This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Io_4XzUPcXRxIinpmHUjhwf3fnw.roa File: Io_4XzUPcXRxIinpmHUjhwf3fnw.roa (raw, json) Hash identifier: PhYzR0IaxGgGRS8zLIaSr+Golc4Rgs3HH095CF1z0oY= Subject key identifier: 22:8F:F8:5F:35:0F:71:74:71:22:29:E9:98:75:23:87:07:F7:7E:7C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D63922A5E0CA7EA391B306DFDCDE Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Io_4XzUPcXRxIinpmHUjhwf3fnw.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397218 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d6:39:22:a5:e0:ca:7e:a3:91:b3:06:df:dc:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=228ff85f350f7174712229e99875238707f77e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:15:e8:f9:49:b9:fd:32:f9:13:6f:fe:ef: 53:02:0c:d5:a3:86:e7:18:65:71:b9:c3:9c:4b:ae: d0:23:59:ff:40:03:76:72:ab:29:bd:eb:a4:4f:77: 47:e3:5f:66:62:27:7a:24:d6:c9:b2:ae:ab:95:c0: e0:5a:8a:c0:17:0c:ad:16:8a:f7:ab:ef:9a:df:b3: 6e:4a:09:a7:6b:a9:44:fd:92:84:c3:88:a4:e8:1a: 0a:fa:7d:fd:f9:50:1b:e3:85:dc:06:d6:34:7b:ab: ab:c5:8f:f8:01:0f:3f:97:da:89:e4:19:8f:28:a5: b0:ca:85:24:71:a8:c4:88:5d:96:da:7b:df:e1:e5: 8d:33:ac:18:34:98:ae:81:58:52:3d:3f:80:f4:f5: a8:78:4c:8d:9c:57:ee:f6:88:9e:c8:02:2b:2c:25: bd:c5:4a:a2:fb:06:84:06:33:35:0d:ef:21:c8:73: b2:4f:4d:39:09:5c:d2:cf:14:8d:60:0a:5a:64:79: 4d:4d:a0:5b:e3:af:05:0a:9c:c1:bd:30:52:00:49: d2:d5:9a:64:63:90:0d:0f:e0:c4:7e:e3:e8:7c:76: c3:86:66:5c:34:9b:40:a6:c7:f7:91:65:91:1e:a1: d3:86:68:e2:f0:4f:e7:30:93:6c:2c:7c:b1:7d:c0: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8F:F8:5F:35:0F:71:74:71:22:29:E9:98:75:23:87:07:F7:7E:7C X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Io_4XzUPcXRxIinpmHUjhwf3fnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:95:24:49:f8:c1:dd:27:49:b1:73:d2:c5:43:87:5c:9d:e3: aa:ad:7e:98:22:5a:40:0d:f3:0c:21:47:81:19:ea:0b:59:b3: 64:d5:40:dc:22:dc:c9:9d:42:71:52:a2:91:39:af:96:67:69: cd:a8:d2:1b:23:b9:9b:59:a7:c9:b6:75:2c:15:2a:ce:00:ab: b3:f7:e7:7a:10:f5:38:c0:44:3c:be:9d:3b:47:89:a7:11:9b: fd:85:60:67:60:ec:d1:d2:54:44:95:e7:36:3a:a2:31:8e:0c: 38:e4:c4:dd:9f:31:6d:50:49:00:a4:bc:af:46:c8:0e:33:31: c6:ad:22:c2:c7:7d:d4:e1:b9:da:d3:a9:60:8e:6d:1d:25:7d: 0b:5b:93:30:27:59:d6:d8:82:32:03:09:f3:0f:af:96:95:1e: 2c:39:6d:48:6b:05:eb:b5:be:24:3f:ce:16:c0:2d:b2:c2:0f: 38:8e:ef:70:93:e9:be:98:68:94:c5:f5:cc:59:00:cd:92:fa: c1:1b:92:9a:af:fb:91:d8:3e:4c:e4:c1:68:a4:57:30:c4:8e: 2c:e7:16:6c:ad:9c:62:fd:86:4c:60:fb:c9:86:dd:83:37:82: 1b:31:d7:ef:9c:76:09:17:5f:65:76:d2:8e:05:64:40:4d:13: 49:6e:65:3d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONY5IqXgyn6jkbMG39zeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjhmZjg1ZjM1MGY3MTc0NzEyMjI5ZTk5ODc1MjM4NzA3Zjc3ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lIV6PlJuf0y+RNv/u9TAgzVo4bn GGVxucOcS67QI1n/QAN2cqspveukT3dH419mYid6JNbJsq6rlcDgWorAFwytFor3 q++a37NuSgmna6lE/ZKEw4ik6BoK+n39+VAb44XcBtY0e6urxY/4AQ8/l9qJ5BmP KKWwyoUkcajEiF2W2nvf4eWNM6wYNJiugVhSPT+A9PWoeEyNnFfu9oieyAIrLCW9 xUqi+waEBjM1De8hyHOyT005CVzSzxSNYApaZHlNTaBb468FCpzBvTBSAEnS1Zpk Y5AND+DEfuPofHbDhmZcNJtApsf3kWWRHqHThmji8E/nMJNsLHyxfcDwHwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCKP+F81D3F0cSIp6Zh1I4cH9358MB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvSW9fNFh6VVBjWFJ4SWlucG1IVWpod2YzZm53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBblSRJ+MHdJ0mxc9LF Q4dcneOqrX6YIlpADfMMIUeBGeoLWbNk1UDcItzJnUJxUqKROa+WZ2nNqNIbI7mb WafJtnUsFSrOAKuz9+d6EPU4wEQ8vp07R4mnEZv9hWBnYOzR0lRElec2OqIxjgw4 5MTdnzFtUEkApLyvRsgOMzHGrSLCx33U4bna06lgjm0dJX0LW5MwJ1nW2IIyAwnz D6+WlR4sOW1IawXrtb4kP84WwC2ywg84ju9wk+m+mGiUxfXMWQDNkvrBG5Kar/uR 2D5M5MFopFcwxI4s5xZsrZxi/YZMYPvJht2DN4IbMdfvnHYJF19ldtKOBWRATRNJ bmU9 -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:59 2026 by rpki-client