This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/Q2sWoej5DPGl5wIw-CeODcRVXlM.roa File: Q2sWoej5DPGl5wIw-CeODcRVXlM.roa (raw, json) Hash identifier: wQMcbtBLdOGU6mgU9d/xsDpXItDoVCXCwiC3i9zeKw8= Subject key identifier: 43:6B:16:A1:E8:F9:0C:F1:A5:E7:02:30:F8:27:8E:0D:C4:55:5E:53 Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Certificate serial: 019B78348088AEB4BC8E4E4205CBD224EA6F Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/Q2sWoej5DPGl5wIw-CeODcRVXlM.roa Signing time: Thu 01 Jan 2026 06:17:45 +0000 ROA not before: Thu 01 Jan 2026 06:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6279 IP address blocks: 37.17.184.0/21 maxlen: 24 37.17.184.0/24 maxlen: 24 37.17.185.0/24 maxlen: 24 37.17.186.0/24 maxlen: 24 37.17.188.0/24 maxlen: 24 37.17.189.0/24 maxlen: 24 37.17.190.0/24 maxlen: 24 37.17.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:80:88:ae:b4:bc:8e:4e:42:05:cb:d2:24:ea:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8 Validity Not Before: Jan 1 06:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=436b16a1e8f90cf1a5e70230f8278e0dc4555e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8f:3d:d0:25:1d:be:5a:13:91:eb:1d:2a:6a: 74:86:0b:1f:e3:9d:c0:92:9d:ce:4d:f1:9b:66:ee: e6:74:ff:83:34:76:e2:f2:a3:48:f9:19:7c:b4:0f: 6d:51:2f:b7:a2:74:d9:15:80:d1:62:da:d6:2d:d5: 29:b5:e9:e0:04:01:07:67:ff:50:df:8f:75:5e:67: 3c:dd:78:f8:db:a0:c8:d1:69:94:89:e4:3a:3a:83: 86:52:b1:e8:1e:d2:14:49:af:9c:01:1c:be:27:28: c2:25:ee:a4:95:a7:0a:ac:28:f6:eb:0d:63:7b:ae: 39:f8:bf:42:d2:c0:c8:22:ae:8f:ab:89:9a:ad:e0: b7:04:a4:67:f0:ac:ef:f7:63:1a:53:d8:ec:3b:b7: 90:79:cd:7e:56:e0:d0:68:ae:5b:cc:15:4d:43:9e: 03:42:f2:b9:5a:1c:94:f5:90:7a:96:48:1e:91:38: 2e:ac:07:3f:de:87:bd:60:db:68:c2:3b:ef:c4:94: 1a:80:e9:70:3b:1b:d2:7c:e6:5b:a8:61:fe:25:d3: 6f:de:a0:31:92:c6:f3:3c:c5:78:3e:fc:d2:4c:19: d4:06:17:3a:3a:22:ce:01:7b:35:73:c8:79:30:d9: 93:4d:6b:27:db:6e:c9:9e:f1:cb:f1:72:80:89:bc: 4d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6B:16:A1:E8:F9:0C:F1:A5:E7:02:30:F8:27:8E:0D:C4:55:5E:53 X509v3 Authority Key Identifier: keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/Q2sWoej5DPGl5wIw-CeODcRVXlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.17.184.0/21 Signature Algorithm: sha256WithRSAEncryption d4:5d:69:8a:c2:79:bd:d1:57:1e:4f:7e:2c:df:ae:28:1b:e6: 71:e0:9b:bd:cb:f2:df:24:cb:46:2b:22:01:d6:6a:a8:ff:da: 66:35:79:2f:4a:99:49:97:ea:29:1e:0d:0e:0a:cf:f8:ae:12: 4e:0a:01:00:22:e2:9a:f4:d9:f7:e6:1a:87:3a:cc:a8:9c:dc: b2:4a:28:b4:72:44:b4:ce:49:ec:04:95:3e:85:0b:d7:05:1f: 0e:72:49:5a:27:cf:05:3a:e5:48:30:73:ee:1e:de:d7:ae:49: 2b:f4:1f:80:70:ed:ee:04:87:40:f9:5f:d6:02:01:13:cb:95: 97:d2:f6:58:ae:58:8f:2a:71:85:a4:ec:a1:4f:62:71:6b:50: 72:bd:08:f1:99:12:26:e9:64:33:0f:97:2b:01:4b:52:7e:e8: b4:cc:50:b8:d5:00:8d:a5:ea:63:8a:09:20:da:34:e0:f1:4f: a8:a3:6c:e8:2d:26:f7:ce:06:43:e9:47:e4:67:c7:ad:b6:c5: 19:ab:db:7a:0a:12:c8:83:6d:1e:d5:12:06:4a:9f:b9:bf:6f: 99:22:37:73:13:91:0a:db:44:18:12:1c:b9:4f:e5:5d:69:d0: 2d:d0:57:5f:11:1c:92:12:0a:42:fb:12:08:14:f8:90:b1:3a: 72:e4:b6:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NICIrrS8jk5CBcvSJOpvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDZmMDI2YjFmZTYzNmM5YTVkYTAxMWRjN2ZkNjljNTgx ZDAyYjgwHhcNMjYwMTAxMDYxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzZiMTZhMWU4ZjkwY2YxYTVlNzAyMzBmODI3OGUwZGM0NTU1ZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o890CUdvloTkesdKmp0hgsf453A kp3OTfGbZu7mdP+DNHbi8qNI+Rl8tA9tUS+3onTZFYDRYtrWLdUptengBAEHZ/9Q 3491Xmc83Xj426DI0WmUieQ6OoOGUrHoHtIUSa+cARy+JyjCJe6klacKrCj26w1j e645+L9C0sDIIq6Pq4mareC3BKRn8Kzv92MaU9jsO7eQec1+VuDQaK5bzBVNQ54D QvK5WhyU9ZB6lkgekTgurAc/3oe9YNtowjvvxJQagOlwOxvSfOZbqGH+JdNv3qAx ksbzPMV4PvzSTBnUBhc6OiLOAXs1c8h5MNmTTWsn227JnvHL8XKAibxNHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFENrFqHo+QzxpecCMPgnjg3EVV5TMB8GA1UdIwQY MBaAFCkG8Cax/mNsml2gEdx/1pxYHQK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUt ODBhOTFiZTgzZTRiLzEvUTJzV29lajVEUEdsNXdJdy1DZU9EY1JWWGxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUtODBhOTFiZTgzZTRi LzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJRG4MA0G CSqGSIb3DQEBCwUAA4IBAQDUXWmKwnm90VceT34s364oG+Zx4Ju9y/LfJMtGKyIB 1mqo/9pmNXkvSplJl+opHg0OCs/4rhJOCgEAIuKa9Nn35hqHOsyonNyySii0ckS0 zknsBJU+hQvXBR8OcklaJ88FOuVIMHPuHt7Xrkkr9B+AcO3uBIdA+V/WAgETy5WX 0vZYrliPKnGFpOyhT2Jxa1ByvQjxmRIm6WQzD5crAUtSfui0zFC41QCNpepjigkg 2jTg8U+oo2zoLSb3zgZD6UfkZ8ettsUZq9t6ChLIg20e1RIGSp+5v2+ZIjdzE5EK 20QYEhy5T+VdadAt0FdfERySEgpC+xIIFPiQsTpy5LZU -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:19 2026 by rpki-client