This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/xG7DXHJDVjNk9kPfRoD--_ZHu-c.roa File: xG7DXHJDVjNk9kPfRoD--_ZHu-c.roa (raw, json) Hash identifier: i8nmPH8ECpbJgdaxdjOGq7PZ1dfP/YgPF/IPT9Hb4to= Subject key identifier: C4:6E:C3:5C:72:43:56:33:64:F6:43:DF:46:80:FE:FB:F6:47:BB:E7 Certificate issuer: /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Certificate serial: 019B78A30A239569A23CBA9ED30E380F9AC8 Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/xG7DXHJDVjNk9kPfRoD--_ZHu-c.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61400 IP address blocks: 37.0.120.0/21 maxlen: 24 78.24.92.0/22 maxlen: 24 89.248.235.0/24 maxlen: 24 185.16.212.0/22 maxlen: 24 193.243.182.0/24 maxlen: 24 217.199.220.0/24 maxlen: 24 217.199.221.0/24 maxlen: 24 217.199.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0a:23:95:69:a2:3c:ba:9e:d3:0e:38:0f:9a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c46ec35c7243563364f643df4680fefbf647bbe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:63:b1:11:15:ae:90:3a:81:f3:41:11:3e: 7d:ee:7f:e2:e2:19:45:59:d5:95:f8:ff:3f:8e:01: 31:f0:a2:bb:76:6f:37:a8:33:1e:3e:65:1c:35:b9: 12:58:05:4e:37:f8:bd:41:1b:8c:33:5c:2a:44:27: 25:47:11:68:d1:a7:21:bf:67:00:0d:cf:36:05:d0: 65:d8:66:b1:e5:d3:2d:b8:6e:ed:63:90:7e:5e:12: c8:8d:49:4f:1d:10:a3:ac:f5:ad:4e:3d:92:48:5e: 6a:77:ad:54:26:83:0a:3c:ce:4b:a3:19:f7:f0:30: ba:a7:0e:17:7f:64:90:aa:9f:4d:3b:1d:33:ff:8a: 9a:d1:2f:10:9d:73:65:1e:c1:72:59:ef:d5:c0:6e: 2c:22:ba:d8:a4:4c:3f:d8:fb:0d:96:88:38:5e:17: 8e:bc:35:3b:d5:9e:24:d5:4c:6d:14:93:9e:c9:65: 96:fe:e7:86:68:b8:46:6c:87:42:7f:24:3b:b4:18: 66:98:5f:f2:d1:a2:d3:0e:09:11:97:56:70:39:96: 3a:c6:f5:4a:56:13:d1:40:05:b2:18:dd:92:48:26: 57:f9:ca:6e:33:a4:38:4d:74:58:f2:3f:ac:dc:55: 57:32:93:cb:26:79:18:38:5d:32:6f:c8:6d:e2:86: 95:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6E:C3:5C:72:43:56:33:64:F6:43:DF:46:80:FE:FB:F6:47:BB:E7 X509v3 Authority Key Identifier: keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/xG7DXHJDVjNk9kPfRoD--_ZHu-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.0.120.0/21 78.24.92.0/22 89.248.235.0/24 185.16.212.0/22 193.243.182.0/24 217.199.220.0/23 217.199.223.0/24 Signature Algorithm: sha256WithRSAEncryption 25:36:36:cc:18:3e:ee:02:4e:a1:52:fe:75:b8:b9:e0:ec:64: aa:cb:f9:90:02:26:3c:4f:32:a2:31:6f:da:ec:93:da:16:41: 81:ca:57:7e:42:32:a4:c4:53:22:b8:48:e8:de:27:72:0d:70: 59:2f:12:48:c4:72:22:be:2f:45:71:bb:4e:39:49:5f:67:a2: 75:a1:4f:5e:a4:f3:dd:89:aa:cc:ea:96:c0:7e:56:95:4f:93: 5f:9f:07:d8:64:b3:fe:ef:07:a4:47:08:a4:57:ef:66:58:5a: 40:39:4c:6c:2f:f5:22:e5:e5:50:71:80:7b:7e:96:98:5f:dc: fb:43:13:fc:d0:d5:70:39:d0:50:d3:7a:e4:b0:ca:55:9f:56: e9:36:20:17:c6:28:a3:77:ff:50:7b:65:71:02:ae:d8:15:9a: fc:97:fe:a3:dc:25:42:e2:c7:1d:e2:e4:23:3c:e4:30:0b:6d: c1:0c:86:92:4f:a2:f4:9a:b0:99:d8:00:36:c9:5f:f2:59:e4: 1c:36:c3:5b:7b:6e:06:2c:6d:03:41:b2:a7:a9:a7:2c:5d:65: 61:84:e9:7a:d5:46:1f:db:1f:aa:30:18:57:ca:f4:6f:cd:4d: 94:91:4c:ae:9e:a1:48:21:30:fb:7d:67:7e:4e:e3:9e:18:fc: e4:5b:8f:15 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4owojlWmiPLqe0w44D5rIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm OGMxY2UwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDZlYzM1YzcyNDM1NjMzNjRmNjQzZGY0NjgwZmVmYmY2NDdiYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5BjsREVrpA6gfNBET597n/i4hlF WdWV+P8/jgEx8KK7dm83qDMePmUcNbkSWAVON/i9QRuMM1wqRCclRxFo0achv2cA Dc82BdBl2Gax5dMtuG7tY5B+XhLIjUlPHRCjrPWtTj2SSF5qd61UJoMKPM5Loxn3 8DC6pw4Xf2SQqp9NOx0z/4qa0S8QnXNlHsFyWe/VwG4sIrrYpEw/2PsNlog4XheO vDU71Z4k1UxtFJOeyWWW/ueGaLhGbIdCfyQ7tBhmmF/y0aLTDgkRl1ZwOZY6xvVK VhPRQAWyGN2SSCZX+cpuM6Q4TXRY8j+s3FVXMpPLJnkYOF0yb8ht4oaVIwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFMRuw1xyQ1YzZPZD30aA/vv2R7vnMB8GA1UdIwQY MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt YzQ3ZTE4ZGYwMzcxLzEveEc3RFhISkRWak5rOWtQZlJvRC0tX1pIdS1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDJQB4AwQC ThhcAwQAWfjrAwQCuRDUAwQAwfO2AwQB2cfcAwQA2cffMA0GCSqGSIb3DQEBCwUA A4IBAQAlNjbMGD7uAk6hUv51uLng7GSqy/mQAiY8TzKiMW/a7JPaFkGByld+QjKk xFMiuEjo3idyDXBZLxJIxHIivi9FcbtOOUlfZ6J1oU9epPPdiarM6pbAflaVT5Nf nwfYZLP+7wekRwikV+9mWFpAOUxsL/Ui5eVQcYB7fpaYX9z7QxP80NVwOdBQ03rk sMpVn1bpNiAXxiijd/9Qe2VxAq7YFZr8l/6j3CVC4scd4uQjPOQwC23BDIaST6L0 mrCZ2AA2yV/yWeQcNsNbe24GLG0DQbKnqacsXWVhhOl61UYf2x+qMBhXyvRvzU2U kUyunqFIITD7fWd+TuOeGPzkW48V -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:35 2026 by rpki-client