This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/cu6MjtszrBqCo3h_SmtsNHkmMvE.roa File: cu6MjtszrBqCo3h_SmtsNHkmMvE.roa (raw, json) Hash identifier: 7i5XYcZRSc2pl6AvojBH/+hEi/ppPd1TZtrZ8yaqsXk= Subject key identifier: 72:EE:8C:8E:DB:33:AC:1A:82:A3:78:7F:4A:6B:6C:34:79:26:32:F1 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38E19A2E5739B48C247C2A442B95FC Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/cu6MjtszrBqCo3h_SmtsNHkmMvE.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397239 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e1:9a:2e:57:39:b4:8c:24:7c:2a:44:2b:95:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72ee8c8edb33ac1a82a3787f4a6b6c34792632f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e0:11:f1:67:c4:03:05:3e:77:54:33:fd:53: 78:af:b3:10:32:9d:c5:93:40:52:53:a9:dc:10:d3: 02:1c:51:32:ae:7c:c5:43:ac:e5:fe:00:b6:6a:bb: 29:66:90:8f:c4:ac:45:69:a7:32:27:da:7a:7f:f2: 5c:d3:4d:63:6b:c6:a3:88:62:82:fc:61:43:93:7c: b8:22:72:bd:fa:10:e8:7f:58:a2:b6:5e:58:d1:51: 32:ea:64:b6:4c:ce:75:34:82:e5:48:c7:b1:3c:1f: 2d:24:3f:15:45:e4:57:6d:dc:eb:79:88:50:94:77: ce:fa:82:94:6f:5e:09:66:73:d2:d0:93:df:90:94: fc:9e:cf:cd:58:37:52:f8:49:c9:f2:08:1b:05:9d: af:5f:b7:cd:fc:8c:f9:19:fb:b6:5f:d5:48:1f:06: 67:ab:cb:e3:46:16:34:bc:56:a3:db:33:3e:b8:67: fe:24:ab:1d:7c:27:f1:fe:1b:6c:07:05:2b:42:4b: ed:51:1d:9a:a7:d3:a3:b3:fb:ee:e1:46:7e:f3:6a: 33:72:60:a9:2b:e7:85:fd:79:d0:53:84:29:5b:7b: 47:2b:f8:e1:da:85:71:1c:4c:1c:58:44:8d:31:b8: 44:31:6a:b5:4a:29:5b:20:e0:6c:69:f0:00:5b:ed: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EE:8C:8E:DB:33:AC:1A:82:A3:78:7F:4A:6B:6C:34:79:26:32:F1 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/cu6MjtszrBqCo3h_SmtsNHkmMvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 56:77:b3:2f:81:c5:0e:13:5a:6a:c2:f9:f0:f7:9f:6c:e7:a5: f0:5b:a0:9a:99:5b:f1:21:cb:56:40:7b:2d:49:49:4b:45:8d: 9b:29:c3:0a:24:3d:40:65:cd:1d:9b:8f:0b:2c:9c:fc:dc:85: b3:e8:6e:f2:3f:ae:61:42:29:02:c4:69:10:b3:d8:d0:ed:e8: 0c:d1:69:d1:81:d7:c0:31:35:eb:88:2e:76:ca:f1:5a:3f:57: d2:d5:a0:8e:56:16:4a:bd:f2:34:be:a5:72:07:64:5a:39:19: 9f:e2:af:3e:45:05:84:a3:ac:d8:81:87:be:0e:6d:87:d7:b4: 16:dc:a5:e6:2b:14:65:83:17:c4:0a:4e:7b:1f:1d:05:8d:a2: 13:3f:16:a2:de:ce:d8:40:fb:2b:12:78:62:44:b6:a9:dc:26: 16:4d:f5:b7:0e:27:14:07:9a:85:47:f0:ce:28:fd:13:62:ef: 4d:bf:f5:12:6d:f7:81:fc:c8:6d:02:bc:15:78:8f:3e:a2:03: 1c:01:62:a9:69:be:20:51:9d:51:b5:f7:2f:7a:72:d3:d9:09: c6:d3:a3:86:8a:6e:80:12:fb:a9:59:d5:6a:d9:eb:fd:2d:12: d1:dc:da:9f:93:42:6b:fc:2b:e5:8b:9f:94:cb:4a:d0:8d:df: 10:ad:57:50 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OOGaLlc5tIwkfCpEK5X8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmVlOGM4ZWRiMzNhYzFhODJhMzc4N2Y0YTZiNmMzNDc5MjYzMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+AR8WfEAwU+d1Qz/VN4r7MQMp3F k0BSU6ncENMCHFEyrnzFQ6zl/gC2arspZpCPxKxFaacyJ9p6f/Jc001ja8ajiGKC /GFDk3y4InK9+hDof1iitl5Y0VEy6mS2TM51NILlSMexPB8tJD8VReRXbdzreYhQ lHfO+oKUb14JZnPS0JPfkJT8ns/NWDdS+EnJ8ggbBZ2vX7fN/Iz5Gfu2X9VIHwZn q8vjRhY0vFaj2zM+uGf+JKsdfCfx/htsBwUrQkvtUR2ap9Ojs/vu4UZ+82ozcmCp K+eF/XnQU4QpW3tHK/jh2oVxHEwcWESNMbhEMWq1SilbIOBsafAAW+3QiQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHLujI7bM6wagqN4f0prbDR5JjLxMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvY3U2TWp0c3pyQnFDbzNoX1NtdHNOSGttTXZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBWd7MvgcUOE1pqwvnw 959s56XwW6CamVvxIctWQHstSUlLRY2bKcMKJD1AZc0dm48LLJz83IWz6G7yP65h QikCxGkQs9jQ7egM0WnRgdfAMTXriC52yvFaP1fS1aCOVhZKvfI0vqVyB2RaORmf 4q8+RQWEo6zYgYe+Dm2H17QW3KXmKxRlgxfECk57Hx0FjaITPxai3s7YQPsrEnhi RLap3CYWTfW3DicUB5qFR/DOKP0TYu9Nv/USbfeB/MhtArwVeI8+ogMcAWKpab4g UZ1RtfcvenLT2QnG06OGim6AEvupWdVq2ev9LRLR3Nqfk0Jr/Cvli5+Uy0rQjd8Q rVdQ -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:03 2026 by rpki-client