This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R37_AvJCGuLZ-SSqEyeE10fxVLU.roa File: R37_AvJCGuLZ-SSqEyeE10fxVLU.roa (raw, json) Hash identifier: VgY32u1s0VSmWI6h1tpzYiIzgG+SxYZWTUZZ4glo7zM= Subject key identifier: 47:7E:FF:02:F2:42:1A:E2:D9:F9:24:AA:13:27:84:D7:47:F1:54:B5 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B7834915895159CC20116D038928D5F72 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R37_AvJCGuLZ-SSqEyeE10fxVLU.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210409 IP address blocks: 193.182.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:91:58:95:15:9c:c2:01:16:d0:38:92:8d:5f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=477eff02f2421ae2d9f924aa132784d747f154b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:98:06:d6:77:cf:e0:d6:56:0d:21:c4:a8: 18:89:05:4a:d2:8e:32:98:fe:2b:e2:ce:30:17:ba: 6d:94:ac:70:d8:c8:44:98:42:a7:2d:61:1c:ac:f7: 9f:85:42:9f:cd:ab:fe:a2:24:f6:9c:84:85:a5:b6: a9:0d:88:bb:2a:9b:2a:a1:66:74:da:77:e9:01:8d: 97:6a:36:b7:fd:80:93:1c:bc:e0:d3:cc:7e:08:dd: 9e:e4:d9:20:89:1a:ec:f0:59:44:0c:27:76:4c:9c: ce:63:38:6e:41:d3:54:cb:b8:18:5f:82:9d:d0:41: ed:d5:1c:43:f9:b7:f8:3f:91:65:31:fc:79:c1:fa: 47:e3:f7:30:89:d9:1c:eb:52:73:3a:7b:26:20:4b: e1:b1:ec:fa:cb:68:25:80:b8:fd:85:9f:08:0c:cd: d3:48:a5:9b:e5:d5:8d:e4:e3:73:35:64:44:a8:84: d1:f2:cb:1e:b1:1f:e8:b9:1a:a3:0b:2c:84:c0:d1: ea:cb:e7:c3:93:c7:42:41:c3:99:55:bf:e9:b7:7d: 27:89:24:21:db:40:51:6a:33:ed:e0:74:38:d5:7f: fc:4a:7d:c9:6b:61:ee:5d:07:f2:70:66:eb:66:78: ea:8f:c2:6e:97:7f:93:d7:24:dc:d2:ee:af:57:56: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7E:FF:02:F2:42:1A:E2:D9:F9:24:AA:13:27:84:D7:47:F1:54:B5 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/R37_AvJCGuLZ-SSqEyeE10fxVLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.182.7.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:1b:07:dc:6c:d7:dd:33:39:f7:e4:1a:d8:27:f3:df:a3:e4: 21:65:dd:d7:f8:35:a5:49:7e:3f:1d:d7:29:7e:b8:a1:db:f4: 26:8e:6a:70:c8:f0:fd:bf:aa:11:91:9f:b5:ce:b5:57:61:bc: 67:a2:49:0d:e6:bd:2c:a5:32:c9:49:68:30:6c:c0:fa:54:fc: c5:d5:be:5c:dc:2a:b2:ea:01:11:66:bb:8e:63:65:80:f3:89: 14:c3:e4:57:9a:0e:29:83:d6:8f:81:c8:8c:27:06:97:5f:2f: eb:b5:91:fc:2f:1d:85:52:98:b9:54:98:3a:64:e7:e3:aa:ce: cd:31:7a:77:f1:94:f4:b4:39:95:fa:20:06:83:67:a0:07:fa: 32:99:4d:f2:74:a6:39:60:bf:4a:a3:dc:57:f8:9d:0d:58:70: f9:69:3b:e1:54:f5:a9:d4:4b:26:89:f1:9e:ab:67:e5:5a:66: 2d:ff:eb:09:83:fd:21:ee:5d:be:c6:75:d7:45:fd:da:58:06: 6a:8c:6a:a3:71:2b:2e:da:47:89:a2:60:a1:b8:3f:18:07:2b: 70:87:8f:3e:61:88:08:c1:8c:41:82:12:51:14:a2:bc:02:ae: 44:cb:a4:ca:5b:97:ab:a0:47:77:d1:35:3f:69:b3:c3:0f:14: b5:17:e8:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJFYlRWcwgEW0DiSjV9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzdlZmYwMmYyNDIxYWUyZDlmOTI0YWExMzI3ODRkNzQ3ZjE1NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3mYBtZ3z+DWVg0hxKgYiQVK0o4y mP4r4s4wF7ptlKxw2MhEmEKnLWEcrPefhUKfzav+oiT2nISFpbapDYi7KpsqoWZ0 2nfpAY2Xaja3/YCTHLzg08x+CN2e5NkgiRrs8FlEDCd2TJzOYzhuQdNUy7gYX4Kd 0EHt1RxD+bf4P5FlMfx5wfpH4/cwidkc61JzOnsmIEvhsez6y2glgLj9hZ8IDM3T SKWb5dWN5ONzNWREqITR8ssesR/ouRqjCyyEwNHqy+fDk8dCQcOZVb/pt30niSQh 20BRajPt4HQ41X/8Sn3Ja2HuXQfycGbrZnjqj8Jul3+T1yTc0u6vV1bgwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEd+/wLyQhri2fkkqhMnhNdH8VS1MB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvUjM3X0F2SkNHdUxaLVNTcUV5ZUUxMGZ4VkxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbYHMA0G CSqGSIb3DQEBCwUAA4IBAQBeGwfcbNfdMzn35BrYJ/Pfo+QhZd3X+DWlSX4/Hdcp frih2/QmjmpwyPD9v6oRkZ+1zrVXYbxnokkN5r0spTLJSWgwbMD6VPzF1b5c3Cqy 6gERZruOY2WA84kUw+RXmg4pg9aPgciMJwaXXy/rtZH8Lx2FUpi5VJg6ZOfjqs7N MXp38ZT0tDmV+iAGg2egB/oymU3ydKY5YL9Ko9xX+J0NWHD5aTvhVPWp1EsmifGe q2flWmYt/+sJg/0h7l2+xnXXRf3aWAZqjGqjcSsu2keJomChuD8YBytwh48+YYgI wYxBghJRFKK8Aq5Ey6TKW5eroEd30TU/abPDDxS1F+h5 -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:43 2026 by rpki-client