This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/aMb6lxNGb2-liUxIi8yk_IeHIOY.roa File: aMb6lxNGb2-liUxIi8yk_IeHIOY.roa (raw, json) Hash identifier: 5gSa2BaLYUZyyJ6bTUAS7v+V9L4QlBvXXfhwMvfbFhA= Subject key identifier: 68:C6:FA:97:13:46:6F:6F:A5:89:4C:48:8B:CC:A4:FC:87:87:20:E6 Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687 Certificate serial: 019B78A33343C3537E223ABD9DFCDAC86F0B Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/aMb6lxNGb2-liUxIi8yk_IeHIOY.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209912 IP address blocks: 37.44.232.0/22 maxlen: 22 37.44.232.0/24 maxlen: 24 37.44.233.0/24 maxlen: 24 37.44.234.0/24 maxlen: 24 37.44.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:33:43:c3:53:7e:22:3a:bd:9d:fc:da:c8:6f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68c6fa9713466f6fa5894c488bcca4fc878720e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:4a:18:7b:75:3f:a7:20:72:5a:72:bd:40: 02:c7:eb:d0:80:86:a9:11:d8:50:37:6c:3a:68:52: 7a:66:08:d1:9c:78:cf:4d:7f:a0:28:f3:90:fa:f7: 27:bc:17:31:36:03:a4:07:14:b7:cd:aa:d0:41:69: 90:b1:96:25:fb:c1:02:f6:5f:4c:51:df:6e:e1:23: 73:27:ca:e0:ba:1c:03:2f:f3:50:12:1c:fb:72:a5: 70:84:5b:90:71:7d:be:b7:a3:c9:58:da:4d:b4:e6: 9c:bd:e9:28:e1:9b:05:03:c4:93:3a:97:bc:47:60: d3:c3:77:e6:bc:54:85:f6:2c:bd:94:d8:59:61:e9: 4c:eb:06:53:93:14:48:54:81:9c:18:f3:2b:98:d6: 13:3b:1d:46:93:a1:cb:bb:c3:1a:bc:7f:39:71:de: 8a:d5:e2:6a:42:cf:19:3d:77:cf:f7:d7:4e:1b:91: 30:87:d5:a0:ae:f3:bd:23:9c:63:1c:80:93:e5:f9: 5e:cc:b9:0c:63:97:e5:3c:7e:21:53:af:1a:1b:3d: 91:5e:81:7a:49:58:10:90:42:83:6e:47:66:1a:9c: 2c:85:cd:df:46:bb:90:4d:a4:6f:d8:0a:6d:0b:20: f4:36:3c:3d:ce:3e:6b:1f:4e:86:4e:4a:26:ad:29: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C6:FA:97:13:46:6F:6F:A5:89:4C:48:8B:CC:A4:FC:87:87:20:E6 X509v3 Authority Key Identifier: keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/aMb6lxNGb2-liUxIi8yk_IeHIOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.232.0/22 Signature Algorithm: sha256WithRSAEncryption 48:b6:d9:6e:47:f0:32:18:f6:d3:7e:20:fc:d0:8b:5d:97:1f: 81:21:c8:a2:eb:a5:58:32:58:82:c9:7b:bf:80:79:1c:03:1f: 20:90:f4:02:06:f5:95:ba:17:bd:1c:3e:bb:69:a6:50:c6:a1: 2e:6e:57:3b:45:54:65:d3:6b:9c:12:48:9c:e0:2e:85:7a:5b: a1:65:85:05:d8:3c:f4:2b:74:47:c4:c6:1b:18:fe:a3:e5:2e: 15:ea:d0:74:4f:02:e7:a1:04:22:c1:7f:9e:61:1e:a9:06:b0: a9:26:07:1f:d1:39:d3:3a:cf:7b:d3:1b:38:2a:f8:6d:25:3a: 1e:f3:bb:d5:9c:e2:46:4e:03:68:c9:3d:d7:89:b7:7c:9e:4f: cb:bd:b2:5c:9f:c9:e9:36:47:1a:52:16:3e:ab:81:ee:48:c2: 0a:0f:79:1e:dc:af:05:40:70:eb:2b:90:86:3b:2e:a5:68:f0: c0:e0:cc:e5:1b:39:9e:8a:8d:6d:fa:9a:7d:7c:9f:60:5d:e6: 29:d3:ac:3a:2f:52:e6:b7:81:63:99:e4:2d:7d:35:f1:88:01: 4f:9e:7e:46:6c:bd:8a:a9:4e:ca:d9:eb:f0:0a:c5:f4:66:45: 1e:bc:f6:0c:f1:24:05:ed:ef:03:fd:c4:61:c7:af:0a:cc:1b: 25:c7:cd:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozNDw1N+Ijq9nfzayG8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5OWI0NzM5NDM3YjU1Zjk0NGQyMjI5ZDE2YjZlNmZhNTk5 MTk2ODcwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGM2ZmE5NzEzNDY2ZjZmYTU4OTRjNDg4YmNjYTRmYzg3ODcyMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsulKGHt1P6cgclpyvUACx+vQgIap EdhQN2w6aFJ6ZgjRnHjPTX+gKPOQ+vcnvBcxNgOkBxS3zarQQWmQsZYl+8EC9l9M Ud9u4SNzJ8rguhwDL/NQEhz7cqVwhFuQcX2+t6PJWNpNtOacveko4ZsFA8STOpe8 R2DTw3fmvFSF9iy9lNhZYelM6wZTkxRIVIGcGPMrmNYTOx1Gk6HLu8MavH85cd6K 1eJqQs8ZPXfP99dOG5Ewh9WgrvO9I5xjHICT5flezLkMY5flPH4hU68aGz2RXoF6 SVgQkEKDbkdmGpwshc3fRruQTaRv2AptCyD0Njw9zj5rH06GTkomrSmTgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjG+pcTRm9vpYlMSIvMpPyHhyDmMB8GA1UdIwQY MBaAFKmbRzlDe1X5RNIinRa25vpZkZaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUt ZTQ3NTY0Y2QwYmFlLzEvYU1iNmx4TkdiMi1saVV4SWk4eWtfSWVISU9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hNDExNGUtZGIxNC00NGI0LTliMjUtZTQ3NTY0Y2QwYmFl LzEvcVp0SE9VTjdWZmxFMGlLZEZyYm0tbG1SbG9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJSzoMA0G CSqGSIb3DQEBCwUAA4IBAQBIttluR/AyGPbTfiD80Itdlx+BIcii66VYMliCyXu/ gHkcAx8gkPQCBvWVuhe9HD67aaZQxqEublc7RVRl02ucEkic4C6FeluhZYUF2Dz0 K3RHxMYbGP6j5S4V6tB0TwLnoQQiwX+eYR6pBrCpJgcf0TnTOs970xs4KvhtJToe 87vVnOJGTgNoyT3Xibd8nk/LvbJcn8npNkcaUhY+q4HuSMIKD3ke3K8FQHDrK5CG Oy6laPDA4MzlGzmeio1t+pp9fJ9gXeYp06w6L1Lmt4FjmeQtfTXxiAFPnn5GbL2K qU7K2evwCsX0ZkUevPYM8SQF7e8D/cRhx68KzBslx82+ -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:59 2026 by rpki-client