This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/xUDE19p7SjFfDj10MxGNe3_Ja54.roa File: xUDE19p7SjFfDj10MxGNe3_Ja54.roa (raw, json) Hash identifier: vMVrflsThb97UBO8tlivD+a8vKYPaOtZZKiO7UktvfM= Subject key identifier: C5:40:C4:D7:DA:7B:4A:31:5F:0E:3D:74:33:11:8D:7B:7F:C9:6B:9E Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2 Certificate serial: 019B7F80B03941FE584A77054EDDC960978D Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/xUDE19p7SjFfDj10MxGNe3_Ja54.roa Signing time: Fri 02 Jan 2026 16:18:18 +0000 ROA not before: Fri 02 Jan 2026 16:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33983 IP address blocks: 37.35.64.0/21 maxlen: 21 37.35.64.0/24 maxlen: 24 37.35.65.0/24 maxlen: 24 37.35.66.0/24 maxlen: 24 37.35.67.0/24 maxlen: 24 37.35.68.0/24 maxlen: 24 37.35.69.0/24 maxlen: 24 37.35.70.0/24 maxlen: 24 37.35.71.0/24 maxlen: 24 84.22.32.0/19 maxlen: 19 84.22.32.0/24 maxlen: 24 84.22.33.0/24 maxlen: 24 84.22.34.0/24 maxlen: 24 84.22.35.0/24 maxlen: 24 84.22.36.0/24 maxlen: 24 84.22.37.0/24 maxlen: 24 84.22.38.0/24 maxlen: 24 84.22.39.0/24 maxlen: 24 84.22.40.0/24 maxlen: 24 84.22.41.0/24 maxlen: 24 84.22.42.0/24 maxlen: 24 84.22.43.0/24 maxlen: 24 84.22.44.0/24 maxlen: 24 84.22.45.0/24 maxlen: 24 84.22.46.0/24 maxlen: 24 84.22.47.0/24 maxlen: 24 84.22.48.0/24 maxlen: 24 84.22.49.0/24 maxlen: 24 84.22.50.0/24 maxlen: 24 84.22.51.0/24 maxlen: 24 84.22.52.0/24 maxlen: 24 84.22.53.0/24 maxlen: 24 84.22.54.0/24 maxlen: 24 84.22.55.0/24 maxlen: 24 84.22.56.0/24 maxlen: 24 84.22.57.0/24 maxlen: 24 84.22.58.0/24 maxlen: 24 84.22.59.0/24 maxlen: 24 84.22.60.0/24 maxlen: 24 84.22.61.0/24 maxlen: 24 84.22.62.0/24 maxlen: 24 84.22.63.0/24 maxlen: 24 185.173.204.0/22 maxlen: 22 185.173.204.0/24 maxlen: 24 185.173.205.0/24 maxlen: 24 185.173.206.0/24 maxlen: 24 185.173.207.0/24 maxlen: 24 2a0b:6300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:b0:39:41:fe:58:4a:77:05:4e:dd:c9:60:97:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2 Validity Not Before: Jan 2 16:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c540c4d7da7b4a315f0e3d7433118d7b7fc96b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:3f:da:92:97:c0:22:e1:03:bb:cf:6f:d6: bf:e3:27:7c:a3:1b:8c:e1:cb:d8:93:70:0f:2b:17: e7:f7:92:63:52:b3:ff:2a:c5:bc:d8:41:2d:d2:06: 4b:bc:06:d1:87:9a:c7:df:19:ed:ec:60:56:ea:20: ee:f2:30:cb:6a:da:4f:85:43:56:c5:7f:1f:fc:4f: b6:2e:b9:ec:d0:56:c9:5a:d3:a0:6c:ae:a4:88:2d: 64:7e:cf:49:64:26:3f:b2:46:01:e0:a0:71:93:80: a5:95:dc:19:70:36:94:a6:c6:36:c0:53:fc:8a:af: 3d:1b:7d:3c:ad:16:32:68:eb:e6:02:65:c2:f1:74: fe:b1:f3:de:49:9d:9b:22:2c:bd:3d:40:1a:f6:a6: 17:31:c0:b2:0d:d5:fa:09:d9:b8:2d:f1:79:f6:e3: a0:96:72:46:8c:a6:60:f9:af:57:0b:a6:cf:23:3d: 4b:39:75:22:a7:52:3a:c5:b6:b8:3a:ba:fe:23:e7: fd:e0:7d:30:69:42:5e:6b:b4:ae:6a:c1:cd:c1:aa: f5:a5:54:b6:65:8a:2e:41:08:44:a5:c8:0d:6c:01: f3:74:45:a6:29:13:99:96:9f:5a:bb:e5:f0:6c:ba: 6f:21:b4:73:ce:0a:7e:73:5a:ab:c9:05:b7:e1:4e: 14:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:40:C4:D7:DA:7B:4A:31:5F:0E:3D:74:33:11:8D:7B:7F:C9:6B:9E X509v3 Authority Key Identifier: keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/xUDE19p7SjFfDj10MxGNe3_Ja54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.35.64.0/21 84.22.32.0/19 185.173.204.0/22 IPv6: 2a0b:6300::/29 Signature Algorithm: sha256WithRSAEncryption 23:84:b7:c7:17:d9:6b:18:cb:8c:4c:22:ff:b3:da:4b:e3:44: 69:e0:33:2a:9c:62:70:6b:39:5d:5c:e4:4d:f2:bc:f4:1a:83: 66:52:68:83:d1:f3:e7:55:4b:3d:74:07:2b:ed:8f:78:f9:53: be:33:48:4e:90:93:04:28:31:f0:27:b9:37:b2:e2:bb:e9:47: 50:8b:26:ec:07:44:4f:e0:5b:e0:5f:71:7b:8f:c0:5b:10:cd: eb:dd:93:96:31:6c:0b:ba:12:15:18:eb:52:00:52:5e:52:41: bc:4d:d4:f2:80:db:21:66:d2:c9:c1:db:57:0c:a7:62:ae:a6: f3:10:8b:1f:7e:55:2c:12:6f:33:76:3f:65:08:b9:c3:46:e1: 2d:f5:ae:97:c0:14:d5:04:31:0f:ef:ae:fd:9f:05:00:4e:ee: 01:f9:02:85:ec:4e:82:ca:3b:72:c4:9f:f0:d4:6f:09:19:f0: 00:8d:72:84:04:87:98:05:d9:95:5e:93:2d:a0:93:45:73:44: 18:b1:5d:ec:f0:8f:54:b9:31:36:57:68:bd:43:e4:84:18:a4: a5:8b:f1:61:93:d1:72:fd:bd:6d:9e:3f:43:db:6b:d4:c5:38: b5:da:6c:58:fe:39:ab:35:d5:7c:a3:78:97:7e:df:0f:57:e7: e4:75:a6:5e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/gLA5Qf5YSncFTt3JYJeNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OTM1MDgxYzc3YTg3NDVlN2I2MmI5M2I4MmRhMjk2MjM3 OWIyZTIwHhcNMjYwMTAyMTYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTQwYzRkN2RhN2I0YTMxNWYwZTNkNzQzMzExOGQ3YjdmYzk2YjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsao/2pKXwCLhA7vPb9a/4yd8oxuM 4cvYk3APKxfn95JjUrP/KsW82EEt0gZLvAbRh5rH3xnt7GBW6iDu8jDLatpPhUNW xX8f/E+2Lrns0FbJWtOgbK6kiC1kfs9JZCY/skYB4KBxk4ClldwZcDaUpsY2wFP8 iq89G308rRYyaOvmAmXC8XT+sfPeSZ2bIiy9PUAa9qYXMcCyDdX6Cdm4LfF59uOg lnJGjKZg+a9XC6bPIz1LOXUip1I6xba4Orr+I+f94H0waUJea7SuasHNwar1pVS2 ZYouQQhEpcgNbAHzdEWmKROZlp9au+XwbLpvIbRzzgp+c1qryQW34U4UxwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFMVAxNfae0oxXw49dDMRjXt/yWueMB8GA1UdIwQY MBaAFEaTUIHHeodF57Yrk7gtopYjebLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQt YTM1YzI3ZDk1MTg2LzEveFVERTE5cDdTakZmRGoxME14R05lM19KYTU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQtYTM1YzI3ZDk1MTg2 LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJSNAAwQF VBYgAwQCua3MMA0EAgACMAcDBQMqC2MAMA0GCSqGSIb3DQEBCwUAA4IBAQAjhLfH F9lrGMuMTCL/s9pL40Rp4DMqnGJwazldXORN8rz0GoNmUmiD0fPnVUs9dAcr7Y94 +VO+M0hOkJMEKDHwJ7k3suK76UdQiybsB0RP4FvgX3F7j8BbEM3r3ZOWMWwLuhIV GOtSAFJeUkG8TdTygNshZtLJwdtXDKdirqbzEIsfflUsEm8zdj9lCLnDRuEt9a6X wBTVBDEP7679nwUATu4B+QKF7E6CyjtyxJ/w1G8JGfAAjXKEBIeYBdmVXpMtoJNF c0QYsV3s8I9UuTE2V2i9Q+SEGKSli/Fhk9Fy/b1tnj9D22vUxTi12mxY/jmrNdV8 o3iXft8PV+fkdaZe -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:57 2026 by rpki-client