This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/d1dJe3TPv00F61QyuztySgPeYL8.roa File: d1dJe3TPv00F61QyuztySgPeYL8.roa (raw, json) Hash identifier: ufxv8nDSWTv0PXEH+LPyDqU1aaPNBwmLdhRqkc5tjxM= Subject key identifier: 77:57:49:7B:74:CF:BF:4D:05:EB:54:32:BB:3B:72:4A:03:DE:60:BF Certificate issuer: /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d Certificate serial: 019B7D5AF940D69576FE596D66CF90ED5DA9 Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/d1dJe3TPv00F61QyuztySgPeYL8.roa Signing time: Fri 02 Jan 2026 06:17:52 +0000 ROA not before: Fri 02 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49434 IP address blocks: 37.44.236.0/24 maxlen: 24 37.44.237.0/24 maxlen: 24 79.110.237.0/24 maxlen: 24 185.142.52.0/24 maxlen: 24 185.142.54.0/24 maxlen: 24 185.142.55.0/24 maxlen: 24 193.177.0.0/24 maxlen: 24 193.177.162.0/24 maxlen: 24 193.178.0.0/24 maxlen: 24 2a09:ca00::/29 maxlen: 29 2a0f:9240::/32 maxlen: 32 2a0f:9240:1300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f9:40:d6:95:76:fe:59:6d:66:cf:90:ed:5d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d Validity Not Before: Jan 2 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7757497b74cfbf4d05eb5432bb3b724a03de60bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:37:c2:03:05:4c:ba:9e:c3:43:e2:60:62: 16:28:d3:9b:33:c3:91:db:99:d0:7c:5b:d3:1c:4f: f3:bf:8a:e6:a8:55:cf:75:17:80:8e:a1:87:00:b0: 8e:4f:be:e0:14:d5:43:e3:27:69:4c:2a:92:ab:c1: 3d:cf:6d:0a:14:f2:32:c7:98:c1:28:70:95:97:05: 88:a7:d1:f0:d1:bd:b6:29:96:56:cf:ca:c4:7c:2e: a4:24:c8:6d:ef:f1:c5:a4:1a:97:3d:4f:0c:cc:59: bf:ab:30:89:d8:d2:6c:5b:c5:5c:f8:6d:ee:b8:22: 3a:d1:5d:b8:ab:b1:7d:f9:1d:b1:a2:a6:c3:55:de: b4:f4:bb:9e:18:b7:7b:32:8f:ec:ee:23:2c:7f:0e: fe:1a:ca:1a:1f:3c:f8:b7:0f:db:7f:02:d7:70:1f: 49:85:58:9d:30:89:a1:91:32:08:32:9c:99:4f:fc: d8:26:ae:9e:aa:b6:52:e2:fb:60:46:2f:b0:5c:60: cc:7f:25:9d:9b:c7:07:69:98:2c:9a:66:19:c3:5a: ca:ef:b7:b4:95:05:88:d7:a7:60:4a:65:c2:36:f6: de:26:ae:12:5e:b8:ff:7b:ce:59:48:2e:3d:2d:46: a7:9c:f0:69:97:eb:e6:30:13:69:c9:0d:09:68:0d: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:57:49:7B:74:CF:BF:4D:05:EB:54:32:BB:3B:72:4A:03:DE:60:BF X509v3 Authority Key Identifier: keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/d1dJe3TPv00F61QyuztySgPeYL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.236.0/23 79.110.237.0/24 185.142.52.0/24 185.142.54.0/23 193.177.0.0/24 193.177.162.0/24 193.178.0.0/24 IPv6: 2a09:ca00::/29 2a0f:9240::/32 Signature