This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/bL1SpyyBTi0d8Dsx8Tdvxr7qEag.roa File: bL1SpyyBTi0d8Dsx8Tdvxr7qEag.roa (raw, json) Hash identifier: j5UJJAXCgmYG9UJK159eJdYgk2A4TavF4TUvXoNb9wo= Subject key identifier: 6C:BD:52:A7:2C:81:4E:2D:1D:F0:3B:31:F1:37:6F:C6:BE:EA:11:A8 Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Certificate serial: 019B7DCA787B7EBEE761C220F7C96CCE3A3E Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/bL1SpyyBTi0d8Dsx8Tdvxr7qEag.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60609 IP address blocks: 185.37.212.0/24 maxlen: 24 185.37.213.0/24 maxlen: 24 185.37.214.0/24 maxlen: 24 185.37.215.0/24 maxlen: 24 185.77.156.0/24 maxlen: 24 185.77.157.0/24 maxlen: 24 185.77.159.0/24 maxlen: 24 185.86.11.0/24 maxlen: 24 185.158.168.0/23 maxlen: 23 185.158.168.0/24 maxlen: 24 185.158.169.0/24 maxlen: 24 185.158.170.0/23 maxlen: 23 185.158.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:78:7b:7e:be:e7:61:c2:20:f7:c9:6c:ce:3a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cbd52a72c814e2d1df03b31f1376fc6beea11a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:e6:8e:a7:47:59:20:4e:cb:37:60:6b:0e: 8c:04:32:cd:8d:4a:28:da:61:89:b2:3f:13:90:6a: 02:df:3c:2e:ca:5c:94:c4:6b:3a:eb:04:bb:81:b2: 7c:52:90:5f:21:41:d8:f2:f6:d4:5a:7c:51:8b:4f: 58:b9:8f:b8:7b:a5:ef:9e:b3:27:d3:b6:b6:d5:0c: 4a:75:8b:f6:f0:e8:a6:9a:25:a0:26:8d:6c:38:8f: a3:7b:85:26:da:fd:17:6e:e0:d1:a4:18:51:c8:87: 4a:9b:d4:e2:7d:6a:33:f9:a1:a4:35:c4:2e:f2:f1: ce:04:49:cb:fa:83:07:cc:ab:35:ac:b6:a1:91:77: cb:5d:c6:3b:c0:b0:2d:54:41:6e:33:e2:46:1b:3b: 49:c3:38:17:72:d1:86:be:77:9c:f3:6d:ea:85:48: a1:31:74:62:3a:96:7c:12:c5:ad:66:58:b4:d6:5a: 02:b0:de:5f:74:4c:64:01:2b:6c:c9:22:58:10:48: 51:7e:47:7d:00:a3:09:d9:b2:93:57:e5:24:f8:dc: 10:17:3d:b5:08:1e:19:40:29:23:76:3e:4e:16:21: ab:a6:ed:b8:69:55:ee:ad:86:ce:fd:7e:d5:b0:ea: 12:38:95:b4:4e:53:da:8d:26:ee:fe:71:86:56:81: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BD:52:A7:2C:81:4E:2D:1D:F0:3B:31:F1:37:6F:C6:BE:EA:11:A8 X509v3 Authority Key Identifier: keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/bL1SpyyBTi0d8Dsx8Tdvxr7qEag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.212.0/22 185.77.156.0/23 185.77.159.0/24 185.86.11.0/24 185.158.168.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:68:31:f6:b5:4f:03:d7:70:71:ac:b5:e9:46:e9:74:45:11: 15:66:58:76:a3:fb:2f:6f:46:ac:23:f2:7d:87:fd:e6:83:92: ba:45:88:88:cd:f2:85:51:c9:9e:e5:21:64:6c:17:02:ee:32: 0c:14:19:9d:a5:17:be:ad:5b:ce:73:c2:91:18:85:41:65:41: d0:ea:f2:ea:36:65:75:93:34:06:a7:e1:ab:48:5d:62:ba:06: a3:45:2f:3e:e6:6e:d5:0d:f4:a3:e7:52:0a:3f:51:80:cb:7a: 59:33:b8:70:d8:51:9a:45:e5:5d:18:b6:ce:8a:9e:66:3c:54: 28:d1:8d:0b:bb:77:6b:a2:bd:a6:f4:d2:7d:40:e1:1d:7f:4f: 69:fb:ee:3c:98:88:9c:01:d2:6d:ee:48:fe:4b:78:85:2a:f3: 5e:00:84:b6:8d:4c:71:9b:62:fb:5e:34:4d:21:99:2d:9a:77: 27:ff:1b:7b:83:a5:e6:9f:7e:23:fb:65:d3:c3:8e:90:dc:1c: f7:43:17:60:cd:e6:29:47:01:22:9b:87:65:e8:85:ac:02:39: 8f:2d:cf:ac:85:c2:6e:1e:74:1a:3d:84:b7:89:5d:80:d7:2f: 25:d2:5c:b2:04:aa:24:93:21:f4:2a:1c:ce:79:ff:63:91:7e: 4d:b5:dd:8d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9ynh7fr7nYcIg98lszjo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNzg2MmI0NjA4Yzc5ZjQ1MDI5NWVjNWM4MGM3YzdhZDZk ZmUyYTIwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2JkNTJhNzJjODE0ZTJkMWRmMDNiMzFmMTM3NmZjNmJlZWExMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbTmjqdHWSBOyzdgaw6MBDLNjUoo 2mGJsj8TkGoC3zwuylyUxGs66wS7gbJ8UpBfIUHY8vbUWnxRi09YuY+4e6XvnrMn 07a21QxKdYv28OimmiWgJo1sOI+je4Um2v0XbuDRpBhRyIdKm9TifWoz+aGkNcQu 8vHOBEnL+oMHzKs1rLahkXfLXcY7wLAtVEFuM+JGGztJwzgXctGGvnec823qhUih MXRiOpZ8EsWtZli01loCsN5fdExkAStsySJYEEhRfkd9AKMJ2bKTV+Uk+NwQFz21 CB4ZQCkjdj5OFiGrpu24aVXurYbO/X7VsOoSOJW0TlPajSbu/nGGVoFP6wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGy9UqcsgU4tHfA7MfE3b8a+6hGoMB8GA1UdIwQY MBaAFAN4YrRgjHn0UClexcgMfHrW3+KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMt ZjQ3NGY3YmQzNTMxLzEvYkwxU3B5eUJUaTBkOERzeDhUZHZ4cjdxRWFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMtZjQ3NGY3YmQzNTMx LzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCuSXUAwQB uU2cAwQAuU2fAwQAuVYLAwQCuZ6oMA0GCSqGSIb3DQEBCwUAA4IBAQBfaDH2tU8D 13BxrLXpRul0RREVZlh2o/svb0asI/J9h/3mg5K6RYiIzfKFUcme5SFkbBcC7jIM FBmdpRe+rVvOc8KRGIVBZUHQ6vLqNmV1kzQGp+GrSF1iugajRS8+5m7VDfSj51IK P1GAy3pZM7hw2FGaReVdGLbOip5mPFQo0Y0Lu3dror2m9NJ9QOEdf09p++48mIic AdJt7kj+S3iFKvNeAIS2jUxxm2L7XjRNIZktmncn/xt7g6Xmn34j+2XTw46Q3Bz3 QxdgzeYpRwEim4dl6IWsAjmPLc+shcJuHnQaPYS3iV2A1y8l0lyyBKokkyH0KhzO ef9jkX5Ntd2N -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:07 2026 by rpki-client