This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa File: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (raw, json) Hash identifier: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8= Subject key identifier: FA:A8:32:8A:5B:78:99:6E:52:ED:1D:C3:A4:A7:6A:EC:EC:FB:8B:78 Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019B7F8416051D7723162578CF40143CF627 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa Signing time: Fri 02 Jan 2026 16:22:01 +0000 ROA not before: Fri 02 Jan 2026 16:22:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200154 IP address blocks: 37.32.77.0/24 maxlen: 24 37.32.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:16:05:1d:77:23:16:25:78:cf:40:14:3c:f6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Jan 2 16:22:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faa8328a5b78996e52ed1dc3a4a76aececfb8b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:19:e4:57:16:d3:60:9e:0d:fb:a5:37:a0:fb: 70:ac:2a:09:fa:87:a3:fb:dd:c0:c0:43:73:86:f9: 24:05:cc:00:9d:72:e3:ac:75:81:99:5b:a8:99:58: 66:c0:ff:68:a9:76:67:0d:ef:1b:fd:80:3a:ac:89: de:9d:17:05:29:f3:0c:e9:0c:41:0e:d7:52:d7:d8: 1a:fc:9c:08:5e:07:82:aa:69:1d:34:bc:af:82:fe: 79:99:74:bf:01:45:5a:aa:b5:8b:45:15:00:da:3f: 77:fa:da:28:4c:61:09:73:79:5a:c9:8d:ee:e7:ad: 0f:f7:a4:61:3f:dd:f0:7c:8a:c8:7e:57:2a:bb:96: 11:76:b6:c0:b0:d1:a5:cc:15:3e:d5:8c:31:6a:b1: 08:6a:b2:69:39:38:f1:67:f8:3f:2c:ae:66:9e:91: ab:65:85:09:68:31:f1:17:d5:f5:5a:cc:8b:e6:61: 55:a2:45:6b:fc:46:a3:6d:76:09:60:84:aa:b0:70: 93:dc:66:d3:22:1c:39:48:91:f3:8b:9a:17:7f:79: dc:ef:f2:fb:22:c2:2c:94:ee:3a:91:19:d6:ba:16: de:f2:6b:9d:15:17:a7:9a:81:20:fc:84:a5:20:17: 49:09:c1:8b:9e:ae:ff:c8:fe:2e:d6:b7:16:ff:e5: ec:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A8:32:8A:5B:78:99:6E:52:ED:1D:C3:A4:A7:6A:EC:EC:FB:8B:78 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.77.0/24 37.32.79.0/24 Signature Algorithm: sha256WithRSAEncryption 39:22:92:c9:61:00:34:91:30:73:c8:24:c1:3b:e4:2e:ca:67: f6:a2:78:3c:c6:fb:d0:89:b6:dd:a8:b5:2c:cc:79:78:a8:67: e7:e2:32:44:89:1a:4e:61:cb:b0:8f:c8:cf:79:ef:f9:cf:34: 61:65:5c:d2:10:30:11:5a:3f:b2:44:1e:cc:a6:5d:a0:64:8e: 1d:a1:cc:ac:c6:a1:d1:27:81:72:f1:1b:02:96:7c:47:31:44: b6:e6:79:4a:17:45:f9:ec:0d:00:40:a5:1a:8d:0d:68:01:7d: c8:de:54:e3:d7:14:4e:9a:87:32:25:73:a7:d7:a4:ac:2e:20: 4f:c4:c9:0b:bc:44:5b:fa:51:2d:ea:2d:99:20:3a:70:6b:c6: 3f:f1:46:65:65:b0:6a:28:1c:79:8e:5d:2f:ec:8f:6b:99:29: d9:e0:50:cd:3c:fd:25:7f:cf:59:e4:18:a9:e5:01:d4:6d:cc: c6:70:d4:0d:97:9e:11:aa:83:b4:b9:12:9c:b8:c4:98:e6:c0: 51:3d:37:2d:e1:05:46:2c:01:ab:e9:00:57:ea:0d:0f:20:9f: 12:ef:2a:8a:17:8a:47:dc:c3:1d:40:71:b0:57:f2:22:08:47: a2:e1:03:60:22:18:c8:5c:2e:ba:9d:d1:e2:b0:ab:b4:b7:65: 6c:56:c2:22 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/hBYFHXcjFiV4z0AUPPYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjYwMTAyMTYyMjAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWE4MzI4YTViNzg5OTZlNTJlZDFkYzNhNGE3NmFlY2VjZmI4Yjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRnkVxbTYJ4N+6U3oPtwrCoJ+oej +93AwENzhvkkBcwAnXLjrHWBmVuomVhmwP9oqXZnDe8b/YA6rInenRcFKfMM6QxB DtdS19ga/JwIXgeCqmkdNLyvgv55mXS/AUVaqrWLRRUA2j93+tooTGEJc3layY3u 560P96RhP93wfIrIflcqu5YRdrbAsNGlzBU+1YwxarEIarJpOTjxZ/g/LK5mnpGr ZYUJaDHxF9X1WsyL5mFVokVr/EajbXYJYISqsHCT3GbTIhw5SJHzi5oXf3nc7/L7 IsIslO46kRnWuhbe8mudFRenmoEg/ISlIBdJCcGLnq7/yP4u1rcW/+XskQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPqoMopbeJluUu0dw6Snauzs+4t4MB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvMS1xZ3lpbHQ0bVc1UzdSM0RwS2RxN096N2kzZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTcvOTE1MWMwLTMzMjYtNDgwMS05MzYzLWM3ZDE5OTMwZDY2 ZC8xL3RPZ3JvWEZkYXVybHNCQW5KZl9neURSelhYMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEACUgTQME ACUgTzANBgkqhkiG9w0BAQsFAAOCAQEAOSKSyWEANJEwc8gkwTvkLspn9qJ4PMb7 0Im23ai1LMx5eKhn5+IyRIkaTmHLsI/Iz3nv+c80YWVc0hAwEVo/skQezKZdoGSO HaHMrMah0SeBcvEbApZ8RzFEtuZ5ShdF+ewNAEClGo0NaAF9yN5U49cUTpqHMiVz p9ekrC4gT8TJC7xEW/pRLeotmSA6cGvGP/FGZWWwaigceY5dL+yPa5kp2eBQzTz9 JX/PWeQYqeUB1G3MxnDUDZeeEaqDtLkSnLjEmObAUT03LeEFRiwBq+kAV+oNDyCf Eu8qiheKR9zDHUBxsFfyIghHouEDYCIYyFwuup3R4rCrtLdlbFbCIg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:21:25 2026 by rpki-client