve2BjDyA4OKSVbQroJyPc l/zgQwxFoZ/p6n7CXa7PMav/MtxSJQ5yIwu9cLam7btcPGcXLvUfJe4gkwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFNoKpbBrD+RN80GlK7EjHeLuff09MB8GA1UdIwQY MBaAFMGfdbJZPKKxsKX9DFQBXeMGxH7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMt MDEyNDBiY2ZkYjQyLzEvMmdxbHNHc1A1RTN6UWFVcnNTTWQ0dTU5X1QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMtMDEyNDBiY2ZkYjQy LzEvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDJesIAwQG UHDAAwQDU4mIAwQFU6fAAwQFVVhgAwQGVZLAAwQGXXXAAwQGn2RAAwQF1E7AAwQF 1SKAMA0EAgACMAcDBQMqABjIMA0GCSqGSIb3DQEBCwUAA4IBAQBklTBPcw5HBvIO 6cBDQbXwd0VdwUPrBA29z71fXkta0gLjDQjRPoUDhjg7P9+AgwxiWc1N7meMImE8 h83EdTLkb03vy4l7TKHAIqWaJryfOhoBbUth5tY6tpZ68JrkvazkSkgFTiEjGbuZ 5sRDGq4bVkhPF9xIIlnPFcSaCvUEQ0ANJOQHA5PfrLgWzXpJDhlrZejQWrv9/+vA HXX0Vgf55Itizl1rHfF+t4ES+B4RdIpaMTyhYzhA/MAACmccrcDjKkSibwurEZT1 R4LkYlfXD486fvpklpG226HsOKy8WetAahwmsy4b6xTLTdlxNqlF1sTPNE5IJusG +q5Fj9gU -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:02 2026 by rpki-client