This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/q8LLAWsYj15dDU4uGxTr8uDvbqE.roa File: q8LLAWsYj15dDU4uGxTr8uDvbqE.roa (raw, json) Hash identifier: +TDQWUOOqKp5vb78QVJ0zxHTWhdeGR0lnx+TBsmkF48= Subject key identifier: AB:C2:CB:01:6B:18:8F:5E:5D:0D:4E:2E:1B:14:EB:F2:E0:EF:6E:A1 Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b Certificate serial: 019B7CECBB527AFA9FA7E957E9E83607438C Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/q8LLAWsYj15dDU4uGxTr8uDvbqE.roa Signing time: Fri 02 Jan 2026 04:17:27 +0000 ROA not before: Fri 02 Jan 2026 04:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57074 IP address blocks: 37.0.104.0/21 maxlen: 24 37.26.248.0/24 maxlen: 24 37.26.249.0/24 maxlen: 24 37.26.251.0/24 maxlen: 24 89.22.8.0/21 maxlen: 21 91.230.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:bb:52:7a:fa:9f:a7:e9:57:e9:e8:36:07:43:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b Validity Not Before: Jan 2 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abc2cb016b188f5e5d0d4e2e1b14ebf2e0ef6ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:3a:8d:85:fc:82:10:cf:2a:a5:d1:6b:3f: f0:15:74:ff:5c:ec:e7:6e:81:05:10:68:39:1f:66: ba:d6:25:d6:df:eb:ff:14:bb:e6:6d:9e:39:54:25: a9:24:cb:55:20:98:c3:86:d4:b5:62:95:4b:99:8e: 9f:45:5f:37:7b:d3:aa:b6:f8:0e:9a:6c:19:b8:8b: 81:d2:63:ca:3a:3d:7e:f6:c2:df:c9:12:e6:88:bb: 0e:e0:e3:32:11:ad:ef:83:a9:90:c5:8c:22:8a:73: 4e:81:96:66:d3:6a:7f:47:84:e6:af:47:7b:f6:7e: 92:a5:82:31:8f:56:e0:00:5f:01:56:db:fc:ff:71: 44:01:19:c4:d3:2a:d0:56:7d:6a:ce:9f:88:b4:f1: 5a:57:8e:f9:99:57:23:1f:eb:53:61:96:6b:1d:d2: 14:92:70:ad:4e:c0:53:f6:5d:21:ac:82:f2:25:16: 15:bc:51:99:e3:bc:96:f3:2f:06:cd:a3:c2:d1:95: 5d:48:c5:6d:14:07:88:f7:9e:dc:4c:6c:45:98:20: 6e:dc:77:96:b9:8a:1e:44:d8:56:a4:1d:65:5b:6c: b1:1f:97:75:43:5f:30:1b:09:d4:ed:4f:52:e6:2e: cd:d0:38:99:0d:62:2f:71:86:1f:4b:98:b5:ab:3f: eb:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C2:CB:01:6B:18:8F:5E:5D:0D:4E:2E:1B:14:EB:F2:E0:EF:6E:A1 X509v3 Authority Key Identifier: keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/q8LLAWsYj15dDU4uGxTr8uDvbqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.104.0/21 37.26.248.0/23 37.26.251.0/24 89.22.8.0/21 91.230.104.0/23 Signature Algorithm: sha256WithRSAEncryption 90:14:a5:4f:a2:3d:f9:21:49:f0:fc:db:9a:38:30:b1:b1:61: 63:55:28:9c:e2:e9:ee:8b:6e:96:26:be:11:f3:2f:43:17:11: cc:64:0a:ad:06:14:f6:83:73:58:c8:bc:67:46:29:1d:f9:63: 33:7f:9a:1f:fc:89:be:02:23:ff:1c:6e:43:0f:ed:23:98:05: 83:c5:a8:3b:f8:35:22:17:9c:25:42:ee:8a:61:45:07:26:27: 89:80:d8:2a:e1:27:8d:d9:29:ca:7c:59:dd:6d:e7:d5:82:d4: ff:0e:30:6a:be:9a:ba:d3:28:11:ee:bf:3f:1e:97:6b:ec:88: 8d:64:1f:70:fa:26:5a:99:26:8d:14:d3:14:38:61:72:c6:1c: 6e:01:7e:e0:a7:b6:30:d6:af:2d:54:db:af:16:0d:33:fe:7d: 28:d8:58:da:72:90:25:5e:b3:73:fb:bc:b4:5e:9d:5e:ce:c6: 6b:9b:92:52:55:77:ef:27:1e:91:5c:48:dd:47:3d:14:d4:7d: 34:39:77:46:5d:1c:d1:fd:0a:20:98:bc:24:06:8d:f5:2c:b7: 21:66:5c:30:26:21:02:c9:55:84:11:8c:5e:ac:71:00:71:02: 04:68:ad:fe:bf:d8:b6:8a:3e:2f:6c:64:8d:36:00:21:61:df: 49:86:2b:44 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt87LtSevqfp+lX6eg2B0OMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZGVlNmFjYmM3ODJiOGM3Njk2YTQwYjI4ZTgwMzM5NjE5 ZDBmMWIwHhcNMjYwMTAyMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmMyY2IwMTZiMTg4ZjVlNWQwZDRlMmUxYjE0ZWJmMmUwZWY2ZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq86jYX8ghDPKqXRaz/wFXT/XOzn boEFEGg5H2a61iXW3+v/FLvmbZ45VCWpJMtVIJjDhtS1YpVLmY6fRV83e9OqtvgO mmwZuIuB0mPKOj1+9sLfyRLmiLsO4OMyEa3vg6mQxYwiinNOgZZm02p/R4Tmr0d7 9n6SpYIxj1bgAF8BVtv8/3FEARnE0yrQVn1qzp+ItPFaV475mVcjH+tTYZZrHdIU knCtTsBT9l0hrILyJRYVvFGZ47yW8y8GzaPC0ZVdSMVtFAeI957cTGxFmCBu3HeW uYoeRNhWpB1lW2yxH5d1Q18wGwnU7U9S5i7N0DiZDWIvcYYfS5i1qz/rmQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKvCywFrGI9eXQ1OLhsU6/Lg726hMB8GA1UdIwQY MBaAFDfe5qy8eCuMdpakCyjoAzlhnQ8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wMjBkNDctMmNjMC00MzZiLWI5Zjkt YjczYmZjY2I0ZTA4LzEvcThMTEFXc1lqMTVkRFU0dUd4VHI4dUR2YnFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wMjBkNDctMmNjMC00MzZiLWI5ZjktYjczYmZjY2I0ZTA4 LzEvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDJQBoAwQB JRr4AwQAJRr7AwQDWRYIAwQBW+ZoMA0GCSqGSIb3DQEBCwUAA4IBAQCQFKVPoj35 IUnw/NuaODCxsWFjVSic4unui26WJr4R8y9DFxHMZAqtBhT2g3NYyLxnRikd+WMz f5of/Im+AiP/HG5DD+0jmAWDxag7+DUiF5wlQu6KYUUHJieJgNgq4SeN2SnKfFnd befVgtT/DjBqvpq60ygR7r8/Hpdr7IiNZB9w+iZamSaNFNMUOGFyxhxuAX7gp7Yw 1q8tVNuvFg0z/n0o2FjacpAlXrNz+7y0Xp1ezsZrm5JSVXfvJx6RXEjdRz0U1H00 OXdGXRzR/QogmLwkBo31LLchZlwwJiECyVWEEYxerHEAcQIEaK3+v9i2ij4vbGSN NgAhYd9JhitE -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:25 2026 by rpki-client