This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa File: jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa (raw, json) Hash identifier: 55N/2/rlO8cGYdBy6UjnVeslx4/hwZ35mqqVL8TRjTA= Subject key identifier: 8C:84:7B:0F:E6:3E:E9:3F:5F:AE:B3:50:FE:30:7C:38:7D:DD:BC:13 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D5223BD8475636FF1BA5703A7ECB Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397215 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d5:22:3b:d8:47:56:36:ff:1b:a5:70:3a:7e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c847b0fe63ee93f5faeb350fe307c387dddbc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b3:16:94:40:63:36:cb:b9:67:f4:3e:1b:d9: 6c:77:97:e5:06:ed:73:43:03:4d:fd:a5:58:85:1d: 7c:46:61:49:ea:58:2c:70:b6:12:88:c9:f8:bb:f7: 5b:23:cc:a1:46:68:b2:f7:6f:a9:d4:83:ce:87:a3: 5f:7b:74:a1:da:63:ac:a4:2f:50:80:b9:7f:ac:b0: b5:47:6e:39:57:a2:d7:e6:9d:eb:8d:41:e1:8f:e7: c7:11:f4:1e:41:1b:aa:7f:31:28:f0:3c:a5:c2:b1: 4d:a1:35:9d:8c:50:b7:b5:7b:d6:85:6e:d6:bd:3e: 19:23:8d:f5:97:49:d6:b6:bd:45:10:b9:31:34:94: 50:a6:43:18:d4:a7:85:7f:fd:f6:23:2c:04:3b:36: 96:d5:93:1f:85:a0:49:36:7a:36:00:c1:cb:c3:55: 13:87:f0:79:e5:14:9c:c5:91:f6:48:7c:6e:36:87: c3:10:55:2e:73:a3:fa:0f:f3:7a:e1:20:60:3c:fa: 6f:bd:3d:ff:94:07:9a:fc:33:cc:64:f8:c3:cc:ec: 08:fb:d8:c9:6d:5e:28:e2:88:a5:00:2a:76:73:1d: 66:01:b3:fb:6e:f6:54:52:4a:f9:c8:6c:0b:9c:ed: b2:fc:f1:d4:71:5e:8e:44:7d:93:0d:ce:a3:df:c8: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:84:7B:0F:E6:3E:E9:3F:5F:AE:B3:50:FE:30:7C:38:7D:DD:BC:13 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 12:13:4b:a6:b0:d1:15:3f:f9:25:41:ae:9f:9f:3a:02:e1:32: 9b:7d:e7:28:15:ed:26:f8:66:8f:af:94:eb:53:a4:90:1c:af: b6:ed:ac:35:be:a4:89:3e:cd:95:ba:15:ca:66:80:be:b8:e4: 18:e6:1e:91:b0:82:0c:d9:2c:56:02:a0:58:45:9e:66:7a:42: 03:84:c0:7f:76:1d:76:b8:3e:4a:4c:49:ed:2c:a2:32:07:42: c8:18:88:88:ba:7b:4b:c9:0c:16:7d:27:7a:7c:9f:32:35:da: a1:79:5c:61:e1:4c:dc:f2:d1:aa:b0:8b:04:ea:05:c2:72:38: cb:a8:f9:4e:fe:78:89:aa:c1:98:8a:c4:3a:bf:be:b0:ed:17: 8f:c1:99:28:2b:c9:bc:49:b0:54:b2:06:44:0c:6a:99:81:36: 02:af:00:9f:42:a4:cf:6c:35:fd:87:f0:f7:e0:ae:31:f0:59: 5f:a4:79:54:e6:54:0c:4b:ba:63:0c:2f:26:a5:60:9f:cf:74: 31:bb:f7:22:67:1f:ec:be:fa:d6:82:05:d3:11:b2:d4:fb:63: 5c:98:d1:00:90:5d:01:39:25:81:1e:be:75:58:d3:08:10:51: d2:d8:54:ef:7a:a1:17:21:3e:5e:1f:8a:77:e9:75:dd:3f:11: c8:db:0f:73 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONUiO9hHVjb/G6VwOn7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yzg0N2IwZmU2M2VlOTNmNWZhZWIzNTBmZTMwN2MzODdkZGRiYzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7MWlEBjNsu5Z/Q+G9lsd5flBu1z QwNN/aVYhR18RmFJ6lgscLYSiMn4u/dbI8yhRmiy92+p1IPOh6Nfe3Sh2mOspC9Q gLl/rLC1R245V6LX5p3rjUHhj+fHEfQeQRuqfzEo8DylwrFNoTWdjFC3tXvWhW7W vT4ZI431l0nWtr1FELkxNJRQpkMY1KeFf/32IywEOzaW1ZMfhaBJNno2AMHLw1UT h/B55RScxZH2SHxuNofDEFUuc6P6D/N64SBgPPpvvT3/lAea/DPMZPjDzOwI+9jJ bV4o4oilACp2cx1mAbP7bvZUUkr5yGwLnO2y/PHUcV6ORH2TDc6j38jq2wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIyEew/mPuk/X66zUP4wfDh93bwTMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvaklSN0QtWS02VDlmcnJOUV9qQjhPSDNkdkJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQASE0umsNEVP/klQa6f nzoC4TKbfecoFe0m+GaPr5TrU6SQHK+27aw1vqSJPs2VuhXKZoC+uOQY5h6RsIIM 2SxWAqBYRZ5mekIDhMB/dh12uD5KTEntLKIyB0LIGIiIuntLyQwWfSd6fJ8yNdqh eVxh4Uzc8tGqsIsE6gXCcjjLqPlO/niJqsGYisQ6v76w7RePwZkoK8m8SbBUsgZE DGqZgTYCrwCfQqTPbDX9h/D34K4x8FlfpHlU5lQMS7pjDC8mpWCfz3Qxu/ciZx/s vvrWggXTEbLU+2NcmNEAkF0BOSWBHr51WNMIEFHS2FTveqEXIT5eH4p36XXdPxHI 2w9z -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:47 2026 by rpki-client