This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/9JqUzmhn979MzWUxIBT2RPIOS8A.roa File: 9JqUzmhn979MzWUxIBT2RPIOS8A.roa (raw, json) Hash identifier: rkzdzZw7cy8e5NHHoY93mCGwkkZGsYaobB+ZGaI78YQ= Subject key identifier: F4:9A:94:CE:68:67:F7:BF:4C:CD:65:31:20:14:F6:44:F2:0E:4B:C0 Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Certificate serial: 019B7F1537348913C9F377FC54BF5E011B1D Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/9JqUzmhn979MzWUxIBT2RPIOS8A.roa Signing time: Fri 02 Jan 2026 14:20:55 +0000 ROA not before: Fri 02 Jan 2026 14:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34529 IP address blocks: 37.34.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:37:34:89:13:c9:f3:77:fc:54:bf:5e:01:1b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0 Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f49a94ce6867f7bf4ccd65312014f644f20e4bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:fe:b2:15:ac:33:76:d8:5b:72:e5:7c:6c: 7a:d0:ed:9d:1d:87:ad:33:f7:2a:f6:a9:41:e8:bb: a3:8c:12:dc:da:58:5a:a9:61:61:e0:ca:57:79:f9: 82:ed:3f:4c:15:7d:c8:81:ab:14:6f:59:4c:61:42: 64:8c:6d:ee:c9:96:4f:c6:f3:58:dc:1c:97:97:9c: b2:45:23:df:52:a0:de:c8:86:6d:a3:a5:d6:5f:2d: 7a:1c:4a:39:b3:e6:c0:9f:13:6f:b9:45:a0:0f:a7: d5:44:f0:4a:30:1d:f8:bd:cd:6f:0b:41:a0:08:b9: 04:1f:2f:61:81:2c:be:63:7f:40:5b:8a:82:dc:25: 92:25:d2:48:62:b7:d8:5f:dc:0e:db:09:58:30:95: d7:dc:cb:23:5c:45:65:8d:2e:56:ad:b7:ba:91:c1: 7e:a2:38:80:bb:2d:f0:29:b3:f0:74:40:84:aa:d1: 19:67:8d:7a:de:88:bb:5d:3b:54:44:18:ba:15:fd: b2:c6:01:cc:71:6e:1c:ea:85:d8:86:40:b6:ae:57: 9c:71:c5:13:e4:39:3e:9a:07:11:0a:7b:13:39:22: e4:5d:7e:b4:21:1b:6f:68:5e:a3:89:9b:32:72:ce: c6:58:f5:fa:bd:7e:56:e3:b9:69:ef:80:c2:49:71: ef:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9A:94:CE:68:67:F7:BF:4C:CD:65:31:20:14:F6:44:F2:0E:4B:C0 X509v3 Authority Key Identifier: keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/9JqUzmhn979MzWUxIBT2RPIOS8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.34.104.0/24 Signature Algorithm: sha256WithRSAEncryption 96:17:32:ad:1f:a0:11:2f:8f:04:69:29:aa:12:98:95:61:53: 78:51:a5:61:7e:91:aa:63:a9:3a:6d:f0:60:02:cb:85:c6:3b: dd:2f:c8:da:83:76:43:94:3a:af:1e:d0:d6:f8:9d:bc:db:22: ac:91:1a:47:8c:25:c6:01:55:65:1d:7e:90:5e:52:18:18:c6: 3a:60:8f:cb:94:a9:80:9a:28:f6:ad:1f:dd:8f:01:1c:b3:6f: e9:d9:cd:34:2c:29:55:49:17:6e:10:3f:38:46:07:a0:b4:d1: cb:08:85:17:f1:7e:d8:ae:21:9a:80:bb:78:16:f2:6c:3b:f7: 67:c3:0b:81:89:19:3f:7d:2f:05:9b:b7:3f:c2:66:4b:60:0b: 79:66:02:c7:c2:35:ea:fa:cb:b3:c2:5a:77:df:23:4a:52:91: d0:ed:fe:82:65:5a:d9:45:85:a6:aa:d1:d0:09:4b:19:33:3e: db:50:f7:88:a9:01:5a:37:c9:f6:82:64:aa:06:c1:2a:47:6b: 8c:63:f9:a7:1c:e2:27:52:a0:dc:67:7f:66:94:4f:c1:ea:fb: 87:d0:c1:08:04:09:f0:2a:f6:b0:33:96:93:ad:91:a8:1c:2d: ac:8f:7e:f1:36:3b:90:45:95:76:16:5f:e1:b2:ed:5a:74:31: 61:e2:8b:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTc0iRPJ83f8VL9eARsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWIxMDQ0NjNlOTIwYjQ1NTQyYjZhZjFhMjdkNTk1MGU4 NmU5YTAwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDlhOTRjZTY4NjdmN2JmNGNjZDY1MzEyMDE0ZjY0NGYyMGU0YmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0j+shWsM3bYW3LlfGx60O2dHYet M/cq9qlB6LujjBLc2lhaqWFh4MpXefmC7T9MFX3IgasUb1lMYUJkjG3uyZZPxvNY 3ByXl5yyRSPfUqDeyIZto6XWXy16HEo5s+bAnxNvuUWgD6fVRPBKMB34vc1vC0Gg CLkEHy9hgSy+Y39AW4qC3CWSJdJIYrfYX9wO2wlYMJXX3MsjXEVljS5Wrbe6kcF+ ojiAuy3wKbPwdECEqtEZZ4163oi7XTtURBi6Ff2yxgHMcW4c6oXYhkC2rlecccUT 5Dk+mgcRCnsTOSLkXX60IRtvaF6jiZsycs7GWPX6vX5W47lp74DCSXHvNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPSalM5oZ/e/TM1lMSAU9kTyDkvAMB8GA1UdIwQY MBaAFD3rEERj6SC0VUK2rxon1ZUOhumgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMt MTE5ZDhiZjcxN2JiLzEvOUpxVXptaG45NzlNeldVeElCVDJSUElPUzhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9jNjg2YjMtZTdhOS00ZjljLTg0MmMtMTE5ZDhiZjcxN2Ji LzEvUGVzUVJHUHBJTFJWUXJhdkdpZlZsUTZHNmFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJSJoMA0G CSqGSIb3DQEBCwUAA4IBAQCWFzKtH6ARL48EaSmqEpiVYVN4UaVhfpGqY6k6bfBg AsuFxjvdL8jag3ZDlDqvHtDW+J282yKskRpHjCXGAVVlHX6QXlIYGMY6YI/LlKmA mij2rR/djwEcs2/p2c00LClVSRduED84RgegtNHLCIUX8X7YriGagLt4FvJsO/dn wwuBiRk/fS8Fm7c/wmZLYAt5ZgLHwjXq+suzwlp33yNKUpHQ7f6CZVrZRYWmqtHQ CUsZMz7bUPeIqQFaN8n2gmSqBsEqR2uMY/mnHOInUqDcZ39mlE/B6vuH0MEIBAnw KvawM5aTrZGoHC2sj37xNjuQRZV2Fl/hsu1adDFh4osr -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:29 2026 by rpki-client