This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/ck22982XPjtgcPjy954uVGCKcK0.roa File: ck22982XPjtgcPjy954uVGCKcK0.roa (raw, json) Hash identifier: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw= Subject key identifier: 72:4D:B6:F7:CD:97:3E:3B:60:70:F8:F2:F7:9E:2E:54:60:8A:70:AD Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Certificate serial: 019B79ECDE7ACA2D9070B412F0283A673E8A Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/ck22982XPjtgcPjy954uVGCKcK0.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47443 IP address blocks: 37.26.72.0/23 maxlen: 24 87.232.134.0/24 maxlen: 24 2a01:14f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:de:7a:ca:2d:90:70:b4:12:f0:28:3a:67:3e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=724db6f7cd973e3b6070f8f2f79e2e54608a70ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:ec:fe:2f:0a:ad:4f:b4:07:26:e3:82:9e: 4f:40:25:dd:2d:c7:15:2b:2c:5e:5c:6f:06:1e:76: 0d:97:1d:d7:e4:f1:2a:bb:cd:13:11:87:b0:df:4a: fa:5c:bf:69:a3:eb:3b:99:90:1a:38:cb:88:20:ac: 68:a6:2e:45:da:58:36:67:33:30:2e:9d:b2:c0:9b: 9a:72:c5:f9:30:2a:be:ff:22:eb:6d:8d:b8:08:ae: e3:6d:8b:de:eb:49:4e:27:9b:cc:8c:a1:56:e7:bd: d2:6b:d3:81:e1:2f:38:88:45:0a:74:62:10:ea:22: 0c:cc:e3:60:34:ee:ee:d8:95:1c:83:66:8d:9b:68: 40:ec:a5:ba:87:14:8b:69:a6:9a:ce:c5:82:66:d0: bc:e0:24:ac:de:d2:a3:bf:df:a0:dd:0f:33:c3:b7: b2:91:fa:05:86:54:52:40:60:2f:a4:f8:a9:c7:be: bd:2a:a2:c9:5e:31:b9:c3:6b:6e:95:6d:41:03:d4: 2f:ef:b9:5f:2a:3f:d0:02:1d:63:cb:7e:5d:87:0b: 8e:f8:67:5f:eb:58:b2:8c:3b:8e:b2:a4:f2:6e:08: 1d:ef:9e:63:fc:c6:11:3c:b2:b9:c3:47:c4:ef:ef: 1f:fb:c2:be:52:b2:64:d2:5a:97:78:30:4a:b8:b7: 8f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4D:B6:F7:CD:97:3E:3B:60:70:F8:F2:F7:9E:2E:54:60:8A:70:AD X509v3 Authority Key Identifier: keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/ck22982XPjtgcPjy954uVGCKcK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.72.0/23 87.232.134.0/24 IPv6: 2a01:14f::/32 Signature Algorithm: sha256WithRSAEncryption 99:be:5d:b2:57:86:bc:48:1e:9d:d5:b7:56:45:86:d3:c2:09: 14:42:25:91:7a:44:31:99:75:49:2b:02:d3:50:9e:43:13:fe: 8e:27:a6:6c:7f:68:94:2b:4f:f7:9e:d4:67:74:8a:eb:74:e5: 94:ef:ef:f3:57:5f:e7:f2:de:79:a1:80:85:05:9f:68:69:7a: 1d:cc:62:7e:88:23:a4:e4:04:74:b3:22:ac:59:ff:56:ef:45: 44:8f:0c:6b:25:b0:89:44:a0:ce:0d:de:50:33:9f:97:aa:eb: 52:d5:19:f5:ec:86:06:0b:06:bc:1d:e1:5a:bc:05:ab:27:9c: dd:02:d8:c5:f2:d8:fd:52:95:c2:2f:1d:64:1e:2c:db:dc:77: fc:d6:ac:14:3c:5c:52:34:5f:d6:45:e5:81:bb:d2:4b:91:94: 11:54:e0:6a:7a:27:9b:a4:47:90:79:6d:f1:07:bb:0a:78:db: 64:ce:a8:80:9a:b5:21:78:e5:ab:f8:e7:d2:9e:37:a2:22:19: 39:b1:a8:f3:96:4d:da:ea:1c:ee:6b:b8:02:78:a2:90:8d:eb: 5b:3d:a4:67:46:f0:f1:4f:79:5d:a8:ac:ee:25:b2:5e:be:b1: 81:5c:46:19:93:dd:ef:c8:37:6a:5f:98:70:74:a1:bb:72:60: 47:41:b8:b7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57N56yi2QcLQS8Cg6Zz6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3 NzdmMDYwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjRkYjZmN2NkOTczZTNiNjA3MGY4ZjJmNzllMmU1NDYwOGE3MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuADs/i8KrU+0Bybjgp5PQCXdLccV KyxeXG8GHnYNlx3X5PEqu80TEYew30r6XL9po+s7mZAaOMuIIKxopi5F2lg2ZzMw Lp2ywJuacsX5MCq+/yLrbY24CK7jbYve60lOJ5vMjKFW573Sa9OB4S84iEUKdGIQ 6iIMzONgNO7u2JUcg2aNm2hA7KW6hxSLaaaazsWCZtC84CSs3tKjv9+g3Q8zw7ey kfoFhlRSQGAvpPipx769KqLJXjG5w2tulW1BA9Qv77lfKj/QAh1jy35dhwuO+Gdf 61iyjDuOsqTybggd755j/MYRPLK5w0fE7+8f+8K+UrJk0lqXeDBKuLeP4wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHJNtvfNlz47YHD48veeLlRginCtMB8GA1UdIwQY MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt MDYwNWMwODlmYzM4LzEvY2syMjk4MlhQanRnY1BqeTk1NHVWR0NLY0swLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4 LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBJRpIAwQA V+iGMA0EAgACMAcDBQAqAQFPMA0GCSqGSIb3DQEBCwUAA4IBAQCZvl2yV4a8SB6d 1bdWRYbTwgkUQiWRekQxmXVJKwLTUJ5DE/6OJ6Zsf2iUK0/3ntRndIrrdOWU7+/z V1/n8t55oYCFBZ9oaXodzGJ+iCOk5AR0syKsWf9W70VEjwxrJbCJRKDODd5QM5+X qutS1Rn17IYGCwa8HeFavAWrJ5zdAtjF8tj9UpXCLx1kHizb3Hf81qwUPFxSNF/W ReWBu9JLkZQRVOBqeiebpEeQeW3xB7sKeNtkzqiAmrUheOWr+OfSnjeiIhk5sajz lk3a6hzua7gCeKKQjetbPaRnRvDxT3ldqKzuJbJevrGBXEYZk93vyDdqX5hwdKG7 cmBHQbi3 -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:16 2026 by rpki-client