This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/iAE2jSMHvj3KM0VL_KIIdjc4Pbw.roa File: iAE2jSMHvj3KM0VL_KIIdjc4Pbw.roa (raw, json) Hash identifier: btcDN1EO2IkvpjFNTIzzJGr341Fzj5AkaE+wKJ7Jt0o= Subject key identifier: 88:01:36:8D:23:07:BE:3D:CA:33:45:4B:FC:A2:08:76:37:38:3D:BC Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Certificate serial: 019B7CECD66DCFFCE323AC3125055678B35D Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/iAE2jSMHvj3KM0VL_KIIdjc4Pbw.roa Signing time: Fri 02 Jan 2026 04:17:34 +0000 ROA not before: Fri 02 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 37.16.91.0/24 maxlen: 24 45.86.85.0/24 maxlen: 24 62.68.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:d6:6d:cf:fc:e3:23:ac:31:25:05:56:78:b3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820 Validity Not Before: Jan 2 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8801368d2307be3dca33454bfca2087637383dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:4c:2e:f5:60:0b:92:4a:a1:57:fd:28:42: c5:c4:84:bf:72:ca:cc:2a:27:61:6e:92:9f:7d:19: 4c:88:ef:f5:6d:03:fb:d2:5f:a0:af:91:e6:18:fe: e2:da:97:b2:96:04:ea:a8:cb:08:52:6f:3c:7d:6e: db:13:50:09:a4:56:df:2b:0d:02:68:f3:b0:9c:0d: 36:b2:ca:b0:29:4b:18:90:8a:4f:05:84:eb:e5:5d: af:db:00:8a:93:83:62:3b:a1:09:62:f1:a1:6f:cf: bb:db:df:77:d2:17:92:6b:0c:6f:cd:7b:a7:e8:21: a2:c4:99:a0:40:71:3d:49:82:b1:90:7c:a4:9b:1e: 47:30:19:8e:ad:0e:58:4d:c0:3a:26:d1:f0:ed:4e: 03:fd:0e:37:6d:00:9c:54:db:21:cd:ce:22:3d:8c: d4:12:af:75:a4:8e:27:95:f9:ee:9b:5a:c5:78:64: 46:7b:58:52:4f:b4:68:91:bb:1c:c2:5e:57:02:2e: 1b:fd:3b:0b:0f:22:68:86:c8:76:13:3d:85:74:ea: ba:03:ad:2d:9d:fd:5a:34:f4:e5:0f:98:7c:07:c0: ca:db:7f:e6:1e:c7:23:90:5f:d4:fc:af:13:ed:22: 9a:f6:75:67:76:cc:20:50:f7:31:01:5c:4b:8a:38: 42:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:01:36:8D:23:07:BE:3D:CA:33:45:4B:FC:A2:08:76:37:38:3D:BC X509v3 Authority Key Identifier: keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/iAE2jSMHvj3KM0VL_KIIdjc4Pbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.91.0/24 45.86.85.0/24 62.68.89.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:f5:09:f8:16:d3:62:4a:cc:3d:84:d3:12:e8:2b:c3:d3:4d: fb:64:57:e1:a2:e0:99:33:62:17:3b:2f:8e:d9:13:eb:d7:48: a0:1d:03:0c:b0:39:ca:1d:a6:c5:1c:a5:a1:56:96:f0:a2:d6: 56:54:14:05:d4:db:75:17:ba:2e:c6:e3:41:a9:af:14:67:72: 65:b4:fa:0e:ca:8c:55:7c:3e:91:d6:38:45:1e:ec:21:22:0f: 97:91:e2:10:a2:6a:87:10:ff:52:c3:54:0e:42:22:1c:05:e6: 3d:e3:27:e9:89:4d:6e:cb:01:f4:67:03:90:e3:75:24:21:fa: 04:3c:ca:42:3d:9a:07:42:12:0b:75:58:c7:09:f3:72:22:55: bd:bc:c2:d1:a2:35:74:8f:eb:92:da:0b:40:68:82:f6:62:e8: 91:0d:44:f5:24:8b:94:36:4d:7e:db:4c:90:23:ec:85:0f:0e: 4a:a5:99:86:a8:4b:8a:be:d4:7b:c1:c8:0b:71:9e:ff:e3:e1: 14:2b:e2:23:a6:4d:2a:5f:71:fb:34:46:f5:89:f1:c0:0b:2c: 5b:23:5a:0e:60:fd:8e:ab:ec:88:94:79:b1:a1:5c:aa:02:ea: 98:49:1b:ba:cc:12:41:6c:6e:56:8a:ed:2a:88:80:39:0e:0b: bd:bb:a0:d0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87NZtz/zjI6wxJQVWeLNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1 OGM4MjAwHhcNMjYwMTAyMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODAxMzY4ZDIzMDdiZTNkY2EzMzQ1NGJmY2EyMDg3NjM3MzgzZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz15MLvVgC5JKoVf9KELFxIS/csrM KidhbpKffRlMiO/1bQP70l+gr5HmGP7i2peylgTqqMsIUm88fW7bE1AJpFbfKw0C aPOwnA02ssqwKUsYkIpPBYTr5V2v2wCKk4NiO6EJYvGhb8+729930heSawxvzXun 6CGixJmgQHE9SYKxkHykmx5HMBmOrQ5YTcA6JtHw7U4D/Q43bQCcVNshzc4iPYzU Eq91pI4nlfnum1rFeGRGe1hST7Rokbscwl5XAi4b/TsLDyJohsh2Ez2FdOq6A60t nf1aNPTlD5h8B8DK23/mHscjkF/U/K8T7SKa9nVndswgUPcxAVxLijhCSwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIgBNo0jB749yjNFS/yiCHY3OD28MB8GA1UdIwQY MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt NThjZjg5ODg4ZTJhLzEvaUFFMmpTTUh2ajNLTTBWTF9LSUlkamM0UGJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJRBbAwQA LVZVAwQAPkRZMA0GCSqGSIb3DQEBCwUAA4IBAQBL9Qn4FtNiSsw9hNMS6CvD0037 ZFfhouCZM2IXOy+O2RPr10igHQMMsDnKHabFHKWhVpbwotZWVBQF1Nt1F7ouxuNB qa8UZ3JltPoOyoxVfD6R1jhFHuwhIg+XkeIQomqHEP9Sw1QOQiIcBeY94yfpiU1u ywH0ZwOQ43UkIfoEPMpCPZoHQhILdVjHCfNyIlW9vMLRojV0j+uS2gtAaIL2YuiR DUT1JIuUNk1+20yQI+yFDw5KpZmGqEuKvtR7wcgLcZ7/4+EUK+Ijpk0qX3H7NEb1 ifHACyxbI1oOYP2Oq+yIlHmxoVyqAuqYSRu6zBJBbG5Wiu0qiIA5Dgu9u6DQ -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:28 2026 by rpki-client