This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/iDDbiSH2d_40GsJwPvUC4BGeuXA.roa File: iDDbiSH2d_40GsJwPvUC4BGeuXA.roa (raw, json) Hash identifier: vwX7F1KiY4ZWTpCyVu83FRegfcFV6IZjqYP0GrVArzA= Subject key identifier: 88:30:DB:89:21:F6:77:FE:34:1A:C2:70:3E:F5:02:E0:11:9E:B9:70 Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c Certificate serial: 019B7B362E58B0B8C965A726241DBCB5A7C5 Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/iDDbiSH2d_40GsJwPvUC4BGeuXA.roa Signing time: Thu 01 Jan 2026 20:18:26 +0000 ROA not before: Thu 01 Jan 2026 20:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198641 IP address blocks: 37.205.40.0/21 maxlen: 21 37.205.40.0/22 maxlen: 22 37.205.40.0/24 maxlen: 24 37.205.42.0/24 maxlen: 24 37.205.44.0/24 maxlen: 24 37.205.45.0/24 maxlen: 24 37.205.46.0/24 maxlen: 24 185.58.228.0/24 maxlen: 24 185.58.229.0/24 maxlen: 24 185.58.230.0/24 maxlen: 24 185.58.231.0/24 maxlen: 24 2a02:4220::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:2e:58:b0:b8:c9:65:a7:26:24:1d:bc:b5:a7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c Validity Not Before: Jan 1 20:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8830db8921f677fe341ac2703ef502e0119eb970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:41:f3:c6:99:05:00:f2:01:9b:74:b5:12:c2: da:79:c4:7d:31:7e:ba:f5:0c:e2:10:c5:71:ec:a3: e7:16:61:d5:82:ed:e6:4e:54:6e:a9:b0:e6:b4:f1: fb:b6:74:aa:62:f7:3b:09:f5:64:df:69:d8:1d:22: 34:51:07:06:ce:28:9c:3b:5d:86:09:8b:c9:32:86: ae:e0:6f:86:c1:87:5a:44:7d:ad:56:f1:09:7b:a9: 3a:1d:4a:86:fc:e4:cd:28:b2:c3:d6:b0:b3:80:6f: f5:6d:69:63:c9:78:3c:f0:b3:24:2d:fb:38:da:f3: 59:48:ca:3f:0e:ab:90:9f:d6:8c:aa:00:14:d3:f6: 75:02:db:3f:d2:71:01:f2:ed:19:3c:a0:2c:c2:6c: 41:a8:7a:61:e8:6f:82:5d:37:14:0d:0c:fe:33:1e: c2:59:60:06:5b:38:27:e9:47:59:8f:75:d8:0f:e8: 69:f1:05:a2:70:c6:7c:90:67:74:21:1c:8a:14:07: 11:ca:10:85:17:e7:3e:9c:93:ad:f3:dc:64:df:72: 41:50:7c:8b:c6:7e:94:a2:1f:76:7d:30:47:1f:f1: 4d:b5:e5:85:14:bd:1f:df:ed:f1:c0:2e:a9:b4:22: 21:6a:11:9c:74:ad:85:23:14:76:5b:95:0b:2a:27: 1a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:30:DB:89:21:F6:77:FE:34:1A:C2:70:3E:F5:02:E0:11:9E:B9:70 X509v3 Authority Key Identifier: keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/iDDbiSH2d_40GsJwPvUC4BGeuXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.205.40.0/21 185.58.228.0/22 IPv6: 2a02:4220::/32 Signature Algorithm: