This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/D0436tyKbqXU-OEfmsttV7Y3X3E.roa File: D0436tyKbqXU-OEfmsttV7Y3X3E.roa (raw, json) Hash identifier: MhUHo+gX9c4E0dYnIwVvXUt3H0EjkTPIpU18LdFcjK4= Subject key identifier: 0F:4E:37:EA:DC:8A:6E:A5:D4:F8:E1:1F:9A:CB:6D:57:B6:37:5F:71 Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Certificate serial: 019B8E33D03130DD8A7264153D2AF4E244C1 Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/D0436tyKbqXU-OEfmsttV7Y3X3E.roa Signing time: Mon 05 Jan 2026 12:48:38 +0000 ROA not before: Mon 05 Jan 2026 12:48:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214875 IP address blocks: 37.97.0.0/20 maxlen: 20 37.97.2.0/24 maxlen: 24 37.97.3.0/24 maxlen: 24 37.97.48.0/21 maxlen: 21 37.97.58.0/23 maxlen: 23 37.97.62.0/23 maxlen: 23 45.13.240.0/22 maxlen: 22 188.228.14.0/24 maxlen: 24 188.228.48.0/23 maxlen: 23 188.228.54.0/24 maxlen: 24 188.228.68.0/23 maxlen: 23 188.228.78.0/24 maxlen: 24 188.228.88.0/22 maxlen: 22 188.228.92.0/23 maxlen: 23 188.228.102.0/23 maxlen: 23 2a00:fd01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:33:d0:31:30:dd:8a:72:64:15:3d:2a:f4:e2:44:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Validity Not Before: Jan 5 12:48:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f4e37eadc8a6ea5d4f8e11f9acb6d57b6375f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2e:34:bd:79:6e:3c:49:25:0d:6a:0a:34:b2: e4:1d:85:79:aa:e8:63:84:4a:98:70:c8:e0:35:ca: 13:1d:d9:f0:a8:c0:87:9c:f5:1e:f1:dc:0c:cf:3f: ca:d5:19:e0:aa:c3:c7:1d:58:ce:d0:01:68:ca:b1: 04:92:15:05:4f:71:5c:99:fa:d9:2b:2f:6e:06:b0: 30:62:dc:19:f7:28:a0:7c:7d:e6:2a:18:13:04:e2: 0f:94:8e:f2:d7:16:7f:8b:35:d2:c1:df:4b:84:f2: dd:f7:e5:c9:31:64:77:8d:d6:41:ce:1a:18:b6:08: a5:ff:14:6d:75:7a:35:a2:df:2a:b4:9f:91:82:86: 24:68:4a:6b:6c:8f:c3:64:61:53:eb:73:8e:6c:51: a2:85:44:c6:a2:3d:1a:03:ba:0a:89:e9:e0:59:e5: 49:52:bd:14:53:9c:5f:c3:f8:57:c0:df:93:8a:09: f5:c4:0f:45:a6:0c:7b:81:bd:9f:1e:57:3b:16:1c: 4f:9b:b8:a0:ff:3c:e0:d4:cb:33:28:80:9b:c7:72: 13:7e:11:59:89:c6:a1:e8:48:4d:8d:ba:cd:8f:1a: c5:59:01:ec:93:a7:f8:c3:06:89:01:9c:19:dc:62: d5:67:18:60:d8:33:e5:a8:62:f7:65:7b:23:8d:9f: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4E:37:EA:DC:8A:6E:A5:D4:F8:E1:1F:9A:CB:6D:57:B6:37:5F:71 X509v3 Authority Key Identifier: keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/D0436tyKbqXU-OEfmsttV7Y3X3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.97.0.0/20 37.97.48.0/21 37.97.58.0/23 37.97.62.0/23 45.13.240.0/22 188.228.14.0/24 