This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/7c37mQO9hber9Y9a4WDKVYTKyGs.roa File: 7c37mQO9hber9Y9a4WDKVYTKyGs.roa (raw, json) Hash identifier: h/wnhDSGEGx3npO9CQ/X4FjS1+UA0bB6gXGJME9onWs= Subject key identifier: ED:CD:FB:99:03:BD:85:B7:AB:F5:8F:5A:E1:60:CA:55:84:CA:C8:6B Certificate issuer: /CN=7d59659636089e32324697629c218da38a2b673d Certificate serial: 019B7E38C00EB40829AC667BF490220F9E2B Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/7c37mQO9hber9Y9a4WDKVYTKyGs.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197540 IP address blocks: 202.61.192.0/20 maxlen: 22 202.61.224.0/20 maxlen: 24 202.61.240.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c0:0e:b4:08:29:ac:66:7b:f4:90:22:0f:9e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d59659636089e32324697629c218da38a2b673d Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edcdfb9903bd85b7abf58f5ae160ca5584cac86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:4e:d7:5c:6e:a2:09:17:36:dd:1b:93:61: 03:a7:25:7e:fc:ef:08:ca:70:fb:bd:76:93:c3:63: f5:9b:ea:6c:8a:7c:76:0c:94:f6:6c:aa:ec:8b:a3: e2:7a:27:41:e8:ab:2d:19:6f:2c:1f:f3:e7:97:4e: 72:21:f1:59:60:5b:48:4e:5c:4d:9c:97:9b:75:4f: 6b:bf:36:01:6d:72:33:60:de:b5:f1:b8:38:49:ef: fa:0c:2a:7e:aa:84:39:a7:a3:37:f3:1f:bc:8a:f8: 21:1b:d4:1e:80:5b:7c:fb:22:cd:fd:65:0a:55:08: 77:d6:be:f9:c2:b7:b3:d2:4e:4a:cc:f0:67:00:90: 32:8e:2e:4b:64:fa:3f:4d:c4:f3:9e:64:9b:d9:67: ea:02:c8:69:61:db:e5:48:a4:b5:00:d6:ab:bd:8c: b6:6a:bf:6c:cc:d5:b2:21:19:e6:bc:77:10:c1:4d: e4:dd:c8:74:b6:a9:db:1e:66:32:d3:2f:f0:58:1e: 17:47:7b:23:05:be:03:55:f2:32:bf:9f:0e:cc:29: b8:7b:2e:71:43:70:2c:6d:5c:2f:fb:78:2c:07:44: fe:37:bc:58:75:cb:48:d6:57:bb:74:32:11:ff:e1: 64:46:3e:93:38:2b:11:c3:a9:a6:3b:36:e7:4c:78: ef:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CD:FB:99:03:BD:85:B7:AB:F5:8F:5A:E1:60:CA:55:84:CA:C8:6B X509v3 Authority Key Identifier: keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/7c37mQO9hber9Y9a4WDKVYTKyGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.61.192.0/20 202.61.224.0/19 Signature Algorithm: sha256WithRSAEncryption 95:96:29:0b:32:4f:2b:3c:de:7e:ba:e9:81:b2:60:b8:45:d9: de:94:e7:9e:ad:58:f9:1c:81:fd:d9:1c:bc:64:5f:b4:78:42: 1c:65:ce:26:39:17:28:79:0f:30:ef:97:3a:66:39:3e:3e:1e: 2e:4e:1b:47:2b:77:35:b0:08:99:a2:28:c7:d8:fa:9a:9c:01: b1:25:7e:fa:9f:d2:b5:89:20:00:6a:36:88:f2:97:f8:9c:fd: 8f:82:73:a7:9b:30:7b:38:68:04:dc:03:26:17:f2:7d:a0:ab: d1:9b:df:1c:b7:b4:98:db:03:2c:e1:42:6d:dc:68:19:c3:30: f4:07:9b:33:58:71:24:97:21:5a:b9:da:d8:bf:3e:b8:98:91: 92:60:0c:5f:4c:23:03:bf:9a:62:a3:17:de:79:62:6b:af:94: 76:63:50:60:53:be:5f:18:6b:b3:3a:99:e0:37:fc:cd:90:dc: bb:50:9d:0b:f8:38:c8:16:70:3f:28:d3:22:d2:13:d9:db:92: b3:43:33:e5:d9:ea:3a:c8:e8:4a:32:7c:bb:89:ad:c5:82:21: 49:d9:30:14:12:0d:10:00:8c:d2:6f:68:9c:86:88:3a:05:16: 05:40:f0:a0:32:55:7b:43:42:bb:3a:c2:e2:74:80:68:db:36: b6:63:2b:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OMAOtAgprGZ79JAiD54rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTk2NTk2MzYwODllMzIzMjQ2OTc2MjljMjE4ZGEzOGEy YjY3M2QwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGNkZmI5OTAzYmQ4NWI3YWJmNThmNWFlMTYwY2E1NTg0Y2FjODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9pO11xuogkXNt0bk2EDpyV+/O8I ynD7vXaTw2P1m+psinx2DJT2bKrsi6PieidB6KstGW8sH/Pnl05yIfFZYFtITlxN nJebdU9rvzYBbXIzYN618bg4Se/6DCp+qoQ5p6M38x+8ivghG9QegFt8+yLN/WUK VQh31r75wrez0k5KzPBnAJAyji5LZPo/TcTznmSb2WfqAshpYdvlSKS1ANarvYy2 ar9szNWyIRnmvHcQwU3k3ch0tqnbHmYy0y/wWB4XR3sjBb4DVfIyv58OzCm4ey5x Q3AsbVwv+3gsB0T+N7xYdctI1le7dDIR/+FkRj6TOCsRw6mmOzbnTHjv3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO3N+5kDvYW3q/WPWuFgylWEyshrMB8GA1UdIwQY MBaAFH1ZZZY2CJ4yMkaXYpwhjaOKK2c9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAt NmMxY2Y3MjVkOGY3LzEvN2MzN21RTzloYmVyOVk5YTRXREtWWVRLeUdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAtNmMxY2Y3MjVkOGY3 LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEyj3AAwQF yj3gMA0GCSqGSIb3DQEBCwUAA4IBAQCVlikLMk8rPN5+uumBsmC4RdnelOeerVj5 HIH92Ry8ZF+0eEIcZc4mORcoeQ8w75c6Zjk+Ph4uThtHK3c1sAiZoijH2PqanAGx JX76n9K1iSAAajaI8pf4nP2PgnOnmzB7OGgE3AMmF/J9oKvRm98ct7SY2wMs4UJt 3GgZwzD0B5szWHEklyFaudrYvz64mJGSYAxfTCMDv5pioxfeeWJrr5R2Y1BgU75f GGuzOpngN/zNkNy7UJ0L+DjIFnA/KNMi0hPZ25KzQzPl2eo6yOhKMny7ia3FgiFJ 2TAUEg0QAIzSb2ichog6BRYFQPCgMlV7Q0K7OsLidIBo2za2YyuR -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:29 2026 by rpki-client