Algorithm: sha256WithRSAEncryption 58:b2:4b:4c:a2:a3:d3:03:9d:16:5f:8a:e0:38:63:7e:48:6b: 75:d2:3e:97:37:d5:25:3b:42:cf:49:44:54:9f:42:6b:c9:23: 5b:19:dd:42:44:28:78:1d:eb:2f:28:0f:55:d9:25:3e:36:a5: c2:3c:fa:41:05:af:3e:68:56:3d:12:2f:c8:2e:b1:a3:8a:e9: 09:4c:35:76:17:6d:dd:85:e5:cf:fd:e1:55:f5:2d:28:9a:c1: cf:4f:7a:fe:d7:f7:59:7e:f4:83:fe:3a:36:af:c2:dc:64:dc: 3f:04:bc:fe:51:b7:a4:04:4d:3e:81:1b:c3:2b:62:a8:ef:f9: bc:f9:7b:97:1b:d5:71:f3:fc:4f:ff:98:92:9d:76:59:e5:ab: a3:7a:49:31:72:1c:4a:ff:58:bc:86:18:36:29:4f:61:30:ca: c6:98:09:70:4e:77:7a:62:95:1d:9d:51:ee:a5:6d:1f:c8:09: c8:f6:6e:4e:52:33:8f:f1:6b:c1:e1:ac:d3:57:05:dd:58:4e: 3b:4a:98:90:57:78:1d:60:f5:08:4b:60:10:54:b4:ad:62:1c: 43:dc:4b:06:aa:50:2e:ef:71:7b:9e:92:c5:70:cd:23:b0:c1: 6e:e8:8d:09:0b:44:95:94:b0:e1:cf:69:8f:d2:bb:0b:83:b7: ac:d6:2e:1c -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt9WvlA1pV2/lltZs+Q7V2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjNjYjI2M2RmNTBkMmQ0ZDA3M2MwZjdkYjZjZDI3NzYz MDJjOWQwHhcNMjYwMTAyMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzU3NDk3Yjc0Y2ZiZjRkMDVlYjU0MzJiYjNiNzI0YTAzZGU2MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxso3wgMFTLqew0PiYGIWKNObM8OR 25nQfFvTHE/zv4rmqFXPdReAjqGHALCOT77gFNVD4ydpTCqSq8E9z20KFPIyx5jB KHCVlwWIp9Hw0b22KZZWz8rEfC6kJMht7/HFpBqXPU8MzFm/qzCJ2NJsW8Vc+G3u uCI60V24q7F9+R2xoqbDVd609LueGLd7Mo/s7iMsfw7+GsoaHzz4tw/bfwLXcB9J hVidMImhkTIIMpyZT/zYJq6eqrZS4vtgRi+wXGDMfyWdm8cHaZgsmmYZw1rK77e0 lQWI16dgSmXCNvbeJq4SXrj/e85ZSC49LUannPBpl+vmMBNpyQ0JaA1ScQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFHdXSXt0z79NBetUMrs7ckoD3mC/MB8GA1UdIwQY MBaAFAVjyyY99Q0tTQc8D322zSd2MCydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQt MTUwMzU0YjAwZTU1LzEvZDFkSmUzVFB2MDBGNjFReXV6dHlTZ1BlWUw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82MmU1ZjItMjViMy00NTU3LWFhOTQtMTUwMzU0YjAwZTU1 LzEvQldQTEpqMzFEUzFOQnp3UGZiYk5KM1l3TEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQBJSzsAwQA T27tAwQAuY40AwQBuY42AwQAwbEAAwQAwbGiAwQAwbIAMBQEAgACMA4DBQMqCcoA AwUAKg+SQDANBgkqhkiG9w0BAQsFAAOCAQEAWLJLTKKj0wOdFl+K4DhjfkhrddI+ lzfVJTtCz0lEVJ9Ca8kjWxndQkQoeB3rLygPVdklPjalwjz6QQWvPmhWPRIvyC6x o4rpCUw1dhdt3YXlz/3hVfUtKJrBz096/tf3WX70g/46Nq/C3GTcPwS8/lG3pARN PoEbwytiqO/5vPl7lxvVcfP8T/+Ykp12WeWro3pJMXIcSv9YvIYYNilPYTDKxpgJ cE53emKVHZ1R7qVtH8gJyPZuTlIzj/FrweGs01cF3VhOO0qYkFd4HWD1CEtgEFS0 rWIcQ9xLBqpQLu9xe56SxXDNI7DBbuiNCQtElZSw4c9pj9K7C4O3rNYuHA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:27 2026 by rpki-client