This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/aVybriSKg8J2Q7TvdQTwBVBbpgQ.roa File: aVybriSKg8J2Q7TvdQTwBVBbpgQ.roa (raw, json) Hash identifier: CsGiY18ccHhD7M1a8C7IWEu0NTkbcJT9x/p8uOlc+a0= Subject key identifier: 69:5C:9B:AE:24:8A:83:C2:76:43:B4:EF:75:04:F0:05:50:5B:A6:04 Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Certificate serial: 019B79EC3E9523A53752DACE20378FE31E71 Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/aVybriSKg8J2Q7TvdQTwBVBbpgQ.roa Signing time: Thu 01 Jan 2026 14:18:04 +0000 ROA not before: Thu 01 Jan 2026 14:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29134 IP address blocks: 37.46.80.0/21 maxlen: 21 62.109.128.0/19 maxlen: 24 130.193.8.0/21 maxlen: 24 171.33.136.0/21 maxlen: 21 185.100.92.0/22 maxlen: 22 185.102.20.0/22 maxlen: 24 185.102.76.0/22 maxlen: 22 213.109.164.0/22 maxlen: 24 217.31.48.0/20 maxlen: 20 2001:1ab0::/32 maxlen: 32 2a00:ca80::/32 maxlen: 32 2a03:b780::/32 maxlen: 32 2a09:ec00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3e:95:23:a5:37:52:da:ce:20:37:8f:e3:1e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Validity Not Before: Jan 1 14:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=695c9bae248a83c27643b4ef7504f005505ba604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:83:d1:b7:ca:c5:54:db:0d:e4:2c:a2:09: 57:d1:d9:96:6c:0a:8c:92:a3:a0:b8:79:61:ac:cb: 89:30:dc:4e:3c:09:36:13:b0:22:3e:5e:d3:f4:46: 3b:d7:f5:40:ac:d9:5b:b8:a6:3d:7c:83:da:b7:01: 94:63:3d:8f:45:f6:1b:07:0e:0e:9c:b2:47:0a:ae: 02:94:17:23:e7:21:5e:65:9c:e3:0b:dd:8d:64:3b: 4b:82:a5:4f:fd:4d:e6:2c:af:82:74:bb:97:74:47: ed:be:76:2f:dc:c5:f7:55:07:a1:b2:26:42:88:58: cb:97:6a:b8:9c:c5:4a:25:69:71:52:e0:c8:3b:fa: d1:b5:b0:a9:ca:5d:bf:ac:7a:6e:41:17:6f:01:33: a3:f1:0e:d2:72:33:cc:71:46:ec:9b:c7:8c:b2:e2: 49:89:5a:fd:7a:9d:7b:83:b3:de:86:d4:6c:8f:89: ab:f3:e7:e2:de:1b:b1:5d:d6:d2:9d:84:10:7d:9f: 5f:74:08:26:85:57:7c:62:6a:55:b3:43:ef:ff:fa: 79:26:13:b4:39:15:94:ee:27:49:96:d8:a6:ab:c6: fc:40:4a:35:03:23:39:d0:24:5e:38:55:60:e8:43: c7:04:3c:65:d4:c9:26:44:c4:66:f8:44:89:32:57: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5C:9B:AE:24:8A:83:C2:76:43:B4:EF:75:04:F0:05:50:5B:A6:04 X509v3 Authority Key Identifier: keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/aVybriSKg8J2Q7TvdQTwBVBbpgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.80.0/21 62.109.128.0/19 130.193.8.0/21 171.33.136.0/21 185.100.92.0/22 185.102.20.0/22 185.102.76.0/22 213.109.164.0/22 