This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/cqRNRYld8xc0CoCi2GIRdSN1pec.roa File: cqRNRYld8xc0CoCi2GIRdSN1pec.roa (raw, json) Hash identifier: UvIZReHdG2/zwr7aSyXObjS9yFZjBI/EHczHCt3scrg= Subject key identifier: 72:A4:4D:45:89:5D:F3:17:34:0A:80:A2:D8:62:11:75:23:75:A5:E7 Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641 Certificate serial: 019B7E389A13134505239739D64E4FA4D727 Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/cqRNRYld8xc0CoCi2GIRdSN1pec.roa Signing time: Fri 02 Jan 2026 10:19:57 +0000 ROA not before: Fri 02 Jan 2026 10:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198558 IP address blocks: 37.0.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9a:13:13:45:05:23:97:39:d6:4e:4f:a4:d7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641 Validity Not Before: Jan 2 10:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72a44d45895df317340a80a2d86211752375a5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:dd:fc:79:2f:71:03:66:9c:d7:c3:e2:b3: bb:2b:43:46:bb:9b:ea:a3:5c:7e:ca:cd:6f:a6:c1: 7f:2f:74:3d:b6:a2:c7:25:7f:38:a5:23:36:58:02: 85:1c:2f:5e:e6:e3:ea:7d:b6:58:d0:b9:ee:9a:19: 1a:04:71:ec:d2:c6:ca:e0:46:de:51:12:83:f5:6e: 4f:28:cf:42:3f:7b:5a:be:4b:62:fb:37:04:a7:c3: 57:2f:d8:11:57:25:8d:2e:71:1c:e6:91:e1:cb:da: 81:15:8e:94:e8:d9:1d:ce:b9:be:b6:47:69:e9:dd: 32:7f:6d:5a:ee:b8:31:d2:a0:32:87:b9:8f:9a:ab: 9b:8a:bb:0d:1c:86:de:7a:e1:1e:17:bc:c0:68:fc: e4:4a:0a:e8:3c:5d:c4:5e:6c:99:24:37:df:7d:d0: ed:ed:53:6f:98:bc:58:26:58:d7:65:de:40:f6:fb: b3:62:32:03:0c:01:b7:57:96:65:7e:3c:76:99:92: 46:da:ad:16:77:55:ce:b3:c5:a6:c6:6b:9c:69:be: a3:a5:c5:9a:25:b8:4b:96:2e:17:34:33:5f:05:d1: 5a:87:df:0c:95:57:97:75:30:e4:5e:94:0f:4e:98: ba:20:38:3b:68:da:27:fe:b1:18:b2:25:4c:45:e7: 4c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A4:4D:45:89:5D:F3:17:34:0A:80:A2:D8:62:11:75:23:75:A5:E7 X509v3 Authority Key Identifier: keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/cqRNRYld8xc0CoCi2GIRdSN1pec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.112.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:5a:c6:cc:6d:b1:54:17:cf:18:3f:d7:cb:08:f4:26:cc:93: 4d:d0:03:36:81:3f:1a:64:cd:a9:69:4f:09:2c:49:78:b8:df: 2b:7f:5a:e7:de:0a:9c:24:b7:f2:bb:39:db:2f:ed:99:e1:2b: 3e:09:5f:00:c4:06:c8:c5:ae:73:fc:26:fa:e0:99:0b:a6:d0: f5:47:b5:aa:a6:d7:fd:b6:d6:da:73:58:cd:58:57:6f:d8:e2: 0b:7f:f4:6d:82:6d:c6:87:8b:55:6b:f0:a3:cd:1b:e3:f9:cd: b5:0f:e0:a4:5f:06:9f:18:49:23:86:65:79:26:4e:bc:a6:0e: f2:33:4f:01:a5:4c:e4:75:77:18:7a:c9:fb:cf:32:3e:b8:22: d6:52:2d:c1:68:5a:bf:7c:73:dc:bb:49:87:4e:54:bd:68:d3: b3:2d:b0:3c:e2:04:7e:88:8a:71:07:f2:2a:11:99:fb:00:ef: 22:9d:45:df:53:66:8f:cc:55:54:cb:b9:00:fb:32:e8:20:7f: 68:58:2c:1c:7d:65:53:c8:89:38:a0:27:03:0b:4a:e3:be:65: 16:3e:1c:32:7f:dc:a7:f6:b0:b9:15:a1:c7:b1:64:7a:09:a9: b2:95:c2:0c:b9:29:b8:2a:56:69:dd:10:f4:98:44:3e:a7:c3: 5e:ec:ce:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJoTE0UFI5c51k5PpNcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDI3OGJiZTVmYzJkZjczMjAzMmNkYjIzNTk2MmRiYWJl MGY2NDEwHhcNMjYwMTAyMTAxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmE0NGQ0NTg5NWRmMzE3MzQwYTgwYTJkODYyMTE3NTIzNzVhNWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWjd/HkvcQNmnNfD4rO7K0NGu5vq o1x+ys1vpsF/L3Q9tqLHJX84pSM2WAKFHC9e5uPqfbZY0LnumhkaBHHs0sbK4Ebe URKD9W5PKM9CP3tavkti+zcEp8NXL9gRVyWNLnEc5pHhy9qBFY6U6Nkdzrm+tkdp 6d0yf21a7rgx0qAyh7mPmqubirsNHIbeeuEeF7zAaPzkSgroPF3EXmyZJDfffdDt 7VNvmLxYJljXZd5A9vuzYjIDDAG3V5Zlfjx2mZJG2q0Wd1XOs8Wmxmucab6jpcWa JbhLli4XNDNfBdFah98MlVeXdTDkXpQPTpi6IDg7aNon/rEYsiVMRedMJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKkTUWJXfMXNAqAothiEXUjdaXnMB8GA1UdIwQY MBaAFAjSeLvl/C33MgMs2yNZYtur4PZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUt ZWY0NmRkZWVhYmY0LzEvY3FSTlJZbGQ4eGMwQ29DaTJHSVJkU04xcGVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC83MDNmYzUtNDA2Yy00MTIxLWFiOWUtZWY0NmRkZWVhYmY0 LzEvQ05KNHUtWDhMZmN5QXl6YkkxbGkyNnZnOWtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJQBwMA0G CSqGSIb3DQEBCwUAA4IBAQANWsbMbbFUF88YP9fLCPQmzJNN0AM2gT8aZM2paU8J LEl4uN8rf1rn3gqcJLfyuznbL+2Z4Ss+CV8AxAbIxa5z/Cb64JkLptD1R7Wqptf9 ttbac1jNWFdv2OILf/Rtgm3Gh4tVa/CjzRvj+c21D+CkXwafGEkjhmV5Jk68pg7y M08BpUzkdXcYesn7zzI+uCLWUi3BaFq/fHPcu0mHTlS9aNOzLbA84gR+iIpxB/Iq EZn7AO8inUXfU2aPzFVUy7kA+zLoIH9oWCwcfWVTyIk4oCcDC0rjvmUWPhwyf9yn 9rC5FaHHsWR6CamylcIMuSm4KlZp3RD0mEQ+p8Ne7M6f -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:00 2026 by rpki-client