This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/c_Y24ajzoAD5RlfqVgA3exca5lg.roa File: c_Y24ajzoAD5RlfqVgA3exca5lg.roa (raw, json) Hash identifier: IFM8k/a5xafsnTSxH9J3BD1nHcUW3xulixu5BnLcwXY= Subject key identifier: 73:F6:36:E1:A8:F3:A0:00:F9:46:57:EA:56:00:37:7B:17:1A:E6:58 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D9D57506DF3450C44F0664662E19 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/c_Y24ajzoAD5RlfqVgA3exca5lg.roa Signing time: Fri 02 Jan 2026 10:20:13 +0000 ROA not before: Fri 02 Jan 2026 10:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397224 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d9:d5:75:06:df:34:50:c4:4f:06:64:66:2e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73f636e1a8f3a000f94657ea5600377b171ae658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:9a:30:da:d7:2d:f5:35:97:5f:a6:b1:1b: 56:79:fd:0e:af:53:15:9d:ca:ab:2d:f3:e1:64:2c: e6:a3:a1:34:7d:0e:83:c2:41:40:cc:e1:3f:fa:82: 44:88:07:ae:c1:19:ac:df:99:e2:9c:bb:80:75:1a: f2:ff:51:7e:d7:2f:2e:36:e9:63:e8:cd:f2:35:61: 27:a5:6e:94:00:9e:87:7e:e9:76:d1:c8:51:01:b9: 67:a3:ab:ec:f9:1c:a2:a0:e1:a1:6e:c6:dd:79:7e: 2a:d8:23:bf:a2:88:9f:93:fe:35:a8:6c:d2:6f:c3: a2:cc:aa:22:a7:08:7a:ae:4d:7b:89:80:14:26:43: 2d:65:43:f0:45:2b:ed:be:b0:fd:28:42:b1:5f:e4: e7:05:fb:34:59:49:9f:d0:c8:08:1e:75:28:9b:bf: e1:09:47:47:b9:e1:d6:7b:54:47:ba:6d:6c:fd:6d: ba:63:a9:fb:fc:84:4d:a8:88:35:61:20:cf:cd:c5: 5c:2d:f4:fb:53:a1:25:64:bb:d1:0b:9e:00:e2:62: 58:fd:3a:4d:dd:de:72:f8:db:a6:7d:0f:50:09:0d: b1:92:ba:25:a7:4e:3d:13:c6:af:ac:76:dd:14:b1: 3d:0e:74:c9:05:f8:69:2d:3f:7f:e3:7e:75:76:c3: c4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F6:36:E1:A8:F3:A0:00:F9:46:57:EA:56:00:37:7B:17:1A:E6:58 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/c_Y24ajzoAD5RlfqVgA3exca5lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 72:f5:e3:4e:7f:9f:3a:bc:74:b3:b7:c2:18:2a:0e:fb:8f:a9: ff:89:11:e3:c4:9f:da:32:41:b2:b4:58:6d:10:7f:32:9e:cb: 30:1e:35:a1:d2:4f:45:41:52:d0:21:bd:b1:24:2d:85:1c:88: 31:2f:5f:09:14:db:a0:02:3f:90:1d:fc:1d:eb:ed:8f:b6:29: 1b:44:77:41:df:c5:fc:e0:7d:bb:c2:aa:f6:34:30:85:a4:f5: f5:d5:4c:b6:d7:ff:ee:5d:c8:52:ff:bb:ff:cc:09:45:cb:d0: dc:a7:ae:a6:e6:6e:8d:10:a0:e2:11:f0:5b:cc:99:93:4a:cc: eb:23:ff:e7:6e:9c:d5:89:a3:36:76:d2:9f:fe:65:55:fe:ad: 12:09:86:17:70:64:03:99:ac:95:93:9b:94:49:0b:28:7d:b9: 72:18:c5:60:ee:4c:8a:48:1d:d8:e2:2c:0c:c3:0c:9c:85:8a: 15:fa:b7:e2:30:72:ae:44:7a:12:42:4e:dd:45:3e:1f:c6:a7: 24:9f:cb:2f:6a:03:0f:c0:cf:b1:04:3c:ac:7a:e9:2c:1d:eb: 46:fe:f1:93:c7:14:09:d7:39:f9:ea:0e:80:4e:e7:0b:42:e6: 53:a9:8e:41:31:b2:de:23:0c:e6:d0:08:74:ce:a8:73:66:6f: 3e:d8:b3:95 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONnVdQbfNFDETwZkZi4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2Y2MzZlMWE4ZjNhMDAwZjk0NjU3ZWE1NjAwMzc3YjE3MWFlNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXqaMNrXLfU1l1+msRtWef0Or1MV ncqrLfPhZCzmo6E0fQ6DwkFAzOE/+oJEiAeuwRms35ninLuAdRry/1F+1y8uNulj 6M3yNWEnpW6UAJ6Hful20chRAblno6vs+RyioOGhbsbdeX4q2CO/ooifk/41qGzS b8OizKoipwh6rk17iYAUJkMtZUPwRSvtvrD9KEKxX+TnBfs0WUmf0MgIHnUom7/h CUdHueHWe1RHum1s/W26Y6n7/IRNqIg1YSDPzcVcLfT7U6ElZLvRC54A4mJY/TpN 3d5y+NumfQ9QCQ2xkrolp049E8avrHbdFLE9DnTJBfhpLT9/4351dsPEiQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHP2NuGo86AA+UZX6lYAN3sXGuZYMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvY19ZMjRhanpvQUQ1UmxmcVZnQTNleGNhNWxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBy9eNOf586vHSzt8IY Kg77j6n/iRHjxJ/aMkGytFhtEH8ynsswHjWh0k9FQVLQIb2xJC2FHIgxL18JFNug Aj+QHfwd6+2PtikbRHdB38X84H27wqr2NDCFpPX11Uy21//uXchS/7v/zAlFy9Dc p66m5m6NEKDiEfBbzJmTSszrI//nbpzViaM2dtKf/mVV/q0SCYYXcGQDmayVk5uU SQsofblyGMVg7kyKSB3Y4iwMwwychYoV+rfiMHKuRHoSQk7dRT4fxqckn8svagMP wM+xBDyseuksHetG/vGTxxQJ1zn56g6ATucLQuZTqY5BMbLeIwzm0Ah0zqhzZm8+ 2LOV -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:53 2026 by rpki-client