This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/x8JpwXfRjntSd4pmuLKwDDhw_i4.roa File: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (raw, json) Hash identifier: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE= Subject key identifier: C7:C2:69:C1:77:D1:8E:7B:52:77:8A:66:B8:B2:B0:0C:38:70:FE:2E Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 019B7F8418ECB109F7A2B754BB51E43C84C2 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/x8JpwXfRjntSd4pmuLKwDDhw_i4.roa Signing time: Fri 02 Jan 2026 16:22:02 +0000 ROA not before: Fri 02 Jan 2026 16:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216231 IP address blocks: 37.32.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:18:ec:b1:09:f7:a2:b7:54:bb:51:e4:3c:84:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Jan 2 16:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7c269c177d18e7b52778a66b8b2b00c3870fe2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:47:6e:2a:2d:b4:34:c7:b8:74:a9:91:ef: 66:cf:c6:2c:f1:7b:08:71:e9:71:10:b4:f3:9f:e4: 85:8c:0f:e0:e5:c6:9c:41:46:3c:8b:82:4f:70:67: 59:ae:3b:f6:a5:77:41:6c:f0:76:1b:c3:81:9c:f2: 24:0c:92:e9:7f:c3:6f:0b:e4:be:73:bc:41:d9:86: 7a:09:21:b1:82:96:56:c0:13:37:f2:2b:17:cd:a1: 6d:c3:95:00:0a:14:06:ee:72:42:ca:6c:ca:1e:22: 31:10:1a:49:b3:90:67:73:38:58:98:5b:69:32:57: 5b:eb:89:29:cc:69:1e:c0:85:f9:c1:a3:31:20:c1: aa:c1:de:28:54:82:34:c0:91:af:08:9c:7b:f0:47: 8a:38:de:5a:49:88:41:52:5d:3e:69:47:a3:4b:15: 91:fc:90:9a:a4:9a:d0:c9:bd:ec:07:67:27:ba:ec: 4f:6d:16:b7:98:1a:71:65:80:5f:5c:93:65:ee:a6: 5d:5e:39:43:b5:d3:28:ea:f3:61:11:93:2c:5b:00: 75:6c:05:9e:12:f5:04:cf:15:d5:b9:4d:df:ea:cd: b8:2e:98:c6:ee:e8:92:55:57:fe:00:df:fd:ef:ea: 16:d4:1b:11:72:f2:6f:f4:a5:cf:29:1c:fa:4c:e3: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C2:69:C1:77:D1:8E:7B:52:77:8A:66:B8:B2:B0:0C:38:70:FE:2E X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/x8JpwXfRjntSd4pmuLKwDDhw_i4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.76.0/24 Signature Algorithm: sha256WithRSAEncryption 07:dc:42:bb:bc:b7:1a:b4:13:36:50:90:1e:bb:bf:70:e5:4e: 21:cb:76:7a:8f:44:77:3e:1a:d3:c5:be:b4:16:40:b5:36:36: cd:c6:98:a7:fc:3d:bc:47:80:63:31:86:b4:77:d4:23:c0:2b: 84:78:1c:dd:b2:02:57:a8:6c:51:9d:6c:67:09:29:20:d9:78: 7d:96:70:4c:d5:13:46:26:26:f3:48:0c:89:28:bd:83:c5:e5: 25:b2:90:b8:40:34:15:80:88:f5:58:67:b6:5b:fb:20:06:dd: 45:0f:4e:f2:0e:dc:ab:ab:8c:a8:67:56:df:4d:92:92:1d:c7: 9b:ff:2c:76:26:18:92:f2:9c:28:a5:4c:19:5d:2b:68:b3:80: ed:ff:6f:42:45:28:23:9b:ee:e6:50:cd:db:7a:93:07:9a:37: ed:08:ad:a7:27:2a:e5:14:ed:c0:ac:9d:aa:59:94:aa:1d:4d: 8c:7e:cc:7e:26:e1:3a:ce:f6:4d:21:54:14:1a:68:57:7e:84: 0f:64:0c:a6:d2:de:5c:fc:8f:a0:da:db:8a:ad:bf:cd:7c:b6: c6:76:bb:17:a7:48:2d:01:af:55:8e:a7:e1:85:49:69:9d:3c: 83:1f:58:51:a6:b9:7c:94:5e:08:22:37:17:ae:6b:6f:bb:f8: 9c:7c:52:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hBjssQn3ordUu1HkPITCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjYwMTAyMTYyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2MyNjljMTc3ZDE4ZTdiNTI3NzhhNjZiOGIyYjAwYzM4NzBmZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvetHbiottDTHuHSpke9mz8Ys8XsI celxELTzn+SFjA/g5cacQUY8i4JPcGdZrjv2pXdBbPB2G8OBnPIkDJLpf8NvC+S+ c7xB2YZ6CSGxgpZWwBM38isXzaFtw5UAChQG7nJCymzKHiIxEBpJs5BnczhYmFtp Mldb64kpzGkewIX5waMxIMGqwd4oVII0wJGvCJx78EeKON5aSYhBUl0+aUejSxWR /JCapJrQyb3sB2cnuuxPbRa3mBpxZYBfXJNl7qZdXjlDtdMo6vNhEZMsWwB1bAWe EvUEzxXVuU3f6s24LpjG7uiSVVf+AN/97+oW1BsRcvJv9KXPKRz6TONPiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfCacF30Y57UneKZriysAw4cP4uMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEveDhKcHdYZlJqbnRTZDRwbXVMS3dERGh3X2k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJSBMMA0G CSqGSIb3DQEBCwUAA4IBAQAH3EK7vLcatBM2UJAeu79w5U4hy3Z6j0R3PhrTxb60 FkC1NjbNxpin/D28R4BjMYa0d9QjwCuEeBzdsgJXqGxRnWxnCSkg2Xh9lnBM1RNG JibzSAyJKL2DxeUlspC4QDQVgIj1WGe2W/sgBt1FD07yDtyrq4yoZ1bfTZKSHceb /yx2JhiS8pwopUwZXStos4Dt/29CRSgjm+7mUM3bepMHmjftCK2nJyrlFO3ArJ2q WZSqHU2Mfsx+JuE6zvZNIVQUGmhXfoQPZAym0t5c/I+g2tuKrb/NfLbGdrsXp0gt Aa9VjqfhhUlpnTyDH1hRprl8lF4IIjcXrmtvu/icfFK3 -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:36 2026 by rpki-client