This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa File: RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa (raw, json) Hash identifier: gWHNmFjPVrWp2UD6ztHPa+UHuG00aGXzZkvk8ZPWwWk= Subject key identifier: 45:A5:2A:C9:DC:6E:55:83:25:C8:60:F5:A8:83:F7:47:3D:7E:7C:28 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38E441420665309F3CEB90BB92F24C Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397243 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e4:41:42:06:65:30:9f:3c:eb:90:bb:92:f2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45a52ac9dc6e558325c860f5a883f7473d7e7c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:cd:a3:5c:2c:25:c9:f1:7d:a1:03:f1:45: e3:05:9c:bf:19:b1:2d:27:16:f3:ee:b6:5c:65:7e: 33:05:71:2d:4c:33:70:39:b8:93:db:e3:23:90:94: ea:84:3c:ce:3e:75:95:c4:40:89:07:17:1d:b1:97: 9a:32:0f:ff:ed:d4:c8:d1:29:88:57:a3:96:ca:ef: 7b:1e:ae:c6:9a:6e:97:98:f2:be:75:e2:77:98:b0: 38:4f:d3:76:6d:5d:96:cd:1d:4d:51:b2:f9:44:c6: 02:7c:1b:3b:81:67:15:1a:df:69:20:e5:b4:a6:8d: e1:21:ed:e9:d2:e1:79:87:56:55:0a:93:43:22:84: 82:3b:d1:aa:c3:23:56:29:20:be:87:70:3f:2f:9c: f2:e7:74:1a:78:24:f3:60:2f:85:2e:3c:5f:50:a0: d3:72:7b:61:d7:b9:3f:70:05:9f:cd:2a:e0:25:0f: 78:65:34:79:22:bd:f2:83:81:ac:1b:e6:33:71:5f: 4f:86:82:a4:aa:a5:98:d4:b7:6c:28:a2:03:85:21: 44:3e:a1:29:67:b9:4b:68:f8:03:ca:27:a1:cf:40: 46:2b:86:c7:40:12:c1:71:b7:24:d0:07:58:09:0f: a5:df:8b:46:cf:ed:59:1f:02:26:8b:4a:5a:31:5d: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A5:2A:C9:DC:6E:55:83:25:C8:60:F5:A8:83:F7:47:3D:7E:7C:28 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 03:fe:fc:8d:75:08:38:3c:35:c0:6b:bf:e9:23:db:bc:39:bb: cc:7b:bc:83:67:f3:e7:04:94:12:1c:51:d7:bf:ac:54:42:57: bb:1b:71:e0:92:24:5b:7b:a2:35:cf:2a:ed:21:86:c4:66:06: 64:8e:5a:7e:f5:18:3b:17:e5:9c:7c:45:51:39:fd:4a:3d:b8: e5:2f:42:57:32:27:fe:db:79:59:cf:6b:86:ff:1a:29:a9:8d: 36:ae:c3:15:f0:a1:7a:cc:32:cd:cd:ee:99:de:b6:22:aa:ee: 50:a5:47:90:4b:4b:bd:84:c6:c7:3c:bb:62:4d:2b:53:ac:67: e3:52:f9:0b:ba:d5:7c:77:10:07:ae:30:85:21:47:83:18:12: 31:1e:d1:11:f3:e9:aa:21:94:e7:9f:92:14:be:4e:ec:e7:cf: a8:06:89:9f:59:80:ca:67:48:51:42:d7:79:c3:60:e2:c3:5f: 86:46:aa:d8:55:22:4c:fc:ac:76:60:6b:6a:ab:df:47:f8:41: 93:cb:72:02:ce:56:3c:97:5a:99:e5:d1:ee:a4:72:67:c1:fc: f9:d7:36:75:b5:f5:31:d8:ee:27:be:56:c2:f6:98:a4:7f:e3: d3:bf:1d:e8:fd:ce:2f:48:84:46:d1:5a:73:f0:bd:fe:e0:a0: 2e:17:05:a1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OORBQgZlMJ8865C7kvJMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWE1MmFjOWRjNmU1NTgzMjVjODYwZjVhODgzZjc0NzNkN2U3YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HTNo1wsJcnxfaED8UXjBZy/GbEt Jxbz7rZcZX4zBXEtTDNwObiT2+MjkJTqhDzOPnWVxECJBxcdsZeaMg//7dTI0SmI V6OWyu97Hq7Gmm6XmPK+deJ3mLA4T9N2bV2WzR1NUbL5RMYCfBs7gWcVGt9pIOW0 po3hIe3p0uF5h1ZVCpNDIoSCO9GqwyNWKSC+h3A/L5zy53QaeCTzYC+FLjxfUKDT cnth17k/cAWfzSrgJQ94ZTR5Ir3yg4GsG+YzcV9PhoKkqqWY1LdsKKIDhSFEPqEp Z7lLaPgDyiehz0BGK4bHQBLBcbck0AdYCQ+l34tGz+1ZHwImi0paMV2IVwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEWlKsncblWDJchg9aiD90c9fnwoMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvUmFVcXlkeHVWWU1seUdEMXFJUDNSejEtZkNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQAD/vyNdQg4PDXAa7/p I9u8ObvMe7yDZ/PnBJQSHFHXv6xUQle7G3HgkiRbe6I1zyrtIYbEZgZkjlp+9Rg7 F+WcfEVROf1KPbjlL0JXMif+23lZz2uG/xopqY02rsMV8KF6zDLNze6Z3rYiqu5Q pUeQS0u9hMbHPLtiTStTrGfjUvkLutV8dxAHrjCFIUeDGBIxHtER8+mqIZTnn5IU vk7s58+oBomfWYDKZ0hRQtd5w2Diw1+GRqrYVSJM/Kx2YGtqq99H+EGTy3ICzlY8 l1qZ5dHupHJnwfz51zZ1tfUx2O4nvlbC9pikf+PTvx3o/c4vSIRG0Vpz8L3+4KAu FwWh -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:19 2026 by rpki-client