This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa File: BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa (raw, json) Hash identifier: heMoRIVQ8DTd9ArcP8LzeG/e00sDzEjtg2TIan/SctQ= Subject key identifier: 06:05:27:8C:28:00:3C:33:9F:47:8C:FF:15:37:7F:4E:91:D5:27:45 Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Certificate serial: 019B7C12ABADE63CA0C1D263EB2DA47C60F2 Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa Signing time: Fri 02 Jan 2026 00:19:16 +0000 ROA not before: Fri 02 Jan 2026 00:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35246 IP address blocks: 2.57.37.0/24 maxlen: 24 2.57.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ab:ad:e6:3c:a0:c1:d2:63:eb:2d:a4:7c:60:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0605278c28003c339f478cff15377f4e91d52745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:dc:b5:f1:dd:4b:51:b5:63:12:5e:73:59: 78:21:5f:b7:8f:85:51:13:9a:bd:86:db:40:2f:b0: 86:82:0f:11:c8:3b:72:22:70:bc:64:c1:bc:24:9f: 31:12:88:02:9b:8c:e3:97:92:87:26:90:d1:69:70: 7f:8c:20:31:27:7f:d5:e1:51:cd:68:3d:d3:9f:01: 75:df:db:d7:63:d7:5c:1a:1b:61:2c:05:9e:3b:04: 88:75:82:0e:c5:43:d3:fa:66:99:1c:38:63:3f:6f: f6:39:48:e9:9d:7d:69:b2:bc:b9:e3:5d:cf:a3:3d: cb:8d:50:76:08:83:7d:9e:cc:ae:ff:80:05:30:f1: d4:ef:1e:39:31:12:a0:23:7c:59:ed:c9:b7:8c:f4: 74:cd:c3:0d:b4:14:58:eb:62:ce:76:10:06:92:ee: ab:d7:08:2e:eb:20:ec:b6:5b:d7:00:2a:08:de:5d: f6:b3:6e:5f:76:3b:f9:88:52:70:f6:87:3e:c0:df: 85:90:c2:a6:4b:33:b6:6e:70:b3:b4:5f:59:9a:35: a5:ce:7f:4e:52:ac:00:bc:a1:73:05:c9:e1:34:56: 84:3c:57:3e:34:9c:3c:ee:36:98:20:fc:c5:a0:d1: c3:b1:e1:f5:01:a1:52:08:9a:5e:18:61:df:b9:62: dd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:05:27:8C:28:00:3C:33:9F:47:8C:FF:15:37:7F:4E:91:D5:27:45 X509v3 Authority Key Identifier: keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/BgUnjCgAPDOfR4z_FTd_TpHVJ0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.37.0-2.57.38.255 Signature Algorithm: sha256WithRSAEncryption 96:c6:22:3d:f5:66:69:f9:fb:fa:6a:e7:8a:8e:e9:4a:38:eb: 8d:07:6e:a4:35:22:6c:51:ae:e1:51:5c:9d:f5:82:12:5c:e9: 17:64:22:2a:62:4a:ef:15:44:fa:83:f1:15:75:4e:fa:67:9a: 40:e0:ce:6b:f5:58:30:a7:9b:e8:71:fa:4d:fc:52:fb:8a:cd: e4:7d:ff:bf:34:94:36:b6:c0:3e:7d:8e:11:d6:7f:f3:a0:3c: aa:74:d9:92:52:62:86:b2:3f:89:1c:b2:db:ad:31:1c:1e:81: 44:dc:31:ab:6d:8f:81:af:0e:aa:4f:a6:74:4b:60:c6:43:97: ef:a8:a3:18:e7:47:6c:9a:da:4e:fb:49:ef:bf:1a:61:e2:62: d8:83:0f:bd:3d:70:38:bd:89:57:ab:24:5c:3d:ff:39:2e:85: 14:b3:af:1c:19:1b:da:14:17:eb:70:7b:ba:8d:5d:f1:a1:40: 4f:61:cf:2c:69:5e:4a:80:eb:75:83:88:8c:4f:f4:cb:93:e8: 64:0b:65:db:e0:26:4d:74:40:b7:b5:e6:d0:c3:e7:7c:e9:8f: 87:a3:ad:9a:68:22:c1:de:59:2c:65:78:fa:24:db:7f:7e:a5: 47:3c:9a:82:a0:a2:f9:61:cf:d8:a5:60:3a:71:85:ac:28:f7: ba:81:60:4e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8Equt5jygwdJj6y2kfGDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1 NTI2ZmEwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjA1Mjc4YzI4MDAzYzMzOWY0NzhjZmYxNTM3N2Y0ZTkxZDUyNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKDctfHdS1G1YxJec1l4IV+3j4VR E5q9httAL7CGgg8RyDtyInC8ZMG8JJ8xEogCm4zjl5KHJpDRaXB/jCAxJ3/V4VHN aD3TnwF139vXY9dcGhthLAWeOwSIdYIOxUPT+maZHDhjP2/2OUjpnX1psry5413P oz3LjVB2CIN9nsyu/4AFMPHU7x45MRKgI3xZ7cm3jPR0zcMNtBRY62LOdhAGku6r 1wgu6yDstlvXACoI3l32s25fdjv5iFJw9oc+wN+FkMKmSzO2bnCztF9ZmjWlzn9O UqwAvKFzBcnhNFaEPFc+NJw87jaYIPzFoNHDseH1AaFSCJpeGGHfuWLdgwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAYFJ4woADwzn0eM/xU3f06R1SdFMB8GA1UdIwQY MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct NmVkYzFiMjI1NjI1LzEvQmdVbmpDZ0FQRE9mUjR6X0ZUZF9UcEhWSjBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1 LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAACOSUD BAACOSYwDQYJKoZIhvcNAQELBQADggEBAJbGIj31Zmn5+/pq54qO6Uo4640HbqQ1 ImxRruFRXJ31ghJc6RdkIipiSu8VRPqD8RV1TvpnmkDgzmv1WDCnm+hx+k38UvuK zeR9/780lDa2wD59jhHWf/OgPKp02ZJSYoayP4kcstutMRwegUTcMattj4GvDqpP pnRLYMZDl++ooxjnR2ya2k77Se+/GmHiYtiDD709cDi9iVerJFw9/zkuhRSzrxwZ G9oUF+twe7qNXfGhQE9hzyxpXkqA63WDiIxP9MuT6GQLZdvgJk10QLe15tDD53zp j4ejrZpoIsHeWSxlePok239+pUc8moKgovlhz9ilYDpxhawo97qBYE4= -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:17 2026 by rpki-client