This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/xJrl572dGNTyomn-v8TCuFg7I1A.roa File: xJrl572dGNTyomn-v8TCuFg7I1A.roa (raw, json) Hash identifier: 2x5cy4pJUQbMIYLAtAfVd42ocgzotDRP+XX1VY3Dv3Q= Subject key identifier: C4:9A:E5:E7:BD:9D:18:D4:F2:A2:69:FE:BF:C4:C2:B8:58:3B:23:50 Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd Certificate serial: 019B7C13070526BE5C524ED6F22F743B07F9 Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/xJrl572dGNTyomn-v8TCuFg7I1A.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13231 IP address blocks: 37.9.252.0/23 maxlen: 23 37.9.252.0/24 maxlen: 24 37.9.253.0/24 maxlen: 24 37.9.254.0/23 maxlen: 23 37.9.254.0/24 maxlen: 24 37.9.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.mft rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:07:05:26:be:5c:52:4e:d6:f2:2f:74:3b:07:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c49ae5e7bd9d18d4f2a269febfc4c2b8583b2350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:8f:c3:ea:4c:4e:43:d8:2c:16:11:92:0a: 07:13:df:dd:02:7e:ae:52:f0:67:e5:3e:db:18:53: 08:9a:dd:6f:81:83:46:05:4b:7b:cf:14:a1:0f:e9: 38:ca:b0:c3:3f:84:d2:fb:27:c7:e6:71:4d:fc:7b: 31:1f:14:13:ed:7e:d9:06:44:55:cb:af:ed:2d:10: 01:b1:27:5c:4e:a1:fd:ce:ea:a6:65:29:13:d0:6f: 3e:7d:e2:94:0f:b3:75:90:8b:51:cf:b3:ca:ca:c1: da:b3:20:08:9b:ba:8c:78:fc:23:e5:2e:c3:13:6b: f1:e3:bb:cf:ea:cf:7c:05:87:d2:0d:d9:3c:07:41: 0c:40:ac:fc:9b:df:37:40:58:94:12:56:bb:6a:14: 01:ca:62:d9:20:e7:fe:95:d7:53:1d:59:d8:0c:f0: ed:cc:96:80:2b:17:56:70:a2:a6:2f:71:98:72:b4: 37:73:39:8c:78:fc:fe:99:1a:4e:a4:10:35:31:a1: 51:60:e5:70:9e:05:63:e6:29:62:40:12:f2:d5:32: 4d:a3:b6:91:7e:c8:56:a5:e8:cd:fb:c8:89:46:07: 3e:e2:e6:dd:b7:2c:f8:70:59:24:53:1d:a0:2d:d8: 0c:78:61:90:bd:96:00:a1:1e:6f:31:4f:6a:d8:dc: e5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9A:E5:E7:BD:9D:18:D4:F2:A2:69:FE:BF:C4:C2:B8:58:3B:23:50 X509v3 Authority Key Identifier: keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/xJrl572dGNTyomn-v8TCuFg7I1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.9.252.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:1b:af:9c:fc:5f:99:af:04:e6:c5:75:e7:6f:72:e9:e8:db: f3:4d:79:40:f0:74:8f:af:a9:ae:bc:bd:70:28:9d:98:20:fb: 0f:b5:08:36:a1:38:d8:73:a4:33:3d:cf:0e:f7:2a:08:21:7f: 0e:e6:37:67:20:88:fd:69:69:92:14:5a:f4:8d:29:72:f9:27: ee:7b:90:2a:c1:ba:4a:f7:fb:bb:3c:a5:38:46:95:b7:3f:9e: 8b:d6:95:c9:92:07:31:ce:59:fa:16:ac:ff:74:c1:a4:45:0f: ad:f1:74:41:7e:d4:38:51:b8:89:b4:9c:61:60:9f:58:ad:3b: 66:69:6e:30:97:d6:19:0f:19:d6:ee:e3:a0:63:10:e9:2c:40: 67:ac:e0:37:9a:9b:94:0e:a8:35:09:ee:00:ab:31:46:35:04: 28:d6:3f:d0:d4:92:e6:af:1d:8f:eb:88:43:6e:3a:5a:ac:36: 9f:e3:cc:10:a4:f6:e7:37:1e:7f:db:5f:aa:88:e0:2c:ec:8d: 06:c6:35:ce:1b:01:e2:1a:ee:0f:36:8b:ab:68:ea:7d:5a:90: 02:86:30:68:d7:d9:7b:f1:98:6a:4e:15:df:8f:ba:20:e5:0d: 9f:75:05:65:31:aa:04:8a:74:4e:74:7d:28:10:9d:57:e4:22: 8b:2f:61:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwcFJr5cUk7W8i90Owf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMWJkNzQ5MDc0ZjZmOTc3MjY1YTFkMDZjM2IxZDkzYjFk MzU4Y2QwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDlhZTVlN2JkOWQxOGQ0ZjJhMjY5ZmViZmM0YzJiODU4M2IyMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7CPw+pMTkPYLBYRkgoHE9/dAn6u UvBn5T7bGFMImt1vgYNGBUt7zxShD+k4yrDDP4TS+yfH5nFN/HsxHxQT7X7ZBkRV y6/tLRABsSdcTqH9zuqmZSkT0G8+feKUD7N1kItRz7PKysHasyAIm7qMePwj5S7D E2vx47vP6s98BYfSDdk8B0EMQKz8m983QFiUEla7ahQBymLZIOf+lddTHVnYDPDt zJaAKxdWcKKmL3GYcrQ3czmMePz+mRpOpBA1MaFRYOVwngVj5iliQBLy1TJNo7aR fshWpejN+8iJRgc+4ubdtyz4cFkkUx2gLdgMeGGQvZYAoR5vMU9q2NzlIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMSa5ee9nRjU8qJp/r/EwrhYOyNQMB8GA1UdIwQY MBaAFC8b10kHT2+XcmWh0Gw7HZOx01jNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80NmIxNTUtOGY0My00ZGYyLThiODEt NWZhMjg3ZDU0NWU4LzEveEpybDU3MmRHTlR5b21uLXY4VEN1Rmc3STFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy80NmIxNTUtOGY0My00ZGYyLThiODEtNWZhMjg3ZDU0NWU4 LzEvTHh2WFNRZFBiNWR5WmFIUWJEc2RrN0hUV00wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJQn8MA0G CSqGSIb3DQEBCwUAA4IBAQAKG6+c/F+ZrwTmxXXnb3Lp6NvzTXlA8HSPr6muvL1w KJ2YIPsPtQg2oTjYc6QzPc8O9yoIIX8O5jdnIIj9aWmSFFr0jSly+Sfue5AqwbpK 9/u7PKU4RpW3P56L1pXJkgcxzln6Fqz/dMGkRQ+t8XRBftQ4UbiJtJxhYJ9YrTtm aW4wl9YZDxnW7uOgYxDpLEBnrOA3mpuUDqg1Ce4AqzFGNQQo1j/Q1JLmrx2P64hD bjparDaf48wQpPbnNx5/21+qiOAs7I0GxjXOGwHiGu4PNouraOp9WpAChjBo19l7 8ZhqThXfj7og5Q2fdQVlMaoEinROdH0oEJ1X5CKLL2F3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:38 2026 by rpki-client