This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/rUz6HCWdiJSjjuELK4f4q_4RBwc.roa File: rUz6HCWdiJSjjuELK4f4q_4RBwc.roa (raw, json) Hash identifier: uEA3pVSZxMGWGhwdpljknpzc1pOZ1ehqti0T1frlNo4= Subject key identifier: AD:4C:FA:1C:25:9D:88:94:A3:8E:E1:0B:2B:87:F8:AB:FE:11:07:07 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38D75FD86020EA250D847049E49EC6 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/rUz6HCWdiJSjjuELK4f4q_4RBwc.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397220 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d7:5f:d8:60:20:ea:25:0d:84:70:49:e4:9e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad4cfa1c259d8894a38ee10b2b87f8abfe110707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:2d:5c:db:49:79:e8:8d:00:01:1e:07:19: 71:72:55:65:5f:b6:5c:fc:0f:26:5a:03:fa:2f:d2: a9:e6:93:53:08:26:83:e9:94:e9:1f:85:99:56:05: c0:3d:8e:ed:3c:0a:d5:99:a0:92:01:3d:44:b7:dc: bd:72:eb:49:83:3e:d7:d8:ee:7c:67:d6:57:b1:05: 5f:e1:36:46:c1:3a:7a:09:79:24:d9:80:54:e1:9a: 17:34:0e:49:d4:73:f1:31:f2:ea:51:0c:ac:e6:6b: de:1d:e2:2e:63:4e:d2:77:26:6a:fa:7d:12:22:75: c3:a9:72:e2:9d:7e:aa:4f:ed:c6:8b:2e:44:97:00: 35:1c:fe:b6:8b:f6:87:0f:8d:9d:8d:fb:84:6b:7b: de:a6:23:b4:12:27:81:84:f1:c4:9c:6a:8f:8c:e8: ae:3c:ae:e9:48:03:cc:0d:89:85:5e:ce:44:0e:0e: 49:99:44:30:68:73:73:bc:d3:ac:dc:88:1d:15:de: 94:7b:b7:d4:3e:1d:27:9c:34:e1:9f:a4:14:21:e7: a7:e8:55:2f:5b:55:c6:5e:b2:62:9e:7b:d6:dc:0b: 88:5d:46:54:7d:49:b4:be:f3:70:4f:ee:f4:19:20: 73:cc:21:e7:06:91:6e:c1:62:2f:6c:7c:b7:8b:fe: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4C:FA:1C:25:9D:88:94:A3:8E:E1:0B:2B:87:F8:AB:FE:11:07:07 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/rUz6HCWdiJSjjuELK4f4q_4RBwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 28:60:8b:9a:ff:19:0c:6a:4a:6f:a6:1d:83:0a:86:1a:35:5e: f1:fe:a7:2e:d0:2c:b4:76:0a:ba:b8:73:ff:9f:b2:b3:3f:3d: 6d:56:0d:52:ea:24:a4:3f:75:e6:77:4d:f6:7d:66:7a:88:bc: e4:f4:35:8a:89:d3:e2:33:ef:a1:de:7f:10:16:4b:62:91:a3: 07:7d:a5:19:32:e1:63:01:00:0a:44:92:7f:0a:f3:f0:cb:2e: df:ec:91:bc:b7:fc:5e:26:00:ef:5f:6d:bc:3a:38:89:38:cb: 5d:ac:24:5a:d4:dd:3d:86:f1:fa:8e:f3:66:69:5e:ec:3c:f3: 7d:60:5b:0d:7a:31:15:c2:b3:b7:91:2b:b0:18:3b:7f:06:00: 29:06:15:8a:64:fc:11:ba:14:0a:f3:8b:ef:20:99:a1:bd:57: 27:32:db:c8:ae:84:9e:59:79:2b:34:88:1c:94:98:92:f3:ad: 47:99:0e:20:c8:28:52:a7:25:b8:45:a4:47:83:53:60:51:74: 53:b4:7d:df:0e:27:33:58:73:76:a3:9a:db:de:7f:89:e6:4f: 02:e3:fd:a2:f8:b5:c7:49:cf:20:86:83:9f:0b:6a:a4:30:72: 9f:48:45:c3:d2:f5:33:5e:30:ac:57:c2:e0:9f:79:21:a4:07: d2:a0:40:7f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONdf2GAg6iUNhHBJ5J7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDRjZmExYzI1OWQ4ODk0YTM4ZWUxMGIyYjg3ZjhhYmZlMTEwNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1gtXNtJeeiNAAEeBxlxclVlX7Zc /A8mWgP6L9Kp5pNTCCaD6ZTpH4WZVgXAPY7tPArVmaCSAT1Et9y9cutJgz7X2O58 Z9ZXsQVf4TZGwTp6CXkk2YBU4ZoXNA5J1HPxMfLqUQys5mveHeIuY07SdyZq+n0S InXDqXLinX6qT+3Giy5ElwA1HP62i/aHD42djfuEa3vepiO0EieBhPHEnGqPjOiu PK7pSAPMDYmFXs5EDg5JmUQwaHNzvNOs3IgdFd6Ue7fUPh0nnDThn6QUIeen6FUv W1XGXrJinnvW3AuIXUZUfUm0vvNwT+70GSBzzCHnBpFuwWIvbHy3i/5GiQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFK1M+hwlnYiUo47hCyuH+Kv+EQcHMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvclV6NkhDV2RpSlNqanVFTEs0ZjRxXzRSQndjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQAoYIua/xkMakpvph2D CoYaNV7x/qcu0Cy0dgq6uHP/n7KzPz1tVg1S6iSkP3Xmd032fWZ6iLzk9DWKidPi M++h3n8QFktikaMHfaUZMuFjAQAKRJJ/CvPwyy7f7JG8t/xeJgDvX228OjiJOMtd rCRa1N09hvH6jvNmaV7sPPN9YFsNejEVwrO3kSuwGDt/BgApBhWKZPwRuhQK84vv IJmhvVcnMtvIroSeWXkrNIgclJiS861HmQ4gyChSpyW4RaRHg1NgUXRTtH3fDicz WHN2o5rb3n+J5k8C4/2i+LXHSc8ghoOfC2qkMHKfSEXD0vUzXjCsV8Lgn3khpAfS oEB/ -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:43 2026 by rpki-client