This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/Stpleb6OTPqMfH86_X0X4TcY0xw.roa File: Stpleb6OTPqMfH86_X0X4TcY0xw.roa (raw, json) Hash identifier: vOMEgiat3XRiljAMfWkhr6z+Hs+WLCtckYdZXT9W3aE= Subject key identifier: 4A:DA:65:79:BE:8E:4C:FA:8C:7C:7F:3A:FD:7D:17:E1:37:18:D3:1C Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377 Certificate serial: 019B7DCA660AC81A52750EDEA99AE02FFDC4 Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/Stpleb6OTPqMfH86_X0X4TcY0xw.roa Signing time: Fri 02 Jan 2026 08:19:34 +0000 ROA not before: Fri 02 Jan 2026 08:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31472 IP address blocks: 37.157.48.0/21 maxlen: 21 84.247.32.0/22 maxlen: 22 89.35.164.0/22 maxlen: 22 149.19.176.0/22 maxlen: 22 185.2.76.0/22 maxlen: 22 185.2.76.0/23 maxlen: 23 185.34.80.0/22 maxlen: 22 185.60.4.0/22 maxlen: 22 185.61.88.0/22 maxlen: 22 185.86.20.0/22 maxlen: 22 185.91.40.0/22 maxlen: 22 185.91.41.0/24 maxlen: 24 195.206.184.0/21 maxlen: 21 2a00:b840::/29 maxlen: 29 2a00:b840:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:66:0a:c8:1a:52:75:0e:de:a9:9a:e0:2f:fd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377 Validity Not Before: Jan 2 08:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ada6579be8e4cfa8c7c7f3afd7d17e13718d31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:f5:2c:52:14:da:b1:18:f4:6d:18:b5:5e: 35:71:c7:ed:b6:bc:0b:9c:5b:d8:44:15:d6:66:63: 02:66:ae:01:77:e8:31:7d:e9:2d:21:1c:64:5c:1d: 17:f6:ab:a7:fb:b2:27:6f:07:28:e1:4e:df:1a:19: 9c:9f:00:89:6c:41:6b:7a:fa:d7:ee:0f:c1:dc:60: 68:93:36:79:af:3d:ad:fa:2c:05:b6:88:6b:ed:24: 70:b5:9f:91:0e:2d:a4:23:0b:17:bc:3b:8b:73:c2: 5b:18:04:21:f4:f2:ea:25:0b:b2:08:69:3d:56:56: 79:29:09:0b:40:1e:cf:16:59:4f:54:b3:c2:cb:15: 05:6d:3f:1c:b5:ad:5f:0f:ea:3c:10:84:cf:26:e8: 74:2d:b4:96:a6:75:49:a3:9e:eb:77:18:a8:31:d0: 15:31:2c:d4:5a:06:39:86:c0:24:80:4b:43:f8:74: fb:7b:b9:be:bf:0d:36:91:9a:0b:7c:5d:8a:88:d0: a2:3c:fd:64:11:03:c9:fe:1b:a2:c2:f2:8e:ad:1d: 35:1f:04:f3:d8:49:c2:29:a7:c3:af:8d:b6:c4:72: 4e:60:f3:48:42:3c:5c:f5:54:83:47:cb:ba:b5:f9: b7:3d:d0:ff:e3:d3:28:6d:27:1b:f8:c5:d4:d7:a3: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DA:65:79:BE:8E:4C:FA:8C:7C:7F:3A:FD:7D:17:E1:37:18:D3:1C X509v3 Authority Key Identifier: keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/Stpleb6OTPqMfH86_X0X4TcY0xw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.48.0/21 84.247.32.0/22 89.35.164.0/22 149.19.176.0/22 185.2.76.0/22 185.34.80.0/22 185.60.4.0/22 185.61.88.0/22 185.86.20.0/22 185.91.40.0/22 