This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/IJPq1vTmby5eiLb59FjMHsI8kO8.roa File: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (raw, json) Hash identifier: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg= Subject key identifier: 20:93:EA:D6:F4:E6:6F:2E:5E:88:B6:F9:F4:58:CC:1E:C2:3C:90:EF Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d Certificate serial: 019B76EABB544D61E5ECD6A007B89F3B6111 Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/IJPq1vTmby5eiLb59FjMHsI8kO8.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210636 IP address blocks: 37.77.58.0/24 maxlen: 24 37.77.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bb:54:4d:61:e5:ec:d6:a0:07:b8:9f:3b:61:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2093ead6f4e66f2e5e88b6f9f458cc1ec23c90ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:7d:df:3d:8d:60:d8:a2:ed:22:89:97:9b: 6c:df:b3:65:91:3b:b4:3d:15:91:1f:07:c2:ee:7c: 87:e8:53:49:e8:b5:af:04:d7:9e:87:26:66:c9:8e: 83:7b:45:83:d8:73:22:f5:ca:0d:90:99:16:7d:df: be:bb:18:44:f6:03:d1:08:04:44:70:68:68:de:da: af:74:5c:ca:48:71:c8:54:ea:9b:6b:63:fb:24:6b: 86:04:55:a1:2b:5c:87:01:03:12:e3:82:f5:d3:08: f4:32:c0:99:d9:78:e2:4b:ad:ae:29:94:f6:ac:99: 1e:77:0f:2c:23:bb:82:7c:7d:3f:d9:ad:1e:97:c2: 3c:63:12:d0:65:ac:a1:10:30:44:4e:75:de:54:ed: 29:d2:8e:be:20:a9:e1:70:d1:5e:77:ae:cb:4c:79: 11:68:9a:af:dc:84:2f:e0:37:8e:66:65:2e:94:e5: 18:a7:f7:7f:81:79:c8:97:43:51:e6:59:5b:59:e4: 6a:cb:13:2a:89:18:33:c5:a9:8b:37:cb:e8:17:5f: 19:93:db:83:b9:8f:bc:8e:6f:49:eb:8f:70:a3:23: 0d:51:ff:c0:0d:25:50:71:8c:85:33:87:ea:48:a3: 66:cf:c3:c7:f7:5f:4b:f1:d9:fd:b6:9f:bd:4e:5b: 47:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:93:EA:D6:F4:E6:6F:2E:5E:88:B6:F9:F4:58:CC:1E:C2:3C:90:EF X509v3 Authority Key Identifier: keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/IJPq1vTmby5eiLb59FjMHsI8kO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.58.0/23 Signature Algorithm: sha256WithRSAEncryption 90:a4:83:ab:5f:2e:dd:9c:31:2f:a6:b1:9b:d6:ba:41:1d:57: dc:4f:4f:57:91:4d:6a:3f:6f:df:aa:22:fc:8a:12:c7:53:d1: 5e:af:14:34:50:6c:16:31:73:d2:07:86:23:7e:b2:f7:55:45: 02:ed:b5:27:71:a7:99:ff:4a:2f:0f:65:f6:81:a8:92:69:9d: f8:e0:9e:d3:2c:b0:0d:91:b0:03:10:65:d5:fc:c2:2d:18:86: 1a:0a:82:2c:19:b6:fb:5f:5f:6b:d1:c6:5a:70:f2:c5:8b:63: 5c:46:f8:eb:d8:27:2f:51:11:fe:81:65:c6:ad:e1:37:3d:78: e7:d8:92:cc:1c:42:15:76:2a:a0:d5:25:be:49:1f:f5:98:44: 93:f7:52:1b:16:df:34:48:a9:dc:cd:85:64:08:80:a0:27:5d: 23:65:31:6a:18:80:71:3d:92:a0:80:c7:15:f7:b9:5d:41:dd: 6c:19:21:21:eb:58:43:14:0e:70:f3:30:62:e3:23:0f:83:9a: 5b:ee:5c:f7:be:2f:df:8e:57:5a:0e:87:00:6c:18:57:f2:38: 7b:08:f8:7a:4a:52:f2:05:4b:55:bf:2a:31:45:5d:73:b9:eb: 0d:fc:0b:12:63:62:45:58:be:5a:ef:2d:b2:be:cd:3c:61:91: 78:22:0b:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rtUTWHl7NagB7ifO2ERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2 Nzc3MGQwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDkzZWFkNmY0ZTY2ZjJlNWU4OGI2ZjlmNDU4Y2MxZWMyM2M5MGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjZ93z2NYNii7SKJl5ts37NlkTu0 PRWRHwfC7nyH6FNJ6LWvBNeehyZmyY6De0WD2HMi9coNkJkWfd++uxhE9gPRCARE cGho3tqvdFzKSHHIVOqba2P7JGuGBFWhK1yHAQMS44L10wj0MsCZ2XjiS62uKZT2 rJkedw8sI7uCfH0/2a0el8I8YxLQZayhEDBETnXeVO0p0o6+IKnhcNFed67LTHkR aJqv3IQv4DeOZmUulOUYp/d/gXnIl0NR5llbWeRqyxMqiRgzxamLN8voF18Zk9uD uY+8jm9J649woyMNUf/ADSVQcYyFM4fqSKNmz8PH919L8dn9tp+9TltHXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCT6tb05m8uXoi2+fRYzB7CPJDvMB8GA1UdIwQY MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt Y2NmNjQ1NGJiMjRjLzEvSUpQcTF2VG1ieTVlaUxiNTlGak1Ic0k4a084LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJU06MA0G CSqGSIb3DQEBCwUAA4IBAQCQpIOrXy7dnDEvprGb1rpBHVfcT09XkU1qP2/fqiL8 ihLHU9FerxQ0UGwWMXPSB4YjfrL3VUUC7bUncaeZ/0ovD2X2gaiSaZ344J7TLLAN kbADEGXV/MItGIYaCoIsGbb7X19r0cZacPLFi2NcRvjr2CcvURH+gWXGreE3PXjn 2JLMHEIVdiqg1SW+SR/1mEST91IbFt80SKnczYVkCICgJ10jZTFqGIBxPZKggMcV 97ldQd1sGSEh61hDFA5w8zBi4yMPg5pb7lz3vi/fjldaDocAbBhX8jh7CPh6SlLy BUtVvyoxRV1zuesN/AsSY2JFWL5a7y2yvs08YZF4Igtg -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:05 2026 by rpki-client