This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/_m7nbQwhxW5w0wbnoPwEGZq5xj4.roa File: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (raw, json) Hash identifier: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ= Subject key identifier: FE:6E:E7:6D:0C:21:C5:6E:70:D3:06:E7:A0:FC:04:19:9A:B9:C6:3E Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B78349D7E1571CF72437D703A1224D228 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/_m7nbQwhxW5w0wbnoPwEGZq5xj4.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51269 IP address blocks: 5.157.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9d:7e:15:71:cf:72:43:7d:70:3a:12:24:d2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe6ee76d0c21c56e70d306e7a0fc04199ab9c63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:ae:dd:a9:d4:9f:ec:f3:2a:50:79:1c:c1: c4:60:3e:da:a7:f0:bc:ad:57:2b:b1:ff:b2:6b:09: 2a:8b:fe:9d:ad:06:24:5c:9f:a1:b1:f6:b4:50:67: 59:0d:73:1e:b8:a4:a5:07:71:83:24:bb:dc:cf:c5: 61:5f:9c:c1:89:5c:18:75:0f:9e:ff:be:73:75:d0: bb:61:2a:fb:ec:aa:2c:72:95:d9:27:d5:f9:71:17: 21:2d:9b:23:c9:89:1a:74:9f:13:f6:62:5f:d0:22: ec:36:39:0a:f6:4d:44:6e:c9:ab:07:fe:b4:2a:b6: d2:d2:d3:66:eb:b0:5a:7f:cc:58:43:f2:cc:51:2b: 7a:b2:f4:72:67:59:10:2d:a6:ec:9e:8e:54:ef:02: ac:59:42:df:f4:78:36:73:5a:ce:ba:3c:87:40:70: 87:45:a0:1b:7b:49:4d:5c:b1:9f:00:d7:84:1c:5b: ad:19:8d:41:8a:e4:30:a6:9c:dd:d4:98:65:1c:0c: be:11:c4:00:97:7b:dd:d8:99:20:f6:49:b1:5c:d6: 8d:c5:62:31:b4:28:93:61:e2:44:98:27:a4:35:74: 56:d1:ec:f0:7f:37:68:ee:ed:ad:f8:43:9f:94:95: 41:32:0f:c3:4b:ec:5a:00:ea:df:06:a4:a3:68:63: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6E:E7:6D:0C:21:C5:6E:70:D3:06:E7:A0:FC:04:19:9A:B9:C6:3E X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/_m7nbQwhxW5w0wbnoPwEGZq5xj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.51.0/24 Signature Algorithm: sha256WithRSAEncryption 12:04:c3:6c:d9:11:1e:cf:f6:b9:6a:71:6c:c8:d6:3f:e3:42: f7:0f:2e:aa:88:97:29:0c:41:41:bd:70:fb:f4:aa:6e:f5:56: 90:d8:95:3a:90:ca:65:65:e6:f6:3e:6b:32:6b:51:f7:1d:e0: 2d:3f:b9:38:2f:53:fe:9f:e6:08:fb:72:0d:de:c0:9f:4d:1a: e5:cc:cc:7b:c0:87:d7:da:f1:8d:89:ee:5e:7a:89:b2:fb:56: ab:58:78:59:87:f5:46:9d:15:de:4f:4c:e8:76:d0:4f:f8:00: e2:1a:d9:7a:6f:5a:44:ea:66:8c:d2:d0:fe:c6:95:69:06:7e: dc:64:be:3d:4e:ad:0b:87:f8:be:9d:aa:eb:57:15:89:8a:1b: e9:be:01:05:4f:ec:6f:cb:af:35:43:82:c8:51:33:e1:d1:16: ea:26:18:8a:fc:8d:38:69:59:68:69:3f:78:2f:49:5e:a8:a1: d6:7d:d1:72:65:a8:c9:e7:5f:87:22:9c:aa:89:d0:8c:79:af: 99:d1:31:7c:79:3e:1f:ab:09:fd:3a:ce:86:f5:60:8c:3e:60: ef:d5:74:17:a1:5b:56:55:03:6a:75:cf:4b:fc:ae:71:94:b9: 87:60:35:3f:94:5d:e3:f3:b6:0d:73:c6:a1:c7:1f:7b:bf:43: aa:6a:6c:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJ1+FXHPckN9cDoSJNIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTZlZTc2ZDBjMjFjNTZlNzBkMzA2ZTdhMGZjMDQxOTlhYjljNjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYSu3anUn+zzKlB5HMHEYD7ap/C8 rVcrsf+yawkqi/6drQYkXJ+hsfa0UGdZDXMeuKSlB3GDJLvcz8VhX5zBiVwYdQ+e /75zddC7YSr77KoscpXZJ9X5cRchLZsjyYkadJ8T9mJf0CLsNjkK9k1EbsmrB/60 KrbS0tNm67Baf8xYQ/LMUSt6svRyZ1kQLabsno5U7wKsWULf9Hg2c1rOujyHQHCH RaAbe0lNXLGfANeEHFutGY1BiuQwppzd1JhlHAy+EcQAl3vd2Jkg9kmxXNaNxWIx tCiTYeJEmCekNXRW0ezwfzdo7u2t+EOflJVBMg/DS+xaAOrfBqSjaGONjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP5u520MIcVucNMG56D8BBmaucY+MB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvX203bmJRd2h4VzV3MHdibm9Qd0VHWnE1eGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZ0zMA0G CSqGSIb3DQEBCwUAA4IBAQASBMNs2REez/a5anFsyNY/40L3Dy6qiJcpDEFBvXD7 9Kpu9VaQ2JU6kMplZeb2Pmsya1H3HeAtP7k4L1P+n+YI+3IN3sCfTRrlzMx7wIfX 2vGNie5eeomy+1arWHhZh/VGnRXeT0zodtBP+ADiGtl6b1pE6maM0tD+xpVpBn7c ZL49Tq0Lh/i+narrVxWJihvpvgEFT+xvy681Q4LIUTPh0RbqJhiK/I04aVloaT94 L0leqKHWfdFyZajJ51+HIpyqidCMea+Z0TF8eT4fqwn9Os6G9WCMPmDv1XQXoVtW VQNqdc9L/K5xlLmHYDU/lF3j87YNc8ahxx97v0Oqamyk -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:41 2026 by rpki-client