This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/odNrW4lU42BAvPE84otnwCnAcjo.roa File: odNrW4lU42BAvPE84otnwCnAcjo.roa (raw, json) Hash identifier: F1kft2u6AJ9vT8iumt/E/kv8R0gxEkszQiPaKkBRYw4= Subject key identifier: A1:D3:6B:5B:89:54:E3:60:40:BC:F1:3C:E2:8B:67:C0:29:C0:72:3A Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7 Certificate serial: 019B7E38267B612F21B9E224F21C7F9608F6 Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/odNrW4lU42BAvPE84otnwCnAcjo.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34309 IP address blocks: 37.156.68.0/24 maxlen: 24 185.146.234.0/24 maxlen: 24 185.165.170.0/24 maxlen: 24 185.247.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:26:7b:61:2f:21:b9:e2:24:f2:1c:7f:96:08:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7 Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1d36b5b8954e36040bcf13ce28b67c029c0723a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:94:f3:39:4b:24:0f:ec:56:4e:0f:b8:4c:ef: 7f:f0:e5:76:8d:2a:1d:a1:67:8a:41:7d:0e:ec:d7: a2:37:54:d0:c3:f7:e8:ff:78:84:b2:88:6d:a8:fb: 3b:9e:ba:b9:a2:4e:b1:a1:ad:f3:e6:b1:8f:92:c3: f8:6d:d9:29:e2:f7:0d:80:8c:4f:8e:e7:c6:d9:e2: e5:23:a9:5d:57:18:a1:4d:98:2a:5a:4a:e1:b0:67: 0c:7e:5e:d6:b7:07:67:41:5e:02:5c:37:13:4e:c6: e0:aa:96:75:fc:d0:0e:58:50:9c:31:c5:7a:85:16: 8f:cb:43:cf:c5:23:70:03:e6:67:6c:2a:b0:54:da: e9:3e:d5:e3:13:87:82:d4:fe:2e:49:56:71:9c:b2: 48:84:90:9e:8e:e6:eb:87:ba:87:88:f4:7e:e2:48: c7:0d:45:6f:b0:a6:3d:73:06:7b:97:9b:91:6e:8c: 9c:3f:f0:c9:88:cb:ce:c9:8c:93:25:0d:b3:79:ec: c9:24:43:4a:18:be:62:b2:5d:96:94:e0:21:0a:16: 7a:d0:88:fb:fa:9d:55:6d:da:d1:79:d2:b7:97:15: 9d:c6:50:6e:ad:79:57:ff:ec:a4:73:30:25:d0:6a: b5:74:4f:d9:9c:42:16:12:d3:56:ec:06:11:88:14: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D3:6B:5B:89:54:E3:60:40:BC:F1:3C:E2:8B:67:C0:29:C0:72:3A X509v3 Authority Key Identifier: keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/odNrW4lU42BAvPE84otnwCnAcjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.68.0/24 185.146.234.0/24 185.165.170.0/24 185.247.226.0/24 Signature Algorithm: sha256WithRSAEncryption 21:6b:86:be:17:c5:74:1c:08:1a:67:60:78:cf:11:12:7a:d3: 13:b3:eb:30:7a:06:91:0b:3f:80:09:98:d5:40:37:9a:b5:26: a1:96:13:b2:3e:26:42:f8:d6:dd:0b:e1:16:a3:09:85:05:4f: 9e:e9:c2:52:e4:e3:af:70:ef:0d:5a:ef:4a:56:79:e8:29:b4: 38:ee:cb:78:55:9b:69:0c:33:f2:b6:38:3d:66:35:09:47:5b: ed:ab:0e:27:82:14:78:e5:9c:3d:16:31:e7:25:70:0c:5a:65: bd:46:d0:8f:6a:80:0c:14:00:6c:88:e7:65:54:4f:0f:ca:f9: 49:ed:ae:20:7d:a6:ec:35:a6:1c:e8:2c:01:ea:f1:c8:64:58: 63:99:96:64:bc:ce:a5:90:0c:70:8a:52:dc:34:ab:5b:0e:95: 05:72:12:40:a6:a6:f8:9e:92:95:42:b1:cd:7a:83:3a:1c:29: e6:ad:64:ba:d7:81:92:2d:16:b3:7c:93:b9:36:eb:ce:fa:ac: 8d:00:34:50:f8:1b:35:f8:5f:f5:e4:d6:cc:22:9d:81:2c:a4: 15:68:68:e7:d2:12:e3:19:e5:bc:3c:08:cd:a7:cd:96:3d:07: 36:5e:3a:79:1c:9e:c5:e9:a8:93:f4:27:19:c8:93:fe:46:cf: 85:a4:ff:3d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OCZ7YS8hueIk8hx/lgj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMDA5ODIyODRhMDUwZDk0MWRiZWJiZDA0YjVkMGM5MTRm NjM1YjcwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWQzNmI1Yjg5NTRlMzYwNDBiY2YxM2NlMjhiNjdjMDI5YzA3MjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pTzOUskD+xWTg+4TO9/8OV2jSod oWeKQX0O7NeiN1TQw/fo/3iEsohtqPs7nrq5ok6xoa3z5rGPksP4bdkp4vcNgIxP jufG2eLlI6ldVxihTZgqWkrhsGcMfl7WtwdnQV4CXDcTTsbgqpZ1/NAOWFCcMcV6 hRaPy0PPxSNwA+ZnbCqwVNrpPtXjE4eC1P4uSVZxnLJIhJCejubrh7qHiPR+4kjH DUVvsKY9cwZ7l5uRboycP/DJiMvOyYyTJQ2zeezJJENKGL5isl2WlOAhChZ60Ij7 +p1VbdrRedK3lxWdxlBurXlX/+ykczAl0Gq1dE/ZnEIWEtNW7AYRiBSWbQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKHTa1uJVONgQLzxPOKLZ8ApwHI6MB8GA1UdIwQY MBaAFEIAmCKEoFDZQdvrvQS10MkU9jW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAt NTFkYzJiMDk2ZGVmLzEvb2ROclc0bFU0MkJBdlBFODRvdG53Q25BY2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAtNTFkYzJiMDk2ZGVm LzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJZxEAwQA uZLqAwQAuaWqAwQAuffiMA0GCSqGSIb3DQEBCwUAA4IBAQAha4a+F8V0HAgaZ2B4 zxESetMTs+swegaRCz+ACZjVQDeatSahlhOyPiZC+NbdC+EWowmFBU+e6cJS5OOv cO8NWu9KVnnoKbQ47st4VZtpDDPytjg9ZjUJR1vtqw4nghR45Zw9FjHnJXAMWmW9 RtCPaoAMFABsiOdlVE8PyvlJ7a4gfabsNaYc6CwB6vHIZFhjmZZkvM6lkAxwilLc NKtbDpUFchJApqb4npKVQrHNeoM6HCnmrWS614GSLRazfJO5NuvO+qyNADRQ+Bs1 +F/15NbMIp2BLKQVaGjn0hLjGeW8PAjNp82WPQc2Xjp5HJ7F6aiT9CcZyJP+Rs+F pP89 -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:08 2026 by rpki-client