This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa File: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (raw, json) Hash identifier: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU= Subject key identifier: 75:2E:5E:09:04:64:10:06:FF:AF:28:72:4C:5A:96:82:60:A5:EC:AD Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C8056123E136E56B976D7DFFBCBDA0E Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61294 IP address blocks: 37.220.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:56:12:3e:13:6e:56:b9:76:d7:df:fb:cb:da:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=752e5e0904641006ffaf28724c5a968260a5ecad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:5b:45:28:54:52:c9:a5:63:3b:58:2c:9a: 00:b2:66:b6:4f:2a:28:34:7b:15:05:1c:c4:37:e2: 5c:bc:a3:10:85:da:1b:0d:06:ca:eb:dd:9f:b7:37: 1a:f0:17:8d:db:a6:71:d3:c7:97:00:f8:b8:e2:cb: d9:15:d6:0b:d4:f4:88:43:61:c6:c5:19:34:92:3d: 91:0d:46:66:cf:d8:89:4c:65:99:b1:fc:ea:88:70: 05:64:02:ac:bc:c6:9e:57:7c:5b:d5:9d:aa:f4:24: 2c:fa:68:5c:af:07:ed:28:52:14:bd:fa:41:a3:95: 9a:f4:3b:b0:a8:90:dc:08:99:03:f3:10:65:5c:d9: 81:e6:0b:c9:da:77:8b:a6:22:fd:c6:de:4d:99:44: de:83:72:d3:9f:3d:a2:34:83:17:ec:75:9f:bd:fe: 78:10:90:b0:53:27:b2:a3:fc:f4:94:fb:cf:06:2f: 89:f8:64:7b:6a:92:d2:d9:6c:ba:de:eb:78:84:54: 5b:d2:57:fe:56:4b:1e:89:a6:ca:20:31:21:94:34: f6:78:c5:f4:9f:60:aa:2f:85:36:d6:39:13:aa:87: e8:02:50:90:ad:58:b9:22:a4:6e:f0:9a:fd:60:fd: 25:f8:8e:7d:e6:af:e4:18:83:d4:6c:09:4c:46:46: 63:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2E:5E:09:04:64:10:06:FF:AF:28:72:4C:5A:96:82:60:A5:EC:AD X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.220.142.0/24 Signature Algorithm: sha256WithRSAEncryption 27:4b:23:83:34:8e:f6:05:ba:99:c5:50:16:ff:5c:44:9d:40: a3:e5:b5:28:72:01:61:05:ab:46:38:7d:0b:7e:3c:9f:42:69: 7c:76:76:ae:49:90:47:04:22:2b:f1:f0:42:8d:ce:03:67:20: 51:55:2c:83:61:ea:b2:81:8c:be:46:7e:ba:da:cf:18:b5:21: 07:96:8f:ef:57:eb:b5:ed:4e:a0:da:35:f7:a0:09:87:81:b6: 2a:ef:af:7b:04:2c:40:e8:aa:56:70:d5:9b:ce:3b:ff:d7:a0: 0a:9b:28:e8:5c:d9:55:d8:bc:02:4b:16:40:ef:42:33:a1:bc: f7:ed:c0:55:a9:84:a7:f8:75:7d:dc:35:ba:dc:ac:6d:dd:21: 81:f4:78:bb:95:df:ae:6e:59:df:b2:e5:d7:90:78:89:f2:81: bf:73:78:b2:9c:5d:41:68:d9:10:76:05:83:fa:60:c6:f5:80: 90:3f:b4:74:de:38:3e:d0:c8:a4:b0:c6:6a:47:33:cd:6b:f1: ea:1e:25:49:fa:70:ee:de:65:78:51:25:58:40:ce:14:0a:fb: 71:9b:10:2a:7d:5b:54:0f:cc:5f:78:5e:4e:28:35:c8:23:82: bc:e5:77:47:d1:ca:1b:c3:d5:47:09:db:44:8b:e7:bd:1c:60: 89:05:86:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFYSPhNuVrl219/7y9oOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTJlNWUwOTA0NjQxMDA2ZmZhZjI4NzI0YzVhOTY4MjYwYTVlY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuxbRShUUsmlYztYLJoAsma2Tyoo NHsVBRzEN+JcvKMQhdobDQbK692ftzca8BeN26Zx08eXAPi44svZFdYL1PSIQ2HG xRk0kj2RDUZmz9iJTGWZsfzqiHAFZAKsvMaeV3xb1Z2q9CQs+mhcrwftKFIUvfpB o5Wa9DuwqJDcCJkD8xBlXNmB5gvJ2neLpiL9xt5NmUTeg3LTnz2iNIMX7HWfvf54 EJCwUyeyo/z0lPvPBi+J+GR7apLS2Wy63ut4hFRb0lf+VkseiabKIDEhlDT2eMX0 n2CqL4U21jkTqofoAlCQrVi5IqRu8Jr9YP0l+I595q/kGIPUbAlMRkZjowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUuXgkEZBAG/68ockxaloJgpeytMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvZFM1ZUNRUmtFQWJfcnloeVRGcVdnbUNsN0swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJdyOMA0G CSqGSIb3DQEBCwUAA4IBAQAnSyODNI72BbqZxVAW/1xEnUCj5bUocgFhBatGOH0L fjyfQml8dnauSZBHBCIr8fBCjc4DZyBRVSyDYeqygYy+Rn662s8YtSEHlo/vV+u1 7U6g2jX3oAmHgbYq7697BCxA6KpWcNWbzjv/16AKmyjoXNlV2LwCSxZA70Izobz3 7cBVqYSn+HV93DW63Kxt3SGB9Hi7ld+ublnfsuXXkHiJ8oG/c3iynF1BaNkQdgWD +mDG9YCQP7R03jg+0MiksMZqRzPNa/HqHiVJ+nDu3mV4USVYQM4UCvtxmxAqfVtU D8xfeF5OKDXII4K85XdH0cobw9VHCdtEi+e9HGCJBYaR -----END CERTIFICATE-----Generated at Wed Jan 21 08:20:07 2026 by rpki-client