This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/pQejgEmzNw8i21WZUTBRMpyH0kA.roa File: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (raw, json) Hash identifier: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY= Subject key identifier: A5:07:A3:80:49:B3:37:0F:22:DB:55:99:51:30:51:32:9C:87:D2:40 Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352 Certificate serial: 019B7B3579C4CB7007D953751B63DAD7399E Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/pQejgEmzNw8i21WZUTBRMpyH0kA.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205312 IP address blocks: 37.220.164.0/24 maxlen: 24 185.17.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:79:c4:cb:70:07:d9:53:75:1b:63:da:d7:39:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a507a38049b3370f22db5599513051329c87d240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:30:a2:98:34:8d:6d:8a:66:54:86:98:1f:a6: ff:07:f2:ff:57:51:59:b5:7a:66:f6:94:06:ab:9c: c1:0d:af:af:14:d4:ba:53:a1:69:d3:73:da:29:3b: 12:2f:5e:bd:63:5e:ec:6c:08:df:a6:80:cf:ca:ff: 5c:6d:4f:d0:15:54:d0:24:64:b8:75:21:9a:ff:d0: 7a:2a:f9:d3:a9:ea:bb:a6:eb:a8:26:cc:7e:30:93: 31:df:2e:5f:74:55:1e:05:e7:4b:36:4e:a3:cb:c4: b4:26:d1:a3:22:c3:6b:22:22:5d:43:26:c1:e3:f0: c2:ef:8c:9f:35:85:f7:c7:38:f8:7d:94:64:ca:76: 62:3e:47:4c:b3:3b:99:fa:14:f4:88:86:78:bc:ae: 5f:00:01:1e:12:bb:d1:31:0d:88:cc:c7:76:a3:24: d4:c2:5c:6a:19:c2:23:e2:32:0d:14:41:6f:3e:99: e0:e5:d0:32:60:be:47:4e:b9:d4:e9:b3:17:c5:41: 05:05:aa:71:b0:34:7c:b6:a5:c4:cc:a4:d3:3d:d7: 26:03:9d:a0:3c:08:5d:28:bd:44:01:ba:ac:df:43: ff:a5:df:12:87:62:98:97:ce:75:3a:b3:d5:2a:01: 67:1b:4b:f5:d8:1c:93:59:63:35:0f:25:43:d5:ab: a7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:07:A3:80:49:B3:37:0F:22:DB:55:99:51:30:51:32:9C:87:D2:40 X509v3 Authority Key Identifier: keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/pQejgEmzNw8i21WZUTBRMpyH0kA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.220.164.0/24 185.17.169.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:1c:56:b4:dc:62:f4:58:55:7a:c9:fa:a5:9e:cb:ab:94:10: ba:06:63:1f:b5:81:fc:40:94:36:15:ea:a7:03:7b:24:01:56: 4a:3b:ad:0c:7f:b5:27:44:ea:5d:a8:6f:18:7b:4c:bd:1e:2e: 79:31:92:40:39:e3:ae:65:d3:5d:98:8d:08:e0:2a:7a:b4:20: 39:6c:be:05:fd:15:15:f0:93:42:49:7f:23:0b:29:70:65:51: 34:3d:11:4f:2a:6e:76:80:ef:7d:a6:8a:cb:e0:2b:12:f6:0f: 8b:0f:c4:9d:00:0c:1d:2a:28:fe:1a:42:62:70:3e:96:a7:ae: 4a:2c:d1:03:34:2c:d8:17:3b:3a:73:55:08:12:26:ed:92:1f: 7e:8c:d0:71:63:99:a9:75:17:68:a6:e2:0c:1b:c0:3b:f0:b1: 67:77:1c:14:b1:69:a3:c5:d1:ab:2e:92:5c:1a:03:a2:51:7c: a9:13:12:ee:a4:6e:a8:c1:e4:ba:01:03:d6:5a:ac:0c:29:01: 3e:53:7d:44:82:ca:53:60:fb:bd:18:f5:f5:d3:17:a7:cf:0f: 67:96:d4:7c:b5:74:b0:40:2d:8b:50:d4:97:3a:45:d2:1c:38: f1:f2:06:8e:31:6c:72:c6:54:72:15:f9:95:8e:4c:87:e8:65: 97:2a:86:19 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NXnEy3AH2VN1G2Pa1zmeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTE3ODJiNmFmYmE3YzZiY2YwNzBiOTNmZWQ0Y2M4NGFm NDEzNTIwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTA3YTM4MDQ5YjMzNzBmMjJkYjU1OTk1MTMwNTEzMjljODdkMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DCimDSNbYpmVIaYH6b/B/L/V1FZ tXpm9pQGq5zBDa+vFNS6U6Fp03PaKTsSL169Y17sbAjfpoDPyv9cbU/QFVTQJGS4 dSGa/9B6KvnTqeq7puuoJsx+MJMx3y5fdFUeBedLNk6jy8S0JtGjIsNrIiJdQybB 4/DC74yfNYX3xzj4fZRkynZiPkdMszuZ+hT0iIZ4vK5fAAEeErvRMQ2IzMd2oyTU wlxqGcIj4jINFEFvPpng5dAyYL5HTrnU6bMXxUEFBapxsDR8tqXEzKTTPdcmA52g PAhdKL1EAbqs30P/pd8Sh2KYl851OrPVKgFnG0v12ByTWWM1DyVD1aunzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKUHo4BJszcPIttVmVEwUTKch9JAMB8GA1UdIwQY MBaAFDuheCtq+6fGvPBwuT/tTMhK9BNSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEt YWU5NjdkNzM5ZGQzLzEvcFFlamdFbXpOdzhpMjFXWlVUQlJNcHlIMGtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hZDdhYzMtYjhhZC00MmIwLWFkMmEtYWU5NjdkNzM5ZGQz LzEvTzZGNEsycjdwOGE4OEhDNVAtMU15RXIwRTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJdykAwQA uRGpMA0GCSqGSIb3DQEBCwUAA4IBAQAaHFa03GL0WFV6yfqlnsurlBC6BmMftYH8 QJQ2FeqnA3skAVZKO60Mf7UnROpdqG8Ye0y9Hi55MZJAOeOuZdNdmI0I4Cp6tCA5 bL4F/RUV8JNCSX8jCylwZVE0PRFPKm52gO99porL4CsS9g+LD8SdAAwdKij+GkJi cD6Wp65KLNEDNCzYFzs6c1UIEibtkh9+jNBxY5mpdRdopuIMG8A78LFndxwUsWmj xdGrLpJcGgOiUXypExLupG6oweS6AQPWWqwMKQE+U31EgspTYPu9GPX10xenzw9n ltR8tXSwQC2LUNSXOkXSHDjx8gaOMWxyxlRyFfmVjkyH6GWXKoYZ -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:42 2026 by rpki-client