This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/1zvdcEwkgDgymDIvdRNXraLRNH8.roa File: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (raw, json) Hash identifier: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw= Subject key identifier: D7:3B:DD:70:4C:24:80:38:32:98:32:2F:75:13:57:AD:A2:D1:34:7F Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B7834A011A96DC9B1B8630CE400F99088 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/1zvdcEwkgDgymDIvdRNXraLRNH8.roa Signing time: Thu 01 Jan 2026 06:17:53 +0000 ROA not before: Thu 01 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205056 IP address blocks: 5.157.2.0/23 maxlen: 23 37.72.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a0:11:a9:6d:c9:b1:b8:63:0c:e4:00:f9:90:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 1 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d73bdd704c2480383298322f751357ada2d1347f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:49:90:08:27:59:e7:e7:cc:7b:14:dc:05: 54:4a:8d:6b:d4:61:25:28:a7:82:0e:b6:af:36:91: 4f:1b:2a:86:ab:39:9d:20:15:3d:5d:9f:92:5e:91: a3:6b:44:b4:7f:6e:63:73:c6:26:1f:09:47:85:04: 7d:aa:d1:80:5f:90:96:5c:f2:be:a9:60:bb:30:2a: d8:c5:c4:be:41:91:88:6f:98:d0:67:93:c5:0c:69: 75:e8:80:ec:4b:6e:10:d6:9e:be:d3:e8:22:1a:ed: 40:6e:bc:88:7e:e0:40:0a:1b:9d:4f:7e:24:c0:bf: 97:f7:06:5b:97:f6:e5:31:35:b0:5f:99:0d:e0:e5: f3:4b:cb:9f:be:dd:0b:f0:9f:0a:ef:a5:85:2c:38: 5f:6a:94:5b:be:78:4d:67:a0:1d:18:c9:55:31:ed: 9e:5f:78:f4:d7:ac:ce:10:51:d3:d8:09:32:65:00: f3:66:f9:21:b7:b7:60:df:e3:31:f0:19:4c:68:a4: 55:71:d0:4d:5f:df:e0:a6:7a:42:38:e8:7a:7d:31: 6b:aa:5b:37:57:da:c7:91:71:da:30:67:6d:36:be: d0:f1:28:e5:c6:eb:d9:76:6a:21:9a:e8:7b:ae:53: f2:83:30:32:54:ed:83:37:7b:ef:d8:79:76:2b:ec: 5e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3B:DD:70:4C:24:80:38:32:98:32:2F:75:13:57:AD:A2:D1:34:7F X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/1zvdcEwkgDgymDIvdRNXraLRNH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.2.0/23 37.72.184.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:39:bf:0c:7d:f4:db:c6:3d:59:bc:bc:5c:0b:f8:5c:fb:37: f8:3c:1d:09:fa:b4:11:b7:b4:2a:51:36:b5:52:cc:37:1d:15: 79:c1:da:d6:58:04:0d:c1:db:4d:56:61:f4:39:6f:f0:44:c6: 4d:bb:79:37:f2:b7:7c:dc:92:2c:54:af:09:08:4b:8b:c5:5c: 82:88:ca:74:eb:8a:c9:50:bf:59:eb:db:33:78:0a:6e:e6:9a: 64:10:dd:01:c1:6c:11:76:32:1d:fc:89:05:3f:ee:21:23:f3: 1b:63:9c:ac:19:b4:1f:80:cb:2c:19:8e:9d:78:5f:ff:3a:cc: e9:e8:8d:31:f4:9f:6c:01:ad:09:6d:d3:03:66:9f:ff:08:f7: de:89:d7:0c:ae:a0:70:cd:2a:7f:ff:34:f1:d4:1f:c9:ef:f0: 8a:1e:7d:b0:6b:20:ee:e6:59:18:0e:c8:a1:01:d5:34:1a:37: ec:97:12:19:50:c8:ad:b5:2b:81:73:be:f7:d2:82:29:c3:5a: 71:62:23:cd:87:96:78:75:96:4b:6f:cd:02:f8:45:0c:de:58: 9d:3f:3e:50:c9:c5:12:fa:17:0b:49:74:9a:e5:c9:3c:1b:e9: f0:3e:ac:cc:83:fe:61:6d:0c:3e:bc:00:c8:e3:d5:55:cc:c5: 74:f7:4f:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NKARqW3JsbhjDOQA+ZCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTAxMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzNiZGQ3MDRjMjQ4MDM4MzI5ODMyMmY3NTEzNTdhZGEyZDEzNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqJJkAgnWefnzHsU3AVUSo1r1GEl KKeCDravNpFPGyqGqzmdIBU9XZ+SXpGja0S0f25jc8YmHwlHhQR9qtGAX5CWXPK+ qWC7MCrYxcS+QZGIb5jQZ5PFDGl16IDsS24Q1p6+0+giGu1AbryIfuBAChudT34k wL+X9wZbl/blMTWwX5kN4OXzS8ufvt0L8J8K76WFLDhfapRbvnhNZ6AdGMlVMe2e X3j016zOEFHT2AkyZQDzZvkht7dg3+Mx8BlMaKRVcdBNX9/gpnpCOOh6fTFrqls3 V9rHkXHaMGdtNr7Q8SjlxuvZdmohmuh7rlPygzAyVO2DN3vv2Hl2K+xeeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNc73XBMJIA4MpgyL3UTV62i0TR/MB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMXp2ZGNFd2tnRGd5bURJdmRSTlhyYUxSTkg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBZ0CAwQB JUi4MA0GCSqGSIb3DQEBCwUAA4IBAQAPOb8MffTbxj1ZvLxcC/hc+zf4PB0J+rQR t7QqUTa1Usw3HRV5wdrWWAQNwdtNVmH0OW/wRMZNu3k38rd83JIsVK8JCEuLxVyC iMp064rJUL9Z69szeApu5ppkEN0BwWwRdjId/IkFP+4hI/MbY5ysGbQfgMssGY6d eF//Oszp6I0x9J9sAa0JbdMDZp//CPfeidcMrqBwzSp//zTx1B/J7/CKHn2wayDu 5lkYDsihAdU0GjfslxIZUMittSuBc7730oIpw1pxYiPNh5Z4dZZLb80C+EUM3lid Pz5QycUS+hcLSXSa5ck8G+nwPqzMg/5hbQw+vADI49VVzMV090/P -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:27 2026 by rpki-client