This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/c_SCSSOMfndQeyUkFaC27pfW1mU.roa File: c_SCSSOMfndQeyUkFaC27pfW1mU.roa (raw, json) Hash identifier: uAY189SdMJyDwdqEHdr62YdMVXHkgzdNjAsXqKard7o= Subject key identifier: 73:F4:82:49:23:8C:7E:77:50:7B:25:24:15:A0:B6:EE:97:D6:D6:65 Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Certificate serial: 019B7D5CDE275F7FD0540BAA6922D043CFFE Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/c_SCSSOMfndQeyUkFaC27pfW1mU.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42216 IP address blocks: 37.77.25.0/24 maxlen: 24 37.77.26.0/24 maxlen: 24 37.77.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:de:27:5f:7f:d0:54:0b:aa:69:22:d0:43:cf:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73f48249238c7e77507b252415a0b6ee97d6d665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:01:86:a7:3f:d4:ff:d5:e3:7f:2d:9f:39: 03:34:4c:fd:4d:93:7b:8c:7d:5e:8c:51:02:84:98: aa:16:5d:c2:e3:a3:9f:81:1a:b4:8b:da:3b:bc:18: 6d:3e:ad:99:f0:c8:63:f5:e2:b6:b3:90:b4:5b:71: 80:fa:80:db:da:f6:80:22:56:b1:0c:b2:67:5c:ae: 38:49:6a:47:a0:f4:5a:74:c3:c2:c2:29:96:be:5f: be:ea:93:59:0b:c6:4f:e7:3b:ee:56:95:71:49:4f: c9:53:66:a6:1a:0a:be:4c:ed:c2:78:dc:03:10:3e: 33:5a:4b:9b:ed:76:01:35:c0:29:ac:d6:cc:e5:40: 44:53:d5:fc:e2:cc:7f:58:c0:f4:7d:13:51:ee:29: 3c:dd:27:20:34:4a:fc:6d:ab:c5:b5:34:dc:f2:09: ff:41:8a:8a:75:96:fd:aa:03:ab:67:d1:9b:e1:4a: 00:6b:2a:ec:06:55:49:67:1a:a5:87:7d:2e:da:f3: 28:aa:58:ea:d0:0f:c2:2f:fd:2a:1c:31:2c:d8:72: 13:17:02:95:33:12:e5:79:50:67:ad:bd:97:6c:72: 22:d4:70:f2:d2:46:78:a1:23:20:35:92:9f:4e:14: ab:6f:8a:1c:a9:5a:ba:a8:0f:b8:ba:07:8e:3f:86: b9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F4:82:49:23:8C:7E:77:50:7B:25:24:15:A0:B6:EE:97:D6:D6:65 X509v3 Authority Key Identifier: keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/c_SCSSOMfndQeyUkFaC27pfW1mU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.25.0-37.77.27.255 Signature Algorithm: sha256WithRSAEncryption 20:c1:c6:27:56:7f:fa:f0:a4:cf:2d:ab:15:00:2a:15:4d:33: 80:7a:17:4f:40:0c:cb:3c:9c:f0:56:32:56:d1:ad:d8:a7:2d: e3:30:86:5f:d4:25:25:af:85:2e:59:d8:48:b8:d8:25:d9:65: a3:33:ce:44:04:83:ee:93:91:5d:ab:b6:a7:e3:92:b9:4f:05: 6a:b4:7b:4d:97:85:4c:01:d5:c0:0b:de:0f:71:66:d9:a1:a4: 61:26:2f:44:5d:22:76:62:8a:8e:f6:10:e9:33:4f:76:6e:4d: f3:93:ff:eb:9f:f9:83:23:73:8f:a8:79:1e:92:9f:c6:ab:7b: 54:25:8c:82:ad:30:7f:f9:7e:9e:b1:09:dd:65:50:a0:0d:d4: f3:cc:ac:48:77:9b:a5:79:cb:c7:62:2a:d4:4e:9d:2e:e1:9f: 9d:c9:2d:89:91:c0:93:8f:ae:66:45:8c:c1:bd:a5:c4:63:f5: d1:f9:e3:33:01:5f:68:ee:75:a0:79:4b:71:a3:2f:e7:8d:0b: eb:16:37:da:1a:5f:d9:f2:52:ec:fb:32:ea:43:f1:ea:5e:17: 86:31:d6:ec:d0:c2:02:4e:23:f0:4e:f4:75:41:4f:27:22:62: 7e:74:95:17:b3:44:21:65:1c:b3:bc:78:63:15:b9:52:dc:3a: 9f:b4:5d:3f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9XN4nX3/QVAuqaSLQQ8/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTkzMDA3YzdjOTJkZjYxNzhlN2NiNDMxODNmZDdmNTJh NTI2ZDgwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2Y0ODI0OTIzOGM3ZTc3NTA3YjI1MjQxNWEwYjZlZTk3ZDZkNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUUBhqc/1P/V438tnzkDNEz9TZN7 jH1ejFEChJiqFl3C46OfgRq0i9o7vBhtPq2Z8Mhj9eK2s5C0W3GA+oDb2vaAIlax DLJnXK44SWpHoPRadMPCwimWvl++6pNZC8ZP5zvuVpVxSU/JU2amGgq+TO3CeNwD ED4zWkub7XYBNcAprNbM5UBEU9X84sx/WMD0fRNR7ik83ScgNEr8bavFtTTc8gn/ QYqKdZb9qgOrZ9Gb4UoAayrsBlVJZxqlh30u2vMoqljq0A/CL/0qHDEs2HITFwKV MxLleVBnrb2XbHIi1HDy0kZ4oSMgNZKfThSrb4ocqVq6qA+4ugeOP4a5DwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHP0gkkjjH53UHslJBWgtu6X1tZlMB8GA1UdIwQY MBaAFCmZMAfHyS32F458tDGD/X9SpSbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODkt MWU4MjlmZmExYzNhLzEvY19TQ1NTT01mbmRRZXlVa0ZhQzI3cGZXMW1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODktMWU4MjlmZmExYzNh LzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAlTRkD BAIlTRgwDQYJKoZIhvcNAQELBQADggEBACDBxidWf/rwpM8tqxUAKhVNM4B6F09A DMs8nPBWMlbRrdinLeMwhl/UJSWvhS5Z2Ei42CXZZaMzzkQEg+6TkV2rtqfjkrlP BWq0e02XhUwB1cAL3g9xZtmhpGEmL0RdInZiio72EOkzT3ZuTfOT/+uf+YMjc4+o eR6Sn8are1QljIKtMH/5fp6xCd1lUKAN1PPMrEh3m6V5y8diKtROnS7hn53JLYmR wJOPrmZFjMG9pcRj9dH54zMBX2judaB5S3GjL+eNC+sWN9oaX9nyUuz7MupD8epe F4Yx1uzQwgJOI/BO9HVBTyciYn50lRezRCFlHLO8eGMVuVLcOp+0XT8= -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:53 2026 by rpki-client