This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/A0L_daKBfMV7nYJH9utldIZIYsg.roa File: A0L_daKBfMV7nYJH9utldIZIYsg.roa (raw, json) Hash identifier: c+FA8gvn4grDiZWDzp4xkA96h3MUDZQgiyzCt836SH4= Subject key identifier: 03:42:FF:75:A2:81:7C:C5:7B:9D:82:47:F6:EB:65:74:86:48:62:C8 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D4899B9266D90E96A9FBBC2CDE48 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/A0L_daKBfMV7nYJH9utldIZIYsg.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397213 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d4:89:9b:92:66:d9:0e:96:a9:fb:bc:2c:de:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0342ff75a2817cc57b9d8247f6eb6574864862c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b6:3e:2c:66:68:63:ee:7e:67:3e:b6:06:f5: 0b:90:9b:1b:9f:38:04:d3:c6:e8:09:78:65:3d:fd: 70:71:8a:88:8b:04:21:3f:a9:39:e1:90:0b:9f:2f: 6b:da:0a:2f:bb:41:0a:19:72:2e:41:5b:f2:2a:1e: eb:25:24:e2:9c:14:7a:cb:24:2b:d7:bc:39:d1:60: 11:2d:b9:89:45:ab:e2:47:b7:af:c6:12:c5:b6:cf: f2:8c:5c:54:30:73:20:77:ba:0a:bd:1c:88:46:fe: 49:95:c7:c6:14:23:98:c1:51:13:f4:41:cf:71:15: 0d:63:43:83:43:81:fa:eb:3e:65:a6:fe:e9:c8:60: a5:32:a1:68:d8:fa:e3:9f:78:cc:3d:0f:cf:c6:92: 92:aa:cd:d8:82:79:8a:f9:85:75:3f:8c:41:c2:b6: d2:b5:ba:ec:4d:53:1d:99:84:a5:8c:0e:7d:ec:21: 82:ae:a7:a1:0c:68:a9:77:e9:2a:af:49:57:a0:b9: 39:99:cd:48:3b:72:c6:11:e0:ca:85:23:21:3e:a9: 7f:59:b0:d6:97:cf:85:7a:6f:43:4f:1f:f3:83:2b: e0:c1:b8:ef:9f:2a:f5:16:10:87:df:0b:42:8f:49: c1:b8:f0:bb:73:16:1e:f6:6d:a6:23:ad:cd:b2:59: a4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:42:FF:75:A2:81:7C:C5:7B:9D:82:47:F6:EB:65:74:86:48:62:C8 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/A0L_daKBfMV7nYJH9utldIZIYsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:c8:ef:94:1c:d1:a8:7f:fa:59:2e:3c:f5:9c:12:be:32:4b: 1b:3d:c6:9c:da:74:fe:70:78:e7:b3:24:23:7a:e6:a3:4d:ca: bc:bd:31:86:ab:55:24:b2:e6:9f:17:43:85:a1:94:7b:39:b4: 24:35:db:3a:db:c9:68:4b:38:62:14:1a:2e:74:0e:15:f1:b0: 15:91:d8:cf:38:b2:5e:3d:a5:af:97:c6:a2:0f:45:2a:cf:bb: a8:e7:d8:e0:68:ec:6b:e3:8c:ab:a1:15:ac:b8:a7:af:e3:f1: 5e:28:f8:cb:24:3d:96:e8:3e:06:9b:2e:d4:8c:57:67:d8:b5: d9:bc:3d:91:c4:3c:a9:e3:bf:c4:46:65:b8:fb:b4:92:28:41: 6c:6c:c2:17:79:b5:21:59:a8:f4:33:c5:de:92:c8:8a:31:5b: 9a:9d:cd:67:ee:89:ff:31:52:91:85:8c:a4:c5:7e:fb:e4:6b: bf:35:5c:f0:23:a4:e3:7b:85:78:b8:a9:8e:50:03:79:61:3b: cd:35:ae:fa:52:ca:47:37:a8:77:59:c1:bf:14:97:63:04:8b: 8e:b6:b8:9f:25:e9:f5:43:11:67:9b:cf:e3:27:46:7f:9c:7f: 61:b7:fa:ed:ec:51:4c:b8:51:9d:12:4d:41:6c:cf:b7:35:6f: f1:43:ec:f8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONSJm5Jm2Q6Wqfu8LN5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzQyZmY3NWEyODE3Y2M1N2I5ZDgyNDdmNmViNjU3NDg2NDg2MmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LY+LGZoY+5+Zz62BvULkJsbnzgE 08boCXhlPf1wcYqIiwQhP6k54ZALny9r2govu0EKGXIuQVvyKh7rJSTinBR6yyQr 17w50WARLbmJRaviR7evxhLFts/yjFxUMHMgd7oKvRyIRv5JlcfGFCOYwVET9EHP cRUNY0ODQ4H66z5lpv7pyGClMqFo2Prjn3jMPQ/PxpKSqs3YgnmK+YV1P4xBwrbS tbrsTVMdmYSljA597CGCrqehDGipd+kqr0lXoLk5mc1IO3LGEeDKhSMhPql/WbDW l8+Fem9DTx/zgyvgwbjvnyr1FhCH3wtCj0nBuPC7cxYe9m2mI63NslmkiQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFANC/3WigXzFe52CR/brZXSGSGLIMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvQTBMX2RhS0JmTVY3bllKSDl1dGxkSVpJWXNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQB8yO+UHNGof/pZLjz1 nBK+MksbPcac2nT+cHjnsyQjeuajTcq8vTGGq1UksuafF0OFoZR7ObQkNds628lo SzhiFBoudA4V8bAVkdjPOLJePaWvl8aiD0Uqz7uo59jgaOxr44yroRWsuKev4/Fe KPjLJD2W6D4Gmy7UjFdn2LXZvD2RxDyp47/ERmW4+7SSKEFsbMIXebUhWaj0M8Xe ksiKMVuanc1n7on/MVKRhYykxX775Gu/NVzwI6Tje4V4uKmOUAN5YTvNNa76UspH N6h3WcG/FJdjBIuOtrifJen1QxFnm8/jJ0Z/nH9ht/rt7FFMuFGdEk1BbM+3NW/x Q+z4 -----END CERTIFICATE-----Generated at Sun Jan 25 10:38:03 2026 by rpki-client