This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/43BDuYzZKT6GuNcPCdD6yFXu9KU.roa File: 43BDuYzZKT6GuNcPCdD6yFXu9KU.roa (raw, json) Hash identifier: BR04tqYW3l6HUM2rcLyj1VGl9Tid3trcvH2fcQ2YbBo= Subject key identifier: E3:70:43:B9:8C:D9:29:3E:86:B8:D7:0F:09:D0:FA:C8:55:EE:F4:A5 Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c Certificate serial: 019B797EF59A7A1E160507AE11CF13ACA08E Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/43BDuYzZKT6GuNcPCdD6yFXu9KU.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198569 IP address blocks: 37.152.160.0/24 maxlen: 24 37.152.161.0/24 maxlen: 24 37.152.162.0/24 maxlen: 24 37.152.163.0/24 maxlen: 24 37.152.164.0/24 maxlen: 24 37.152.167.0/24 maxlen: 24 37.152.168.0/24 maxlen: 24 37.152.169.0/24 maxlen: 24 37.152.170.0/24 maxlen: 24 37.152.171.0/24 maxlen: 24 37.152.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f5:9a:7a:1e:16:05:07:ae:11:cf:13:ac:a0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e37043b98cd9293e86b8d70f09d0fac855eef4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:eb:64:ac:96:a4:ef:ec:94:91:41:07:ac: 5b:06:77:6c:8a:dc:fa:ab:60:c6:88:30:57:c8:1d: 1b:06:8b:a5:77:df:3e:4f:54:2f:14:6e:d9:4b:91: 85:9a:7e:0f:e1:20:b0:c3:79:9e:f7:64:7a:a0:dd: 6f:c8:5c:04:29:08:cb:5a:39:0a:06:70:a4:81:b8: 0c:7a:3e:69:05:57:61:58:4d:ae:54:f2:f2:6d:13: dd:0e:03:55:b9:48:dc:6f:a4:bc:a3:8e:0a:05:9e: 6a:78:e4:4c:b2:f4:99:3a:48:84:15:13:02:f0:89: a0:1d:00:de:c0:2d:94:a5:57:7d:a6:b0:d3:6b:da: 29:89:4c:13:22:4e:30:98:8f:bc:23:d7:e1:86:92: 70:a1:70:9e:bb:20:52:2c:04:65:c7:94:d5:5e:0d: 31:81:c8:b9:ce:0e:ca:e0:1a:2b:fa:af:a5:1d:bd: 52:c2:d2:2a:e3:1c:e0:a8:ff:95:f0:63:98:c4:a8: 7d:69:7c:a7:3c:a7:8a:d6:fa:59:9f:e1:50:08:92: aa:3f:84:bb:6e:71:47:85:ff:ea:82:04:96:88:9d: 8a:8a:c3:b1:1d:a9:11:11:75:f6:5e:3c:aa:3f:9a: 69:e2:11:09:31:9f:54:c8:b0:2f:45:f9:a2:bb:9a: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:70:43:B9:8C:D9:29:3E:86:B8:D7:0F:09:D0:FA:C8:55:EE:F4:A5 X509v3 Authority Key Identifier: keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/43BDuYzZKT6GuNcPCdD6yFXu9KU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.152.160.0-37.152.164.255 37.152.167.0-37.152.172.255 Signature Algorithm: sha256WithRSAEncryption 46:c7:7f:e7:21:2b:cb:5c:f2:61:fb:36:1f:cf:dc:61:58:5c: ab:cd:27:57:94:a0:2f:63:bc:0a:48:a4:2c:16:eb:74:fa:ed: 06:90:57:bb:c3:ad:de:e3:21:3e:6a:fb:e4:ae:74:8f:76:25: 06:29:ab:ed:f2:2d:eb:64:7a:6e:17:12:8d:5e:2d:7f:ad:1e: b1:e3:f0:06:b1:02:31:f0:c7:99:ff:62:ad:ba:6d:98:11:40: 09:ca:96:c9:1f:de:18:0a:a9:1d:69:f0:ea:a5:2c:c8:11:7e: 1d:ba:1c:08:0d:43:1f:06:e9:4f:e1:f2:64:4c:95:0e:1d:cb: cf:d5:38:cd:24:18:ec:85:89:ff:1c:7e:1f:e0:9d:87:30:94: d5:3f:8b:2b:e6:71:92:b1:d2:65:c9:f3:30:e8:6c:47:ee:b2: fd:84:9f:87:88:af:e7:de:b4:94:d7:e6:f5:1b:7b:75:d9:ca: 16:bd:01:44:13:3d:c9:0e:cd:5b:cd:20:9a:cb:af:63:03:12: 38:f7:69:73:36:8d:f3:39:71:ae:85:02:6f:40:a7:ba:28:73: bd:4f:11:b2:a9:1a:47:5c:1a:8c:5c:78:22:54:9a:32:c0:cd: 72:39:e0:8c:9a:58:c7:0d:1d:a8:b3:b0:9d:7f:c2:ca:14:ab: 0e:79:7a:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt5fvWaeh4WBQeuEc8TrKCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OTZmMGRjMTY1YjdjZDIwOTAyMmIyOTY0ODM0YzQ1ZTc0 ZDIxMmMwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzcwNDNiOThjZDkyOTNlODZiOGQ3MGYwOWQwZmFjODU1ZWVmNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK/rZKyWpO/slJFBB6xbBndsitz6 q2DGiDBXyB0bBould98+T1QvFG7ZS5GFmn4P4SCww3me92R6oN1vyFwEKQjLWjkK BnCkgbgMej5pBVdhWE2uVPLybRPdDgNVuUjcb6S8o44KBZ5qeORMsvSZOkiEFRMC 8ImgHQDewC2UpVd9prDTa9opiUwTIk4wmI+8I9fhhpJwoXCeuyBSLARlx5TVXg0x gci5zg7K4Bor+q+lHb1SwtIq4xzgqP+V8GOYxKh9aXynPKeK1vpZn+FQCJKqP4S7 bnFHhf/qggSWiJ2KisOxHakREXX2XjyqP5pp4hEJMZ9UyLAvRfmiu5oWewIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFONwQ7mM2Sk+hrjXDwnQ+shV7vSlMB8GA1UdIwQY MBaAFGWW8NwWW3zSCQIrKWSDTEXnTSEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85OTA0YjMtOGNhMC00OTQ2LTg3NjYt MmQxM2NmOWI0NWMwLzEvNDNCRHVZelpLVDZHdU5jUENkRDZ5Rlh1OUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85OTA0YjMtOGNhMC00OTQ2LTg3NjYtMmQxM2NmOWI0NWMw LzEvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAUlmKAD BAAlmKQwDAMEACWYpwMEACWYrDANBgkqhkiG9w0BAQsFAAOCAQEARsd/5yEry1zy Yfs2H8/cYVhcq80nV5SgL2O8CkikLBbrdPrtBpBXu8Ot3uMhPmr75K50j3YlBimr 7fIt62R6bhcSjV4tf60esePwBrECMfDHmf9irbptmBFACcqWyR/eGAqpHWnw6qUs yBF+HbocCA1DHwbpT+HyZEyVDh3Lz9U4zSQY7IWJ/xx+H+CdhzCU1T+LK+ZxkrHS ZcnzMOhsR+6y/YSfh4iv5960lNfm9Rt7ddnKFr0BRBM9yQ7NW80gmsuvYwMSOPdp czaN8zlxroUCb0CnuihzvU8RsqkaR1wajFx4IlSaMsDNcjngjJpYxw0dqLOwnX/C yhSrDnl6aQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:15 2026 by rpki-client