This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/czMfRJgpYWwnULQtqqWPtGxZ034.roa File: czMfRJgpYWwnULQtqqWPtGxZ034.roa (raw, json) Hash identifier: mbX4pXEOaK5ALTGtde+NqdJWfjILlG0ygUfqaQQo8UI= Subject key identifier: 73:33:1F:44:98:29:61:6C:27:50:B4:2D:AA:A5:8F:B4:6C:59:D3:7E Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f Certificate serial: 019B77C6632BD9D8282F671D71D821795463 Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/czMfRJgpYWwnULQtqqWPtGxZ034.roa Signing time: Thu 01 Jan 2026 04:17:28 +0000 ROA not before: Thu 01 Jan 2026 04:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12993 IP address blocks: 37.203.32.0/21 maxlen: 21 37.203.32.0/23 maxlen: 23 37.203.37.0/24 maxlen: 24 37.203.38.0/24 maxlen: 24 37.203.39.0/24 maxlen: 24 81.94.224.0/20 maxlen: 20 81.94.229.0/24 maxlen: 24 89.111.0.0/18 maxlen: 18 89.111.22.0/24 maxlen: 24 89.111.25.0/24 maxlen: 24 89.111.26.0/24 maxlen: 24 89.111.38.0/24 maxlen: 24 178.16.16.0/20 maxlen: 20 185.34.24.0/22 maxlen: 22 185.34.24.0/23 maxlen: 23 185.34.26.0/23 maxlen: 23 185.219.156.0/22 maxlen: 22 193.108.144.0/22 maxlen: 24 193.108.144.0/23 maxlen: 23 193.108.146.0/24 maxlen: 24 193.108.185.0/24 maxlen: 24 194.9.175.0/24 maxlen: 24 2a00:17c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:63:2b:d9:d8:28:2f:67:1d:71:d8:21:79:54:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f Validity Not Before: Jan 1 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73331f449829616c2750b42daaa58fb46c59d37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:18:1d:32:c3:6b:26:5b:25:44:f5:4b:60: f3:1f:44:62:00:3d:e0:0f:63:04:ec:a1:0e:0f:0f: 91:1c:88:a9:20:4a:d5:6d:eb:d7:b0:97:bc:8b:f4: 78:17:40:c7:68:83:15:55:e1:18:a3:df:b7:79:6d: d0:c0:b7:e4:08:d4:17:51:5c:7c:6f:38:2f:4f:1e: db:e9:14:21:19:ff:65:fb:57:e7:a4:43:8c:bc:b7: b5:25:c0:27:83:bb:66:99:21:a9:78:d2:90:97:dc: 3f:17:5b:9a:f0:01:eb:c9:b5:b0:61:1f:77:a7:00: 0a:7c:43:6e:a2:3a:c4:6d:f9:f2:81:1e:72:f6:25: 8c:95:62:f3:bd:a7:e8:df:ac:0d:1a:ab:e4:bc:59: 4b:e7:b6:60:ba:27:28:d5:0d:d7:4d:bc:e7:f2:cc: 0f:39:7a:57:a9:64:2b:22:94:ad:34:3d:da:d5:40: af:03:54:27:4c:86:43:d3:25:83:ec:c0:59:b4:60: 17:6c:f7:4a:d0:6d:dd:90:f1:78:17:17:45:e4:6a: f9:58:c5:71:13:76:55:40:c0:5c:70:3c:5e:d5:0b: a0:f2:20:45:ce:fe:ce:72:9e:9c:48:f7:8d:0f:b5: 51:68:3e:d5:d1:c0:91:11:f8:f9:a6:0e:7a:08:e6: 52:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:33:1F:44:98:29:61:6C:27:50:B4:2D:AA:A5:8F:B4:6C:59:D3:7E X509v3 Authority Key Identifier: keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/czMfRJgpYWwnULQtqqWPtGxZ034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.32.0/21 81.94.224.0/20 89.111.0.0/18 178.16.16.0/20 185.34.24.0/22 185.219.156.0/22 193.108.144.0/22 193.108.185.0/24 194.9.175.0/24 IPv6: 2a00:17c0::/32 Signature Algorithm: sha256WithRSAEncryption 5c:15:3f:bf:b2:c3:31:f5:e1:20:2a:9a:08:72:8b:b7:f0:4e: dd:dc:08:31:23:91:49:e3:62:2d:95:1b:e8:44:ec:6e:f7:b0: c5:31:2e:7b:03:67:7e:3d:0f:fa:59:bd:a6:93:2b:fb:e6:d8: 5b:81:03:78:fd:cc:78:a4:a6:bd:66:6a:c9:1b:d6:ba:e0:01: 06:f8:f1:84:29:c5:75:33:50:0e:1b:b7:ee:5a:e2:93:88:72: b7:86:33:e1:81:0f:37:b8:44:68:48:b8:88:c1:3c:c3:50:2c: 79:c5:67:4d:3b:86:07:28:e2:3a:aa:f9:32:8b:91:80:96:9f: c5:e0:6c:37:0b:f6:7a:40:a6:8e:ad:6c:43:d4:60:60:42:6e: b6:c8:39:65:e6:cb:c9:82:5d:bb:b8:00:78:78:3e:35:49:35: b8:06:b8:45:62:51:73:b5:aa:74:94:17:d0:3f:96:e2:7b:50: 3b:b9:75:52:72:b7:0b:0f:ed:d2:53:92:46:a3:4a:77:42:94: 46:14:df:bf:94:d9:ef:07:a1:fe:f1:c1:90:b9:cc:66:63:d8: ed:5c:1e:61:4b:37:6b:a3:bd:f9:41:e0:24:2f:1c:74:4c:eb: fc:a6:2b:ff:f5:9c:b3:da:f0:a0:0d:d2:25:a3:03:cd:e3:24: 39:a9:6a:55 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt3xmMr2dgoL2cdcdgheVRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3 NGRlMGYwHhcNMjYwMTAxMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzMzMWY0NDk4Mjk2MTZjMjc1MGI0MmRhYWE1OGZiNDZjNTlkMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugYYHTLDayZbJUT1S2DzH0RiAD3g D2ME7KEODw+RHIipIErVbevXsJe8i/R4F0DHaIMVVeEYo9+3eW3QwLfkCNQXUVx8 bzgvTx7b6RQhGf9l+1fnpEOMvLe1JcAng7tmmSGpeNKQl9w/F1ua8AHrybWwYR93 pwAKfENuojrEbfnygR5y9iWMlWLzvafo36wNGqvkvFlL57Zguico1Q3XTbzn8swP OXpXqWQrIpStND3a1UCvA1QnTIZD0yWD7MBZtGAXbPdK0G3dkPF4FxdF5Gr5WMVx E3ZVQMBccDxe1Qug8iBFzv7Ocp6cSPeND7VRaD7V0cCREfj5pg56COZSTwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFHMzH0SYKWFsJ1C0Laqlj7RsWdN+MB8GA1UdIwQY MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt YWM2N2EzNmU0YWFiLzEvY3pNZlJKZ3BZV3duVUxRdHFxV1B0R3haMDM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDJcsgAwQE UV7gAwQGWW8AAwQEshAQAwQCuSIYAwQCuducAwQCwWyQAwQAwWy5AwQAwgmvMA0E AgACMAcDBQAqABfAMA0GCSqGSIb3DQEBCwUAA4IBAQBcFT+/ssMx9eEgKpoIcou3 8E7d3AgxI5FJ42ItlRvoROxu97DFMS57A2d+PQ/6Wb2mkyv75thbgQN4/cx4pKa9 ZmrJG9a64AEG+PGEKcV1M1AOG7fuWuKTiHK3hjPhgQ83uERoSLiIwTzDUCx5xWdN O4YHKOI6qvkyi5GAlp/F4Gw3C/Z6QKaOrWxD1GBgQm62yDll5svJgl27uAB4eD41 STW4BrhFYlFztap0lBfQP5bie1A7uXVScrcLD+3SU5JGo0p3QpRGFN+/lNnvB6H+ 8cGQucxmY9jtXB5hSzdro735QeAkLxx0TOv8piv/9Zyz2vCgDdIlowPN4yQ5qWpV -----END CERTIFICATE-----Generated at Mon Jan 12 03:11:33 2026 by rpki-client