sha256WithRSAEncryption 79:ee:a0:d8:5c:d7:86:e2:ae:c7:3e:35:26:1b:bc:19:a9:18: 1f:c5:af:9b:2f:40:eb:88:9e:43:34:c2:95:d3:ce:5e:83:dc: d3:1b:bb:c9:37:b8:2f:d4:3e:f6:8d:f8:67:cf:3c:0c:67:91: c4:32:eb:e0:49:b5:af:a4:07:14:12:78:13:5c:85:27:4d:a3: f1:0c:62:ec:a6:ef:fc:ea:27:8b:cc:fc:01:35:77:cf:2d:24: 4f:32:6d:02:6d:8b:d8:51:50:d7:2a:b4:91:5c:27:13:06:69: 08:49:e1:47:47:5a:e9:8f:44:91:00:62:4f:7b:08:39:3f:b7: 4e:65:08:ad:13:cf:da:93:ff:77:17:df:87:9d:45:56:4c:c6: 24:85:e2:f6:e8:c4:af:8f:d4:a0:01:f3:08:c1:62:14:8e:c7: 97:38:3e:50:5f:69:0e:33:93:1d:fd:a3:5c:8b:c4:30:be:4d: 96:74:2f:b0:30:8c:db:a2:46:e2:ae:61:db:f5:bc:cc:cd:91: a3:9a:3a:20:a2:26:c9:5b:df:cd:20:88:72:7f:6a:a2:0f:21: 27:fd:5e:6b:99:62:1d:7f:84:40:bb:34:da:d0:f6:a0:01:64: c3:d9:31:2c:14:b3:47:ed:5d:d4:67:6a:24:45:f0:53:f0:68: 3f:99:c9:93 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Ni5YsLjJZacmJB28tafFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjY2U4ODMyZDAyOTQ5ODAxZjExOThlOWQxM2JiMThlZDU4 MzJkMGMwHhcNMjYwMTAxMjAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODMwZGI4OTIxZjY3N2ZlMzQxYWMyNzAzZWY1MDJlMDExOWViOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0HzxpkFAPIBm3S1EsLaecR9MX66 9QziEMVx7KPnFmHVgu3mTlRuqbDmtPH7tnSqYvc7CfVk32nYHSI0UQcGziicO12G CYvJMoau4G+GwYdaRH2tVvEJe6k6HUqG/OTNKLLD1rCzgG/1bWljyXg88LMkLfs4 2vNZSMo/DquQn9aMqgAU0/Z1Ats/0nEB8u0ZPKAswmxBqHph6G+CXTcUDQz+Mx7C WWAGWzgn6UdZj3XYD+hp8QWicMZ8kGd0IRyKFAcRyhCFF+c+nJOt89xk33JBUHyL xn6Uoh92fTBHH/FNteWFFL0f3+3xwC6ptCIhahGcdK2FIxR2W5ULKica+QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIgw24kh9nf+NBrCcD71AuARnrlwMB8GA1UdIwQY MBaAFAzOiDLQKUmAHxGY6dE7sY7Vgy0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzkt NWUwYWZlYzEzNmIxLzEvaUREYmlTSDJkXzQwR3NKd1B2VUM0QkdldVhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC83NzdjMGEtY2E0NC00M2VjLWFiNzktNWUwYWZlYzEzNmIx LzEvRE02SU10QXBTWUFmRVpqcDBUdXhqdFdETFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJc0oAwQC uTrkMA0EAgACMAcDBQAqAkIgMA0GCSqGSIb3DQEBCwUAA4IBAQB57qDYXNeG4q7H PjUmG7wZqRgfxa+bL0DriJ5DNMKV085eg9zTG7vJN7gv1D72jfhnzzwMZ5HEMuvg SbWvpAcUEngTXIUnTaPxDGLspu/86ieLzPwBNXfPLSRPMm0CbYvYUVDXKrSRXCcT BmkISeFHR1rpj0SRAGJPewg5P7dOZQitE8/ak/93F9+HnUVWTMYkheL26MSvj9Sg AfMIwWIUjseXOD5QX2kOM5Md/aNci8Qwvk2WdC+wMIzbokbirmHb9bzMzZGjmjog oibJW9/NIIhyf2qiDyEn/V5rmWIdf4RAuzTa0PagAWTD2TEsFLNH7V3UZ2okRfBT 8Gg/mcmT -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:05 2026 by rpki-client