This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/x0-zbjoQNIYj_qDoGiAxC9MpnYc.roa File: x0-zbjoQNIYj_qDoGiAxC9MpnYc.roa (raw, json) Hash identifier: 7TMD01f8lLY3g9AO1/72S5iTfUyRV4cwvwL1UdzW4pQ= Subject key identifier: C7:4F:B3:6E:3A:10:34:86:23:FE:A0:E8:1A:20:31:0B:D3:29:9D:87 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F144315E257EF6A82A17EC8BABC9AE5 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/x0-zbjoQNIYj_qDoGiAxC9MpnYc.roa Signing time: Fri 02 Jan 2026 14:19:52 +0000 ROA not before: Fri 02 Jan 2026 14:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42739 IP address blocks: 37.139.144.0/24 maxlen: 24 37.139.145.0/24 maxlen: 24 37.139.146.0/24 maxlen: 24 37.139.147.0/24 maxlen: 24 37.139.148.0/24 maxlen: 24 37.139.149.0/24 maxlen: 24 37.139.150.0/24 maxlen: 24 37.139.151.0/24 maxlen: 24 77.242.224.0/20 maxlen: 20 77.242.233.0/24 maxlen: 24 77.242.234.0/24 maxlen: 24 77.242.235.0/24 maxlen: 24 78.159.64.0/20 maxlen: 20 78.159.83.0/24 maxlen: 24 92.55.192.0/18 maxlen: 18 92.55.220.0/24 maxlen: 24 92.55.226.0/24 maxlen: 24 185.46.92.0/22 maxlen: 22 188.112.0.0/18 maxlen: 18 188.112.57.0/24 maxlen: 24 2a02:7f0::/32 maxlen: 32 2a02:7f0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:43:15:e2:57:ef:6a:82:a1:7e:c8:ba:bc:9a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c74fb36e3a10348623fea0e81a20310bd3299d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:97:0c:5f:ca:72:2c:39:6d:a5:be:c7:28: ab:fe:1b:e8:06:0b:1d:ce:9b:50:66:82:50:e3:90: 08:5c:e6:aa:c5:21:15:3f:e7:e3:15:40:39:fe:29: f2:70:1b:e4:c4:e6:39:39:26:b9:48:94:f1:32:24: da:21:46:aa:9a:c1:af:01:3f:0d:d1:7a:4b:d4:36: 44:51:cb:2b:5c:d8:c7:c2:30:81:99:6b:fb:8c:6d: 68:bf:3a:7c:14:48:b1:54:9c:7c:cf:5e:83:53:56: aa:d4:02:59:b6:71:49:01:45:1b:e2:ae:d8:c5:dc: cd:b5:42:0c:f9:1b:95:5e:26:b0:44:44:90:c1:cc: ab:e5:bc:6d:66:24:38:cc:07:1f:6c:8f:8c:da:b9: 7d:e9:45:05:83:0f:e8:73:00:a5:83:57:2f:ff:b7: ca:19:ad:04:83:cf:6e:13:f1:34:62:c6:96:f3:35: 22:0b:48:24:78:df:c9:73:74:15:54:b6:8c:1b:e7: e5:fb:7b:11:fd:4d:79:26:b3:fc:dc:c4:d4:34:59: 70:ef:a0:aa:09:0e:92:5e:cf:64:5e:d5:92:1b:32: f7:f7:52:11:e2:d5:a3:99:e7:3a:2d:97:0e:a4:01: 45:e7:c5:14:1d:a6:0e:53:c6:d9:4b:49:75:44:2a: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4F:B3:6E:3A:10:34:86:23:FE:A0:E8:1A:20:31:0B:D3:29:9D:87 