This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa File: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (raw, json) Hash identifier: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk= Subject key identifier: 2F:FF:41:1B:9C:5D:EC:4F:96:BC:CF:30:34:A8:37:26:13:32:1E:7D Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf Certificate serial: 019B77593008D32D82FE09FCD555871238F7 Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa Signing time: Thu 01 Jan 2026 02:18:12 +0000 ROA not before: Thu 01 Jan 2026 02:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200548 IP address blocks: 37.16.92.0/22 maxlen: 22 37.16.92.0/24 maxlen: 24 37.16.93.0/24 maxlen: 24 37.16.94.0/24 maxlen: 24 37.16.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:30:08:d3:2d:82:fe:09:fc:d5:55:87:12:38:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fff411b9c5dec4f96bccf3034a8372613321e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:28:72:61:f5:71:6b:75:72:16:60:9b:f6: 81:9e:94:81:06:28:99:fb:21:20:ee:e6:09:f7:f7: e5:1d:62:02:a2:c2:f5:70:de:f8:4b:73:f4:37:96: bc:66:ee:4e:db:a1:6f:d3:f1:67:e1:03:a9:c4:91: 4a:2f:f5:e5:07:cf:e8:b5:49:83:91:7b:d8:f1:d0: 91:83:c3:bf:4d:d7:9e:92:8f:99:62:fd:68:62:f3: 8d:3a:93:54:58:b3:26:dc:2b:5c:b7:32:01:80:ec: a8:d6:f4:bb:9a:fc:b8:c3:30:af:80:9f:16:2c:91: 3a:7a:dd:09:5f:fe:41:cf:6b:4f:35:6d:13:4a:2b: cd:28:ce:9a:e1:2b:b5:df:ef:e0:f8:99:21:ec:b3: 4a:36:23:fb:70:5a:06:20:21:fe:9a:f8:ff:10:fa: 81:b5:80:44:5b:66:15:6f:f0:35:ba:96:fe:fb:7e: 13:0b:4f:9d:e9:2c:78:c8:1b:b1:6b:6d:4c:b7:92: dc:6e:f6:50:ce:ff:12:2d:81:91:73:d7:15:aa:da: f8:72:92:7e:55:92:ff:ba:52:a8:1f:ae:60:fd:1e: db:4c:91:85:e4:9b:44:f3:b2:f3:41:a6:82:40:99: 87:70:7e:3d:22:d9:91:c3:1f:26:b5:0d:90:84:16: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FF:41:1B:9C:5D:EC:4F:96:BC:CF:30:34:A8:37:26:13:32:1E:7D X509v3 Authority Key Identifier: keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.92.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:f2:a3:f9:5e:0c:c8:1a:e0:d1:00:a7:9e:8f:08:71:2d:27: fb:b1:b4:e7:d6:ab:cb:5b:95:17:af:91:2d:9e:88:25:35:f0: d2:fd:43:99:2c:b7:00:54:cc:94:a4:dc:22:4e:bb:db:d1:16: 87:5e:d1:69:12:11:e0:cc:e8:de:f1:5b:6f:c7:11:73:6c:e6: 2f:17:e5:a2:18:7f:5a:2f:eb:40:a2:54:11:a6:db:ab:dd:e7: 0a:a2:43:a2:bb:c9:ae:ec:b5:2d:d3:37:57:b4:91:e2:b9:e4: 05:ef:31:6c:40:e2:33:16:10:05:16:43:a2:cd:7a:1c:95:61: 12:aa:61:0b:fd:af:a8:ea:a4:d7:90:e9:f3:91:56:64:fc:81: 0c:25:9b:0e:2d:e3:1a:28:dc:5c:74:e0:67:bc:71:74:70:57: b1:e7:2f:33:90:ee:80:65:d3:70:4a:0a:5c:c3:0f:65:c9:6f: 1c:41:fe:2a:51:22:83:62:df:4c:87:d4:36:96:bb:18:47:bc: 85:90:64:ca:d0:5a:60:ef:c0:89:b6:e4:6d:d2:2b:ee:9d:26: df:1d:b1:0f:bf:25:8e:4f:27:28:5f:43:4e:1a:2e:50:1d:98: f0:3d:51:35:3f:a5:75:79:70:17:ad:af:ab:2d:41:57:64:4a: e6:8f:f8:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTAI0y2C/gn81VWHEjj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm NmE1Y2YwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmZmNDExYjljNWRlYzRmOTZiY2NmMzAzNGE4MzcyNjEzMzIxZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3MocmH1cWt1chZgm/aBnpSBBiiZ +yEg7uYJ9/flHWICosL1cN74S3P0N5a8Zu5O26Fv0/Fn4QOpxJFKL/XlB8/otUmD kXvY8dCRg8O/Tdeeko+ZYv1oYvONOpNUWLMm3CtctzIBgOyo1vS7mvy4wzCvgJ8W LJE6et0JX/5Bz2tPNW0TSivNKM6a4Su13+/g+Jkh7LNKNiP7cFoGICH+mvj/EPqB tYBEW2YVb/A1upb++34TC0+d6Sx4yBuxa21Mt5LcbvZQzv8SLYGRc9cVqtr4cpJ+ VZL/ulKoH65g/R7bTJGF5JtE87LzQaaCQJmHcH49ItmRwx8mtQ2QhBYEgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC//QRucXexPlrzPMDSoNyYTMh59MB8GA1UdIwQY MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt Zjk5OWUxYmViOTYxLzEvTF85Qkc1eGQ3RS1Xdk04d05LZzNKaE15SG4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJRBcMA0G CSqGSIb3DQEBCwUAA4IBAQAf8qP5XgzIGuDRAKeejwhxLSf7sbTn1qvLW5UXr5Et noglNfDS/UOZLLcAVMyUpNwiTrvb0RaHXtFpEhHgzOje8VtvxxFzbOYvF+WiGH9a L+tAolQRptur3ecKokOiu8mu7LUt0zdXtJHiueQF7zFsQOIzFhAFFkOizXoclWES qmEL/a+o6qTXkOnzkVZk/IEMJZsOLeMaKNxcdOBnvHF0cFex5y8zkO6AZdNwSgpc ww9lyW8cQf4qUSKDYt9Mh9Q2lrsYR7yFkGTK0Fpg78CJtuRt0ivunSbfHbEPvyWO TycoX0NOGi5QHZjwPVE1P6V1eXAXra+rLUFXZErmj/gs -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:32 2026 by rpki-client