This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/RO-P37ZaJBhYTx2bPXE9-XaK6mc.roa File: RO-P37ZaJBhYTx2bPXE9-XaK6mc.roa (raw, json) Hash identifier: qyOlC1NYVIRV04UnpCxjxHKBjKTFjIWJJFf105WAhVM= Subject key identifier: 44:EF:8F:DF:B6:5A:24:18:58:4F:1D:9B:3D:71:3D:F9:76:8A:EA:67 Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Certificate serial: 019B7C8041963A6BABBE99C6382DEFD8A6A5 Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/RO-P37ZaJBhYTx2bPXE9-XaK6mc.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213155 IP address blocks: 5.204.0.0/16 maxlen: 16 37.234.0.0/16 maxlen: 16 84.224.0.0/16 maxlen: 16 84.225.0.0/17 maxlen: 17 84.225.128.0/18 maxlen: 18 91.104.0.0/16 maxlen: 16 176.77.128.0/17 maxlen: 17 176.226.0.0/17 maxlen: 17 2a0a:f640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:41:96:3a:6b:ab:be:99:c6:38:2d:ef:d8:a6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44ef8fdfb65a2418584f1d9b3d713df9768aea67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:ed:5d:01:54:f7:b6:01:34:3c:80:2f:48: e6:2a:f4:cb:7d:41:43:1a:37:48:66:01:8f:cf:70: dc:e5:12:66:45:ec:44:99:eb:db:d7:1a:04:d9:b5: d4:85:78:48:2e:c6:15:de:2a:9d:f3:e8:4d:38:6d: e5:57:f6:2f:b9:03:48:fa:90:86:14:ef:3f:36:13: fe:3a:73:ab:a4:52:5f:1c:92:cb:8f:f1:29:b5:ce: 19:90:aa:55:47:7b:e3:7c:42:ed:b5:c6:db:27:37: b4:3e:ed:00:e2:cf:7f:be:dc:4a:f0:74:80:32:4b: 3c:c9:2c:94:f7:79:37:85:8d:b9:82:86:0e:03:ef: fd:2a:2a:14:18:57:d6:4c:64:be:a6:50:da:31:ba: fa:64:8c:99:36:cd:a6:21:e3:d4:29:51:6e:af:6e: f8:ca:55:08:60:16:aa:61:87:ee:25:4b:46:77:b7: 58:7e:a7:a2:89:34:07:24:94:ab:a7:e0:a1:62:37: 0a:95:14:45:e6:b3:da:51:b9:d9:94:f3:a0:70:db: fd:00:1e:c2:71:e9:4b:ea:03:92:5a:f1:42:78:72: 68:fc:a2:75:b6:bb:c0:0a:24:bc:0d:cc:49:fd:8a: db:e8:27:c4:3b:cb:61:78:12:ba:92:b0:df:9d:34: 4e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EF:8F:DF:B6:5A:24:18:58:4F:1D:9B:3D:71:3D:F9:76:8A:EA:67 X509v3 Authority Key Identifier: keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/RO-P37ZaJBhYTx2bPXE9-XaK6mc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.204.0.0/16 37.234.0.0/16 84.224.0.0-84.225.191.255 91.104.0.0/16 176.77.128.0/17 176.226.0.0/17 IPv6: 2a0a:f640::/32 Signature Algorithm: sha256WithRSAEncryption 62:67:8f:b8:fe:bd:ca:3f:61:b9:b2:2c:50:c1:99:df:f5:b0: 6d:b1:99:7e:0e:6f:24:11:ec:22:75:93:4b:85:d3:04:fc:a2: 45:3b:11:72:e5:03:31:de:a5:a1:8a:67:e5:c7:23:be:85:98: 6c:53:e6:89:79:ed:4f:d1:91:18:04:f2:79:eb:11:15:d6:cb: 83:b1:0a:eb:2e:ed:71:a6:ec:2f:60:21:5d:09:73:eb:b4:be: 72:02:32:b2:83:5c:d6:47:3e:3a:04:e1:06:47:45:ae:cb:b6: e6:5c:d2:54:26:73:7e:eb:cb:53:2f:d6:a2:26:d1:09:f1:ec: aa:98:f2:3e:41:0e:18:18:df:5d:d5:6c:c4:53:84:34:ed:4b: c4:ca:54:f7:5b:ea:40:a2:ac:9a:64:3d:44:75:35:75:89:a4: 36:1e:a3:b0:dd:40:81:1f:fd:ec:25:1e:15:f5:93:63:51:98: 4a:bf:b3:eb:76:38:9e:9d:96:c9:63:b0:f8:89:2f:d2:fb:32: 0b:67:3e:e1:2b:a5:ad:42:db:ff:4c:91:1d:91:d4:c8:df:62: 80:5b:a7:c6:08:10:fa:de:b3:05:22:89:6f:e7:9c:e3:67:28: 19:7b:58:44:8e:97:53:2c:e1:14:4a:56:dd:2a:d5:d8:5d:93: 86:46:5b:53 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt8gEGWOmurvpnGOC3v2KalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2Y0Mzg4YWFkZjBhZTRmZjVlZTdiZDM3MjYzYzlmMWU4 NDY3YzcwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGVmOGZkZmI2NWEyNDE4NTg0ZjFkOWIzZDcxM2RmOTc2OGFlYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrjtXQFU97YBNDyAL0jmKvTLfUFD GjdIZgGPz3Dc5RJmRexEmevb1xoE2bXUhXhILsYV3iqd8+hNOG3lV/YvuQNI+pCG FO8/NhP+OnOrpFJfHJLLj/Eptc4ZkKpVR3vjfELttcbbJze0Pu0A4s9/vtxK8HSA Mks8ySyU93k3hY25goYOA+/9KioUGFfWTGS+plDaMbr6ZIyZNs2mIePUKVFur274 ylUIYBaqYYfuJUtGd7dYfqeiiTQHJJSrp+ChYjcKlRRF5rPaUbnZlPOgcNv9AB7C celL6gOSWvFCeHJo/KJ1trvACiS8DcxJ/Yrb6CfEO8theBK6krDfnTRO1wIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFETvj9+2WiQYWE8dmz1xPfl2iupnMB8GA1UdIwQY MBaAFMU/Q4iq3wrk/17nvTcmPJ8ehGfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUt ZGRhMzUwYjExZjAyLzEvUk8tUDM3WmFKQmhZVHgyYlBYRTktWGFLNm1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUtZGRhMzUwYjExZjAy LzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoAwMABcwDAwAl 6jALAwMFVOADBAZU4YADAwBbaAMEB7BNgAMEB7DiADANBAIAAjAHAwUAKgr2QDAN BgkqhkiG9w0BAQsFAAOCAQEAYmePuP69yj9hubIsUMGZ3/WwbbGZfg5vJBHsInWT S4XTBPyiRTsRcuUDMd6loYpn5ccjvoWYbFPmiXntT9GRGATyeesRFdbLg7EK6y7t cabsL2AhXQlz67S+cgIysoNc1kc+OgThBkdFrsu25lzSVCZzfuvLUy/WoibRCfHs qpjyPkEOGBjfXdVsxFOENO1LxMpU91vqQKKsmmQ9RHU1dYmkNh6jsN1AgR/97CUe FfWTY1GYSr+z63Y4np2WyWOw+Ikv0vsyC2c+4SulrULb/0yRHZHUyN9igFunxggQ +t6zBSKJb+ec42coGXtYRI6XUyzhFEpW3SrV2F2ThkZbUw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:40 2026 by rpki-client