This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/cVHvV_AfygNUxK1wLw3TaNGFbjc.roa File: cVHvV_AfygNUxK1wLw3TaNGFbjc.roa (raw, json) Hash identifier: aLS2Onqdh8tUWZKfNWq/5VUb/NC+ZJDVJlHb2Z6u8NU= Subject key identifier: 71:51:EF:57:F0:1F:CA:03:54:C4:AD:70:2F:0D:D3:68:D1:85:6E:37 Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f Certificate serial: 019B78A35281F7EF947F30141B31965BEF5A Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/cVHvV_AfygNUxK1wLw3TaNGFbjc.roa Signing time: Thu 01 Jan 2026 08:18:47 +0000 ROA not before: Thu 01 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41000 IP address blocks: 37.61.232.0/21 maxlen: 24 37.61.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:52:81:f7:ef:94:7f:30:14:1b:31:96:5b:ef:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7151ef57f01fca0354c4ad702f0dd368d1856e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d5:56:b6:16:50:13:f6:c9:7e:e7:4e:f8:28: cf:09:21:da:6e:5a:de:e2:cd:f3:8d:87:e1:de:42: 89:25:70:61:3d:85:f1:46:52:45:ed:3f:82:97:92: 63:8a:99:16:4f:25:3d:b0:e4:46:d4:dd:fd:6f:84: 82:0f:ba:5a:a1:f3:89:4c:40:97:59:63:31:a3:80: 62:03:16:84:f5:8e:8a:be:10:04:18:7b:08:27:ab: 1e:e1:8b:23:43:27:9a:a7:29:d6:8e:7c:fb:8a:62: 52:9b:f0:ca:85:a5:6d:44:5a:ee:f2:30:63:98:f8: 80:ba:0a:d0:ff:8b:98:90:bb:f4:4b:14:3d:a0:59: 91:31:9b:f2:41:3d:f3:47:a6:95:ab:f6:43:68:95: 44:80:6a:85:5d:60:55:9e:73:6e:61:15:f3:bf:aa: 3d:46:0d:e0:86:eb:c4:3a:b8:f7:68:b9:f4:32:e0: 37:bc:ef:b2:a0:4c:25:50:c2:00:cd:bd:f9:c2:f9: 02:59:89:4b:55:61:24:9a:e9:dc:55:04:78:6b:5a: 92:eb:73:49:c3:b6:c8:aa:93:94:57:24:1a:75:f4: 04:29:54:18:28:76:77:48:b6:a3:6d:0e:e3:cd:00: c3:37:c4:88:bf:e6:2f:99:5c:9d:78:21:39:dc:11: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:51:EF:57:F0:1F:CA:03:54:C4:AD:70:2F:0D:D3:68:D1:85:6E:37 X509v3 Authority Key Identifier: keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/cVHvV_AfygNUxK1wLw3TaNGFbjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.61.232.0/21 Signature Algorithm: sha256WithRSAEncryption 00:69:bd:ba:59:de:c2:a3:9b:da:ad:53:4d:fb:79:60:c3:ca: 13:2e:61:2b:47:15:a4:d7:e8:02:31:d6:8f:a8:92:f2:a2:a8: 69:de:ea:c9:5f:b9:ee:c7:4d:81:8b:b8:68:24:65:48:e4:b4: 0e:8e:79:3f:8d:76:97:2b:8e:70:b9:c8:3f:35:d4:ff:2f:0f: e4:c4:36:13:2b:1f:d2:7c:8d:c9:fc:4e:61:0a:ad:d3:71:1e: 8c:d6:ec:38:ba:fb:ac:41:ea:fa:5f:53:ca:da:1b:2b:b6:8c: 89:43:17:09:dc:36:cf:e9:6b:c6:53:84:8a:39:2e:30:72:32: 15:a9:6a:c5:24:1f:ee:09:0d:a4:ac:91:ef:0d:32:0a:31:0d: 5e:fa:d1:b9:f1:53:90:39:22:e1:1c:ab:1b:69:84:41:cb:fc: 80:d0:87:0d:d5:55:c7:22:2b:96:90:9b:40:ba:e8:1a:2a:a7: 43:3f:28:4f:eb:cc:a7:96:ec:93:7c:4a:cb:ae:e4:7c:b5:83: 7a:b1:4b:5e:7f:82:68:be:7d:58:9f:cb:a8:10:18:9f:c4:00: 4a:78:30:31:05:3d:2f:3c:9a:63:66:ab:c8:9e:4b:76:79:a5: 93:20:5c:27:f9:fb:19:09:6e:49:cd:a6:89:b6:29:ac:1d:ac: 19:3d:42:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1KB9++UfzAUGzGWW+9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MjE5ZWM3MzgzZmEwNjEwNDgwZGRmYTYyYzNmODJjNDAw Y2Q1NmYwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTUxZWY1N2YwMWZjYTAzNTRjNGFkNzAyZjBkZDM2OGQxODU2ZTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NVWthZQE/bJfudO+CjPCSHablre 4s3zjYfh3kKJJXBhPYXxRlJF7T+Cl5JjipkWTyU9sORG1N39b4SCD7paofOJTECX WWMxo4BiAxaE9Y6KvhAEGHsIJ6se4YsjQyeapynWjnz7imJSm/DKhaVtRFru8jBj mPiAugrQ/4uYkLv0SxQ9oFmRMZvyQT3zR6aVq/ZDaJVEgGqFXWBVnnNuYRXzv6o9 Rg3ghuvEOrj3aLn0MuA3vO+yoEwlUMIAzb35wvkCWYlLVWEkmuncVQR4a1qS63NJ w7bIqpOUVyQadfQEKVQYKHZ3SLajbQ7jzQDDN8SIv+YvmVydeCE53BFVlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHFR71fwH8oDVMStcC8N02jRhW43MB8GA1UdIwQY MBaAFNchnsc4P6BhBIDd+mLD+CxADNVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4Yjct ZDBjODJhM2NmNGI2LzEvY1ZIdlZfQWZ5Z05VeEsxd0x3M1RhTkdGYmpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4YjctZDBjODJhM2NmNGI2 LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJT3oMA0G CSqGSIb3DQEBCwUAA4IBAQAAab26Wd7Co5varVNN+3lgw8oTLmErRxWk1+gCMdaP qJLyoqhp3urJX7nux02Bi7hoJGVI5LQOjnk/jXaXK45wucg/NdT/Lw/kxDYTKx/S fI3J/E5hCq3TcR6M1uw4uvusQer6X1PK2hsrtoyJQxcJ3DbP6WvGU4SKOS4wcjIV qWrFJB/uCQ2krJHvDTIKMQ1e+tG58VOQOSLhHKsbaYRBy/yA0IcN1VXHIiuWkJtA uugaKqdDPyhP68ynluyTfErLruR8tYN6sUtef4Jovn1Yn8uoEBifxABKeDAxBT0v PJpjZqvInkt2eaWTIFwn+fsZCW5JzaaJtimsHawZPUJA -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:21 2026 by rpki-client