This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/onnN0N2kmyAv5mJQx3de7ZXichk.roa File: onnN0N2kmyAv5mJQx3de7ZXichk.roa (raw, json) Hash identifier: 06UMIq54P6Htrv1qVFN6DTLZlwH5A0msAobKPn8/f50= Subject key identifier: A2:79:CD:D0:DD:A4:9B:20:2F:E6:62:50:C7:77:5E:ED:95:E2:72:19 Certificate issuer: /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47 Certificate serial: 019B7FF28571D993EEB4D850F17DBB29C933 Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/onnN0N2kmyAv5mJQx3de7ZXichk.roa Signing time: Fri 02 Jan 2026 18:22:38 +0000 ROA not before: Fri 02 Jan 2026 18:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25291 IP address blocks: 37.44.0.0/21 maxlen: 24 37.49.152.0/21 maxlen: 24 37.123.104.0/21 maxlen: 24 77.247.80.0/21 maxlen: 24 109.68.224.0/21 maxlen: 24 147.93.208.0/22 maxlen: 24 151.252.40.0/21 maxlen: 24 176.74.56.0/21 maxlen: 24 185.46.136.0/22 maxlen: 24 185.54.232.0/22 maxlen: 24 185.56.104.0/23 maxlen: 24 185.56.128.0/21 maxlen: 24 195.192.128.0/18 maxlen: 24 2a00:13c8::/32 maxlen: 48 2a00:7fc0::/32 maxlen: 48 2a00:7fc0::/33 maxlen: 48 2a04:d480::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:85:71:d9:93:ee:b4:d8:50:f1:7d:bb:29:c9:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47 Validity Not Before: Jan 2 18:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a279cdd0dda49b202fe66250c7775eed95e27219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:5e:16:67:cb:97:08:70:46:33:80:d7:7d: 61:88:66:ca:a3:ae:ee:f9:89:78:66:0e:2f:a5:d9: 6c:7b:9e:5b:df:bd:a8:ea:40:e3:ae:d6:23:4f:b7: 28:ca:bf:97:a4:cb:1d:b7:52:2c:ca:42:1d:11:d9: 80:11:00:c3:bf:82:df:6a:99:30:50:74:80:3d:23: a8:a1:17:da:b9:50:76:1b:b6:39:32:bb:c8:d3:b8: a8:d4:d4:8c:3a:66:60:7a:d0:3c:a3:d4:06:eb:c5: d3:ba:0b:82:38:c0:f2:31:0f:e2:60:68:64:5a:94: 23:4a:6e:7b:35:73:83:47:98:8b:60:b4:9a:34:40: 4a:11:1b:9e:2d:86:5a:44:43:3f:2d:bb:c2:4f:f0: 78:96:1f:18:54:9e:2a:87:fa:69:66:77:54:9a:b1: 25:9d:23:6d:7e:09:68:6a:e8:1f:52:72:fa:ab:cd: a6:d3:fc:98:0b:67:f0:31:34:6d:21:f9:6f:7b:86: 4a:d8:e3:a3:7c:f3:11:8a:eb:0b:aa:ae:4a:e4:af: c2:4b:cf:61:85:54:ca:a5:e6:43:f0:c5:d7:96:19: 6a:30:3c:65:58:17:6d:92:41:9b:66:f8:ae:68:91: d5:0c:0b:95:87:3d:69:3e:2d:bc:d6:4a:2c:23:1f: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:79:CD:D0:DD:A4:9B:20:2F:E6:62:50:C7:77:5E:ED:95:E2:72:19 X509v3 Authority Key Identifier: keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/onnN0N2kmyAv5mJQx3de7ZXichk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.0.0/21 37.49.152.0/21 37.123.104.0/21 77.247.80.0/21 109.68.224.0/21 147.93.208.0/22 151.252.40.0/21 176.74.56.0/21 185.46.136.0/22 