This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/_w8qU7QLDWariPOfRN9OMYuyNWM.roa File: _w8qU7QLDWariPOfRN9OMYuyNWM.roa (raw, json) Hash identifier: 7rGZ50HKoADJZt0gKXjNdUDKxe/HyV19YQRWiM3XHAo= Subject key identifier: FF:0F:2A:53:B4:0B:0D:66:AB:88:F3:9F:44:DF:4E:31:8B:B2:35:63 Certificate issuer: /CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a Certificate serial: 019B7B35C23C7E120B45C578E96A98B18CFB Authority key identifier: CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/_w8qU7QLDWariPOfRN9OMYuyNWM.roa Signing time: Thu 01 Jan 2026 20:17:59 +0000 ROA not before: Thu 01 Jan 2026 20:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45015 IP address blocks: 37.99.248.0/21 maxlen: 21 134.90.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.mft rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c2:3c:7e:12:0b:45:c5:78:e9:6a:98:b1:8c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd626bbb7b69eec9f6790b03705545b892fa2e8a Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff0f2a53b40b0d66ab88f39f44df4e318bb23563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:b1:e6:f4:b7:eb:6c:84:92:f1:cb:93:26: ad:92:0d:cb:31:00:b4:af:fc:68:7a:49:ab:60:a8: 4c:a1:8e:44:80:af:2f:f2:12:0c:b0:7b:3d:24:15: 56:be:e8:d2:e5:37:1d:47:eb:97:9d:04:c4:75:84: 2e:18:75:c7:27:e1:29:60:c2:60:85:ff:a0:88:d1: e7:c4:36:7b:3f:17:06:4e:95:d7:1a:93:cb:40:c3: 24:a8:4d:1d:48:3e:35:e7:33:59:fe:53:57:ed:22: 33:3f:21:ca:b2:c4:9c:d6:b1:58:84:0f:c7:ea:30: 8c:0f:f2:08:d7:88:e0:bb:58:eb:46:55:20:1b:71: 81:1b:cf:66:e7:7c:1f:0a:31:3d:27:af:6e:f3:03: 38:8b:de:90:f5:14:52:be:bf:2e:1b:c7:aa:5e:93: 62:c9:1c:bc:59:30:09:15:5e:e3:fe:de:1a:f0:39: 34:d1:f8:f3:b0:c9:19:7c:bb:7d:ed:8d:74:ca:ca: 66:f4:d7:0d:35:3f:54:dc:d8:f5:af:c0:15:b2:94: 26:19:da:f7:b2:f6:ca:43:2e:c2:f8:fc:64:22:91: 75:a7:5c:de:86:a0:e1:3c:f1:73:48:9b:2f:fa:03: 64:6a:f2:a7:b8:e9:e4:1e:09:56:5a:92:9c:32:cd: f0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0F:2A:53:B4:0B:0D:66:AB:88:F3:9F:44:DF:4E:31:8B:B2:35:63 X509v3 Authority Key Identifier: keyid:CD:62:6B:BB:7B:69:EE:C9:F6:79:0B:03:70:55:45:B8:92:FA:2E:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWJru3tp7sn2eQsDcFVFuJL6Loo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/_w8qU7QLDWariPOfRN9OMYuyNWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2b37df-8ffe-41e5-ac07-c0f89ad36bca/1/zWJru3tp7sn2eQsDcFVFuJL6Loo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.99.248.0/21 