195.206.184.0/21 IPv6: 2a00:b840::/29 Signature Algorithm: sha256WithRSAEncryption 41:51:2f:99:0f:2f:2d:a5:a1:c0:bc:cf:4e:9f:9f:bc:4d:5a: 82:25:6f:aa:7d:ec:fd:da:80:95:43:a1:4f:22:30:50:ab:dd: c3:84:e5:8f:ce:8a:b9:ec:f9:c8:8a:60:da:e7:e1:d9:ac:f7: 35:f8:8b:a6:58:74:f1:23:fc:89:e3:7f:4d:63:dc:c2:60:43: 01:5c:c8:61:d5:47:d4:7d:40:b0:3d:27:f6:de:60:a7:a3:b0: 95:84:a6:8b:b8:1f:e5:22:ef:dc:ea:df:f7:9e:33:45:e9:c0: c8:d4:25:5a:c4:1a:5a:19:00:31:5e:1a:2d:e6:78:60:94:b2: 24:a0:94:2c:29:6f:08:83:ec:2b:5a:72:6c:47:05:ab:b2:2d: eb:b1:fd:ea:30:1b:05:3d:6d:e3:ac:1f:6e:7a:b7:69:e0:13: b7:37:df:d7:3a:ab:67:54:25:97:ce:c7:13:61:53:2f:72:22: 5c:a9:12:e6:87:e7:f1:3e:57:af:ea:6f:b8:55:c5:cb:6b:3a: 08:48:97:04:06:4b:47:0a:09:eb:00:d0:3d:75:89:30:0f:91: a2:84:33:b0:17:15:91:5f:18:93:4d:e0:ca:43:c7:49:3f:69: 08:b8:73:2d:31:f4:87:4a:9b:a9:fd:9f:41:f6:f6:21:1d:f7: 34:fe:cf:47 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt9ymYKyBpSdQ7eqZrgL/3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NzVmMTg1ODIzZGJjNmE4MmQxMDViM2NhMTYwNzdkYjU3 MjkzNzcwHhcNMjYwMTAyMDgxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWRhNjU3OWJlOGU0Y2ZhOGM3YzdmM2FmZDdkMTdlMTM3MThkMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupv1LFIU2rEY9G0YtV41ccfttrwL nFvYRBXWZmMCZq4Bd+gxfektIRxkXB0X9qun+7Inbwco4U7fGhmcnwCJbEFrevrX 7g/B3GBokzZ5rz2t+iwFtohr7SRwtZ+RDi2kIwsXvDuLc8JbGAQh9PLqJQuyCGk9 VlZ5KQkLQB7PFllPVLPCyxUFbT8cta1fD+o8EITPJuh0LbSWpnVJo57rdxioMdAV MSzUWgY5hsAkgEtD+HT7e7m+vw02kZoLfF2KiNCiPP1kEQPJ/huiwvKOrR01HwTz 2EnCKafDr422xHJOYPNIQjxc9VSDR8u6tfm3PdD/49MobScb+MXU16MSEQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFEraZXm+jkz6jHx/Ov19F+E3GNMcMB8GA1UdIwQY MBaAFCh18YWCPbxqgtEFs8oWB321cpN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDct OTRlNWQ0OWNjNjI4LzEvU3RwbGViNk9UUHFNZkg4Nl9YMFg0VGNZMHh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hMDRkYTYtOTg4Ny00MmE1LThlZDctOTRlNWQ0OWNjNjI4 LzEvS0hYeGhZSTl2R3FDMFFXenloWUhmYlZ5azNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQDJZ0wAwQC VPcgAwQCWSOkAwQClROwAwQCuQJMAwQCuSJQAwQCuTwEAwQCuT1YAwQCuVYUAwQC uVsoAwQDw864MA0EAgACMAcDBQMqALhAMA0GCSqGSIb3DQEBCwUAA4IBAQBBUS+Z Dy8tpaHAvM9On5+8TVqCJW+qfez92oCVQ6FPIjBQq93DhOWPzoq57PnIimDa5+HZ rPc1+IumWHTxI/yJ439NY9zCYEMBXMhh1UfUfUCwPSf23mCno7CVhKaLuB/lIu/c 6t/3njNF6cDI1CVaxBpaGQAxXhot5nhglLIkoJQsKW8Ig+wrWnJsRwWrsi3rsf3q MBsFPW3jrB9uerdp4BO3N9/XOqtnVCWXzscTYVMvciJcqRLmh+fxPlev6m+4VcXL azoISJcEBktHCgnrANA9dYkwD5GihDOwFxWRXxiTTeDKQ8dJP2kIuHMtMfSHSpup /Z9B9vYhHfc0/s9H -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:45 2026 by rpki-client