This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/jTogJ7YuBJVGLeSWAWCo7WEnRt8.roa File: jTogJ7YuBJVGLeSWAWCo7WEnRt8.roa (raw, json) Hash identifier: rcVg4MFo6BBLpVaNgO5+LIgDyJsxyuxnJwO/3OO9u5A= Subject key identifier: 8D:3A:20:27:B6:2E:04:95:46:2D:E4:96:01:60:A8:ED:61:27:46:DF Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1 Certificate serial: 019B79ED046FAA348406E49338E21A3BD804 Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/jTogJ7YuBJVGLeSWAWCo7WEnRt8.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198770 IP address blocks: 37.18.74.0/24 maxlen: 24 37.18.75.0/24 maxlen: 24 37.18.76.0/24 maxlen: 24 37.18.77.0/24 maxlen: 24 37.230.152.0/24 maxlen: 24 37.230.153.0/24 maxlen: 24 37.230.154.0/24 maxlen: 24 37.230.155.0/24 maxlen: 24 37.230.248.0/24 maxlen: 24 62.113.60.0/24 maxlen: 24 62.113.61.0/24 maxlen: 24 62.113.62.0/24 maxlen: 24 62.113.63.0/24 maxlen: 24 85.92.116.0/24 maxlen: 24 85.92.117.0/24 maxlen: 24 85.92.118.0/24 maxlen: 24 128.0.66.0/24 maxlen: 24 128.0.67.0/24 maxlen: 24 141.101.204.0/24 maxlen: 24 141.101.228.0/24 maxlen: 24 141.101.231.0/24 maxlen: 24 178.170.225.0/24 maxlen: 24 2a0d:b1c0:c0::/44 maxlen: 44 2a0d:b1c0:d0::/44 maxlen: 44 2a0d:b1c0:500::/44 maxlen: 48 2a0d:b1c0:aaaa::/48 maxlen: 48 2a0d:b1c0:abc0::/44 maxlen: 44 2a0d:b1c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:04:6f:aa:34:84:06:e4:93:38:e2:1a:3b:d8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d3a2027b62e0495462de4960160a8ed612746df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:43:3f:42:0d:70:ba:d8:a2:83:e9:f0:4b: dc:7e:ef:de:8d:0d:a1:ec:43:55:30:5c:b3:49:91: ae:5b:8f:db:b3:76:12:26:23:16:e3:5d:3a:7f:75: be:4d:5b:b6:46:31:46:db:7a:f5:75:be:8d:be:ba: b4:6c:b5:9e:ff:00:b0:58:98:61:83:09:3a:e2:e9: fa:f1:48:9b:75:9e:c7:ba:fa:dc:72:a5:ae:a7:05: 2d:ed:ba:07:3e:46:4d:91:37:ea:63:3e:6e:75:05: 8f:32:80:57:63:5f:da:2a:f8:4b:ad:67:26:c2:a2: 5f:37:5a:e3:18:bc:80:93:5c:b8:dc:fa:01:86:a6: 5c:73:de:f7:42:e5:40:33:a1:43:da:15:2f:34:69: f3:4c:3d:92:2b:78:59:9b:bf:25:73:45:15:ce:8b: 26:45:ea:d0:14:4e:c2:3f:8c:d3:8c:7f:ad:d2:b2: 3e:55:49:ef:c4:f2:b5:9d:76:7f:2b:b6:9b:eb:e1: 72:86:db:4f:06:78:68:06:98:d7:b8:ad:e0:d4:59: 70:bf:f7:a2:8e:18:7c:db:64:12:03:b3:57:18:c0: 10:a0:a5:f5:34:a4:e1:da:c5:9c:51:28:d4:67:52: b4:28:1f:24:d1:86:52:9c:75:c0:e8:fc:cc:1c:f3: 4a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3A:20:27:B6:2E:04:95:46:2D:E4:96:01:60:A8:ED:61:27:46:DF X509v3 Authority Key Identifier: keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/jTogJ7YuBJVGLeSWAWCo7WEnRt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.74.0-37.18.77.255 