This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/tj7JglNBYoUgUzK65iM2oKW2CKA.roa File: tj7JglNBYoUgUzK65iM2oKW2CKA.roa (raw, json) Hash identifier: f8QCODS044Wg/Ezuz3x9qHRgp8fLuEd7Np2yDguXhQI= Subject key identifier: B6:3E:C9:82:53:41:62:85:20:53:32:BA:E6:23:36:A0:A5:B6:08:A0 Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537 Certificate serial: 019B783507293373820FC8F0D26A7D9B7ACC Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/tj7JglNBYoUgUzK65iM2oKW2CKA.roa Signing time: Thu 01 Jan 2026 06:18:19 +0000 ROA not before: Thu 01 Jan 2026 06:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57642 IP address blocks: 37.25.56.0/21 maxlen: 21 37.25.56.0/24 maxlen: 24 193.228.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:07:29:33:73:82:0f:c8:f0:d2:6a:7d:9b:7a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537 Validity Not Before: Jan 1 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b63ec98253416285205332bae62336a0a5b608a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:54:62:79:06:76:55:60:40:e4:72:fd:0c:6a: 57:42:b1:56:a2:e9:b6:13:bb:12:14:60:e5:bd:70: ca:35:cd:9f:9d:47:46:9e:5d:c7:86:15:11:98:5c: d5:5c:67:d2:98:58:3a:aa:c1:ac:31:2f:8a:09:e9: 9e:1e:34:7d:cc:b0:ed:ea:0a:22:5a:78:e6:06:ce: b7:72:fb:83:52:5e:d0:32:23:c0:d2:89:bc:03:5b: 98:11:1a:2b:e8:be:b0:27:f6:19:13:93:db:a8:5d: fd:71:6b:d2:c9:60:cb:80:8a:78:f7:ea:82:2b:c5: f0:b4:c6:62:e5:eb:3a:c6:95:73:36:68:38:a8:64: 9f:86:77:ad:df:94:a5:78:33:48:fa:19:85:81:05: b1:bc:8e:e5:12:c8:41:1c:f8:73:64:c2:47:9d:19: 83:d2:b8:56:3c:4c:29:d0:47:76:fa:f4:cb:ef:bc: 73:fe:45:17:18:b9:2b:6c:e1:ca:32:f1:d7:fc:a0: 4f:4b:dd:6f:90:11:92:df:9c:f4:54:cf:9b:9a:3b: 2d:9c:ec:15:e9:0d:f5:21:d0:8a:0e:d9:78:ed:8a: df:9c:e9:4a:58:e6:79:26:41:e5:4d:f8:f7:82:11: 46:ef:54:b4:a2:35:ef:a8:0d:3d:62:0f:6c:32:4b: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3E:C9:82:53:41:62:85:20:53:32:BA:E6:23:36:A0:A5:B6:08:A0 X509v3 Authority Key Identifier: keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/tj7JglNBYoUgUzK65iM2oKW2CKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.25.56.0/21 193.228.156.0/24 Signature Algorithm: sha256WithRSAEncryption 58:94:60:cf:ef:2c:62:28:a3:94:6c:16:6f:2a:cc:b7:31:ba: d0:35:b3:76:42:6c:28:f2:3e:89:e5:8c:85:15:41:72:20:fb: 93:d2:46:86:1d:2b:b1:d8:03:b2:86:52:54:0e:82:4e:4d:76: e8:80:fb:b6:f2:04:e7:eb:ae:5c:8e:19:56:3d:87:8e:9f:68: 10:73:da:f7:ff:f3:a3:13:26:c7:26:b4:60:bc:14:29:2f:bc: c1:91:64:0b:ed:62:9f:93:95:06:71:b2:6d:95:54:2f:cb:07: 0f:2d:25:3e:f3:3b:8d:22:3a:48:60:8c:46:86:f7:27:c3:f1: 1f:90:03:43:32:60:46:2d:8f:a2:16:68:28:ed:53:2f:54:02: 65:18:19:cc:cc:7f:e2:36:cc:90:d2:f8:6d:84:c3:ab:88:1c: 9c:d7:25:45:a9:0a:84:f2:22:9f:ff:6b:34:18:0e:d3:ca:2c: 3a:22:47:95:59:37:ed:30:04:af:88:f5:4e:cc:a9:72:2c:cd: 84:7e:73:09:1b:04:5c:78:e3:a5:fe:7d:09:ca:cc:02:6a:b8: e9:60:11:80:5b:c6:65:35:d0:4d:80:14:97:06:d7:d2:62:09: c6:20:09:ef:f3:a3:bd:2c:2f:5b:8a:a1:48:ea:28:6a:75:db: 71:c6:77:fd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NQcpM3OCD8jw0mp9m3rMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ODg4MWUwNjM4M2ZkMmMzNmU5ZjI0NWM0YmZhMTMwMWQx NWE1MzcwHhcNMjYwMTAxMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjNlYzk4MjUzNDE2Mjg1MjA1MzMyYmFlNjIzMzZhMGE1YjYwOGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lRieQZ2VWBA5HL9DGpXQrFWoum2 E7sSFGDlvXDKNc2fnUdGnl3HhhURmFzVXGfSmFg6qsGsMS+KCemeHjR9zLDt6goi WnjmBs63cvuDUl7QMiPA0om8A1uYERor6L6wJ/YZE5PbqF39cWvSyWDLgIp49+qC K8XwtMZi5es6xpVzNmg4qGSfhnet35SleDNI+hmFgQWxvI7lEshBHPhzZMJHnRmD 0rhWPEwp0Ed2+vTL77xz/kUXGLkrbOHKMvHX/KBPS91vkBGS35z0VM+bmjstnOwV 6Q31IdCKDtl47YrfnOlKWOZ5JkHlTfj3ghFG71S0ojXvqA09Yg9sMktplQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLY+yYJTQWKFIFMyuuYjNqCltgigMB8GA1UdIwQY MBaAFDmIgeBjg/0sNunyRcS/oTAdFaU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2It MzU5ZTRlNGQ5MTc1LzEvdGo3SmdsTkJZb1VnVXpLNjVpTTJvS1cyQ0tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2ItMzU5ZTRlNGQ5MTc1 LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDJRk4AwQA weScMA0GCSqGSIb3DQEBCwUAA4IBAQBYlGDP7yxiKKOUbBZvKsy3MbrQNbN2Qmwo 8j6J5YyFFUFyIPuT0kaGHSux2AOyhlJUDoJOTXbogPu28gTn665cjhlWPYeOn2gQ c9r3//OjEybHJrRgvBQpL7zBkWQL7WKfk5UGcbJtlVQvywcPLSU+8zuNIjpIYIxG hvcnw/EfkANDMmBGLY+iFmgo7VMvVAJlGBnMzH/iNsyQ0vhthMOriByc1yVFqQqE 8iKf/2s0GA7Tyiw6IkeVWTftMASviPVOzKlyLM2EfnMJGwRceOOl/n0JyswCarjp YBGAW8ZlNdBNgBSXBtfSYgnGIAnv86O9LC9biqFI6ihqddtxxnf9 -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:19 2026 by rpki-client