This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa File: ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa (raw, json) Hash identifier: s3kSZnJOaNBcLJk6I6FfrLp2Zy1y2JcndjzephM3GAA= Subject key identifier: 89:F6:51:7B:EB:96:72:A2:B0:36:8F:CC:DA:F0:33:BE:94:FD:39:45 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 019B77C679EB443D1BD3A978D8CFEE7D19B1 Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 996 IP address blocks: 37.19.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:79:eb:44:3d:1b:d3:a9:78:d8:cf:ee:7d:19:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89f6517beb9672a2b0368fccdaf033be94fd3945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:25:19:b1:24:3c:e7:7a:79:39:9c:d4:a1:e6: d0:99:fb:79:f7:08:4e:1d:47:3f:c9:ff:7e:e3:db: 5b:9e:89:d1:2a:05:69:70:fc:b4:fb:ff:4a:3a:eb: d2:c0:d7:d0:97:57:4d:0e:3e:ec:28:8a:56:94:d4: 69:a7:6d:70:a6:4a:64:75:52:07:80:58:55:da:5e: 4e:f0:e8:04:16:33:19:51:36:3b:3e:bf:77:88:2c: db:d5:4e:50:0c:21:6c:29:e9:ec:a7:d9:2b:26:95: 5a:f8:ef:a9:ef:8d:e4:42:25:28:8f:94:f2:06:26: f6:e0:a2:c8:69:1e:78:be:de:b4:7e:9f:11:8d:a0: 73:f3:ce:1d:8b:f9:fd:0d:82:26:5a:1f:39:e9:2d: 6c:b6:1b:e8:95:e7:bb:c6:cb:77:af:d2:84:4b:53: 89:45:e8:7e:ee:52:cf:3c:63:11:9d:f2:76:d7:20: 20:89:37:53:b2:e1:9a:a1:fc:c1:a4:16:ed:86:9b: 8e:af:0f:af:b9:3d:84:ee:43:68:3b:6a:82:95:ca: a0:31:4e:e2:3b:bf:61:7b:2e:2a:0a:c1:f8:40:28: ed:c1:09:24:65:84:94:64:e4:e7:a8:14:54:fb:2a: 2c:b9:08:33:b4:05:f1:cc:f8:53:26:2f:e3:58:55: b2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F6:51:7B:EB:96:72:A2:B0:36:8F:CC:DA:F0:33:BE:94:FD:39:45 X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/ifZRe-uWcqKwNo_M2vAzvpT9OUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.19.64.0/22 Signature Algorithm: sha256WithRSAEncryption 69:29:89:61:83:0c:6a:b2:b3:d2:88:08:9e:b2:6f:4f:b5:16: 3c:4b:3c:40:07:3f:ea:fd:b5:fc:2e:59:35:a8:c6:fc:68:a1: e1:ad:97:84:c6:d6:97:8a:0b:ae:30:cd:64:5c:0c:fb:f0:d0: 8a:d8:1a:aa:40:9c:5b:0c:d8:0a:62:7a:21:12:33:5a:de:40: 3d:30:bd:6d:d5:67:11:7f:9c:70:aa:7d:c1:41:10:4b:fa:b0: b9:b5:bc:ec:84:0a:d0:fb:3f:96:4d:c7:b9:9f:85:3b:18:3a: e7:c1:d4:03:99:09:b5:36:0c:ac:4d:ea:94:49:c0:9e:2f:19: c7:e8:ea:f7:85:df:ff:60:f6:f9:50:35:62:f7:ff:69:46:8f: 6b:68:8f:8f:f0:06:ca:28:73:2f:28:d2:8d:84:4e:1f:06:23: 14:44:13:c2:d6:0c:c8:2c:50:55:28:82:95:90:13:44:d4:c5: 86:24:bd:df:84:7e:35:67:ad:ec:eb:6f:37:9c:00:30:2f:f6: 33:77:ce:06:85:15:a8:13:66:3a:d6:99:a8:cd:9f:90:91:5c: 09:25:68:fd:b6:66:f6:ec:c5:26:42:bb:de:0c:b2:58:b8:b6: 18:33:af:05:aa:1d:0d:14:73:d6:47:e1:27:2c:de:00:84:a6: eb:8c:d3:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnnrRD0b06l42M/ufRmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWY2NTE3YmViOTY3MmEyYjAzNjhmY2NkYWYwMzNiZTk0ZmQzOTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CUZsSQ853p5OZzUoebQmft59whO HUc/yf9+49tbnonRKgVpcPy0+/9KOuvSwNfQl1dNDj7sKIpWlNRpp21wpkpkdVIH gFhV2l5O8OgEFjMZUTY7Pr93iCzb1U5QDCFsKensp9krJpVa+O+p743kQiUoj5Ty Bib24KLIaR54vt60fp8RjaBz884di/n9DYImWh856S1sthvolee7xst3r9KES1OJ Reh+7lLPPGMRnfJ21yAgiTdTsuGaofzBpBbthpuOrw+vuT2E7kNoO2qClcqgMU7i O79hey4qCsH4QCjtwQkkZYSUZOTnqBRU+yosuQgztAXxzPhTJi/jWFWypQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIn2UXvrlnKisDaPzNrwM76U/TlFMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvaWZaUmUtdVdjcUt3Tm9fTTJ2QXp2cFQ5T1VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJRNAMA0G CSqGSIb3DQEBCwUAA4IBAQBpKYlhgwxqsrPSiAiesm9PtRY8SzxABz/q/bX8Llk1 qMb8aKHhrZeExtaXiguuMM1kXAz78NCK2BqqQJxbDNgKYnohEjNa3kA9ML1t1WcR f5xwqn3BQRBL+rC5tbzshArQ+z+WTce5n4U7GDrnwdQDmQm1NgysTeqUScCeLxnH 6Or3hd//YPb5UDVi9/9pRo9raI+P8AbKKHMvKNKNhE4fBiMURBPC1gzILFBVKIKV kBNE1MWGJL3fhH41Z63s6283nAAwL/Yzd84GhRWoE2Y61pmozZ+QkVwJJWj9tmb2 7MUmQrveDLJYuLYYM68Fqh0NFHPWR+EnLN4AhKbrjNO5 -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:12 2026 by rpki-client