This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/37FmBErOCRsxKQZqtKw_TpsXPeg.roa File: 37FmBErOCRsxKQZqtKw_TpsXPeg.roa (raw, json) Hash identifier: dk2f7f5Kg/P6nbGtUsTcUoKtykQN93quUzHoHrPlbUA= Subject key identifier: DF:B1:66:04:4A:CE:09:1B:31:29:06:6A:B4:AC:3F:4E:9B:17:3D:E8 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB48546F2EA4A0DB80332AA72AE5E7 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/37FmBErOCRsxKQZqtKw_TpsXPeg.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206247 IP address blocks: 212.22.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:48:54:6f:2e:a4:a0:db:80:33:2a:a7:2a:e5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfb166044ace091b3129066ab4ac3f4e9b173de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bd:b1:e6:f0:f5:89:2e:09:0a:63:12:2d:2b: 46:a0:5a:f3:e7:3a:2e:b6:44:88:d5:cf:7d:26:90: 1b:a4:aa:80:ca:cc:4b:c9:55:51:15:e5:22:cd:cf: f1:35:45:45:3f:bc:19:80:9f:30:fa:82:6a:be:b1: 83:67:35:27:1d:47:6e:56:29:37:c3:11:80:d2:66: a3:1c:fa:87:15:c9:05:80:96:92:8b:b2:5a:58:de: ed:fa:8a:b0:80:88:47:18:cf:1d:15:c4:8a:3b:60: 1b:04:52:f6:77:f2:ca:a4:de:67:9f:cf:95:7a:f8: 66:73:b9:5d:c7:84:c7:d5:82:8d:06:d6:12:00:b3: b0:8f:ab:d8:65:7a:a3:b4:75:39:4d:31:8d:f0:a8: b7:a4:b6:23:55:85:8b:31:c0:fb:d2:0d:00:d1:bc: c5:69:2b:c1:a5:86:56:44:bf:ca:be:7b:3e:b0:3a: 25:24:2a:49:49:73:63:97:24:cc:32:37:ca:13:fc: b1:5b:78:dc:41:da:e7:02:7a:8c:58:ed:9a:83:f9: 9e:47:89:86:8c:a3:d8:41:fd:a6:4c:0c:32:4b:a8: 83:64:68:e0:a8:80:9f:de:ec:af:ea:6a:d6:e3:37: 4f:0a:fa:6d:49:f4:e5:c4:de:b4:64:90:e5:11:ff: 82:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B1:66:04:4A:CE:09:1B:31:29:06:6A:B4:AC:3F:4E:9B:17:3D:E8 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/37FmBErOCRsxKQZqtKw_TpsXPeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.22.73.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:50:26:d7:80:bc:f5:e7:95:cd:cf:b1:fd:64:79:a7:11:80: 34:c7:ed:db:0c:6d:73:d0:35:57:5c:e1:e0:25:c9:09:5b:91: d6:fd:2f:45:f0:66:3a:3d:73:7d:09:3f:25:6f:12:68:1b:62: 84:1b:c2:f7:ac:b4:ae:17:78:7f:03:ac:0f:d7:b0:d6:d6:d0: 72:d9:a5:39:47:dd:d1:0c:a4:53:de:56:be:11:c9:01:6a:27: e8:37:6d:42:e4:88:16:a2:ed:8e:d2:a5:ea:cb:ed:7b:a7:db: 66:2e:ef:73:67:10:dd:fc:0f:bc:a0:cd:32:fa:78:c2:09:aa: 2f:f3:43:4e:fe:c8:70:00:47:70:c8:32:c5:13:ed:b1:aa:2a: b3:8a:9e:f3:15:4c:13:d0:ec:e9:5e:8f:37:c7:92:5f:c3:7e: db:28:61:f9:4f:64:9b:38:cd:82:82:ff:d7:29:9e:fe:38:f5: 37:35:80:8a:11:3c:f1:9e:f5:cf:13:16:62:5e:00:49:31:dd: bf:44:d9:54:3a:6e:5c:70:af:56:68:8d:30:b7:7e:f7:c3:bc: dd:ef:8c:33:9d:f2:b0:16:a7:23:98:af:b0:47:5f:db:d6:ea: 70:16:25:fd:fa:41:c8:3d:bb:dd:2c:c2:26:14:dd:12:49:f3: 2d:05:a9:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0hUby6koNuAMyqnKuXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmIxNjYwNDRhY2UwOTFiMzEyOTA2NmFiNGFjM2Y0ZTliMTczZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r2x5vD1iS4JCmMSLStGoFrz5zou tkSI1c99JpAbpKqAysxLyVVRFeUizc/xNUVFP7wZgJ8w+oJqvrGDZzUnHUduVik3 wxGA0majHPqHFckFgJaSi7JaWN7t+oqwgIhHGM8dFcSKO2AbBFL2d/LKpN5nn8+V evhmc7ldx4TH1YKNBtYSALOwj6vYZXqjtHU5TTGN8Ki3pLYjVYWLMcD70g0A0bzF aSvBpYZWRL/Kvns+sDolJCpJSXNjlyTMMjfKE/yxW3jcQdrnAnqMWO2ag/meR4mG jKPYQf2mTAwyS6iDZGjgqICf3uyv6mrW4zdPCvptSfTlxN60ZJDlEf+CEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+xZgRKzgkbMSkGarSsP06bFz3oMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvMzdGbUJFck9DUnN4S1FacXRLd19UcHNYUGVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BZJMA0G CSqGSIb3DQEBCwUAA4IBAQCdUCbXgLz155XNz7H9ZHmnEYA0x+3bDG1z0DVXXOHg JckJW5HW/S9F8GY6PXN9CT8lbxJoG2KEG8L3rLSuF3h/A6wP17DW1tBy2aU5R93R DKRT3la+EckBaifoN21C5IgWou2O0qXqy+17p9tmLu9zZxDd/A+8oM0y+njCCaov 80NO/shwAEdwyDLFE+2xqiqzip7zFUwT0OzpXo83x5Jfw37bKGH5T2SbOM2Cgv/X KZ7+OPU3NYCKETzxnvXPExZiXgBJMd2/RNlUOm5ccK9WaI0wt373w7zd74wznfKw FqcjmK+wR1/b1upwFiX9+kHIPbvdLMImFN0SSfMtBanS -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:10 2026 by rpki-client