This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa File: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (raw, json) Hash identifier: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw= Subject key identifier: B0:34:77:42:8F:03:09:55:95:4E:60:AB:39:20:9E:0B:81:4C:40:EC Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d Certificate serial: 019B76EAB8BA7C63E609BCCE5339BC2B7D72 Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31122 IP address blocks: 37.77.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b8:ba:7c:63:e6:09:bc:ce:53:39:bc:2b:7d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b03477428f030955954e60ab39209e0b814c40ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:6a:31:eb:ca:f1:48:82:90:fe:9a:b7:2a: 20:18:d9:80:06:67:9e:23:36:68:7d:e5:3c:86:f2: 49:c8:8c:8f:c0:01:69:fa:e1:9f:98:c5:5e:a2:57: a4:3f:4c:01:30:92:88:e8:53:8b:0b:6c:fd:26:f7: a5:2f:ba:85:01:a3:9a:61:be:5f:69:fc:57:cb:21: 79:26:12:ab:31:8c:56:38:9d:22:0e:3a:c6:a5:e9: 38:bb:39:d7:d8:ed:bd:18:c2:f6:0c:e0:9e:dc:5d: 15:e4:60:e9:6a:99:2c:81:8e:33:f7:f2:71:fe:61: 0b:e6:26:9c:30:f4:ec:b4:0b:e9:34:c9:d0:bf:e1: 8c:f9:6b:d8:50:20:50:3e:ff:96:d7:21:5f:97:fc: 01:89:80:2c:2f:b6:16:dc:fd:26:71:30:fe:fb:14: de:f0:62:d8:bd:b2:31:58:35:5f:32:63:7e:2c:d9: fa:85:ab:09:d1:92:a5:bd:67:e5:31:fc:93:01:00: 38:53:bd:93:b0:5a:d8:d3:ab:d7:13:7f:ff:70:35: de:d8:32:30:80:4b:19:05:35:30:62:b4:b3:f1:da: 61:63:f2:10:6d:36:49:31:ff:8d:0b:52:80:39:a3: 7d:e4:c8:ad:43:8d:20:7e:28:45:06:6b:0b:0a:de: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:34:77:42:8F:03:09:55:95:4E:60:AB:39:20:9E:0B:81:4C:40:EC X509v3 Authority Key Identifier: keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.58.0/23 Signature Algorithm: sha256WithRSAEncryption 82:52:2f:5e:c4:4c:da:be:c8:19:a3:06:75:9b:02:d6:07:39: d9:a5:eb:33:ae:82:4c:1d:b6:1c:2a:b9:9e:7f:10:60:ab:75: 26:bb:04:e8:cf:da:42:55:3f:09:35:70:ad:7f:d1:5b:ea:db: 85:bc:20:41:f3:73:e6:d7:ff:60:d9:eb:6c:cf:72:a2:1d:01: f4:3f:21:69:9b:d1:2f:3e:c5:5c:8a:ef:b7:42:d0:23:bc:cc: 74:51:aa:76:07:e7:14:24:21:85:55:d1:ef:27:22:0a:2f:d0: 21:e7:c4:dc:e2:3a:7d:2a:4c:dd:0a:10:b4:61:fb:fa:94:3b: d7:c3:8f:f1:15:b9:33:73:db:85:4f:af:22:98:48:fd:f3:95: 13:1d:b9:d6:14:5b:32:94:6e:88:67:64:93:db:6a:be:03:d9: d1:52:f0:e0:14:b3:8a:b9:ea:55:30:8b:94:76:06:9f:aa:e6: 69:f8:01:08:e2:d5:f8:ab:c6:75:3c:22:a7:8b:57:c0:7c:26: 31:fa:9f:05:59:ee:9c:06:03:02:23:dc:c0:ae:f2:3e:78:ca: e9:7c:60:fc:6f:dd:80:6d:3c:1e:da:95:89:06:31:ab:37:96: e0:29:a6:de:16:32:87:00:e1:1d:13:c6:81:93:6c:68:df:a5: 7e:ce:42:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26ri6fGPmCbzOUzm8K31yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2 Nzc3MGQwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDM0Nzc0MjhmMDMwOTU1OTU0ZTYwYWIzOTIwOWUwYjgxNGM0MGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VhqMevK8UiCkP6atyogGNmABmee IzZofeU8hvJJyIyPwAFp+uGfmMVeolekP0wBMJKI6FOLC2z9JvelL7qFAaOaYb5f afxXyyF5JhKrMYxWOJ0iDjrGpek4uznX2O29GML2DOCe3F0V5GDpapksgY4z9/Jx /mEL5iacMPTstAvpNMnQv+GM+WvYUCBQPv+W1yFfl/wBiYAsL7YW3P0mcTD++xTe 8GLYvbIxWDVfMmN+LNn6hasJ0ZKlvWflMfyTAQA4U72TsFrY06vXE3//cDXe2DIw gEsZBTUwYrSz8dphY/IQbTZJMf+NC1KAOaN95MitQ40gfihFBmsLCt6dAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLA0d0KPAwlVlU5gqzkgnguBTEDsMB8GA1UdIwQY MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt Y2NmNjQ1NGJiMjRjLzEvc0RSM1FvOERDVldWVG1Dck9TQ2VDNEZNUU93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJU06MA0G CSqGSIb3DQEBCwUAA4IBAQCCUi9exEzavsgZowZ1mwLWBznZpeszroJMHbYcKrme fxBgq3UmuwToz9pCVT8JNXCtf9Fb6tuFvCBB83Pm1/9g2etsz3KiHQH0PyFpm9Ev PsVciu+3QtAjvMx0Uap2B+cUJCGFVdHvJyIKL9Ah58Tc4jp9KkzdChC0Yfv6lDvX w4/xFbkzc9uFT68imEj985UTHbnWFFsylG6IZ2ST22q+A9nRUvDgFLOKuepVMIuU dgafquZp+AEI4tX4q8Z1PCKni1fAfCYx+p8FWe6cBgMCI9zArvI+eMrpfGD8b92A bTwe2pWJBjGrN5bgKabeFjKHAOEdE8aBk2xo36V+zkLl -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:38 2026 by rpki-client