185.54.232.0/22 185.56.104.0/23 185.56.128.0/21 195.192.128.0/18 IPv6: 2a00:13c8::/32 2a00:7fc0::/32 2a04:d480::/29 Signature Algorithm: sha256WithRSAEncryption 26:89:d4:a0:b0:c7:f4:58:49:2c:37:a2:d4:80:7e:39:b1:05: f7:ae:6e:b7:ac:d0:fd:74:05:50:c5:28:78:16:34:ea:91:48: 8d:11:ed:db:6e:4b:92:fd:d0:ee:78:fc:4c:17:c8:3e:ed:c3: 60:9a:65:78:93:3a:18:f2:7c:c9:fe:b2:d4:ad:ab:02:2d:ae: 25:42:fa:f7:51:47:2e:79:a9:2c:19:ae:68:4e:08:38:82:14: da:56:47:6e:30:a5:b0:a5:89:b8:86:ca:88:a8:66:30:e0:a9: c1:c3:5b:02:b2:4f:8b:c1:8e:f4:d5:51:d3:b5:d2:98:48:24: f2:f7:da:fc:15:44:58:ae:f1:33:f9:8d:07:e3:fd:f0:53:c2: 47:56:a6:af:02:e7:fa:bb:7e:bc:6c:49:b5:bb:e4:d1:ae:f9: d9:be:f5:d7:fb:32:c3:3a:57:f6:70:dc:fa:c9:ad:69:8d:e4: 1e:11:40:07:b6:4b:96:a5:0b:ce:72:1a:8b:95:80:25:e4:fd: 6a:00:09:4e:42:fd:eb:5b:9f:49:6b:1c:82:c8:16:f0:75:46: 8f:2b:2a:5b:55:9f:30:d3:5c:43:76:2c:cc:82:51:23:6a:ab: a1:44:ec:51:ff:05:45:8a:66:49:68:93:ba:7b:fb:d1:75:8d: 1f:d6:1f:c5 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgISAZt/8oVx2ZPutNhQ8X27KckzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYzI2YWJjOWUwNmMxYWZlZjliNWZkMmRhNDA0MTJlN2Fl ZTZiNDcwHhcNMjYwMTAyMTgyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjc5Y2RkMGRkYTQ5YjIwMmZlNjYyNTBjNzc3NWVlZDk1ZTI3MjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfheFmfLlwhwRjOA131hiGbKo67u +Yl4Zg4vpdlse55b372o6kDjrtYjT7coyr+XpMsdt1IsykIdEdmAEQDDv4Lfapkw UHSAPSOooRfauVB2G7Y5MrvI07io1NSMOmZgetA8o9QG68XTuguCOMDyMQ/iYGhk WpQjSm57NXODR5iLYLSaNEBKERueLYZaREM/LbvCT/B4lh8YVJ4qh/ppZndUmrEl nSNtfgloaugfUnL6q82m0/yYC2fwMTRtIflve4ZK2OOjfPMRiusLqq5K5K/CS89h hVTKpeZD8MXXlhlqMDxlWBdtkkGbZviuaJHVDAuVhz1pPi281kosIx/uOQIDAQAB o4ICbzCCAmswHQYDVR0OBBYEFKJ5zdDdpJsgL+ZiUMd3Xu2V4nIZMB8GA1UdIwQY MBaAFHLCaryeBsGv75tf0tpAQS567mtHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMt Y2Q3ZDYxOTEzMjg4LzEvb25uTjBOMmtteUF2NW1KUXgzZGU3WlhpY2hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMtY2Q3ZDYxOTEzMjg4 LzEvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwVAQCAAEwTgMEAyUsAAME AyUxmAMEAyV7aAMEA033UAMEA21E4AMEApNd0AMEA5f8KAMEA7BKOAMEArkuiAME Ark26AMEAbk4aAMEA7k4gAMEBsPAgDAbBAIAAjAVAwUAKgATyAMFACoAf8ADBQMq BNSAMA0GCSqGSIb3DQEBCwUAA4IBAQAmidSgsMf0WEksN6LUgH45sQX3rm63rND9 dAVQxSh4FjTqkUiNEe3bbkuS/dDuePxMF8g+7cNgmmV4kzoY8nzJ/rLUrasCLa4l Qvr3UUcueaksGa5oTgg4ghTaVkduMKWwpYm4hsqIqGYw4KnBw1sCsk+LwY701VHT tdKYSCTy99r8FURYrvEz+Y0H4/3wU8JHVqavAuf6u368bEm1u+TRrvnZvvXX+zLD Olf2cNz6ya1pjeQeEUAHtkuWpQvOchqLlYAl5P1qAAlOQv3rW59JaxyCyBbwdUaP KypbVZ8w01xDdizMglEjaquhROxR/wVFimZJaJO6e/vRdY0f1h/F -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:19 2026 by rpki-client