188.228.48.0/23 188.228.54.0/24 188.228.68.0/23 188.228.78.0/24 188.228.88.0-188.228.93.255 188.228.102.0/23 IPv6: 2a00:fd01::/32 Signature Algorithm: sha256WithRSAEncryption 81:d6:63:a1:c2:2b:56:e9:d5:fe:1f:d2:57:1b:ff:96:e8:6d: 9c:47:f6:ae:dd:d8:4c:f4:c0:7f:d6:92:63:b1:d7:7b:37:b9: 5f:3e:41:f3:e4:21:27:9c:69:78:56:0e:d4:45:70:ec:41:0c: 90:e5:d5:6c:90:f4:5d:bb:3d:35:b4:69:9b:93:a7:3d:6f:f9: 56:3e:5f:b1:ea:86:f6:65:07:a3:2c:bb:01:e3:33:ff:10:1f: 71:99:a4:bc:a0:dd:b1:f0:76:92:c5:54:79:fd:9f:fe:49:1f: ab:42:eb:2d:ed:75:18:e4:c3:c8:8f:42:64:54:fe:2e:b3:3a: 30:ed:5c:54:0c:40:3e:37:52:90:7f:b0:b8:ef:61:62:56:25: 6d:c4:ae:29:43:4c:02:20:55:b0:64:1c:3f:53:33:40:e8:d5: d9:4f:ad:09:79:c7:00:ef:d0:4e:ef:95:54:a2:40:b9:fa:d1: 1d:9d:90:62:7a:ad:d1:9d:91:41:0c:66:87:c5:b0:b2:d4:8f: 86:a1:9f:1f:7b:32:22:81:57:76:59:58:4e:b5:b1:1c:16:47: 10:3b:9b:af:02:b8:ce:81:90:18:54:a0:b0:c1:5a:77:ba:0d: a3:69:2f:6c:10:53:e6:f0:3e:97:00:a8:30:14:4b:c9:34:33: 32:15:da:42 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZuOM9AxMN2KcmQVPSr04kTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl NGRmMDAwHhcNMjYwMTA1MTI0ODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjRlMzdlYWRjOGE2ZWE1ZDRmOGUxMWY5YWNiNmQ1N2I2Mzc1ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS40vXluPEklDWoKNLLkHYV5quhj hEqYcMjgNcoTHdnwqMCHnPUe8dwMzz/K1RngqsPHHVjO0AFoyrEEkhUFT3FcmfrZ Ky9uBrAwYtwZ9yigfH3mKhgTBOIPlI7y1xZ/izXSwd9LhPLd9+XJMWR3jdZBzhoY tgil/xRtdXo1ot8qtJ+RgoYkaEprbI/DZGFT63OObFGihUTGoj0aA7oKiengWeVJ Ur0UU5xfw/hXwN+Tign1xA9Fpgx7gb2fHlc7FhxPm7ig/zzg1MszKICbx3ITfhFZ icah6EhNjbrNjxrFWQHsk6f4wwaJAZwZ3GLVZxhg2DPlqGL3ZXsjjZ8gzwIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFA9ON+rcim6l1PjhH5rLbVe2N19xMB8GA1UdIwQY MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt YTg3N2RkNTFiYzQ5LzEvRDA0MzZ0eUticVhVLU9FZm1zdHRWN1kzWDNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5 LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBWBAIAATBQAwQEJWEAAwQD JWEwAwQBJWE6AwQBJWE+AwQCLQ3wAwQAvOQOAwQBvOQwAwQAvOQ2AwQBvOREAwQA vOROMAwDBAO85FgDBAG85FwDBAG85GYwDQQCAAIwBwMFACoA/QEwDQYJKoZIhvcN AQELBQADggEBAIHWY6HCK1bp1f4f0lcb/5bobZxH9q7d2Ez0wH/WkmOx13s3uV8+ QfPkISecaXhWDtRFcOxBDJDl1WyQ9F27PTW0aZuTpz1v+VY+X7HqhvZlB6MsuwHj M/8QH3GZpLyg3bHwdpLFVHn9n/5JH6tC6y3tdRjkw8iPQmRU/i6zOjDtXFQMQD43 UpB/sLjvYWJWJW3ErilDTAIgVbBkHD9TM0Do1dlPrQl5xwDv0E7vlVSiQLn60R2d kGJ6rdGdkUEMZofFsLLUj4ahnx97MiKBV3ZZWE61sRwWRxA7m68CuM6BkBhUoLDB Wne6DaNpL2wQU+bwPpcAqDAUS8k0MzIV2kI= -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:53 2026 by rpki-client