This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/kNrttXxRkvGtSS-ZxC6SB63f7PI.roa File: kNrttXxRkvGtSS-ZxC6SB63f7PI.roa (raw, json) Hash identifier: ejrGju4Fa38mlMegmP+17sgwP0nRgaGrfvKHwJ3IgXI= Subject key identifier: 90:DA:ED:B5:7C:51:92:F1:AD:49:2F:99:C4:2E:92:07:AD:DF:EC:F2 Certificate issuer: /CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Certificate serial: 019B7DCB186C69262FB1F0F1C7F8E1F2751E Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/kNrttXxRkvGtSS-ZxC6SB63f7PI.roa Signing time: Fri 02 Jan 2026 08:20:20 +0000 ROA not before: Fri 02 Jan 2026 08:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29286 IP address blocks: 37.72.192.0/19 maxlen: 19 37.72.224.0/24 maxlen: 24 37.72.225.0/24 maxlen: 24 37.72.226.0/24 maxlen: 24 37.72.227.0/24 maxlen: 24 37.72.228.0/24 maxlen: 24 37.72.229.0/24 maxlen: 24 37.72.240.0/24 maxlen: 24 37.72.242.0/24 maxlen: 24 37.72.243.0/24 maxlen: 24 37.72.244.0/22 maxlen: 22 37.72.248.0/24 maxlen: 24 37.72.249.0/24 maxlen: 24 37.72.250.0/23 maxlen: 23 37.72.252.0/22 maxlen: 22 81.20.208.0/20 maxlen: 20 213.151.176.0/21 maxlen: 21 213.151.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:18:6c:69:26:2f:b1:f0:f1:c7:f8:e1:f2:75:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076 Validity Not Before: Jan 2 08:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90daedb57c5192f1ad492f99c42e9207addfecf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:85:d4:59:54:30:6c:ae:d6:6e:d3:3a:dc: b6:62:0a:f1:a9:1f:10:d7:d4:de:d8:7d:50:e2:e9: 42:88:cd:d2:ab:f0:9f:3d:49:9c:04:0d:57:1f:96: 54:c8:1e:a8:4b:33:47:02:e6:79:87:65:04:64:8f: ec:5d:c4:53:5d:26:84:69:17:ee:15:26:86:cd:ad: ae:c7:8e:d2:f5:44:27:be:9d:b6:b7:15:12:70:cc: fa:a6:29:b4:61:e1:93:5e:c1:04:1e:a7:00:a5:01: 88:0b:2d:38:3a:d3:07:a3:3d:af:4c:72:49:cb:78: 42:4b:54:3b:e5:91:1c:a7:43:6a:f0:10:f5:c4:e5: eb:02:3b:09:3d:4a:dd:d3:03:91:2a:bf:f7:e2:9f: 55:8a:32:b1:b5:c5:fd:f9:63:34:71:fe:90:e4:bc: d8:44:79:56:cb:06:c1:bd:dc:0a:d6:9e:67:ec:01: 8d:05:ed:df:af:f5:7e:c4:9b:80:9f:bb:af:77:62: 74:9e:b6:2a:30:9a:cc:a5:b9:f8:88:0e:7c:3c:94: 0a:a9:71:66:ee:bf:23:3c:04:ab:de:5d:2c:d1:62: 73:53:fb:8c:7d:66:60:8e:6a:68:1c:87:77:74:f4: b1:2d:93:86:be:54:90:8a:aa:7e:c3:b6:ce:b1:3e: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DA:ED:B5:7C:51:92:F1:AD:49:2F:99:C4:2E:92:07:AD:DF:EC:F2 X509v3 Authority Key Identifier: keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/kNrttXxRkvGtSS-ZxC6SB63f7PI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.192.0-37.72.229.255 