This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/CGspQAEXscYtnhUkcO43B4rOMYI.roa File: CGspQAEXscYtnhUkcO43B4rOMYI.roa (raw, json) Hash identifier: ZmpcN0BqbrZBIrGn5PsZ/DSc38P9usOvQmrKlG150S0= Subject key identifier: 08:6B:29:40:01:17:B1:C6:2D:9E:15:24:70:EE:37:07:8A:CE:31:82 Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Certificate serial: 019B7D5CDCCFECC935A05D665860B12AC2EC Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/CGspQAEXscYtnhUkcO43B4rOMYI.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12735 IP address blocks: 37.77.28.0/24 maxlen: 24 37.77.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:dc:cf:ec:c9:35:a0:5d:66:58:60:b1:2a:c2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=086b29400117b1c62d9e152470ee37078ace3182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:3c:e7:33:ad:6f:4b:11:d8:d4:cf:8a:19: de:69:ae:8c:91:bb:12:f2:a7:94:7f:73:76:ad:96: f3:77:46:b9:a6:04:9d:3c:7a:0c:ff:30:55:c9:b1: d0:6a:a8:d5:e3:f7:5b:98:4b:8a:e8:a9:01:b5:af: 9c:50:d6:bc:0c:43:3c:7b:87:9d:2f:c5:e2:86:d2: 66:3d:d7:00:08:f3:2b:f8:17:f0:b0:c5:b7:b6:e6: 08:04:d3:0e:95:d5:43:31:05:6f:4b:21:0d:8a:70: 3c:b3:a7:3a:6b:29:ba:72:c2:26:1b:28:77:b9:3e: 46:02:70:39:dd:e9:33:c9:92:ac:3e:ba:16:ef:c8: 2d:aa:2b:6a:8c:55:b1:f3:ca:20:d7:e8:9e:14:c7: e6:97:b6:ed:ca:90:45:9a:fb:cf:fb:df:56:7a:52: db:67:3d:06:26:02:7b:97:9b:57:f0:60:46:1b:83: 42:d3:08:e4:09:ca:26:c5:ca:4c:ae:37:43:00:70: f1:e4:7b:a6:26:22:1e:84:2c:13:e5:91:be:30:33: b0:e6:10:50:29:e1:d6:9f:7e:ed:8d:0d:5a:3d:c4: 50:37:8c:3b:7c:9a:3b:b2:c3:bb:c4:ff:e0:a5:68: 40:48:6a:4d:d0:60:06:31:98:ed:0c:51:4c:32:32: 0e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6B:29:40:01:17:B1:C6:2D:9E:15:24:70:EE:37:07:8A:CE:31:82 X509v3 Authority Key Identifier: keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/CGspQAEXscYtnhUkcO43B4rOMYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.28.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:e0:12:fa:5a:60:f9:f6:d0:65:3e:b0:cb:06:5d:a4:3c:3d: e8:6e:60:5b:3c:84:29:b5:2d:1e:ed:0c:05:ac:96:00:af:05: cd:1c:0c:cf:14:13:87:02:2e:74:8f:21:71:ea:64:a0:e8:ea: 8c:f4:e1:92:bb:9f:0e:aa:c3:c7:5c:87:a2:cf:0f:bf:2f:70: 2a:d7:5e:8a:35:8e:36:b6:c7:0b:73:e0:24:14:09:0c:3f:ad: f5:b8:56:f7:55:c5:f9:5c:23:13:95:95:e5:d2:6a:c0:78:ec: 06:fe:42:7f:83:04:1e:3d:c4:3f:8a:e6:b2:90:fa:b1:64:91: 8e:12:96:94:72:f1:27:74:cf:d4:f5:37:46:b8:15:2f:57:c0: d8:cd:e6:10:fe:98:55:f0:f2:49:b5:1a:3e:ba:17:f0:8e:e1: 1c:c3:3b:45:9d:0e:27:ec:ce:1e:40:c9:64:8b:3b:ab:1e:1d: d6:a8:26:99:1c:78:b1:59:cd:f1:0b:d0:4b:77:8b:3f:ea:ee: 05:29:5f:ea:7a:10:58:f1:9e:1f:f5:c9:06:cb:67:e9:09:cd: 21:f9:cc:e1:dd:08:0d:67:7d:c7:38:54:29:df:17:dd:0a:cf: fb:65:1f:57:35:40:1c:70:e2:4d:cd:c3:3b:d8:40:50:78:be: 4b:67:f5:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNzP7Mk1oF1mWGCxKsLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTkzMDA3YzdjOTJkZjYxNzhlN2NiNDMxODNmZDdmNTJh NTI2ZDgwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODZiMjk0MDAxMTdiMWM2MmQ5ZTE1MjQ3MGVlMzcwNzhhY2UzMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9I85zOtb0sR2NTPihneaa6MkbsS 8qeUf3N2rZbzd0a5pgSdPHoM/zBVybHQaqjV4/dbmEuK6KkBta+cUNa8DEM8e4ed L8XihtJmPdcACPMr+BfwsMW3tuYIBNMOldVDMQVvSyENinA8s6c6aym6csImGyh3 uT5GAnA53ekzyZKsProW78gtqitqjFWx88og1+ieFMfml7btypBFmvvP+99WelLb Zz0GJgJ7l5tX8GBGG4NC0wjkCcomxcpMrjdDAHDx5HumJiIehCwT5ZG+MDOw5hBQ KeHWn37tjQ1aPcRQN4w7fJo7ssO7xP/gpWhASGpN0GAGMZjtDFFMMjIOkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAhrKUABF7HGLZ4VJHDuNweKzjGCMB8GA1UdIwQY MBaAFCmZMAfHyS32F458tDGD/X9SpSbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODkt MWU4MjlmZmExYzNhLzEvQ0dzcFFBRVhzY1l0bmhVa2NPNDNCNHJPTVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODktMWU4MjlmZmExYzNh LzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJU0cMA0G CSqGSIb3DQEBCwUAA4IBAQBa4BL6WmD59tBlPrDLBl2kPD3obmBbPIQptS0e7QwF rJYArwXNHAzPFBOHAi50jyFx6mSg6OqM9OGSu58OqsPHXIeizw+/L3Aq116KNY42 tscLc+AkFAkMP631uFb3VcX5XCMTlZXl0mrAeOwG/kJ/gwQePcQ/iuaykPqxZJGO EpaUcvEndM/U9TdGuBUvV8DYzeYQ/phV8PJJtRo+uhfwjuEcwztFnQ4n7M4eQMlk izurHh3WqCaZHHixWc3xC9BLd4s/6u4FKV/qehBY8Z4f9ckGy2fpCc0h+czh3QgN Z33HOFQp3xfdCs/7ZR9XNUAccOJNzcM72EBQeL5LZ/Uw -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:30 2026 by rpki-client