This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/37UgpJIpFDoLpn5jUdrrw88EOYs.roa File: 37UgpJIpFDoLpn5jUdrrw88EOYs.roa (raw, json) Hash identifier: 6IHanqLQQ9iVieDletocqCDXSFtx3QpzBhEUB5fo/Wo= Subject key identifier: DF:B5:20:A4:92:29:14:3A:0B:A6:7E:63:51:DA:EB:C3:CF:04:39:8B Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Certificate serial: 019B7C132FE7E7F0868B61BF6D56B706CFA6 Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/37UgpJIpFDoLpn5jUdrrw88EOYs.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34187 IP address blocks: 78.26.128.0/18 maxlen: 18 78.26.128.0/19 maxlen: 19 78.26.128.0/24 maxlen: 24 78.26.129.0/24 maxlen: 24 78.26.130.0/24 maxlen: 24 78.26.140.0/22 maxlen: 22 78.26.151.0/24 maxlen: 24 78.26.160.0/19 maxlen: 19 78.26.161.0/24 maxlen: 24 78.26.180.0/23 maxlen: 23 78.26.192.0/18 maxlen: 18 78.26.192.0/19 maxlen: 19 78.26.192.0/20 maxlen: 20 78.26.192.0/22 maxlen: 22 78.26.200.0/21 maxlen: 21 78.26.224.0/19 maxlen: 19 185.70.108.0/22 maxlen: 22 185.70.108.0/23 maxlen: 23 185.70.110.0/23 maxlen: 23 195.245.118.0/23 maxlen: 23 195.245.118.0/24 maxlen: 24 195.245.119.0/24 maxlen: 24 2a03:1240::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2f:e7:e7:f0:86:8b:61:bf:6d:56:b7:06:cf:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfb520a49229143a0ba67e6351daebc3cf04398b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d4:40:3e:bf:ea:2f:15:ea:d5:94:ea:b9:9a: 65:f5:65:4d:27:3d:e4:f0:83:12:2c:42:e5:54:f1: 15:2f:26:dd:d7:4c:1a:1c:2e:6d:69:a1:4a:f8:e2: 8f:ef:e9:63:8a:3f:55:9a:e5:f3:e2:85:5a:cd:7d: 26:b9:4a:5b:ad:75:8d:6c:42:ac:bb:fa:bd:26:e0: ed:2f:81:ed:8c:99:4a:f6:5b:ec:2e:f5:64:be:06: bc:6d:6f:b2:c2:e7:db:bf:64:84:04:de:36:e7:42: df:6f:b8:5b:80:47:7b:7f:e4:c4:da:3b:08:67:31: c2:96:e9:7c:9a:54:7c:a6:c5:0b:63:ba:fb:f3:3c: b5:54:5f:fb:89:27:81:a7:45:79:5f:fe:7c:d2:8f: 82:94:03:0d:02:96:cb:57:00:ef:b0:47:91:40:6f: f8:3f:55:d1:3f:10:6f:e7:75:56:e3:cd:96:75:a6: 06:17:b4:1f:29:0e:30:b9:7c:72:3e:30:ae:30:2a: 8e:9a:19:f4:13:b4:85:33:dd:19:46:75:08:f1:ca: a6:9f:95:e2:75:64:a9:15:69:82:41:00:3d:6d:99: 4a:70:bb:a9:1b:fc:7d:c6:32:9f:8d:14:6f:5f:95: 61:59:5b:b3:da:09:5f:cd:ef:8f:5d:1e:4a:f9:26: 44:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B5:20:A4:92:29:14:3A:0B:A6:7E:63:51:DA:EB:C3:CF:04:39:8B X509v3 Authority Key Identifier: keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/37UgpJIpFDoLpn5jUdrrw88EOYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.26.128.0/17 185.70.108.0/22 195.245.118.0/23 IPv6: 2a03:1240::/48 Signature Algorithm: sha256WithRSAEncryption 96:a3:3e:8e:71:af:05:eb:f5:d3:49:b6:40:2a:3b:30:47:dc: e7:c4:7a:6f:fe:6b:32:c9:97:7e:13:58:ad:f9:31:0e:f3:79: 6d:57:f0:d5:7e:01:36:f2:2d:fc:a9:2b:c6:06:a6:fa:c0:70: 2c:7b:b2:14:16:ad:35:2f:16:2c:62:58:4f:14:16:c1:31:a2: d9:e8:60:e7:ec:0c:8d:9a:a0:4c:14:4e:95:8c:9d:02:98:d5: a5:3f:e8:53:21:c1:c2:dc:64:dc:ad:44:b1:2a:9f:f1:c3:81: 09:bf:a9:8f:1f:23:b3:f3:19:49:e3:64:3a:84:e2:98:d9:74: 1c:95:19:5b:21:38:96:7c:f1:86:ca:1f:e3:c3:b6:57:5d:09: 8d:e5:79:54:aa:6b:ac:3f:f4:a2:af:0b:04:32:66:ed:ef:89: ac:df:d7:9d:c2:62:ef:ff:ac:4e:45:23:4a:22:8e:5e:5e:60: 44:db:96:6a:09:c6:05:02:eb:2f:b5:26:b2:73:15:2c:02:a1: e2:fe:0d:d3:75:14:3b:51:73:f3:9c:70:33:08:5b:ef:3e:57: 47:48:80:48:85:21:09:ba:74:76:83:9c:5f:5c:c9:a6:86:5f: 1c:6a:1c:6f:fe:0d:9a:13:76:fb:61:11:39:58:9f:7f:80:95: 99:35:9e:0b -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8Ey/n5/CGi2G/bVa3Bs+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0 N2IzYjAwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmI1MjBhNDkyMjkxNDNhMGJhNjdlNjM1MWRhZWJjM2NmMDQzOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdRAPr/qLxXq1ZTquZpl9WVNJz3k 8IMSLELlVPEVLybd10waHC5taaFK+OKP7+ljij9VmuXz4oVazX0muUpbrXWNbEKs u/q9JuDtL4HtjJlK9lvsLvVkvga8bW+ywufbv2SEBN4250Lfb7hbgEd7f+TE2jsI ZzHClul8mlR8psULY7r78zy1VF/7iSeBp0V5X/580o+ClAMNApbLVwDvsEeRQG/4 P1XRPxBv53VW482WdaYGF7QfKQ4wuXxyPjCuMCqOmhn0E7SFM90ZRnUI8cqmn5Xi dWSpFWmCQQA9bZlKcLupG/x9xjKfjRRvX5VhWVuz2glfze+PXR5K+SZENQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFN+1IKSSKRQ6C6Z+Y1Ha68PPBDmLMB8GA1UdIwQY MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt MGQwZGEwZDEwNDMyLzEvMzdVZ3BKSXBGRG9McG41alVkcnJ3ODhFT1lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQHThqAAwQC uUZsAwQBw/V2MA8EAgACMAkDBwAqAxJAAAAwDQYJKoZIhvcNAQELBQADggEBAJaj Po5xrwXr9dNJtkAqOzBH3OfEem/+azLJl34TWK35MQ7zeW1X8NV+ATbyLfypK8YG pvrAcCx7shQWrTUvFixiWE8UFsExotnoYOfsDI2aoEwUTpWMnQKY1aU/6FMhwcLc ZNytRLEqn/HDgQm/qY8fI7PzGUnjZDqE4pjZdByVGVshOJZ88YbKH+PDtlddCY3l eVSqa6w/9KKvCwQyZu3viazf153CYu//rE5FI0oijl5eYETblmoJxgUC6y+1JrJz FSwCoeL+DdN1FDtRc/OccDMIW+8+V0dIgEiFIQm6dHaDnF9cyaaGXxxqHG/+DZoT dvthETlYn3+AlZk1ngs= -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:14 2026 by rpki-client