This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/57GlcaGY8t0-JNPIK_ZNj3qb4xk.roa File: 57GlcaGY8t0-JNPIK_ZNj3qb4xk.roa (raw, json) Hash identifier: kEdl9HoBzbXYtbynMGANu3aJP2xP3zxifNgIx1WuYN8= Subject key identifier: E7:B1:A5:71:A1:98:F2:DD:3E:24:D3:C8:2B:F6:4D:8F:7A:9B:E3:19 Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Certificate serial: 019B79ECC205276413478F556C013A634D00 Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/57GlcaGY8t0-JNPIK_ZNj3qb4xk.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48539 IP address blocks: 109.205.189.0/24 maxlen: 24 146.19.131.0/24 maxlen: 24 178.212.137.0/24 maxlen: 24 194.63.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c2:05:27:64:13:47:8f:55:6c:01:3a:63:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7b1a571a198f2dd3e24d3c82bf64d8f7a9be319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:e4:05:43:47:fc:18:d7:d1:aa:5d:52:ec: eb:4f:fe:f4:ef:d3:ff:08:8a:2c:5a:8e:c1:11:2f: 5c:e8:47:fb:b8:b4:67:ca:2d:8e:0d:1a:85:20:64: 2c:50:35:25:a1:63:12:a0:a1:2e:5e:99:18:73:b3: d9:ff:0b:f5:4c:6b:eb:a8:07:24:5d:fe:cc:32:12: 87:34:b9:ed:be:2b:0f:82:93:94:41:ce:a2:fd:ba: cc:36:fd:95:78:6b:51:68:1a:62:d3:f9:6f:c6:cc: 1d:82:89:b8:49:85:a3:70:cc:78:40:4a:30:d0:1e: 7e:9b:79:d6:2c:5c:04:77:d1:2c:22:4a:c0:eb:97: 49:0d:b3:56:72:9f:ab:f5:fa:59:41:7c:58:b5:a1: b4:8d:8a:47:07:51:7e:57:24:bf:2e:8a:94:23:e0: 2e:5c:95:0b:50:0f:67:04:0f:92:71:25:25:35:d9: 96:43:ec:da:12:c6:64:dd:51:b6:d6:c8:16:f6:c0: f8:a0:3c:4b:3c:8d:1d:b9:04:98:86:77:c8:68:c8: b6:9f:91:67:f8:2d:71:ed:d3:20:7c:e1:8a:f9:c1: 8a:b0:94:a6:73:fd:30:f3:c2:4c:ea:27:39:ff:2c: 0f:b6:60:5a:b0:92:21:fc:73:86:10:d3:3e:7e:88: ff:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B1:A5:71:A1:98:F2:DD:3E:24:D3:C8:2B:F6:4D:8F:7A:9B:E3:19 X509v3 Authority Key Identifier: keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/57GlcaGY8t0-JNPIK_ZNj3qb4xk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.189.0/24 146.19.131.0/24 178.212.137.0/24 194.63.144.0/24 Signature Algorithm: sha256WithRSAEncryption 28:4c:6a:c2:fe:6a:fd:29:92:c9:92:e1:ff:d9:78:06:27:d1: 7a:f4:b8:59:12:ab:a1:51:b9:b3:8d:ca:f7:52:d7:54:c1:82: da:d1:2b:e3:07:06:e3:c9:55:43:db:86:a8:1a:7c:22:72:1e: 43:5b:6d:17:d1:df:f5:20:b7:9f:98:c2:91:9d:a2:6c:f0:09: b9:5a:80:7b:fb:73:fd:cd:c1:7a:34:6e:ef:dc:5c:e2:79:fe: 4b:aa:4f:f9:a3:81:05:fa:e3:37:ab:16:4a:29:3f:fa:38:e1: 63:78:36:bf:09:40:a5:3a:01:11:fb:fe:a1:2f:6c:95:5e:29: 12:d5:e0:c6:2d:05:6b:1a:b9:16:27:86:94:a6:8b:56:7f:88: 82:92:2a:aa:c1:8c:b3:af:47:4d:ed:a6:98:5a:d7:a1:25:d9: 1c:e4:1f:d1:64:d7:bb:01:97:5b:d9:f4:b9:27:3b:81:54:29: c0:71:2b:a5:44:6a:7d:70:cf:7e:fd:b7:60:da:06:e7:1c:26: f9:4f:3c:9c:d3:be:4a:65:c0:9d:35:e9:0d:11:c5:5b:9a:0a: ab:bd:20:ca:fc:38:e4:db:bf:f8:57:f4:e7:81:87:0b:c4:14: 23:4e:4c:09:39:54:73:62:f7:a7:15:35:5c:a9:c8:29:05:61: 1b:ee:36:ce -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57MIFJ2QTR49VbAE6Y00AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2NjOGY0YjM3ZDg5MjI4Y2QwMjNkMjUyMWQyOTk2OGRl MGI5MjUwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2IxYTU3MWExOThmMmRkM2UyNGQzYzgyYmY2NGQ4ZjdhOWJlMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmTkBUNH/BjX0apdUuzrT/7079P/ CIosWo7BES9c6Ef7uLRnyi2ODRqFIGQsUDUloWMSoKEuXpkYc7PZ/wv1TGvrqAck Xf7MMhKHNLntvisPgpOUQc6i/brMNv2VeGtRaBpi0/lvxswdgom4SYWjcMx4QEow 0B5+m3nWLFwEd9EsIkrA65dJDbNWcp+r9fpZQXxYtaG0jYpHB1F+VyS/LoqUI+Au XJULUA9nBA+ScSUlNdmWQ+zaEsZk3VG21sgW9sD4oDxLPI0duQSYhnfIaMi2n5Fn +C1x7dMgfOGK+cGKsJSmc/0w88JM6ic5/ywPtmBasJIh/HOGENM+foj/yQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOexpXGhmPLdPiTTyCv2TY96m+MZMB8GA1UdIwQY MBaAFLzMyPSzfYkijNAj0lIdKZaN4LklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYt MDIxNWM0ZWFhN2MzLzEvNTdHbGNhR1k4dDAtSk5QSUtfWk5qM3FiNHhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYtMDIxNWM0ZWFhN2Mz LzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAbc29AwQA khODAwQAstSJAwQAwj+QMA0GCSqGSIb3DQEBCwUAA4IBAQAoTGrC/mr9KZLJkuH/ 2XgGJ9F69LhZEquhUbmzjcr3UtdUwYLa0SvjBwbjyVVD24aoGnwich5DW20X0d/1 ILefmMKRnaJs8Am5WoB7+3P9zcF6NG7v3Fzief5Lqk/5o4EF+uM3qxZKKT/6OOFj eDa/CUClOgER+/6hL2yVXikS1eDGLQVrGrkWJ4aUpotWf4iCkiqqwYyzr0dN7aaY WtehJdkc5B/RZNe7AZdb2fS5JzuBVCnAcSulRGp9cM9+/bdg2gbnHCb5Tzyc075K ZcCdNekNEcVbmgqrvSDK/Djk27/4V/TngYcLxBQjTkwJOVRzYvenFTVcqcgpBWEb 7jbO -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:16 2026 by rpki-client