This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/lJ9R5Dh_kyvQTqID5Ptu3Jzlprg.roa File: lJ9R5Dh_kyvQTqID5Ptu3Jzlprg.roa (raw, json) Hash identifier: GdaCvKcF3hhpCqRpHUMph71fNwvXQ4kAIUixuBm8+iU= Subject key identifier: 94:9F:51:E4:38:7F:93:2B:D0:4E:A2:03:E4:FB:6E:DC:9C:E5:A6:B8 Certificate issuer: /CN=45d58323e7d4f91c37297cd1926566033b3f8aba Certificate serial: 019B7EA724A6E2A03134C7DF7B85C39D99AD Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/lJ9R5Dh_kyvQTqID5Ptu3Jzlprg.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60609 IP address blocks: 2.57.100.0/24 maxlen: 24 2.57.101.0/24 maxlen: 24 2.57.102.0/24 maxlen: 24 2.57.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:24:a6:e2:a0:31:34:c7:df:7b:85:c3:9d:99:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=949f51e4387f932bd04ea203e4fb6edc9ce5a6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:38:62:aa:59:71:f4:e0:f3:c9:40:bc:77: 4b:81:25:39:ca:cb:c8:18:62:28:1d:a4:b2:92:ae: ed:41:9f:52:27:5b:0e:46:19:42:2b:31:92:70:24: 25:59:0e:2e:86:7d:89:7b:c7:1d:d2:95:e6:35:17: 0b:6a:62:79:88:4e:07:be:a8:2a:e9:b8:01:8c:9f: 57:01:9b:5a:b3:30:51:32:6c:93:61:55:1d:31:93: 0f:4e:7b:ae:4d:32:86:7d:07:36:35:f7:30:b1:1c: 44:77:2c:dc:5d:83:f6:32:74:7d:e3:79:9e:94:d5: b8:26:ae:c3:5f:a8:29:c2:72:4a:13:1a:b9:14:c0: 2a:63:a1:34:67:f8:a7:f7:16:f8:3a:19:a9:51:72: 4a:70:f5:e1:6a:43:1e:f9:03:3f:02:47:e3:b8:c6: a0:d5:1f:06:1f:cf:ac:92:f6:35:91:e0:af:9f:11: f7:67:21:64:73:5c:d4:d5:be:aa:93:6a:09:5f:ca: ea:78:89:17:8c:97:40:c0:2e:19:74:d5:87:46:5f: 43:4d:19:f8:d6:9d:3d:8d:0f:ca:c4:bc:a3:c1:04: cc:d9:dd:4d:d4:12:22:58:af:7d:65:d9:15:36:fa: 6a:9a:b3:40:b3:11:35:35:3f:c7:7f:8d:0f:94:9a: 6c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:9F:51:E4:38:7F:93:2B:D0:4E:A2:03:E4:FB:6E:DC:9C:E5:A6:B8 X509v3 Authority Key Identifier: keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/lJ9R5Dh_kyvQTqID5Ptu3Jzlprg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.100.0/22 Signature Algorithm: sha256WithRSAEncryption c8:46:fb:e6:e2:3c:e4:1c:ef:82:77:6c:19:92:90:be:05:eb: 29:a6:5c:68:27:c0:dd:4a:ca:d5:e6:15:60:2c:ed:be:8b:5c: 73:21:a0:86:86:07:10:1f:64:63:97:78:47:f8:ac:a5:cc:75: db:9e:c3:22:e0:96:4c:1a:9f:c5:35:aa:c0:be:ad:0a:6e:a0: ce:86:91:2d:a0:57:7d:c4:39:94:b0:27:6f:e5:a2:32:3f:ca: 9b:dd:9c:e9:fd:32:c6:32:60:6f:6b:f7:f1:97:2b:06:4d:c5: cd:6b:45:3f:ef:d1:a3:c5:2b:ed:4f:99:f4:78:e9:c5:8c:cd: 65:41:b8:b2:c6:10:f9:38:2c:5c:9e:d3:62:42:14:5b:65:25: 7e:f4:91:57:1d:20:82:17:07:d5:81:46:36:e7:f7:f9:68:22: 14:90:e5:1a:2d:c8:89:52:d4:f3:83:50:be:21:c7:34:0e:8b: 37:24:e1:e5:ef:db:58:9f:6b:52:25:7c:9c:7f:05:86:01:77: 2b:0d:e8:24:df:8f:01:72:f5:10:89:28:cf:c5:4d:6a:17:20: 3b:5f:1b:69:43:96:39:a6:42:7f:e0:8a:a8:34:85:76:19:f9: c1:59:3f:c8:d5:ec:90:58:57:c6:d7:20:99:bd:71:a0:63:b4: df:4e:33:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pySm4qAxNMffe4XDnZmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZDU4MzIzZTdkNGY5MWMzNzI5N2NkMTkyNjU2NjAzM2Iz ZjhhYmEwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDlmNTFlNDM4N2Y5MzJiZDA0ZWEyMDNlNGZiNmVkYzljZTVhNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx44YqpZcfTg88lAvHdLgSU5ysvI GGIoHaSykq7tQZ9SJ1sORhlCKzGScCQlWQ4uhn2Je8cd0pXmNRcLamJ5iE4Hvqgq 6bgBjJ9XAZtaszBRMmyTYVUdMZMPTnuuTTKGfQc2NfcwsRxEdyzcXYP2MnR943me lNW4Jq7DX6gpwnJKExq5FMAqY6E0Z/in9xb4OhmpUXJKcPXhakMe+QM/AkfjuMag 1R8GH8+skvY1keCvnxH3ZyFkc1zU1b6qk2oJX8rqeIkXjJdAwC4ZdNWHRl9DTRn4 1p09jQ/KxLyjwQTM2d1N1BIiWK99ZdkVNvpqmrNAsxE1NT/Hf40PlJps0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSfUeQ4f5Mr0E6iA+T7btyc5aa4MB8GA1UdIwQY MBaAFEXVgyPn1PkcNyl80ZJlZgM7P4q6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lYzI4MzMtYmIwZi00OTI0LTg1MTct ZjNkZjYxNzdhMmJiLzEvbEo5UjVEaF9reXZRVHFJRDVQdHUzSnpscHJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9lYzI4MzMtYmIwZi00OTI0LTg1MTctZjNkZjYxNzdhMmJi LzEvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjlkMA0G CSqGSIb3DQEBCwUAA4IBAQDIRvvm4jzkHO+Cd2wZkpC+BespplxoJ8DdSsrV5hVg LO2+i1xzIaCGhgcQH2Rjl3hH+KylzHXbnsMi4JZMGp/FNarAvq0KbqDOhpEtoFd9 xDmUsCdv5aIyP8qb3Zzp/TLGMmBva/fxlysGTcXNa0U/79GjxSvtT5n0eOnFjM1l QbiyxhD5OCxcntNiQhRbZSV+9JFXHSCCFwfVgUY25/f5aCIUkOUaLciJUtTzg1C+ Icc0Dos3JOHl79tYn2tSJXycfwWGAXcrDegk348BcvUQiSjPxU1qFyA7XxtpQ5Y5 pkJ/4IqoNIV2GfnBWT/I1eyQWFfG1yCZvXGgY7TfTjNg -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:25 2026 by rpki-client