This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/37uBbyL_8K4wVf0IMddFdUAnGBQ.roa File: 37uBbyL_8K4wVf0IMddFdUAnGBQ.roa (raw, json) Hash identifier: i6bxFiB9v6qhmRg29OIOVv4Is3wr/ECS4tzFDrf0dg0= Subject key identifier: DF:BB:81:6F:22:FF:F0:AE:30:55:FD:08:31:D7:45:75:40:27:18:14 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAC1CE32FC66BF4D233B75875BC1C6 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/37uBbyL_8K4wVf0IMddFdUAnGBQ.roa Signing time: Fri 02 Jan 2026 08:19:58 +0000 ROA not before: Fri 02 Jan 2026 08:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59794 IP address blocks: 2001:14e8:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:c1:ce:32:fc:66:bf:4d:23:3b:75:87:5b:c1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfbb816f22fff0ae3055fd0831d7457540271814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:5c:ba:4b:ec:b5:f8:13:ab:b6:1e:3f:bd: cc:fb:99:46:e6:6d:bb:da:5c:62:d2:18:ed:cb:52: 98:6d:4a:4b:93:ab:66:34:84:9a:f4:94:16:39:08: 65:08:4a:5e:b5:ad:0a:3b:68:ab:8e:8f:60:f6:de: ff:da:f2:c6:ef:a1:36:7c:1b:44:82:dc:c1:a5:2c: c3:4e:18:a3:b6:55:e9:a4:d3:6e:e9:74:5b:da:34: 4e:be:61:9a:c2:5b:9b:b7:eb:25:50:72:f9:b3:b3: ab:b1:1e:53:f0:8f:58:d5:05:cd:d6:3a:09:93:13: 24:80:6f:f5:2a:0d:1f:52:2c:3e:6f:d7:e1:a5:86: 0b:ce:76:3c:03:8d:ce:4d:ec:dc:57:48:6b:4f:95: 2e:cf:5c:46:55:04:cf:12:85:11:a1:fe:12:98:31: 7c:1f:65:0c:39:4f:c5:aa:57:40:fd:49:58:6c:11: a8:90:c2:dd:14:c9:5b:40:51:02:e3:89:29:c1:25: 03:98:67:7c:cb:dc:6b:97:50:e8:d8:f1:21:70:49: 01:d0:f3:44:c4:a5:6e:5f:5a:86:27:35:ac:50:f7: 88:db:4a:22:3b:cf:84:41:42:38:61:19:86:00:3e: d2:08:b2:71:13:69:0f:39:83:87:7e:44:c4:2e:be: 30:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BB:81:6F:22:FF:F0:AE:30:55:FD:08:31:D7:45:75:40:27:18:14 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/37uBbyL_8K4wVf0IMddFdUAnGBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:14e8:6::/48 Signature Algorithm: sha256WithRSAEncryption 8d:af:2f:a3:5f:12:b3:1d:c0:58:91:8e:ba:a7:29:01:71:7f: 0e:94:5f:91:1c:66:3d:aa:6a:bf:30:f4:d9:04:d5:53:29:88: 1b:ac:61:22:10:13:37:35:61:a8:5a:40:46:41:36:bb:be:61: 6e:f2:dd:ef:16:31:9a:27:fb:54:5b:89:54:20:7a:56:21:40: fd:55:17:22:07:2c:fe:81:8d:3a:9b:df:9e:39:5a:23:59:c1: fe:ff:9c:22:36:d6:24:81:5c:dd:70:c9:45:4b:52:83:66:c9: 17:a7:bf:cd:72:98:59:6c:d1:98:1d:d9:0a:35:b7:b7:78:c9: ab:e1:b8:52:a3:4e:52:7f:10:1f:03:44:e3:47:29:95:3f:e3: 91:cc:b2:e3:36:35:70:06:e8:fe:ca:d9:da:6e:78:d4:c7:41: 4b:72:00:c3:74:a6:23:d5:25:a4:1f:28:63:ba:a7:67:8f:78: f7:75:09:73:aa:6d:45:6e:63:72:8c:b7:c1:4c:6c:ce:ae:82: 6e:ca:f2:2d:c3:c9:b0:77:01:5a:32:e6:c8:f9:f0:6b:55:f3: a1:8f:0c:a1:da:11:7d:72:bb:8a:8d:1b:77:d4:0e:8e:b6:20: 8b:f9:11:0c:a7:f4:a6:90:10:7b:e1:ad:bc:94:32:0a:c6:e8: e4:ff:1f:28 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ysHOMvxmv00jO3WHW8HGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmJiODE2ZjIyZmZmMGFlMzA1NWZkMDgzMWQ3NDU3NTQwMjcxODE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskZcukvstfgTq7YeP73M+5lG5m27 2lxi0hjty1KYbUpLk6tmNISa9JQWOQhlCEpeta0KO2irjo9g9t7/2vLG76E2fBtE gtzBpSzDThijtlXppNNu6XRb2jROvmGawlubt+slUHL5s7OrsR5T8I9Y1QXN1joJ kxMkgG/1Kg0fUiw+b9fhpYYLznY8A43OTezcV0hrT5Uuz1xGVQTPEoURof4SmDF8 H2UMOU/FqldA/UlYbBGokMLdFMlbQFEC44kpwSUDmGd8y9xrl1Do2PEhcEkB0PNE xKVuX1qGJzWsUPeI20oiO8+EQUI4YRmGAD7SCLJxE2kPOYOHfkTELr4w9QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFN+7gW8i//CuMFX9CDHXRXVAJxgUMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvMzd1QmJ5TF84SzR3VmYwSU1kZEZkVUFuR0JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEU6AAG MA0GCSqGSIb3DQEBCwUAA4IBAQCNry+jXxKzHcBYkY66pykBcX8OlF+RHGY9qmq/ MPTZBNVTKYgbrGEiEBM3NWGoWkBGQTa7vmFu8t3vFjGaJ/tUW4lUIHpWIUD9VRci Byz+gY06m9+eOVojWcH+/5wiNtYkgVzdcMlFS1KDZskXp7/NcphZbNGYHdkKNbe3 eMmr4bhSo05SfxAfA0TjRymVP+ORzLLjNjVwBuj+ytnabnjUx0FLcgDDdKYj1SWk Hyhjuqdnj3j3dQlzqm1FbmNyjLfBTGzOroJuyvItw8mwdwFaMubI+fBrVfOhjwyh 2hF9cruKjRt31A6OtiCL+REMp/SmkBB74a28lDIKxujk/x8o -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:24 2026 by rpki-client