217.31.48.0/20 IPv6: 2001:1ab0::/32 2a00:ca80::/32 2a03:b780::/32 2a09:ec00::/29 Signature Algorithm: sha256WithRSAEncryption 12:a3:d8:06:e5:96:88:bd:2b:bb:e3:7c:b7:ec:5f:41:1f:6a: 1e:50:3d:c7:e1:a6:01:8f:c5:a4:ea:53:da:6c:c1:0e:2f:2d: 10:dc:8a:f4:0d:ff:e8:0a:87:53:5e:73:36:9e:23:eb:d4:39: f9:b8:d0:43:7c:85:25:80:89:6b:c6:a2:ee:aa:c2:85:e1:75: 2b:87:e4:69:ec:8a:98:12:18:42:17:c7:9b:35:ba:d9:bf:d4: 07:22:b4:0e:34:c5:9b:c4:c2:70:75:b3:ec:4e:6c:61:3b:99: a1:38:f3:a9:09:a0:4b:50:04:6f:4b:2b:1d:3d:44:33:3a:f9: f5:ba:a6:07:96:dd:79:15:b6:89:ac:04:c2:4f:63:93:d4:a2: 8d:5b:e4:5e:cf:70:cb:b1:23:72:45:43:5e:1d:88:86:62:33: b8:26:07:ec:8a:4e:cd:49:bc:ff:eb:0d:61:29:6a:7a:ef:46: 5a:09:4b:51:7f:2d:8d:d9:56:6e:9c:c4:14:4c:1b:bb:3f:67: 1a:0f:8c:81:19:38:6c:28:a5:3c:b6:bb:83:61:13:c7:c9:ee: 9f:e7:ae:07:ca:51:2d:9f:aa:ba:e7:e5:32:f4:30:68:d4:1d: 27:e4:5c:a7:3a:39:62:9b:72:1e:84:6b:91:7d:93:0b:38:5f: 60:a6:3a:7f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt57D6VI6U3UtrOIDeP4x5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz NmZmMTAwHhcNMjYwMTAxMTQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTVjOWJhZTI0OGE4M2MyNzY0M2I0ZWY3NTA0ZjAwNTUwNWJhNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY2D0bfKxVTbDeQsoglX0dmWbAqM kqOguHlhrMuJMNxOPAk2E7AiPl7T9EY71/VArNlbuKY9fIPatwGUYz2PRfYbBw4O nLJHCq4ClBcj5yFeZZzjC92NZDtLgqVP/U3mLK+CdLuXdEftvnYv3MX3VQehsiZC iFjLl2q4nMVKJWlxUuDIO/rRtbCpyl2/rHpuQRdvATOj8Q7ScjPMcUbsm8eMsuJJ iVr9ep17g7PehtRsj4mr8+fi3huxXdbSnYQQfZ9fdAgmhVd8YmpVs0Pv//p5JhO0 ORWU7idJltimq8b8QEo1AyM50CReOFVg6EPHBDxl1MkmRMRm+ESJMlc0TwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFGlcm64kioPCdkO073UE8AVQW6YEMB8GA1UdIwQY MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt YjUzYjY0Y2YwZDk1LzEvYVZ5YnJpU0tnOEoyUTdUdmRRVHdCVkJicGdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1 LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjA8BAIAATA2AwQDJS5QAwQF Pm2AAwQDgsEIAwQDqyGIAwQCuWRcAwQCuWYUAwQCuWZMAwQC1W2kAwQE2R8wMCIE AgACMBwDBQAgARqwAwUAKgDKgAMFACoDt4ADBQMqCewAMA0GCSqGSIb3DQEBCwUA A4IBAQASo9gG5ZaIvSu743y37F9BH2oeUD3H4aYBj8Wk6lPabMEOLy0Q3Ir0Df/o CodTXnM2niPr1Dn5uNBDfIUlgIlrxqLuqsKF4XUrh+Rp7IqYEhhCF8ebNbrZv9QH IrQONMWbxMJwdbPsTmxhO5mhOPOpCaBLUARvSysdPUQzOvn1uqYHlt15FbaJrATC T2OT1KKNW+Rez3DLsSNyRUNeHYiGYjO4Jgfsik7NSbz/6w1hKWp670ZaCUtRfy2N 2VZunMQUTBu7P2caD4yBGThsKKU8truDYRPHye6f564HylEtn6q65+Uy9DBo1B0n 5FynOjlim3IehGuRfZMLOF9gpjp/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:33 2026 by rpki-client