This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RgulTuZMFpRPKFFFd9iPrWv4ijY.roa File: RgulTuZMFpRPKFFFd9iPrWv4ijY.roa (raw, json) Hash identifier: H4zGvEX4msDBOcT88fZZX2ZMTrjk6+XMq/KcjDj8npU= Subject key identifier: 46:0B:A5:4E:E6:4C:16:94:4F:28:51:45:77:D8:8F:AD:6B:F8:8A:36 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D6090866A41F94E2374D643B55E8 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RgulTuZMFpRPKFFFd9iPrWv4ijY.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397217 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d6:09:08:66:a4:1f:94:e2:37:4d:64:3b:55:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=460ba54ee64c16944f28514577d88fad6bf88a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:c1:39:f6:09:2d:3f:36:2b:26:7e:38:54: f6:6e:d9:05:d3:85:b6:c7:39:af:5a:9e:d9:5c:e1: 84:6a:c9:ec:5c:b7:5e:79:8c:fb:b3:57:fc:6c:3c: b6:54:b1:31:5a:75:f2:ef:c6:b2:46:d2:39:d0:0d: ac:fa:65:c6:6a:cb:1d:1e:3d:2a:0b:94:05:fc:e5: 1e:4a:27:7a:40:b0:be:18:5f:06:a2:14:fb:af:db: c9:b3:49:48:26:39:39:3b:a9:e8:34:c7:1f:1c:97: 17:92:07:32:d8:09:56:c0:27:77:6b:17:e6:b8:4a: b8:a7:d8:bb:19:dc:4f:f1:6f:f2:4b:9d:34:43:8f: c2:ca:06:d4:b3:12:bd:57:22:7e:be:24:47:d2:d6: 2e:4c:4b:e6:12:8d:b7:f7:43:3a:c6:44:d0:cd:95: 3f:a6:96:39:98:f2:25:fb:bf:f8:4c:2f:be:a0:c4: 05:3a:bb:fa:bd:50:61:05:df:3a:36:66:0c:ad:a6: 86:51:4f:cf:00:de:14:31:d8:ed:b4:eb:e5:0f:a3: 1c:a7:6e:cf:d2:fb:85:bd:3a:52:b4:a4:6c:9a:60: 27:23:d2:42:12:e2:82:4c:fa:63:c8:9b:ec:2b:60: 31:db:7a:85:e4:55:e1:02:a5:48:ba:52:c1:c4:b5: ab:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0B:A5:4E:E6:4C:16:94:4F:28:51:45:77:D8:8F:AD:6B:F8:8A:36 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RgulTuZMFpRPKFFFd9iPrWv4ijY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 63:a6:37:7d:bc:27:79:72:93:79:dd:d6:b2:35:35:22:af:31: 56:86:85:be:2b:5a:87:04:80:46:a8:48:b9:31:a8:59:77:69: 7b:6a:5f:5e:14:c3:ac:90:5d:69:bd:f4:52:1f:18:6c:cb:75: 04:b4:a1:74:6b:50:e6:e0:5d:88:58:97:14:93:ea:6d:ed:40: 92:9e:00:f0:a0:5d:3a:dd:06:91:1e:55:02:c2:d7:56:10:91: f2:c5:f3:0e:f3:b8:ef:ab:69:18:2e:7d:f9:ca:62:fc:4e:7f: 32:78:44:b9:f5:79:27:db:02:c9:bc:42:4f:a9:8a:fc:5e:c2: d9:c0:52:a8:19:af:f9:86:f0:ee:31:04:32:5c:93:aa:7e:c7: 08:1e:87:94:46:09:1d:4f:28:56:ce:b8:23:06:5e:c5:e8:b3: 4c:fb:4a:b8:d4:dd:fd:95:c0:ac:dd:d4:3f:49:b9:d7:7b:e7: 71:ad:ab:fe:a6:25:64:83:79:76:cc:de:2a:57:ac:a6:11:6d: 9e:0e:a6:0c:c2:81:d4:cc:36:24:bf:da:af:5b:49:17:f7:66: 3c:57:42:d4:37:fd:fc:32:6b:8c:ea:a5:e6:dd:3d:8b:ce:4a: 1f:65:8a:1a:71:89:17:13:0d:79:ae:a0:5c:e7:aa:b6:61:62: 6d:f1:36:50 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONYJCGakH5TiN01kO1XoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjBiYTU0ZWU2NGMxNjk0NGYyODUxNDU3N2Q4OGZhZDZiZjg4YTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc7BOfYJLT82KyZ+OFT2btkF04W2 xzmvWp7ZXOGEasnsXLdeeYz7s1f8bDy2VLExWnXy78ayRtI50A2s+mXGassdHj0q C5QF/OUeSid6QLC+GF8GohT7r9vJs0lIJjk5O6noNMcfHJcXkgcy2AlWwCd3axfm uEq4p9i7GdxP8W/yS500Q4/CygbUsxK9VyJ+viRH0tYuTEvmEo2390M6xkTQzZU/ ppY5mPIl+7/4TC++oMQFOrv6vVBhBd86NmYMraaGUU/PAN4UMdjttOvlD6Mcp27P 0vuFvTpStKRsmmAnI9JCEuKCTPpjyJvsK2Ax23qF5FXhAqVIulLBxLWrmQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEYLpU7mTBaUTyhRRXfYj61r+Io2MB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvUmd1bFR1Wk1GcFJQS0ZGRmQ5aVByV3Y0aWpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBjpjd9vCd5cpN53day NTUirzFWhoW+K1qHBIBGqEi5MahZd2l7al9eFMOskF1pvfRSHxhsy3UEtKF0a1Dm 4F2IWJcUk+pt7UCSngDwoF063QaRHlUCwtdWEJHyxfMO87jvq2kYLn35ymL8Tn8y eES59Xkn2wLJvEJPqYr8XsLZwFKoGa/5hvDuMQQyXJOqfscIHoeURgkdTyhWzrgj Bl7F6LNM+0q41N39lcCs3dQ/SbnXe+dxrav+piVkg3l2zN4qV6ymEW2eDqYMwoHU zDYkv9qvW0kX92Y8V0LUN/38MmuM6qXm3T2LzkofZYoacYkXEw15rqBc56q2YWJt 8TZQ -----END CERTIFICATE-----Generated at Sun Jan 25 10:37:41 2026 by rpki-client