This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Png3Vrdf7Rwvr6R60_UAOFstFhs.roa File: Png3Vrdf7Rwvr6R60_UAOFstFhs.roa (raw, json) Hash identifier: OwWHd5ARDEN0zJZ49iwTOpMY+6vycAIPXKZOSrVAHwU= Subject key identifier: 3E:78:37:56:B7:5F:ED:1C:2F:AF:A4:7A:D3:F5:00:38:5B:2D:16:1B Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38DB480502303DEB78213B6F7226E4 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Png3Vrdf7Rwvr6R60_UAOFstFhs.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397226 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:db:48:05:02:30:3d:eb:78:21:3b:6f:72:26:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e783756b75fed1c2fafa47ad3f500385b2d161b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:0a:bd:4e:b4:68:23:ee:ee:aa:6b:05:61: 89:2f:74:87:2b:5f:a3:a0:db:38:cf:fe:6c:b0:83: 10:ae:a0:0a:a5:85:8a:e2:47:76:a8:19:61:89:f8: fa:98:c1:9f:21:ef:6a:cc:cf:5b:c6:14:7a:15:26: 78:36:c5:de:f4:d9:ec:7b:c8:d6:73:eb:0e:57:b1: 48:3e:79:8c:ff:ad:90:71:71:21:14:1e:50:cc:0d: c8:ba:d5:a9:cb:ad:6d:82:eb:e4:2f:1a:45:21:f9: e4:7d:8c:88:5a:53:35:d9:ca:96:b8:14:5a:9d:c7: 55:52:91:ec:ac:14:2f:7b:fd:b5:2b:93:0e:6a:91: 74:48:81:54:bf:9e:a2:eb:6e:43:b1:a9:48:ce:ac: 7e:b6:7d:03:f6:fe:11:2c:f8:16:f8:33:56:e6:bf: 80:1b:08:d7:64:fd:f6:49:17:84:0f:0d:be:05:74: 8e:48:86:1e:7c:3f:ed:fe:0a:6f:fc:a5:45:a1:4f: 5f:96:98:46:ce:e9:22:fd:13:12:3c:f6:9e:ce:7f: 2d:a8:ff:2f:89:02:b9:85:5b:15:83:6c:d1:27:64: 5b:e7:91:04:ea:72:a1:b4:4f:25:9a:18:af:9f:c1: a8:16:1c:04:5b:ff:b4:d5:18:00:01:10:db:28:41: 68:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:78:37:56:B7:5F:ED:1C:2F:AF:A4:7A:D3:F5:00:38:5B:2D:16:1B X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/Png3Vrdf7Rwvr6R60_UAOFstFhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 59:cc:e4:c5:99:fe:bc:b3:c7:80:9c:f8:cd:52:51:18:96:5a: 1e:7d:5e:89:a4:98:7d:d8:1a:fe:4c:f2:18:ae:6a:2b:57:93: 15:a2:3f:b3:78:b6:3e:52:28:45:aa:60:08:a1:c6:6f:88:61: d2:72:9b:67:e1:f1:27:44:fa:aa:70:f8:70:3b:ef:df:dc:4c: 31:b2:11:02:67:35:0d:de:a3:82:48:1d:02:29:5a:43:75:16: bc:44:ee:72:f3:d4:8b:06:24:e8:0d:6d:35:88:d6:aa:4a:c1: 87:17:49:5a:7b:fb:7d:be:3c:1f:de:e7:8f:50:8a:05:d5:d7: 19:c3:50:e9:98:f1:21:19:c2:04:39:8e:45:b5:68:af:f5:29: 66:58:c3:dd:e4:4c:75:69:3a:35:24:44:4b:02:cd:fb:02:63: df:e3:21:a6:e8:db:c9:ea:9f:0b:77:a4:9d:7c:ae:ba:ab:00: f9:e4:2d:57:7a:87:5d:5e:dd:6b:c2:58:f2:e3:73:71:05:ab: b9:32:00:26:b9:36:64:6b:15:e1:89:70:0c:61:65:3f:db:f8: c3:c5:57:3b:a6:5c:3b:d4:c9:e1:38:3d:05:cb:18:88:99:71: 0e:d5:8c:46:20:39:ba:c2:e5:bc:a1:17:53:4c:c6:8f:52:3f: 75:54:f1:e4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONtIBQIwPet4ITtvcibkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTc4Mzc1NmI3NWZlZDFjMmZhZmE0N2FkM2Y1MDAzODViMmQxNjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEgKvU60aCPu7qprBWGJL3SHK1+j oNs4z/5ssIMQrqAKpYWK4kd2qBlhifj6mMGfIe9qzM9bxhR6FSZ4NsXe9Nnse8jW c+sOV7FIPnmM/62QcXEhFB5QzA3IutWpy61tguvkLxpFIfnkfYyIWlM12cqWuBRa ncdVUpHsrBQve/21K5MOapF0SIFUv56i625DsalIzqx+tn0D9v4RLPgW+DNW5r+A GwjXZP32SReEDw2+BXSOSIYefD/t/gpv/KVFoU9flphGzuki/RMSPPaezn8tqP8v iQK5hVsVg2zRJ2Rb55EE6nKhtE8lmhivn8GoFhwEW/+01RgAARDbKEFoQQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFD54N1a3X+0cL6+ketP1ADhbLRYbMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvUG5nM1ZyZGY3Und2cjZSNjBfVUFPRnN0RmhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBZzOTFmf68s8eAnPjN UlEYlloefV6JpJh92Br+TPIYrmorV5MVoj+zeLY+UihFqmAIocZviGHScptn4fEn RPqqcPhwO+/f3EwxshECZzUN3qOCSB0CKVpDdRa8RO5y89SLBiToDW01iNaqSsGH F0lae/t9vjwf3uePUIoF1dcZw1DpmPEhGcIEOY5FtWiv9SlmWMPd5Ex1aTo1JERL As37AmPf4yGm6NvJ6p8Ld6SdfK66qwD55C1XeoddXt1rwljy43NxBau5MgAmuTZk axXhiXAMYWU/2/jDxVc7plw71MnhOD0FyxiImXEO1YxGIDm6wuW8oRdTTMaPUj91 VPHk -----END CERTIFICATE-----Generated at Sun Jan 25 10:38:00 2026 by rpki-client