This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/j37HTrC_dTklyNn2udlv5Naq8yI.roa File: j37HTrC_dTklyNn2udlv5Naq8yI.roa (raw, json) Hash identifier: RkYOgGdqm1JwmKN+7UnvKpJgw018AubpOXcPMP02ZOE= Subject key identifier: 8F:7E:C7:4E:B0:BF:75:39:25:C8:D9:F6:B9:D9:6F:E4:D6:AA:F3:22 Certificate issuer: /CN=78167dd9603b9fb7af501559cb3737d47a2d5437 Certificate serial: 019AE736A501B06C580597FB57FBC7AA16FE Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/j37HTrC_dTklyNn2udlv5Naq8yI.roa Signing time: Thu 04 Dec 2025 02:35:09 +0000 ROA not before: Thu 04 Dec 2025 02:35:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60265 IP address blocks: 91.199.126.0/24 maxlen: 24 2a01:bf00::/32 maxlen: 40 2a01:bf00:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.mft rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:36:a5:01:b0:6c:58:05:97:fb:57:fb:c7:aa:16:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437 Validity Not Before: Dec 4 02:35:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f7ec74eb0bf753925c8d9f6b9d96fe4d6aaf322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:91:a1:20:b7:78:c6:f8:4c:d5:6e:6f:2b:8c: 88:55:d0:44:65:5a:2b:8e:56:ae:56:78:dc:d8:78: 77:7a:f1:e0:45:db:03:ce:86:a2:f3:9f:23:f6:64: 8c:35:27:6e:8e:2b:46:35:68:44:cd:a0:00:14:dc: bb:0c:0a:a8:8d:85:5c:50:ee:41:d9:e4:bd:9f:4e: d3:89:94:22:52:50:99:55:bc:35:9a:9b:60:2f:bf: 03:a1:81:bf:85:68:ed:ef:6b:58:3b:e9:e3:a5:7b: 6e:b6:a7:fd:4c:c5:22:16:1b:df:3d:3b:95:45:13: 5a:dd:75:22:1e:f4:c9:73:e0:da:fb:78:cb:8d:a9: 35:f9:a8:50:00:91:c3:d1:08:93:16:53:8a:35:fd: 98:8d:a4:b8:64:a3:3b:01:5a:75:91:f0:c0:eb:2c: 80:b7:fc:54:a1:dc:d4:a0:98:cd:01:a3:7b:90:b6: de:8b:32:a0:49:69:22:e8:6b:a1:8d:5c:3a:5b:3b: a2:f7:93:19:c4:4f:ed:5f:41:5a:ee:48:41:05:4d: d9:c8:54:a2:4b:cf:54:fc:6c:00:40:d2:b6:55:fc: a4:46:89:d6:41:a9:d4:8b:87:bc:aa:2a:11:5d:5b: bf:1c:be:5c:c4:c3:ee:0e:44:93:02:67:dc:f2:2a: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7E:C7:4E:B0:BF:75:39:25:C8:D9:F6:B9:D9:6F:E4:D6:AA:F3:22 X509v3 Authority Key Identifier: keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/j37HTrC_dTklyNn2udlv5Naq8yI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.126.0/24 IPv6: 2a01:bf00::/32 Signature Algorithm: sha256WithRSAEncryption e1:42:84:97:f8:9a:1d:44:88:14:ed:c5:3f:39:4f:9a:ac:ba: 10:b3:b4:58:46:13:71:c7:8c:ca:bc:21:50:64:dd:8b:6e:ce: 