This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/74tSlknuvKAhMRStLTTbfTk02vU.roa File: 74tSlknuvKAhMRStLTTbfTk02vU.roa (raw, json) Hash identifier: Ph3tx60zaziAfGxH0DzRMdOsPK0sLrGJHZvnPcTQnT0= Subject key identifier: EF:8B:52:96:49:EE:BC:A0:21:31:14:AD:2D:34:DB:7D:39:34:DA:F5 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77596B9CCF97D78F9413870EA1E26FEE Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/74tSlknuvKAhMRStLTTbfTk02vU.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62342 IP address blocks: 37.156.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6b:9c:cf:97:d7:8f:94:13:87:0e:a1:e2:6f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef8b529649eebca0213114ad2d34db7d3934daf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:11:85:cb:46:92:2b:92:c0:02:09:c3:85: ce:59:4c:8a:cc:e6:7f:14:49:c0:d0:ec:e8:d8:45: eb:aa:41:9a:68:0a:6c:23:ba:44:e7:28:0c:dc:14: ca:fa:be:07:7b:d8:a9:e7:62:14:7d:c4:08:50:50: 69:3f:7a:e0:32:d7:90:13:a7:19:79:ae:8b:6c:eb: cf:63:76:bd:6e:67:3f:01:70:2a:69:47:d4:60:ce: cd:23:7f:9e:e2:b0:b6:fb:85:ce:d1:3a:86:d7:88: ec:eb:70:a2:d0:17:c1:ab:34:f4:57:45:25:33:2a: c8:b8:aa:d8:f4:3f:02:1f:e0:37:96:71:aa:5f:1b: a9:0f:44:7a:74:07:a8:5a:32:33:50:ff:6c:e8:6d: 8e:7f:e7:69:a0:43:65:d9:e9:58:4b:03:46:48:a4: 59:11:0d:fb:21:b7:f7:7c:86:a9:89:ee:5c:bb:18: c3:66:86:c2:30:c9:89:f4:e5:c7:76:b7:f4:08:33: af:ee:33:3c:14:4b:ff:a5:38:41:5a:a8:dc:ec:78: 3e:51:8b:77:0a:65:90:98:5d:6c:a4:e6:b6:24:2e: c4:8c:2b:60:59:f0:9a:ed:66:7f:4a:a3:96:24:17: c4:b6:a3:49:b1:88:c0:cf:70:95:28:69:59:e3:14: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8B:52:96:49:EE:BC:A0:21:31:14:AD:2D:34:DB:7D:39:34:DA:F5 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/74tSlknuvKAhMRStLTTbfTk02vU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.36.0/24 Signature Algorithm: sha256WithRSAEncryption 02:81:8a:f9:62:48:63:e9:e9:1c:2e:3f:74:34:8b:65:9c:ab: 7f:2f:e2:ec:53:9e:b9:a8:b8:63:c2:84:da:d2:2e:8a:a3:13: 53:80:eb:79:92:8b:c8:7d:ea:84:3e:2f:bd:3e:11:56:8f:93: 1e:d6:6c:e7:05:af:52:78:87:54:67:00:6e:97:c5:97:90:28: dd:40:dc:6d:b3:03:62:13:0e:1f:58:bd:50:6e:f7:c1:48:ad: 44:5e:58:dd:c4:99:9f:e3:f9:e1:7f:cc:2c:b3:80:4f:2a:51: 07:0d:71:d1:d3:de:41:65:59:22:d0:af:73:f5:02:08:98:77: 45:54:58:8d:e5:7e:8a:23:9b:85:e3:6d:4e:93:49:fc:2b:d2: da:83:2c:41:20:0c:c8:70:04:a1:18:06:a1:4f:4a:8a:ef:8c: 0e:9b:6f:6d:14:35:ee:22:22:da:07:81:fd:d9:65:32:d5:65: 31:b8:0f:6d:d3:36:bb:34:6b:f8:ad:f4:9c:09:24:c4:89:b6: 5f:38:74:00:09:c6:a1:52:51:35:50:14:44:7b:aa:54:77:4b: 6a:3a:7b:e4:56:2d:95:dc:ac:b1:04:c6:48:90:7f:df:e9:83: 7a:31:f8:22:b9:4e:3a:46:e7:ef:69:3b:8b:bd:05:fe:f6:bd: 19:bf:75:64 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWucz5fXj5QThw6h4m/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjhiNTI5NjQ5ZWViY2EwMjEzMTE0YWQyZDM0ZGI3ZDM5MzRkYWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE8RhctGkiuSwAIJw4XOWUyKzOZ/ FEnA0Ozo2EXrqkGaaApsI7pE5ygM3BTK+r4He9ip52IUfcQIUFBpP3rgMteQE6cZ ea6LbOvPY3a9bmc/AXAqaUfUYM7NI3+e4rC2+4XO0TqG14js63Ci0BfBqzT0V0Ul MyrIuKrY9D8CH+A3lnGqXxupD0R6dAeoWjIzUP9s6G2Of+dpoENl2elYSwNGSKRZ EQ37Ibf3fIapie5cuxjDZobCMMmJ9OXHdrf0CDOv7jM8FEv/pThBWqjc7Hg+UYt3 CmWQmF1spOa2JC7EjCtgWfCa7WZ/SqOWJBfEtqNJsYjAz3CVKGlZ4xTxSQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFO+LUpZJ7rygITEUrS002305NNr1MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzc0dFNsa251dktBaE1SU3RMVFRiZlRrMDJ2VS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAlnCQw DQYJKoZIhvcNAQELBQADggEBAAKBivliSGPp6RwuP3Q0i2Wcq38v4uxTnrmouGPC hNrSLoqjE1OA63mSi8h96oQ+L70+EVaPkx7WbOcFr1J4h1RnAG6XxZeQKN1A3G2z A2ITDh9YvVBu98FIrUReWN3EmZ/j+eF/zCyzgE8qUQcNcdHT3kFlWSLQr3P1AgiY d0VUWI3lfoojm4XjbU6TSfwr0tqDLEEgDMhwBKEYBqFPSorvjA6bb20UNe4iItoH gf3ZZTLVZTG4D23TNrs0a/it9JwJJMSJtl84dAAJxqFSUTVQFER7qlR3S2o6e+RW LZXcrLEExkiQf9/pg3ox+CK5TjpG5+9pO4u9Bf72vRm/dWQ= -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:03 2026 by rpki-client