134.90.248.0/21 Signature Algorithm: sha256WithRSAEncryption cc:d2:db:19:38:83:a6:01:11:7d:ef:d4:b7:24:56:00:e8:a0: b6:5a:6a:60:ae:0d:9a:cf:dd:f7:9c:42:b9:2c:99:c5:0a:03: 39:73:ec:05:38:ca:20:88:87:7f:3a:9c:d7:e4:a6:26:0a:f0: 88:0b:7a:1c:25:b3:f1:08:5f:99:77:96:cb:bf:60:76:e4:9b: b9:2c:73:e6:7c:cb:0c:9f:32:f2:a1:7a:44:d6:3a:23:b2:20: f6:be:be:c0:34:9f:e4:44:dd:66:c7:c8:0a:6d:45:e3:93:5f: dc:2d:15:45:6f:d9:8a:f1:6d:54:ec:82:7c:42:b8:91:57:e8: 94:b9:ed:1a:a1:4a:6b:27:d4:fe:9d:e2:bf:78:80:6f:22:e1: 90:76:d3:48:31:ed:31:79:2b:64:ef:78:36:a2:2b:b3:d8:fa: b9:f4:b2:f3:7f:db:28:79:fa:df:46:bd:01:68:53:f8:51:5a: ab:bc:8a:dd:2f:41:20:bf:e5:63:93:b6:5c:b6:b5:06:65:f0: 15:d5:cd:d8:64:5d:6f:cf:91:2b:cd:8b:78:3d:c7:a7:14:2f: 80:bf:97:65:9c:8c:93:5e:90:a0:66:47:5f:26:46:4b:fe:ad: c9:f4:13:5f:1a:7c:35:17:c4:21:b9:18:a6:9a:23:34:ac:e0: 9d:56:29:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NcI8fhILRcV46WqYsYz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjI2YmJiN2I2OWVlYzlmNjc5MGIwMzcwNTU0NWI4OTJm YTJlOGEwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjBmMmE1M2I0MGIwZDY2YWI4OGYzOWY0NGRmNGUzMThiYjIzNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB6x5vS362yEkvHLkyatkg3LMQC0 r/xoekmrYKhMoY5EgK8v8hIMsHs9JBVWvujS5TcdR+uXnQTEdYQuGHXHJ+EpYMJg hf+giNHnxDZ7PxcGTpXXGpPLQMMkqE0dSD415zNZ/lNX7SIzPyHKssSc1rFYhA/H 6jCMD/II14jgu1jrRlUgG3GBG89m53wfCjE9J69u8wM4i96Q9RRSvr8uG8eqXpNi yRy8WTAJFV7j/t4a8Dk00fjzsMkZfLt97Y10yspm9NcNNT9U3Nj1r8AVspQmGdr3 svbKQy7C+PxkIpF1p1zehqDhPPFzSJsv+gNkavKnuOnkHglWWpKcMs3w6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP8PKlO0Cw1mq4jzn0TfTjGLsjVjMB8GA1UdIwQY MBaAFM1ia7t7ae7J9nkLA3BVRbiS+i6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDct YzBmODlhZDM2YmNhLzEvX3c4cVU3UUxEV2FyaVBPZlJOOU9NWXV5TldNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yYjM3ZGYtOGZmZS00MWU1LWFjMDctYzBmODlhZDM2YmNh LzEveldKcnUzdHA3c24yZVFzRGNGVkZ1Skw2TG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDJWP4AwQD hlr4MA0GCSqGSIb3DQEBCwUAA4IBAQDM0tsZOIOmARF979S3JFYA6KC2Wmpgrg2a z933nEK5LJnFCgM5c+wFOMogiId/OpzX5KYmCvCIC3ocJbPxCF+Zd5bLv2B25Ju5 LHPmfMsMnzLyoXpE1jojsiD2vr7ANJ/kRN1mx8gKbUXjk1/cLRVFb9mK8W1U7IJ8 QriRV+iUue0aoUprJ9T+neK/eIBvIuGQdtNIMe0xeStk73g2oiuz2Pq59LLzf9so efrfRr0BaFP4UVqrvIrdL0Egv+Vjk7ZctrUGZfAV1c3YZF1vz5ErzYt4PcenFC+A v5dlnIyTXpCgZkdfJkZL/q3J9BNfGnw1F8QhuRimmiM0rOCdVin1 -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:54 2026 by rpki-client