37.72.240.0/24 37.72.242.0-37.72.255.255 81.20.208.0/20 213.151.176.0-213.151.187.255 Signature Algorithm: sha256WithRSAEncryption 76:de:ac:5e:8b:26:5c:45:b2:8d:86:6f:8c:0a:02:03:ea:15: 90:2a:17:61:93:be:b3:8d:db:52:ea:40:30:20:80:b2:e7:ee: 90:e7:72:f4:2c:df:72:a7:d3:98:de:e8:7f:03:6f:00:a9:af: fc:5d:8d:27:fe:d8:a2:cb:f7:87:7a:bf:13:02:e3:fe:ad:db: 8f:46:42:78:44:f9:28:98:fb:ca:ec:b4:53:0e:6c:4c:02:e6: 03:52:55:e7:fd:f7:0a:46:9b:b0:8d:27:f3:aa:d7:73:33:0b: cb:4f:6a:90:75:ed:f6:88:80:0b:45:39:8d:98:86:50:38:e0: 23:72:c0:dd:00:f4:3a:b6:70:f2:a7:24:4f:24:ef:3f:46:fd: c2:27:d8:c2:56:7c:da:a1:cb:fa:6d:4d:31:95:77:d3:6a:21: f0:aa:c8:61:dd:00:07:cf:28:fe:3c:75:73:6d:15:8c:56:94: 3d:1e:43:18:54:fe:c5:14:c8:87:c3:b2:8e:1c:4d:69:53:3d: 8d:33:2b:e9:94:df:4e:89:a6:7b:7a:43:ec:4e:88:0e:84:c6: cd:1d:f9:4c:7d:3c:9f:5f:cf:83:bb:c8:14:0a:fd:0f:12:d4: c5:99:58:8e:24:74:9d:50:10:08:a0:87:52:f9:e6:8d:2d:05: 4b:6f:51:06 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt9yxhsaSYvsfDxx/jh8nUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTJlNDkxYWFhNjU1YjYzMjRkYmNjMGNmZjAwYThkNjMx OTEwNzYwHhcNMjYwMTAyMDgyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGRhZWRiNTdjNTE5MmYxYWQ0OTJmOTljNDJlOTIwN2FkZGZlY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulKF1FlUMGyu1m7TOty2YgrxqR8Q 19Te2H1Q4ulCiM3Sq/CfPUmcBA1XH5ZUyB6oSzNHAuZ5h2UEZI/sXcRTXSaEaRfu FSaGza2ux47S9UQnvp22txUScMz6pim0YeGTXsEEHqcApQGICy04OtMHoz2vTHJJ y3hCS1Q75ZEcp0Nq8BD1xOXrAjsJPUrd0wORKr/34p9VijKxtcX9+WM0cf6Q5LzY RHlWywbBvdwK1p5n7AGNBe3fr/V+xJuAn7uvd2J0nrYqMJrMpbn4iA58PJQKqXFm 7r8jPASr3l0s0WJzU/uMfWZgjmpoHId3dPSxLZOGvlSQiqp+w7bOsT6jNQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFJDa7bV8UZLxrUkvmcQukget3+zyMB8GA1UdIwQY MBaAFJgS5JGqplW2Mk28wM/wCo1jGRB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUt ZGZmZTE3ZjNkYjU0LzEva05ydHRYeFJrdkd0U1MtWnhDNlNCNjNmN1BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUtZGZmZTE3ZjNkYjU0 LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1MAwDBAYlSMAD BAElSOQDBAAlSPAwCwMEASVI8gMDACVIAwQEURTQMAwDBATVl7ADBALVl7gwDQYJ KoZIhvcNAQELBQADggEBAHberF6LJlxFso2Gb4wKAgPqFZAqF2GTvrON21LqQDAg gLLn7pDncvQs33Kn05je6H8DbwCpr/xdjSf+2KLL94d6vxMC4/6t249GQnhE+SiY +8rstFMObEwC5gNSVef99wpGm7CNJ/Oq13MzC8tPapB17faIgAtFOY2YhlA44CNy wN0A9Dq2cPKnJE8k7z9G/cIn2MJWfNqhy/ptTTGVd9NqIfCqyGHdAAfPKP48dXNt FYxWlD0eQxhU/sUUyIfDso4cTWlTPY0zK+mU306Jpnt6Q+xOiA6Exs0d+Ux9PJ9f z4O7yBQK/Q8S1MWZWI4kdJ1QEAigh1L55o0tBUtvUQY= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:32 2026 by rpki-client