This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0iUac0rgXXVeEnzgpmlncnP6J7A.roa File: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (raw, json) Hash identifier: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs= Subject key identifier: D2:25:1A:73:4A:E0:5D:75:5E:12:7C:E0:A6:69:67:72:73:FA:27:B0 Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B78A36D43C3EDDA8F11994A249D2FB4AF Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0iUac0rgXXVeEnzgpmlncnP6J7A.roa Signing time: Thu 01 Jan 2026 08:18:54 +0000 ROA not before: Thu 01 Jan 2026 08:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24851 IP address blocks: 37.235.55.0/24 maxlen: 24 2a03:f80:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6d:43:c3:ed:da:8f:11:99:4a:24:9d:2f:b4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jan 1 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2251a734ae05d755e127ce0a669677273fa27b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:64:59:78:4c:34:99:e7:45:90:5a:de:35: 4c:e7:d6:68:9c:23:24:e6:cf:aa:b4:01:a4:3a:85: 04:7d:c6:0e:49:12:8b:e6:f4:dd:16:4a:a5:33:a4: 06:8a:68:cb:4e:53:e4:a2:f0:ac:8f:aa:08:73:a1: 72:17:cc:98:f6:a9:3b:c5:52:92:8d:b9:ff:d3:d5: 00:4a:99:8f:14:55:27:b7:1b:7e:a0:ce:51:73:1c: 6d:2d:74:12:22:45:c4:c1:1f:01:b0:c4:2d:99:2d: 3d:a2:2a:63:f8:ea:32:a5:7f:b2:9c:32:e8:02:ae: e1:ac:45:3c:11:cd:2e:57:78:b9:48:3d:31:c7:f6: fb:aa:ac:c4:2c:e7:bc:ce:0a:62:21:3a:c8:d0:ce: 3c:2a:b1:a4:79:d4:c3:20:4a:13:be:b3:40:9a:f4: 3f:5c:c4:22:7f:76:c6:cf:c5:15:d3:dd:da:fe:77: 23:28:83:fc:f8:67:6f:88:1a:50:dc:2a:16:3a:4c: 6a:4d:69:dd:f0:1c:15:5f:82:d3:24:e1:c1:fd:a6: 5c:d4:ec:ca:ea:78:3f:58:36:8c:82:27:25:f9:89: 26:a2:0d:e7:19:ba:fe:c7:be:f3:dc:fb:fc:c4:e8: 6f:51:24:19:12:56:e4:ad:20:c9:d0:cc:be:0f:65: 05:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:1A:73:4A:E0:5D:75:5E:12:7C:E0:A6:69:67:72:73:FA:27:B0 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0iUac0rgXXVeEnzgpmlncnP6J7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.235.55.0/24 IPv6: 2a03:f80:44::/48 Signature Algorithm: sha256WithRSAEncryption 5b:03:16:3c:89:da:2a:55:c9:8e:f4:48:04:59:a7:0d:46:de: ba:46:bc:eb:72:ab:7d:05:36:cf:77:30:e9:9d:e4:63:18:31: e4:da:99:07:65:59:58:0e:3c:26:6e:32:db:5a:c5:92:6b:dc: 56:7a:15:94:32:cf:5b:fc:eb:30:51:5c:ad:a3:2b:15:f6:5f: ad:12:ad:54:56:40:80:cf:13:30:96:4c:8a:6b:55:c8:7b:c9: 59:41:0d:25:55:38:ce:4f:de:ec:eb:e0:43:7f:1e:90:7d:55: d8:c1:7f:f1:b9:6a:99:d4:7a:bd:16:2d:38:a5:95:5e:14:64: b5:68:c1:e6:5b:09:77:7c:d4:74:66:86:52:82:b9:b7:35:e2: 03:4c:35:32:78:1a:1d:36:bc:00:99:b3:8c:f5:31:a3:26:5c: 15:f0:0c:d4:5a:50:f9:d2:e7:61:6c:72:1d:96:14:9d:0e:48: 9b:8f:9d:dc:5a:0c:6f:73:c9:07:02:53:30:dd:13:22:06:f0: fb:2f:00:fe:64:32:23:58:28:31:36:d0:0a:8d:bc:15:65:c6: 44:97:61:8a:96:4b:85:a7:39:41:69:27:17:e6:69:e7:de:5b: 6a:76:f0:e9:f9:c7:34:b4:a2:c1:7c:58:0c:1e:ea:9b:05:94: f7:11:9e:56 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4o21Dw+3ajxGZSiSdL7SvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwMTAxMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjI1MWE3MzRhZTA1ZDc1NWUxMjdjZTBhNjY5Njc3MjczZmEyN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi9kWXhMNJnnRZBa3jVM59ZonCMk 5s+qtAGkOoUEfcYOSRKL5vTdFkqlM6QGimjLTlPkovCsj6oIc6FyF8yY9qk7xVKS jbn/09UASpmPFFUntxt+oM5RcxxtLXQSIkXEwR8BsMQtmS09oipj+OoypX+ynDLo Aq7hrEU8Ec0uV3i5SD0xx/b7qqzELOe8zgpiITrI0M48KrGkedTDIEoTvrNAmvQ/ XMQif3bGz8UV093a/ncjKIP8+GdviBpQ3CoWOkxqTWnd8BwVX4LTJOHB/aZc1OzK 6ng/WDaMgicl+Ykmog3nGbr+x77z3Pv8xOhvUSQZElbkrSDJ0My+D2UF8wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNIlGnNK4F11XhJ84KZpZ3Jz+iewMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGlVYWMwcmdYWFZlRW56Z3BtbG5jblA2SjdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAJes3MA8E AgACMAkDBwAqAw+AAEQwDQYJKoZIhvcNAQELBQADggEBAFsDFjyJ2ipVyY70SARZ pw1G3rpGvOtyq30FNs93MOmd5GMYMeTamQdlWVgOPCZuMttaxZJr3FZ6FZQyz1v8 6zBRXK2jKxX2X60SrVRWQIDPEzCWTIprVch7yVlBDSVVOM5P3uzr4EN/HpB9VdjB f/G5apnUer0WLTillV4UZLVoweZbCXd81HRmhlKCubc14gNMNTJ4Gh02vACZs4z1 MaMmXBXwDNRaUPnS52Fsch2WFJ0OSJuPndxaDG9zyQcCUzDdEyIG8PsvAP5kMiNY KDE20AqNvBVlxkSXYYqWS4WnOUFpJxfmaefeW2p28On5xzS0osF8WAwe6psFlPcR nlY= -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:57 2026 by rpki-client