This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa File: RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa (raw, json) Hash identifier: X1u1g1/pf3uA5ljDrjqZKp/m+4xP9A3tl5fJOBJfvoY= Subject key identifier: 47:05:80:74:CD:86:21:12:1C:61:06:C1:3D:49:96:57:01:F5:53:7A Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38E0C6E657E818E1614C394516F9FD Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397237 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e0:c6:e6:57:e8:18:e1:61:4c:39:45:16:f9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47058074cd8621121c6106c13d49965701f5537a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c8:27:ad:80:75:c9:5e:bb:94:63:84:be:eb: 71:b1:cf:06:5f:7a:ae:b7:d2:48:d2:4b:0c:cf:4d: 6f:04:c4:88:e9:43:24:d7:c4:a8:23:56:5e:40:05: d0:bc:e1:9e:94:a2:07:d4:e5:56:91:06:0c:0b:1a: 72:8a:4e:73:55:84:49:18:cc:c1:dd:5c:c6:9a:b2: 74:e5:db:4e:2b:a2:bd:fe:98:e0:06:c6:fc:75:a2: e5:9b:18:c1:47:4c:0a:e1:64:79:84:e3:9c:89:e6: e2:b3:be:bf:0c:2f:25:5c:bd:42:4f:7a:16:84:b3: 0f:00:dd:6d:99:6c:82:55:ed:6b:7f:fc:27:f2:57: ea:ec:d1:6c:a8:a0:17:ac:dc:1c:3e:0f:39:4e:9f: 75:4a:c8:3c:0a:29:a2:93:1f:fd:f5:dc:e2:2b:4b: 61:3c:71:1e:2b:d8:ba:4f:5a:dc:69:4a:f1:fa:ab: 33:45:50:c4:70:d2:bf:bf:53:65:12:8c:d3:66:5d: ea:10:88:ef:d2:11:45:ea:9f:3d:08:fe:79:35:3e: a3:cb:25:7d:bb:58:33:76:2b:fc:6b:30:7d:fd:c0: e1:b3:77:a7:54:df:fc:e8:3f:8d:96:f8:aa:7d:34: 6e:40:19:5c:38:72:52:3f:e5:87:45:39:09:72:64: 8f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:05:80:74:CD:86:21:12:1C:61:06:C1:3D:49:96:57:01:F5:53:7A X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:2b:6f:e1:ad:37:be:2a:84:73:e6:23:8c:fb:d5:4b:ff:53: 2f:11:a0:9f:55:3d:44:20:ae:cd:ff:70:31:56:93:1d:7f:26: bf:44:c8:c5:bb:bf:85:4c:26:fd:f0:35:03:e6:e5:92:a4:70: 11:15:c6:34:87:36:7f:c1:7b:c5:92:1a:86:09:f9:ba:9f:6c: 6d:43:e0:d4:3e:e7:80:92:4b:bc:7c:0b:74:87:74:fa:a7:4b: 38:09:d2:f9:17:1b:52:75:e7:e6:7a:a8:73:27:54:80:a4:fd: 2a:62:3d:f1:3a:87:20:d0:cf:ea:2f:1a:17:99:f8:39:bb:b1: f7:67:07:aa:db:f1:01:2a:f0:e4:21:94:71:3d:d1:1e:01:1b: 21:5f:d0:43:1e:1c:7f:e5:c7:d5:15:6d:49:c8:a3:f5:1c:a7: bd:27:58:97:65:e4:e6:20:d5:a1:bc:3d:50:b3:8e:91:42:fd: 29:63:c2:53:4a:c4:02:3f:13:cd:95:6d:0f:42:98:9e:98:9b: f4:da:fc:a6:de:04:07:85:6e:21:b9:fc:e9:83:69:c3:25:36: 7c:e5:e3:73:a3:84:11:1f:45:ee:d5:e0:0c:42:19:08:b4:f8: f5:33:03:5e:a0:47:66:97:e2:16:58:65:80:3a:e5:53:32:2f: f3:2e:8c:b6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OODG5lfoGOFhTDlFFvn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzA1ODA3NGNkODYyMTEyMWM2MTA2YzEzZDQ5OTY1NzAxZjU1MzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMgnrYB1yV67lGOEvutxsc8GX3qu t9JI0ksMz01vBMSI6UMk18SoI1ZeQAXQvOGelKIH1OVWkQYMCxpyik5zVYRJGMzB 3VzGmrJ05dtOK6K9/pjgBsb8daLlmxjBR0wK4WR5hOOciebis76/DC8lXL1CT3oW hLMPAN1tmWyCVe1rf/wn8lfq7NFsqKAXrNwcPg85Tp91Ssg8Cimikx/99dziK0th PHEeK9i6T1rcaUrx+qszRVDEcNK/v1NlEozTZl3qEIjv0hFF6p89CP55NT6jyyV9 u1gzdiv8azB9/cDhs3enVN/86D+NlviqfTRuQBlcOHJSP+WHRTkJcmSPLwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEcFgHTNhiESHGEGwT1JllcB9VN6MB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvUndXQWRNMkdJUkljWVFiQlBVbVdWd0gxVTNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQANK2/hrTe+KoRz5iOM +9VL/1MvEaCfVT1EIK7N/3AxVpMdfya/RMjFu7+FTCb98DUD5uWSpHARFcY0hzZ/ wXvFkhqGCfm6n2xtQ+DUPueAkku8fAt0h3T6p0s4CdL5FxtSdefmeqhzJ1SApP0q Yj3xOocg0M/qLxoXmfg5u7H3Zweq2/EBKvDkIZRxPdEeARshX9BDHhx/5cfVFW1J yKP1HKe9J1iXZeTmINWhvD1Qs46RQv0pY8JTSsQCPxPNlW0PQpiemJv02vym3gQH hW4hufzpg2nDJTZ85eNzo4QRH0Xu1eAMQhkItPj1MwNeoEdml+IWWGWAOuVTMi/z Loy2 -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:10 2026 by rpki-client