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/x0-zbjoQNIYj_qDoGiAxC9MpnYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.144.0/21 77.242.224.0/20 78.159.64.0/20 78.159.83.0/24 92.55.192.0/18 185.46.92.0/22 188.112.0.0/18 IPv6: 2a02:7f0::/32 Signature Algorithm: sha256WithRSAEncryption ba:f1:82:1d:58:81:0b:79:bc:0d:bc:84:c3:31:62:e9:8e:1b: db:2a:0c:f0:83:76:d1:f5:6f:af:18:51:ec:51:e7:c4:6f:28: 84:c7:01:f2:f4:ca:b7:0f:41:b4:f3:c0:77:cb:d8:3a:03:79: 8e:cc:94:42:e7:65:13:c5:cc:e9:08:cf:64:f4:5e:89:6b:a7: 36:31:3f:0f:1f:af:70:22:fd:66:40:48:72:5b:37:c4:a0:0d: e8:99:51:af:da:84:d5:3d:6a:8a:21:96:67:af:2a:08:f4:d6: d9:19:8b:3c:87:73:66:fd:ca:07:b7:d6:e1:f0:07:af:02:0a: 31:d8:68:0a:76:1c:f2:c9:f9:69:1b:94:8d:0f:98:8d:57:1b: bc:1a:90:28:48:05:55:07:4b:95:11:60:ed:f5:d1:5f:38:75: 40:e2:26:2f:03:50:e1:f2:52:f9:b6:8b:86:d3:6f:2e:05:dc: f6:bd:7a:11:6f:2c:88:88:09:30:9a:33:91:5f:8e:e9:8a:fd: 89:6e:c5:7d:9e:d0:69:1e:e1:4f:b5:35:52:6a:b5:5f:c0:63: e5:ed:9b:e2:4b:28:eb:02:67:9a:92:b3:b5:bc:7a:3e:ca:51: 1b:57:6d:92:23:41:03:13:e4:a8:28:5a:12:bf:50:4d:eb:db: 84:73:73:01 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt/FEMV4lfvaoKhfsi6vJrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzRmYjM2ZTNhMTAzNDg2MjNmZWEwZTgxYTIwMzEwYmQzMjk5ZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz2XDF/Kciw5baW+xyir/hvoBgsd zptQZoJQ45AIXOaqxSEVP+fjFUA5/inycBvkxOY5OSa5SJTxMiTaIUaqmsGvAT8N 0XpL1DZEUcsrXNjHwjCBmWv7jG1ovzp8FEixVJx8z16DU1aq1AJZtnFJAUUb4q7Y xdzNtUIM+RuVXiawRESQwcyr5bxtZiQ4zAcfbI+M2rl96UUFgw/ocwClg1cv/7fK Ga0Eg89uE/E0YsaW8zUiC0gkeN/Jc3QVVLaMG+fl+3sR/U15JrP83MTUNFlw76Cq CQ6SXs9kXtWSGzL391IR4tWjmec6LZcOpAFF58UUHaYOU8bZS0l1RCrZkwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFMdPs246EDSGI/6g6BogMQvTKZ2HMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEveDAtemJqb1FOSVlqX3FEb0dpQXhDOU1wblljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDJYuQAwQE TfLgAwQETp9AAwQATp9TAwQGXDfAAwQCuS5cAwQGvHAAMA0EAgACMAcDBQAqAgfw MA0GCSqGSIb3DQEBCwUAA4IBAQC68YIdWIELebwNvITDMWLpjhvbKgzwg3bR9W+v GFHsUefEbyiExwHy9Mq3D0G088B3y9g6A3mOzJRC52UTxczpCM9k9F6Ja6c2MT8P H69wIv1mQEhyWzfEoA3omVGv2oTVPWqKIZZnryoI9NbZGYs8h3Nm/coHt9bh8Aev Agox2GgKdhzyyflpG5SND5iNVxu8GpAoSAVVB0uVEWDt9dFfOHVA4iYvA1Dh8lL5 touG028uBdz2vXoRbyyIiAkwmjORX47piv2JbsV9ntBpHuFPtTVSarVfwGPl7Zvi SyjrAmeakrO1vHo+ylEbV22SI0EDE+SoKFoSv1BN69uEc3MB -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:36 2026 by rpki-client