37.230.152.0/22 37.230.248.0/24 62.113.60.0/22 85.92.116.0-85.92.118.255 128.0.66.0/23 141.101.204.0/24 141.101.228.0/24 141.101.231.0/24 178.170.225.0/24 IPv6: 2a0d:b1c0:c0::/43 2a0d:b1c0:500::/44 2a0d:b1c0:aaaa::/48 2a0d:b1c0:abc0::/44 2a0d:b1c0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 57:50:fd:e3:20:04:da:d5:04:a7:b5:06:d3:6a:dd:53:2d:e2: a5:a5:27:cf:56:f9:4d:ac:aa:cc:04:8d:b7:2a:a9:37:87:58: fe:5b:a6:81:96:11:23:da:b2:8f:2d:ee:69:28:d8:6e:ec:18: ed:0e:f3:cf:58:d9:1e:a4:d5:9e:57:66:11:79:34:53:8e:3d: df:44:43:e1:68:69:1d:2e:17:77:d6:bb:4e:70:53:31:8c:4a: d7:6c:3c:11:f2:18:a2:52:8d:51:41:1f:01:36:8d:30:3e:df: 5e:ca:a6:e9:23:7f:8d:5d:d3:99:d6:46:ad:f9:31:a4:2f:6a: 44:fe:c6:55:00:c1:76:89:35:bb:30:00:93:f5:50:ed:8e:1b: 03:27:29:43:44:38:ad:d1:72:25:6f:db:5c:03:81:d5:b6:b8: 78:ed:6c:20:90:fe:31:cd:cb:23:b5:9f:c0:3d:66:d3:60:78: 87:eb:00:37:3e:f2:93:20:58:27:33:73:84:1b:97:da:ea:d5: 64:08:de:e6:3d:c0:1b:2f:8a:92:2e:83:06:4f:af:83:17:1a: 31:b5:66:5b:b3:7c:e5:d5:81:75:9c:59:f2:81:a5:9b:b6:b0: da:91:93:85:4f:3f:a2:70:eb:86:ba:fe:c5:c1:1c:a5:82:a7: 63:6b:ee:6c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt57QRvqjSEBuSTOOIaO9gEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2 ODc2YTEwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDNhMjAyN2I2MmUwNDk1NDYyZGU0OTYwMTYwYThlZDYxMjc0NmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQNDP0INcLrYooPp8Evcfu/ejQ2h 7ENVMFyzSZGuW4/bs3YSJiMW4106f3W+TVu2RjFG23r1db6Nvrq0bLWe/wCwWJhh gwk64un68UibdZ7HuvrccqWupwUt7boHPkZNkTfqYz5udQWPMoBXY1/aKvhLrWcm wqJfN1rjGLyAk1y43PoBhqZcc973QuVAM6FD2hUvNGnzTD2SK3hZm78lc0UVzosm RerQFE7CP4zTjH+t0rI+VUnvxPK1nXZ/K7ab6+FyhttPBnhoBpjXuK3g1Flwv/ei jhh822QSA7NXGMAQoKX1NKTh2sWcUSjUZ1K0KB8k0YZSnHXA6PzMHPNKMQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFI06ICe2LgSVRi3klgFgqO1hJ0bfMB8GA1UdIwQY MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt ZWVjNDg4NWM0ZjhkLzEvalRvZ0o3WXVCSlZHTGVTV0FXQ283V0VuUnQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTBSBAIAATBMMAwDBAEl EkoDBAElEkwDBAIl5pgDBAAl5vgDBAI+cTwwDAMEAlVcdAMEAFVcdgMEAYAAQgME AI1lzAMEAI1l5AMEAI1l5wMEALKq4TAzBAIAAjAtAwcFKg2xwADAAwcEKg2xwAUA AwcAKg2xwKqqAwcEKg2xwKvAAwcAKg2xwP//MA0GCSqGSIb3DQEBCwUAA4IBAQBX UP3jIATa1QSntQbTat1TLeKlpSfPVvlNrKrMBI23Kqk3h1j+W6aBlhEj2rKPLe5p KNhu7BjtDvPPWNkepNWeV2YReTRTjj3fREPhaGkdLhd31rtOcFMxjErXbDwR8hii Uo1RQR8BNo0wPt9eyqbpI3+NXdOZ1kat+TGkL2pE/sZVAMF2iTW7MACT9VDtjhsD JylDRDit0XIlb9tcA4HVtrh47WwgkP4xzcsjtZ/APWbTYHiH6wA3PvKTIFgnM3OE G5fa6tVkCN7mPcAbL4qSLoMGT6+DFxoxtWZbs3zl1YF1nFnygaWbtrDakZOFTz+i cOuGuv7FwRylgqdja+5s -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:47 2026 by rpki-client