04:d5:0a:e1:40:cd:27:cb:ba:45:f8:e5:88:62:90:a1:e0:42: c9:7d:eb:7e:40:1b:04:59:23:9e:83:72:d4:ff:61:fd:c6:9d: 03:01:40:bb:68:69:83:6f:24:02:f3:44:3f:b3:0d:d0:1c:26: 86:2b:ab:8d:20:3d:b2:78:a6:e0:e3:f3:d8:1d:a1:d7:58:1d: ce:85:1c:4d:e2:b9:65:d4:4d:9a:8b:ff:cf:8e:4d:7b:f9:a3: ee:30:55:21:42:a6:7a:1d:3a:64:4d:5a:cd:68:55:88:26:40: 4d:7c:7a:3c:42:b9:25:f6:9c:75:4a:50:12:58:9a:3f:67:44: 3c:ef:8a:d5:37:95:6d:54:0f:07:8b:81:5e:bc:79:7b:55:f2: ce:aa:da:b2:e2:9c:fa:fc:37:37:e3:09:ba:fd:47:b4:db:b9: 0b:1a:21:30:fb:26:8d:98:22:ca:1f:96:1c:fb:d7:ad:e8:17: f1:b7:0a:81:fd:27:88:71:5a:13:e2:42:5a:81:5a:33:f1:8d: f5:75:21:36:fe:aa:ec:6f:07:20:84:13:da:ee:ed:a8:e0:fc: ef:0f:2e:28 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrnNqUBsGxYBZf7V/vHqhb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MTY3ZGQ5NjAzYjlmYjdhZjUwMTU1OWNiMzczN2Q0N2Ey ZDU0MzcwHhcNMjUxMjA0MDIzNTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjdlYzc0ZWIwYmY3NTM5MjVjOGQ5ZjZiOWQ5NmZlNGQ2YWFmMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5GhILd4xvhM1W5vK4yIVdBEZVor jlauVnjc2Hh3evHgRdsDzoai858j9mSMNSdujitGNWhEzaAAFNy7DAqojYVcUO5B 2eS9n07TiZQiUlCZVbw1mptgL78DoYG/hWjt72tYO+njpXtutqf9TMUiFhvfPTuV RRNa3XUiHvTJc+Da+3jLjak1+ahQAJHD0QiTFlOKNf2YjaS4ZKM7AVp1kfDA6yyA t/xUodzUoJjNAaN7kLbeizKgSWki6GuhjVw6Wzui95MZxE/tX0Fa7khBBU3ZyFSi S89U/GwAQNK2VfykRonWQanUi4e8qioRXVu/HL5cxMPuDkSTAmfc8ioJnQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFI9+x06wv3U5JcjZ9rnZb+TWqvMiMB8GA1UdIwQY MBaAFHgWfdlgO5+3r1AVWcs3N9R6LVQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zMGY2OWMtNDEwZS00NmQ0LWI2ZGIt ZmY4NjU4ZTEzNTZjLzEvajM3SFRyQ19kVGtseU5uMnVkbHY1TmFxOHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zMGY2OWMtNDEwZS00NmQ0LWI2ZGItZmY4NjU4ZTEzNTZj LzEvZUJaOTJXQTduN2V2VUJWWnl6YzMxSG90VkRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8d+MA0E AgACMAcDBQAqAb8AMA0GCSqGSIb3DQEBCwUAA4IBAQDhQoSX+JodRIgU7cU/OU+a rLoQs7RYRhNxx4zKvCFQZN2Lbs4E1QrhQM0ny7pF+OWIYpCh4ELJfet+QBsEWSOe g3LU/2H9xp0DAUC7aGmDbyQC80Q/sw3QHCaGK6uNID2yeKbg4/PYHaHXWB3OhRxN 4rll1E2ai//Pjk17+aPuMFUhQqZ6HTpkTVrNaFWIJkBNfHo8Qrkl9px1SlASWJo/ Z0Q874rVN5VtVA8Hi4FevHl7VfLOqtqy4pz6/Dc34wm6/Ue027kLGiEw+yaNmCLK H5Yc+9et6BfxtwqB/SeIcVoT4kJagVoz8Y31dSE2/qrsbwcghBPa7u2o4PzvDy4o -----END CERTIFICATE-----Generated at Sat Dec 6 23:26:12 2025 by rpki-client