This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/A37YRq5ARcro_Wa_UX0mLafBVTU.roa File: A37YRq5ARcro_Wa_UX0mLafBVTU.roa (raw, json) Hash identifier: b3LnxGFdg7FppXUuIFUgTFfhoVx+NkVc2K3DEkAK+KY= Subject key identifier: 03:7E:D8:46:AE:40:45:CA:E8:FD:66:BF:51:7D:26:2D:A7:C1:55:35 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B7834480F55C70427DAF675468B0CA3DD Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/A37YRq5ARcro_Wa_UX0mLafBVTU.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23961 IP address blocks: 194.104.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:48:0f:55:c7:04:27:da:f6:75:46:8b:0c:a3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=037ed846ae4045cae8fd66bf517d262da7c15535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:ce:b4:12:07:d2:42:c2:45:5e:76:fe:09: 19:7c:ff:80:e6:b8:ca:88:aa:0f:a4:2b:4d:5e:82: e6:84:c9:90:ad:9c:a5:0f:65:03:37:37:78:b6:2e: b3:0f:49:d2:35:c8:c0:96:c0:f7:bc:fe:92:9f:3b: 1c:7a:e0:84:88:fb:b1:d7:bc:c1:a6:4b:c8:a6:a3: 5e:79:de:1d:ea:aa:ca:d3:67:df:b7:3f:a4:aa:46: 8c:1b:ab:51:5a:ea:a9:b1:3b:7b:48:a4:f9:45:0e: f1:6e:9d:b0:0f:93:21:75:42:0f:1a:ef:79:e3:29: 61:f2:59:ac:12:b0:48:66:11:2d:f2:2c:6f:c8:a8: fe:25:7a:b8:8c:d4:73:aa:07:88:12:02:95:27:74: af:c8:3c:08:99:0f:17:35:fe:37:4c:f5:55:62:7b: d3:d1:3f:30:46:dd:f4:41:8e:7a:41:dd:b1:62:71: d7:e0:68:52:a6:23:65:db:6f:ef:08:a1:c9:84:c3: a9:7a:02:8a:82:da:cc:b0:a7:7b:2c:44:08:f1:89: b1:fe:07:f5:59:04:fd:b2:45:9e:c7:6d:19:dc:f3: fe:f8:00:ef:b2:77:f1:72:91:53:e9:4f:87:f2:16: b9:a1:90:73:6b:a2:f2:0b:22:36:a9:df:f4:5e:92: c2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7E:D8:46:AE:40:45:CA:E8:FD:66:BF:51:7D:26:2D:A7:C1:55:35 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/A37YRq5ARcro_Wa_UX0mLafBVTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.146.0/23 Signature Algorithm: sha256WithRSAEncryption 74:7b:08:6e:1a:0c:10:3e:43:b5:24:41:5e:d9:f1:e7:e6:06: c7:53:75:6d:90:ea:59:ed:34:5b:ad:5e:0e:37:4d:4f:d3:c0: 8d:b2:3e:cf:99:5a:03:32:55:57:d8:5b:7f:b0:52:73:0d:10: cf:14:df:3e:33:8b:8c:8f:0f:f2:dd:b5:5f:6c:2c:97:f6:43: ee:45:09:a9:17:8b:b3:e3:bb:4f:41:1e:a9:d0:fa:c4:c3:8c: b1:82:5b:7d:c1:64:af:23:7b:a6:e1:e9:f7:65:6f:8d:89:8f: 19:38:d5:a0:86:f3:e8:01:fa:23:cf:0d:ad:6b:67:86:be:0e: b7:61:0d:da:11:c0:74:0e:fc:31:dc:35:f5:b3:5c:99:2b:66: d6:05:cb:a0:e1:ec:14:eb:0e:ac:15:bc:a9:2f:37:0a:f5:c8: 86:b5:95:59:03:e6:00:84:fd:aa:28:f3:70:b8:d8:c9:46:f3: 0e:d2:04:74:54:43:96:96:67:c2:19:7a:f8:4a:c9:8c:34:82: 93:b8:73:a2:6f:0b:15:91:06:ec:79:44:a1:e4:01:3f:61:61: b3:be:fc:b1:cb:8c:36:29:5f:b8:67:b5:80:c9:c3:60:34:8c: d2:a0:35:fd:98:aa:8e:12:db:9c:15:5b:52:90:54:ba:87:b6: 1d:b4:b8:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEgPVccEJ9r2dUaLDKPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzdlZDg0NmFlNDA0NWNhZThmZDY2YmY1MTdkMjYyZGE3YzE1NTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX/OtBIH0kLCRV52/gkZfP+A5rjK iKoPpCtNXoLmhMmQrZylD2UDNzd4ti6zD0nSNcjAlsD3vP6SnzsceuCEiPux17zB pkvIpqNeed4d6qrK02fftz+kqkaMG6tRWuqpsTt7SKT5RQ7xbp2wD5MhdUIPGu95 4ylh8lmsErBIZhEt8ixvyKj+JXq4jNRzqgeIEgKVJ3SvyDwImQ8XNf43TPVVYnvT 0T8wRt30QY56Qd2xYnHX4GhSpiNl22/vCKHJhMOpegKKgtrMsKd7LEQI8Ymx/gf1 WQT9skWex20Z3PP++ADvsnfxcpFT6U+H8ha5oZBza6LyCyI2qd/0XpLC6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAN+2EauQEXK6P1mv1F9Ji2nwVU1MB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvQTM3WVJxNUFSY3JvX1dhX1VYMG1MYWZCVlRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmiSMA0G CSqGSIb3DQEBCwUAA4IBAQB0ewhuGgwQPkO1JEFe2fHn5gbHU3VtkOpZ7TRbrV4O N01P08CNsj7PmVoDMlVX2Ft/sFJzDRDPFN8+M4uMjw/y3bVfbCyX9kPuRQmpF4uz 47tPQR6p0PrEw4yxglt9wWSvI3um4en3ZW+NiY8ZONWghvPoAfojzw2ta2eGvg63 YQ3aEcB0Dvwx3DX1s1yZK2bWBcug4ewU6w6sFbypLzcK9ciGtZVZA+YAhP2qKPNw uNjJRvMO0gR0VEOWlmfCGXr4SsmMNIKTuHOibwsVkQbseUSh5AE/YWGzvvyxy4w2 KV+4Z7WAycNgNIzSoDX9mKqOEtucFVtSkFS6h7YdtLgF -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:16 2026 by rpki-client