This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/A2tumyt5iAn1tKDL-XuxCzhNvZ4.roa File: A2tumyt5iAn1tKDL-XuxCzhNvZ4.roa (raw, json) Hash identifier: ZJ8TUlGdBNBoCbzk5y55t6BbjVatJaYuCVCQyVMAmI0= Subject key identifier: 03:6B:6E:9B:2B:79:88:09:F5:B4:A0:CB:F9:7B:B1:0B:38:4D:BD:9E Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Certificate serial: 019B7EA4B242F3C94030ECE9EC4B54803A07 Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/A2tumyt5iAn1tKDL-XuxCzhNvZ4.roa Signing time: Fri 02 Jan 2026 12:18:01 +0000 ROA not before: Fri 02 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200023 IP address blocks: 37.140.252.0/24 maxlen: 24 185.200.132.0/22 maxlen: 22 194.61.128.0/22 maxlen: 22 194.61.128.0/24 maxlen: 24 194.61.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:b2:42:f3:c9:40:30:ec:e9:ec:4b:54:80:3a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Validity Not Before: Jan 2 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=036b6e9b2b798809f5b4a0cbf97bb10b384dbd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:60:0f:dd:28:78:35:dc:42:5a:f4:f0:a0: a2:4e:d3:fe:5e:f4:c3:ee:3a:61:b8:03:7d:eb:d7: 47:7f:c6:99:a7:b5:0f:3a:35:53:3e:7b:a7:8e:bb: 22:47:3b:7d:e6:be:ca:55:da:ca:13:23:78:9b:4b: 8c:59:da:5e:38:b3:9c:61:50:ad:c1:a6:21:56:1d: 77:8f:92:30:79:95:a1:1f:72:da:1a:0a:45:fc:de: 3f:67:bf:51:7a:cd:22:2a:36:1e:93:ca:60:27:c6: 80:f7:11:57:f6:51:b8:57:ed:f9:36:80:35:55:f8: 48:4a:c5:04:c4:f5:a2:15:78:21:ca:20:b6:b2:fc: 5a:18:35:09:38:c1:d2:99:76:69:a7:ab:33:4e:75: fa:75:eb:e3:b7:37:0a:03:c7:f9:5c:63:19:48:f1: db:68:c1:9c:b4:c2:7c:25:3b:b2:1c:f7:e6:1e:7e: e4:99:d2:e2:80:de:df:a3:d2:77:ad:1f:9c:88:d5: 9e:84:62:66:f5:7a:f6:1f:a2:9a:df:9f:5a:9f:28: ee:28:14:b2:26:6a:b7:b5:74:65:98:4a:a0:e6:f8: 06:f6:1e:43:8d:2b:79:45:77:05:58:ae:8d:84:f8: 37:6f:a2:37:e1:2f:c9:d7:ac:d3:91:ae:ba:1c:3c: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6B:6E:9B:2B:79:88:09:F5:B4:A0:CB:F9:7B:B1:0B:38:4D:BD:9E X509v3 Authority Key Identifier: keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/A2tumyt5iAn1tKDL-XuxCzhNvZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.252.0/24 185.200.132.0/22 194.61.128.0/22 Signature Algorithm: sha256WithRSAEncryption a6:92:72:a9:bb:d0:af:90:99:1c:4a:f2:3e:d1:db:78:db:49: 75:88:00:47:8b:17:69:c7:37:ab:74:60:89:d9:4a:9f:3d:66: 1f:7c:25:f3:ac:c3:3a:48:6f:b1:06:70:97:5b:3a:71:dd:ab: d1:ad:05:35:7d:b2:62:b8:a7:4a:75:81:f5:3c:cf:f3:74:cc: 7f:69:bd:6a:e1:0b:ad:41:4a:fc:17:7a:54:ad:5c:92:7c:c9: e9:1f:c6:7f:fa:97:38:d3:70:f3:7b:d0:48:04:79:db:66:c8: 25:bf:96:2c:d7:1e:c2:38:15:49:66:aa:14:5d:6e:cc:99:28: 87:9a:5e:80:7f:b6:ca:88:65:1b:ea:de:b9:66:a0:3a:18:60: 49:83:24:68:ce:86:30:f1:87:6b:9d:8b:30:e4:15:20:e5:91: bb:88:61:6f:d5:ed:b7:f4:e9:e0:54:9e:0a:9f:f2:82:3c:3a: 0f:91:e7:0b:40:d5:35:e0:4e:c1:7c:32:aa:85:9e:b1:f7:9a: b1:f8:45:14:df:24:78:38:e5:0a:dc:2e:ee:dc:ab:06:a0:6b: 32:34:39:72:77:e4:36:31:d4:c9:bd:3e:ea:53:54:e7:56:77: 4f:f6:10:74:d8:3c:85:83:c6:1c:7d:00:16:d7:51:e5:c2:49: 61:9a:2f:3c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pLJC88lAMOzp7EtUgDoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5 NzM2MGEwHhcNMjYwMTAyMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzZiNmU5YjJiNzk4ODA5ZjViNGEwY2JmOTdiYjEwYjM4NGRiZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh1gD90oeDXcQlr08KCiTtP+XvTD 7jphuAN969dHf8aZp7UPOjVTPnunjrsiRzt95r7KVdrKEyN4m0uMWdpeOLOcYVCt waYhVh13j5IweZWhH3LaGgpF/N4/Z79Res0iKjYek8pgJ8aA9xFX9lG4V+35NoA1 VfhISsUExPWiFXghyiC2svxaGDUJOMHSmXZpp6szTnX6devjtzcKA8f5XGMZSPHb aMGctMJ8JTuyHPfmHn7kmdLigN7fo9J3rR+ciNWehGJm9Xr2H6Ka359anyjuKBSy Jmq3tXRlmEqg5vgG9h5DjSt5RXcFWK6NhPg3b6I34S/J16zTka66HDz+2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFANrbpsreYgJ9bSgy/l7sQs4Tb2eMB8GA1UdIwQY MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt ZGVjMjFlZWZhMzhiLzEvQTJ0dW15dDVpQW4xdEtETC1YdXhDemhOdlo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJYz8AwQC uciEAwQCwj2AMA0GCSqGSIb3DQEBCwUAA4IBAQCmknKpu9CvkJkcSvI+0dt420l1 iABHixdpxzerdGCJ2UqfPWYffCXzrMM6SG+xBnCXWzpx3avRrQU1fbJiuKdKdYH1 PM/zdMx/ab1q4QutQUr8F3pUrVySfMnpH8Z/+pc403Dze9BIBHnbZsglv5Ys1x7C OBVJZqoUXW7MmSiHml6Af7bKiGUb6t65ZqA6GGBJgyRozoYw8YdrnYsw5BUg5ZG7 iGFv1e239OngVJ4Kn/KCPDoPkecLQNU14E7BfDKqhZ6x95qx+EUU3yR4OOUK3C7u 3KsGoGsyNDlyd+Q2MdTJvT7qU1TnVndP9hB02DyFg8YcfQAW11Hlwklhmi88 -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:38 2026 by rpki-client