This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/Iy3e1XIi2_TPudoAL1p13sZ86nk.roa File: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (raw, json) Hash identifier: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0= Subject key identifier: 23:2D:DE:D5:72:22:DB:F4:CF:B9:DA:00:2F:5A:75:DE:C6:7C:EA:79 Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B790FFD9AB0E2B3E758C4FACCF3DD680F Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/Iy3e1XIi2_TPudoAL1p13sZ86nk.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212301 IP address blocks: 37.247.99.0/24 maxlen: 24 37.247.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fd:9a:b0:e2:b3:e7:58:c4:fa:cc:f3:dd:68:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=232dded57222dbf4cfb9da002f5a75dec67cea79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:45:a9:f9:2a:18:fe:a9:7e:0b:a1:15:5d: 9d:0c:5f:3a:4a:59:fd:6a:96:f7:1a:62:ca:e8:87: 5e:3f:f7:cf:21:cb:6a:81:e7:38:20:56:61:48:41: 63:98:7b:ef:79:44:a1:d6:a9:64:14:6c:db:29:4f: b8:2e:04:ae:6e:4e:28:d2:ab:b0:f3:4b:d7:a9:d0: 87:4b:4e:f2:71:b6:ee:36:47:8e:8a:18:c2:45:7c: ce:ae:bb:d7:87:d7:fa:61:d4:b3:60:2a:f8:a9:93: bb:7c:75:63:4f:7e:79:f6:11:31:81:16:e8:10:84: f2:ab:ee:f1:6d:31:07:b8:a8:1d:b6:c6:f1:15:62: 39:dd:26:ee:94:21:e0:b6:52:13:c8:59:16:ce:fe: c7:86:65:cc:ae:d6:92:84:8b:ca:ec:21:36:db:b4: c3:be:69:cf:bb:f3:74:97:07:7a:36:4c:96:0d:cd: 2f:e4:8f:ad:90:d9:6d:78:52:8c:67:21:98:3d:a1: 01:f0:fb:04:d6:a7:11:16:81:a7:62:ab:29:47:9e: fa:84:44:31:03:53:2c:5c:ca:1a:93:17:21:49:73: 3c:11:02:35:30:59:24:b0:21:56:a3:7c:7c:f8:a1: a9:ea:c1:1a:4d:82:57:27:e8:ed:38:d5:dd:e1:cc: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2D:DE:D5:72:22:DB:F4:CF:B9:DA:00:2F:5A:75:DE:C6:7C:EA:79 X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/Iy3e1XIi2_TPudoAL1p13sZ86nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.247.99.0/24 37.247.101.0/24 Signature Algorithm: sha256WithRSAEncryption 51:b1:21:2e:34:ec:64:44:b0:76:ed:37:fb:68:e3:02:da:c1: c9:79:5b:21:26:5a:2c:73:b0:b3:23:91:1f:01:26:88:b6:af: 4c:2b:d3:9f:c8:50:9e:4c:12:70:c8:95:0d:ce:ff:a3:f1:30: c7:35:90:a4:11:44:89:50:10:b4:97:fc:ae:32:cf:3f:7a:02: 3d:4a:86:c3:d6:99:d0:87:36:b2:20:a6:ed:65:7b:e9:8f:6b: 33:40:25:1a:fa:39:37:95:15:dc:89:8c:47:26:d6:49:0f:64: af:9e:5f:c0:3f:74:70:1d:16:3f:d7:89:d2:7d:47:51:5b:1b: 9c:39:a5:b7:36:56:8c:3e:49:ba:6a:ec:50:38:4f:30:eb:10: b5:c2:18:3a:24:ec:5d:08:57:cf:bd:64:f3:dc:f6:89:f7:2d: 11:3e:a3:2e:a7:c0:25:a9:c2:45:f3:58:7c:db:54:cf:5a:c7: 6a:c3:24:af:f6:15:c1:d4:1f:ec:e5:43:1c:c9:91:70:8d:00: b8:40:02:c5:48:f3:23:98:53:6a:9b:f2:24:a6:df:92:1d:0f: a2:12:af:ec:bd:fc:10:63:7b:cc:75:d0:5e:14:61:0c:c6:a6: 52:10:4a:83:03:1a:f0:32:f5:79:3b:96:1c:88:9d:cf:4d:f8: 03:a7:6a:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5D/2asOKz51jE+szz3WgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzJkZGVkNTcyMjJkYmY0Y2ZiOWRhMDAyZjVhNzVkZWM2N2NlYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN5FqfkqGP6pfguhFV2dDF86Sln9 apb3GmLK6IdeP/fPIctqgec4IFZhSEFjmHvveUSh1qlkFGzbKU+4LgSubk4o0quw 80vXqdCHS07ycbbuNkeOihjCRXzOrrvXh9f6YdSzYCr4qZO7fHVjT3559hExgRbo EITyq+7xbTEHuKgdtsbxFWI53SbulCHgtlITyFkWzv7HhmXMrtaShIvK7CE227TD vmnPu/N0lwd6NkyWDc0v5I+tkNlteFKMZyGYPaEB8PsE1qcRFoGnYqspR576hEQx A1MsXMoakxchSXM8EQI1MFkksCFWo3x8+KGp6sEaTYJXJ+jtONXd4cw4rQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCMt3tVyItv0z7naAC9add7GfOp5MB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvSXkzZTFYSWkyX1RQdWRvQUwxcDEzc1o4Nm5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJfdjAwQA JfdlMA0GCSqGSIb3DQEBCwUAA4IBAQBRsSEuNOxkRLB27Tf7aOMC2sHJeVshJlos c7CzI5EfASaItq9MK9OfyFCeTBJwyJUNzv+j8TDHNZCkEUSJUBC0l/yuMs8/egI9 SobD1pnQhzayIKbtZXvpj2szQCUa+jk3lRXciYxHJtZJD2Svnl/AP3RwHRY/14nS fUdRWxucOaW3NlaMPkm6auxQOE8w6xC1whg6JOxdCFfPvWTz3PaJ9y0RPqMup8Al qcJF81h821TPWsdqwySv9hXB1B/s5UMcyZFwjQC4QALFSPMjmFNqm/Ikpt+SHQ+i Eq/svfwQY3vMddBeFGEMxqZSEEqDAxrwMvV5O5YciJ3PTfgDp2qt -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:12 2026 by rpki-client