This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/rUaeP0oUdPvhV-Z1zHmVDofPVMg.roa File: rUaeP0oUdPvhV-Z1zHmVDofPVMg.roa (raw, json) Hash identifier: yKtILw4rHDCHQjsROea7n0Z4TscVtMBleCX2L+hkG+U= Subject key identifier: AD:46:9E:3F:4A:14:74:FB:E1:57:E6:75:CC:79:95:0E:87:CF:54:C8 Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c Certificate serial: 019B7DCA8DF7864D099C310E485A9B34A312 Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/rUaeP0oUdPvhV-Z1zHmVDofPVMg.roa Signing time: Fri 02 Jan 2026 08:19:45 +0000 ROA not before: Fri 02 Jan 2026 08:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198312 IP address blocks: 37.0.96.0/24 maxlen: 24 37.0.97.0/24 maxlen: 24 37.0.98.0/24 maxlen: 24 37.0.100.0/24 maxlen: 24 37.0.102.0/24 maxlen: 24 37.0.103.0/24 maxlen: 24 2a03:6a60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:8d:f7:86:4d:09:9c:31:0e:48:5a:9b:34:a3:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c Validity Not Before: Jan 2 08:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad469e3f4a1474fbe157e675cc79950e87cf54c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:cf:f1:5a:51:3c:f3:e6:a9:ff:ca:bd:ac: a8:a5:c0:19:ca:a8:08:ad:92:db:1d:5e:17:35:2c: 61:c6:e1:0e:32:b0:ba:93:34:2e:87:15:30:b8:bf: 5d:a2:cb:b0:d8:c6:d8:98:56:de:34:a5:3b:ef:e5: 5b:d1:89:cf:e9:fc:93:1e:de:37:8f:ec:ad:71:8d: a9:73:d5:f7:c3:03:aa:62:66:9d:80:e1:91:1c:d7: 7f:fd:ff:e9:44:05:64:8f:35:2d:3f:b3:94:ee:c6: 4d:2b:1d:be:f3:12:06:a9:0b:6a:42:44:d0:d4:89: 76:7a:b6:29:0d:f2:f1:4a:d7:13:08:7a:08:0f:fd: 02:fd:f5:07:4d:70:6a:3f:d8:45:df:56:67:8b:76: d1:a4:3c:c6:d0:2b:ed:51:87:a3:c5:bc:4d:68:9c: 67:02:46:ff:d8:8c:36:26:74:cd:f6:30:a9:12:1e: 64:26:80:90:7c:c9:c2:50:76:58:8b:14:c7:34:1c: 9f:51:e0:6a:0c:48:69:79:b8:a0:fe:aa:ee:87:16: 64:a3:a8:92:35:9f:3c:9d:10:97:80:62:1e:cc:56: f9:55:ab:79:98:35:1a:c2:b1:35:4a:06:ab:48:38: 1f:4d:e9:e6:32:fd:55:f5:b2:0a:4e:91:85:98:f3: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:46:9E:3F:4A:14:74:FB:E1:57:E6:75:CC:79:95:0E:87:CF:54:C8 X509v3 Authority Key Identifier: keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/rUaeP0oUdPvhV-Z1zHmVDofPVMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.96.0-37.0.98.255 37.0.100.0/24 37.0.102.0/23 IPv6: 2a03:6a60::/32 Signature Algorithm: sha256WithRSAEncryption 4e:db:81:5b:81:91:5d:e6:2c:a5:a8:b0:6c:84:87:77:2b:31: e1:ec:c5:6e:22:ae:d2:78:d9:7a:f4:4a:46:94:4c:79:76:be: 5f:63:24:d2:39:52:3f:7e:84:80:30:bb:c5:37:e3:bd:1e:f4: 10:06:3b:96:eb:c7:bd:d7:3a:be:0d:b5:9a:7b:9e:36:54:be: f4:26:a9:80:93:8a:b3:0d:2f:0b:33:c5:c6:e9:a4:5a:79:0b: 19:53:e1:c0:dd:1c:3a:dd:7a:f4:a8:72:4a:71:48:15:36:0c: 2c:6a:89:ac:42:3c:5f:50:24:06:55:c6:f3:9b:92:f1:6e:8f: b1:33:b1:37:22:da:c0:04:a6:82:ba:f8:e3:8c:e4:82:47:1f: c7:f9:68:d2:51:5d:86:75:a4:2e:db:e3:5d:b9:b1:67:f7:b7: 33:f6:5a:b5:00:4d:d8:de:6e:54:c5:9c:80:cb:c2:87:cf:9c: 6d:a8:cb:e1:00:10:72:6b:a7:9a:a7:c5:c4:0c:5a:48:81:19: 97:32:d4:3a:a1:67:99:64:3b:ba:df:96:9b:84:07:80:05:ca: 4a:e7:d8:64:17:ca:33:18:ef:4e:31:5f:b0:97:b4:c2:3a:9b: 96:35:06:8f:e5:19:ce:30:7e:a2:83:ae:10:73:6b:ab:41:78: d0:da:66:c2 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt9yo33hk0JnDEOSFqbNKMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4NGZmZjNjZjkwMGU3NmFhZTBkMmNkMmU3N2RmZWFlMjRj NWQyNGMwHhcNMjYwMTAyMDgxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDQ2OWUzZjRhMTQ3NGZiZTE1N2U2NzVjYzc5OTUwZTg3Y2Y1NGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKTP8VpRPPPmqf/KvayopcAZyqgI rZLbHV4XNSxhxuEOMrC6kzQuhxUwuL9dosuw2MbYmFbeNKU77+Vb0YnP6fyTHt43 j+ytcY2pc9X3wwOqYmadgOGRHNd//f/pRAVkjzUtP7OU7sZNKx2+8xIGqQtqQkTQ 1Il2erYpDfLxStcTCHoID/0C/fUHTXBqP9hF31Zni3bRpDzG0CvtUYejxbxNaJxn Akb/2Iw2JnTN9jCpEh5kJoCQfMnCUHZYixTHNByfUeBqDEhpebig/qruhxZko6iS NZ88nRCXgGIezFb5Vat5mDUawrE1SgarSDgfTenmMv1V9bIKTpGFmPPWzwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFK1Gnj9KFHT74Vfmdcx5lQ6Hz1TIMB8GA1UdIwQY MBaAFBhP/zz5AOdqrg0s0ud9/q4kxdJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTIt MzhiMzkyYzZlMWJmLzEvclVhZVAwb1VkUHZoVi1aMXpIbVZEb2ZQVk1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTItMzhiMzkyYzZlMWJm LzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAUlAGAD BAAlAGIDBAAlAGQDBAElAGYwDQQCAAIwBwMFACoDamAwDQYJKoZIhvcNAQELBQAD ggEBAE7bgVuBkV3mLKWosGyEh3crMeHsxW4irtJ42Xr0SkaUTHl2vl9jJNI5Uj9+ hIAwu8U3470e9BAGO5brx73XOr4NtZp7njZUvvQmqYCTirMNLwszxcbppFp5CxlT 4cDdHDrdevSockpxSBU2DCxqiaxCPF9QJAZVxvObkvFuj7EzsTci2sAEpoK6+OOM 5IJHH8f5aNJRXYZ1pC7b4125sWf3tzP2WrUATdjeblTFnIDLwofPnG2oy+EAEHJr p5qnxcQMWkiBGZcy1DqhZ5lkO7rflpuEB4AFykrn2GQXyjMY704xX7CXtMI6m5Y1 Bo/lGc4wfqKDrhBza6tBeNDaZsI= -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:18 2026 by rpki-client