This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/mI5H_XcAKrhfTVVlAJF7h1ACiLU.roa File: mI5H_XcAKrhfTVVlAJF7h1ACiLU.roa (raw, json) Hash identifier: M+cnkCbpwUSVeDkZOpqH/x6dTTigBQw7I8bx8zhShTQ= Subject key identifier: 98:8E:47:FD:77:00:2A:B8:5F:4D:55:65:00:91:7B:87:50:02:88:B5 Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Certificate serial: 019B7EA4B1B597CF924622A34226C40B3B11 Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/mI5H_XcAKrhfTVVlAJF7h1ACiLU.roa Signing time: Fri 02 Jan 2026 12:18:01 +0000 ROA not before: Fri 02 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60341 IP address blocks: 37.140.252.0/24 maxlen: 24 185.200.132.0/22 maxlen: 22 185.200.132.0/23 maxlen: 23 185.200.132.0/24 maxlen: 24 185.200.133.0/24 maxlen: 24 185.200.134.0/23 maxlen: 23 185.200.134.0/24 maxlen: 24 185.200.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:b1:b5:97:cf:92:46:22:a3:42:26:c4:0b:3b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a Validity Not Before: Jan 2 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=988e47fd77002ab85f4d556500917b87500288b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:eb:9d:4a:0c:b9:7b:8e:70:d3:7b:75:cf:df: 06:bf:4c:fa:53:0c:f5:ea:db:f5:8a:11:ce:40:b0: b7:b5:d7:43:09:be:d0:48:fd:03:3e:70:7a:55:ca: 00:ac:e0:76:72:93:c0:a3:d0:84:8b:5a:64:25:41: 9e:02:03:ba:84:17:66:a6:90:a0:1f:ec:25:c9:0e: 84:2c:09:72:1d:00:ad:c0:e5:4f:2d:97:b7:3c:a1: c0:d9:2d:b4:6f:3b:61:10:75:dd:47:da:97:1c:38: 3b:d9:61:04:f3:83:ff:2e:a3:c4:b1:93:98:dd:2b: 6f:35:5a:4a:09:8a:19:ca:25:a0:53:ef:7f:6e:af: cb:67:98:4e:c5:7f:1f:56:31:a6:eb:76:85:c0:c9: 13:37:14:6b:dc:14:1b:d9:25:59:e6:bd:77:41:80: 5d:81:b6:72:e0:c3:85:70:94:2b:86:ed:6e:cf:aa: c0:47:95:a0:8e:2f:d5:1b:31:6f:89:de:c1:76:dc: e3:cd:4e:3e:e3:e7:1f:15:a3:24:9a:aa:8f:5b:59: af:66:e1:43:f6:4d:30:73:2e:11:7b:e8:33:72:10: e7:52:99:73:af:ed:0b:d8:8b:72:0e:05:f5:08:ee: 5c:b0:da:a4:2e:7e:97:28:c5:10:ac:1c:1d:da:90: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8E:47:FD:77:00:2A:B8:5F:4D:55:65:00:91:7B:87:50:02:88:B5 X509v3 Authority Key Identifier: keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/mI5H_XcAKrhfTVVlAJF7h1ACiLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.252.0/24 185.200.132.0/22 Signature Algorithm: sha256WithRSAEncryption 46:e9:33:b5:3b:7e:66:aa:04:df:4f:04:99:c3:95:a4:7f:01: c5:bd:d0:32:8c:88:7e:de:25:ed:68:34:ce:b3:73:10:72:9a: fd:64:4c:b7:0e:a1:5c:7c:9f:4f:0c:34:10:98:df:f1:a3:00: 14:bb:4a:37:c5:ad:77:63:cf:88:b4:44:ac:05:42:ef:00:c4: 18:c0:8c:a9:fa:55:f2:77:71:ab:9f:2b:35:31:8a:fc:63:d6: 13:37:6e:f8:83:06:66:06:90:15:26:2c:3f:57:c9:b9:82:9b: fa:79:d9:01:b0:95:f8:6e:5b:99:9c:d6:35:cb:4a:19:a1:ef: 63:ef:89:a7:a5:ef:f5:8f:77:b9:54:54:31:21:52:0b:b4:53: 2c:47:d9:91:61:d6:51:2e:d7:5e:02:ff:ff:f2:9b:9f:74:e3: 7c:56:be:df:95:17:7a:8b:0b:e2:76:26:60:5f:8a:1b:df:7a: aa:1a:9a:32:06:04:94:ad:ce:0e:d9:ae:22:0c:96:7d:14:15: 16:29:b3:ee:81:d6:90:25:77:2b:41:e5:45:28:96:c3:ae:3e: 90:90:7d:b9:0a:63:1a:dd:3e:66:97:10:2a:17:ab:cf:7b:2f: d4:a1:a0:26:5d:3c:c0:23:f2:ad:0a:d1:b3:2c:01:72:01:4a: 17:8a:99:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pLG1l8+SRiKjQibECzsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5 NzM2MGEwHhcNMjYwMTAyMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODhlNDdmZDc3MDAyYWI4NWY0ZDU1NjUwMDkxN2I4NzUwMDI4OGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OudSgy5e45w03t1z98Gv0z6Uwz1 6tv1ihHOQLC3tddDCb7QSP0DPnB6VcoArOB2cpPAo9CEi1pkJUGeAgO6hBdmppCg H+wlyQ6ELAlyHQCtwOVPLZe3PKHA2S20bzthEHXdR9qXHDg72WEE84P/LqPEsZOY 3StvNVpKCYoZyiWgU+9/bq/LZ5hOxX8fVjGm63aFwMkTNxRr3BQb2SVZ5r13QYBd gbZy4MOFcJQrhu1uz6rAR5Wgji/VGzFvid7BdtzjzU4+4+cfFaMkmqqPW1mvZuFD 9k0wcy4Re+gzchDnUplzr+0L2ItyDgX1CO5csNqkLn6XKMUQrBwd2pCkJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJiOR/13ACq4X01VZQCRe4dQAoi1MB8GA1UdIwQY MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt ZGVjMjFlZWZhMzhiLzEvbUk1SF9YY0FLcmhmVFZWbEFKRjdoMUFDaUxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJYz8AwQC uciEMA0GCSqGSIb3DQEBCwUAA4IBAQBG6TO1O35mqgTfTwSZw5WkfwHFvdAyjIh+ 3iXtaDTOs3MQcpr9ZEy3DqFcfJ9PDDQQmN/xowAUu0o3xa13Y8+ItESsBULvAMQY wIyp+lXyd3Grnys1MYr8Y9YTN274gwZmBpAVJiw/V8m5gpv6edkBsJX4bluZnNY1 y0oZoe9j74mnpe/1j3e5VFQxIVILtFMsR9mRYdZRLtdeAv//8pufdON8Vr7flRd6 iwvidiZgX4ob33qqGpoyBgSUrc4O2a4iDJZ9FBUWKbPugdaQJXcrQeVFKJbDrj6Q kH25CmMa3T5mlxAqF6vPey/UoaAmXTzAI/KtCtGzLAFyAUoXipn1 -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:40 2026 by rpki-client