This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/cA5JMvfVav4vIZItfGqaNwh9e5o.roa File: cA5JMvfVav4vIZItfGqaNwh9e5o.roa (raw, json) Hash identifier: yR2XFmEbZmO4CBX8f4QWlsjNhSh6G9A18+yJWj3nzH0= Subject key identifier: 70:0E:49:32:F7:D5:6A:FE:2F:21:92:2D:7C:6A:9A:37:08:7D:7B:9A Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D6E80E9C9D7454DC47D2FED24624 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/cA5JMvfVav4vIZItfGqaNwh9e5o.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397219 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d6:e8:0e:9c:9d:74:54:dc:47:d2:fe:d2:46:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=700e4932f7d56afe2f21922d7c6a9a37087d7b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:6b:9f:76:13:ba:e7:e8:26:ae:71:85:59: 06:f7:88:91:e2:c1:90:37:37:b4:f1:7b:f2:ac:0d: 89:7d:86:fb:9d:65:6c:b3:49:3d:04:da:d2:a8:c6: ed:7a:c9:8f:96:9f:e1:96:01:28:fa:a8:d0:6a:d3: 37:8c:eb:66:6e:4b:be:d6:db:41:a0:ed:cb:78:a1: c7:e4:0c:22:94:4d:f9:1c:6e:df:65:91:49:d2:c2: 5e:63:52:61:44:0f:d0:5c:f6:bc:8f:5c:30:d2:48: de:73:66:2c:fa:af:1f:6e:d5:b0:de:24:6a:c3:92: bb:26:1f:03:a1:cd:15:b1:9e:68:9b:62:21:e1:41: 3d:1d:43:0d:cb:27:ed:b3:7b:c8:de:8f:a5:44:ce: 96:32:30:6c:da:35:ad:f3:40:ec:ae:96:a0:53:75: 94:65:f6:5b:02:05:92:65:6c:7a:2a:e0:6d:30:39: 81:d1:62:f4:14:d9:d9:72:f8:a4:b8:61:76:15:b8: 08:cd:9e:5b:65:dc:e4:b2:c1:b5:9b:ad:65:06:bd: ec:77:ee:93:d7:7e:51:a4:56:5f:00:94:19:57:3f: ff:55:63:cc:61:e7:7e:24:9d:8a:3d:01:1c:7b:b7: 64:86:d3:d7:cd:46:72:52:05:d4:15:68:ca:7a:b5: 1a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0E:49:32:F7:D5:6A:FE:2F:21:92:2D:7C:6A:9A:37:08:7D:7B:9A X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/cA5JMvfVav4vIZItfGqaNwh9e5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 53:76:b7:39:2f:41:bc:ce:95:d4:0a:7d:e0:53:7b:ea:2b:10: d6:d3:1d:43:8a:e2:cf:87:0c:0b:aa:5a:db:49:38:22:ba:0d: 00:43:8a:47:28:61:61:4b:c5:a5:9d:2b:24:41:84:a6:10:af: 27:5e:28:cb:ce:68:a6:1e:28:2b:79:4a:b7:1c:c7:72:a9:6b: 4d:47:2b:c7:c4:6e:a6:c9:7e:52:77:33:43:2d:99:bd:8a:59: cf:48:a5:75:56:cc:05:5e:e5:74:88:a1:67:54:bf:90:05:f4: 32:f7:92:bb:d4:0a:f5:71:50:3d:dc:68:47:34:7d:25:06:ac: b7:7b:b7:b6:00:3c:1b:2d:a9:45:70:25:c9:d3:0b:2a:79:08: f2:ec:ff:8c:51:a5:f4:04:65:bc:92:9a:3c:b6:dc:4a:ad:1a: a2:bb:77:77:b5:bb:0c:cc:b3:77:de:8b:0c:9e:59:8a:2f:aa: c7:f5:a6:37:2f:9c:c7:37:2e:67:aa:44:a0:15:c2:15:9a:b5: 9b:64:ac:e5:41:39:93:1d:53:b6:25:76:d9:c1:5c:f2:1f:67: ef:25:fc:03:cd:6a:41:78:1a:67:41:0e:16:23:fd:c8:32:db: fc:a9:c7:b7:1c:7e:99:3e:05:02:64:fc:be:84:5c:ad:23:0f: 31:72:70:4d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONboDpyddFTcR9L+0kYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDBlNDkzMmY3ZDU2YWZlMmYyMTkyMmQ3YzZhOWEzNzA4N2Q3YjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI5rn3YTuufoJq5xhVkG94iR4sGQ Nze08XvyrA2JfYb7nWVss0k9BNrSqMbtesmPlp/hlgEo+qjQatM3jOtmbku+1ttB oO3LeKHH5AwilE35HG7fZZFJ0sJeY1JhRA/QXPa8j1ww0kjec2Ys+q8fbtWw3iRq w5K7Jh8Doc0VsZ5om2Ih4UE9HUMNyyfts3vI3o+lRM6WMjBs2jWt80DsrpagU3WU ZfZbAgWSZWx6KuBtMDmB0WL0FNnZcvikuGF2FbgIzZ5bZdzkssG1m61lBr3sd+6T 135RpFZfAJQZVz//VWPMYed+JJ2KPQEce7dkhtPXzUZyUgXUFWjKerUaBwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHAOSTL31Wr+LyGSLXxqmjcIfXuaMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvY0E1Sk12ZlZhdjR2SVpJdGZHcWFOd2g5ZTVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBTdrc5L0G8zpXUCn3g U3vqKxDW0x1DiuLPhwwLqlrbSTgiug0AQ4pHKGFhS8WlnSskQYSmEK8nXijLzmim HigreUq3HMdyqWtNRyvHxG6myX5SdzNDLZm9ilnPSKV1VswFXuV0iKFnVL+QBfQy 95K71Ar1cVA93GhHNH0lBqy3e7e2ADwbLalFcCXJ0wsqeQjy7P+MUaX0BGW8kpo8 ttxKrRqiu3d3tbsMzLN33osMnlmKL6rH9aY3L5zHNy5nqkSgFcIVmrWbZKzlQTmT HVO2JXbZwVzyH2fvJfwDzWpBeBpnQQ4WI/3IMtv8qce3HH6ZPgUCZPy+hFytIw8x cnBN -----END CERTIFICATE-----Generated at Sun Jan 25 10:37:50 2026 by rpki-client