This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa File: 0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa (raw, json) Hash identifier: W/W8DjgReH/V+5pe/5+3BKwvc8dz5PRxxtmAIvZ373s= Subject key identifier: D2:33:D0:CF:68:C8:1E:B5:34:16:F1:EC:AC:5F:97:45:95:21:B7:3B Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019B7AC936096CE281B20805260DD0330526 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203378 IP address blocks: 37.216.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:36:09:6c:e2:81:b2:08:05:26:0d:d0:33:05:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d233d0cf68c81eb53416f1ecac5f97459521b73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:72:37:dc:6b:5c:e8:90:fc:fe:7c:ef:10: fa:e9:ec:df:ac:4e:55:ce:40:c7:75:53:14:43:ed: 3d:95:9a:96:01:43:e8:88:6c:2f:be:90:bd:1d:3a: 45:f3:f1:b5:c5:28:f4:63:b3:e4:82:e7:00:06:c4: 5f:40:54:21:41:77:85:e0:e9:f3:2f:85:f5:34:a5: fe:90:64:be:74:4a:b5:5c:e9:7d:e2:31:73:9a:3e: c3:ad:05:0a:d3:38:73:f3:df:76:8d:15:86:1d:4a: 4a:15:7e:85:6a:8b:91:5f:fe:2d:fe:dd:e0:63:de: b8:bd:e8:4a:c4:1e:f0:44:60:b7:09:f4:e2:1d:f8: 5d:e3:55:ea:48:60:ca:98:ee:96:59:da:44:6f:8f: 5d:89:8c:17:c1:2d:8f:60:cf:19:41:6b:fe:3b:12: f3:8d:61:85:19:77:73:17:dc:a7:e6:59:f2:10:08: ef:35:5b:f2:4d:3c:1a:2e:85:71:41:e3:97:63:22: bb:1c:69:77:e0:bc:48:30:04:c5:8d:78:21:cf:be: 80:5a:59:87:49:23:62:e0:b2:a7:e5:e2:f8:4f:6b: 80:39:87:e8:85:8b:9a:ee:94:3b:53:ca:d8:6d:c9: 59:ae:70:95:28:06:95:29:48:d7:8f:6f:a1:14:90: c5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:33:D0:CF:68:C8:1E:B5:34:16:F1:EC:AC:5F:97:45:95:21:B7:3B X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/0jPQz2jIHrU0FvHsrF-XRZUhtzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.216.202.0/24 Signature Algorithm: sha256WithRSAEncryption 24:17:e7:9c:9d:0c:0b:b0:ad:0f:88:5b:23:26:15:31:5f:5a: 47:1d:f9:9c:aa:90:5b:da:06:93:f5:fd:f6:86:6b:df:27:d2: f5:39:f1:ed:d6:bd:9e:2e:b8:59:b5:30:60:e4:d0:85:bf:fe: fd:44:cc:62:cf:b7:86:1b:a5:3e:08:cf:4a:23:63:89:b2:06: 8b:bb:12:83:e1:ff:49:a1:5b:88:cd:18:7d:cd:58:1e:a6:77: 19:2f:a7:0e:b8:7b:bb:e4:34:04:6b:5c:4b:6d:ed:95:fe:1c: 9b:60:62:13:09:47:7a:2e:a8:d0:5e:62:f5:bb:9a:f2:b9:1f: c0:35:1a:b4:ae:3d:16:d6:8d:ba:c0:e4:0e:77:89:37:5b:78: 85:f1:8c:70:99:34:d5:4c:23:e9:91:87:54:71:d6:bb:bc:c8: 74:ec:57:22:2d:0d:15:ea:20:ef:6a:b8:02:17:03:69:61:21: bf:ce:24:08:56:7d:52:c7:b7:b7:cc:ca:50:c6:87:ca:36:1e: 8b:7a:84:60:35:8c:23:71:70:7e:17:f5:18:26:59:4b:f4:bb: fb:43:d2:19:db:fa:44:d8:20:d0:e5:5a:e0:ad:08:e4:58:4e: a3:d9:99:bb:90:58:44:be:4c:04:fb:40:9e:01:e5:0a:8d:d3: eb:15:d1:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTYJbOKBsggFJg3QMwUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjMzZDBjZjY4YzgxZWI1MzQxNmYxZWNhYzVmOTc0NTk1MjFiNzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvutyN9xrXOiQ/P587xD66ezfrE5V zkDHdVMUQ+09lZqWAUPoiGwvvpC9HTpF8/G1xSj0Y7PkgucABsRfQFQhQXeF4Onz L4X1NKX+kGS+dEq1XOl94jFzmj7DrQUK0zhz8992jRWGHUpKFX6FaouRX/4t/t3g Y964vehKxB7wRGC3CfTiHfhd41XqSGDKmO6WWdpEb49diYwXwS2PYM8ZQWv+OxLz jWGFGXdzF9yn5lnyEAjvNVvyTTwaLoVxQeOXYyK7HGl34LxIMATFjXghz76AWlmH SSNi4LKn5eL4T2uAOYfohYua7pQ7U8rYbclZrnCVKAaVKUjXj2+hFJDFtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNIz0M9oyB61NBbx7Kxfl0WVIbc7MB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvMGpQUXoyaklIclUwRnZIc3JGLVhSWlVodHpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJdjKMA0G CSqGSIb3DQEBCwUAA4IBAQAkF+ecnQwLsK0PiFsjJhUxX1pHHfmcqpBb2gaT9f32 hmvfJ9L1OfHt1r2eLrhZtTBg5NCFv/79RMxiz7eGG6U+CM9KI2OJsgaLuxKD4f9J oVuIzRh9zVgepncZL6cOuHu75DQEa1xLbe2V/hybYGITCUd6LqjQXmL1u5ryuR/A NRq0rj0W1o26wOQOd4k3W3iF8YxwmTTVTCPpkYdUcda7vMh07FciLQ0V6iDvargC FwNpYSG/ziQIVn1Sx7e3zMpQxofKNh6LeoRgNYwjcXB+F/UYJllL9Lv7Q9IZ2/pE 2CDQ5VrgrQjkWE6j2Zm7kFhEvkwE+0CeAeUKjdPrFdFg -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:51 2026 by rpki-client