This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/fIbLyWDcpEVajMwX0IRFmbRboBM.roa File: fIbLyWDcpEVajMwX0IRFmbRboBM.roa (raw, json) Hash identifier: qO1PWw5QDsqq+kEFxL2W+jiNK15/wTUl2EHHtmkWM64= Subject key identifier: 7C:86:CB:C9:60:DC:A4:45:5A:8C:CC:17:D0:84:45:99:B4:5B:A0:13 Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Certificate serial: 019B77C6AAAB5607566514CCBD773AD297C3 Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/fIbLyWDcpEVajMwX0IRFmbRboBM.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23921 IP address blocks: 156.114.16.0/23 maxlen: 23 156.114.16.0/24 maxlen: 24 156.114.17.0/24 maxlen: 24 156.114.18.0/23 maxlen: 23 156.114.18.0/24 maxlen: 24 156.114.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.mft rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:aa:ab:56:07:56:65:14:cc:bd:77:3a:d2:97:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c86cbc960dca4455a8ccc17d0844599b45ba013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:83:31:12:c6:25:95:8f:33:e1:55:3b:11: 58:4d:a7:11:7f:cf:2a:ab:d9:8c:f2:fb:9c:94:f1: f1:72:f7:15:45:66:3c:11:2b:24:27:b2:2f:8c:a4: fd:b2:63:76:55:76:cf:80:3c:d0:d9:47:c5:f3:5d: 02:df:d5:fd:8b:33:cc:cb:69:21:45:65:e8:01:f9: b8:20:81:44:dd:09:2f:50:d6:7f:25:c7:5d:ea:8b: 35:e0:4c:cf:3e:b0:31:6f:d1:e7:61:b8:d8:f9:53: 3c:c8:4e:d0:1d:5d:4b:9a:35:da:80:96:7c:00:cf: 49:6a:69:16:d9:c0:e9:a1:93:72:f2:df:f9:5c:a8: 92:c4:cb:6d:b6:e3:20:8c:84:5e:66:f6:4c:2d:76: a0:db:4c:65:90:9f:90:26:b6:94:17:ca:a7:ec:ba: 9d:2f:22:63:9e:f9:34:3f:7d:25:bb:8f:c7:f1:b9: 11:df:b0:f5:fd:25:96:8b:c9:fc:54:f4:e7:4d:72: 8f:71:b7:3d:74:37:92:78:09:20:cc:f3:d7:10:dc: 6c:ae:4f:9b:ea:e9:73:56:88:67:a6:65:bd:20:89: 98:08:55:d9:a4:62:96:77:d4:0b:c1:82:d3:17:b6: ba:e7:a5:c6:26:a0:2b:75:31:e8:8a:19:cd:60:01: 6f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:86:CB:C9:60:DC:A4:45:5A:8C:CC:17:D0:84:45:99:B4:5B:A0:13 X509v3 Authority Key Identifier: keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/fIbLyWDcpEVajMwX0IRFmbRboBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.114.16.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:fe:60:e7:71:4a:70:54:ab:ad:fc:23:c0:fb:ec:60:ba:54: f5:73:ce:2b:b4:72:15:cd:b3:e8:8c:1f:cd:3e:77:1e:ef:a2: 6a:b8:1e:82:b9:b8:c7:8e:fc:24:39:9c:6d:2a:64:8d:61:4d: 58:75:ff:b2:74:4d:2a:d6:9f:b4:bd:35:fe:59:a5:3e:4e:51: 28:bd:1c:66:12:c3:a7:9f:51:b7:28:d2:dc:80:2d:e5:a6:0a: ef:66:de:d8:a6:f0:a1:f4:d4:3f:0e:69:20:91:f5:83:e5:cf: 4b:71:38:04:e5:5a:33:1a:62:e0:ea:73:3f:e7:43:60:84:69: 54:d0:ca:a1:76:6e:08:c7:f8:96:d8:dc:81:a1:d4:ab:c3:f3: 99:38:72:c9:70:69:a6:9d:2c:17:7d:76:89:de:34:98:14:a3: 48:5b:cf:9d:bd:d5:30:f0:51:54:1f:b8:d3:c6:61:c6:ca:3f: cc:01:f5:17:97:d4:66:a1:ee:86:aa:41:47:84:d9:88:08:a9: 05:21:c6:e1:69:da:e4:fc:87:7f:fa:81:fd:b6:58:8c:c6:cb: bd:11:6e:86:e9:03:ef:d2:35:e1:2c:b6:fc:d9:90:4d:b1:3d: 3f:b0:e3:24:e3:1a:78:af:75:e5:11:c3:46:fb:fc:ee:c8:84: d4:ed:90:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqqrVgdWZRTMvXc60pfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZWNlNDFjYmMyYzMwNjI2ZWYyYTI4ZDE4MzlmMmQ2YzQ3 NTdmM2YwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yzg2Y2JjOTYwZGNhNDQ1NWE4Y2NjMTdkMDg0NDU5OWI0NWJhMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFuDMRLGJZWPM+FVOxFYTacRf88q q9mM8vuclPHxcvcVRWY8ESskJ7IvjKT9smN2VXbPgDzQ2UfF810C39X9izPMy2kh RWXoAfm4IIFE3QkvUNZ/Jcdd6os14EzPPrAxb9HnYbjY+VM8yE7QHV1LmjXagJZ8 AM9JamkW2cDpoZNy8t/5XKiSxMtttuMgjIReZvZMLXag20xlkJ+QJraUF8qn7Lqd LyJjnvk0P30lu4/H8bkR37D1/SWWi8n8VPTnTXKPcbc9dDeSeAkgzPPXENxsrk+b 6ulzVohnpmW9IImYCFXZpGKWd9QLwYLTF7a656XGJqArdTHoihnNYAFv2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHyGy8lg3KRFWozMF9CERZm0W6ATMB8GA1UdIwQY MBaAFMrs5By8LDBibvKijRg58tbEdX8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWIt ZDg1MWU0MGQ1N2JmLzEvZkliTHlXRGNwRVZhak13WDBJUkZtYlJib0JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MzBjYmUtY2UwMS00NjRkLTgyZWItZDg1MWU0MGQ1N2Jm LzEveXV6a0hMd3NNR0p1OHFLTkdEbnkxc1IxZno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnHIQMA0G CSqGSIb3DQEBCwUAA4IBAQBu/mDncUpwVKut/CPA++xgulT1c84rtHIVzbPojB/N Pnce76JquB6CubjHjvwkOZxtKmSNYU1Ydf+ydE0q1p+0vTX+WaU+TlEovRxmEsOn n1G3KNLcgC3lpgrvZt7YpvCh9NQ/DmkgkfWD5c9LcTgE5VozGmLg6nM/50NghGlU 0Mqhdm4Ix/iW2NyBodSrw/OZOHLJcGmmnSwXfXaJ3jSYFKNIW8+dvdUw8FFUH7jT xmHGyj/MAfUXl9Rmoe6GqkFHhNmICKkFIcbhadrk/Id/+oH9tliMxsu9EW6G6QPv 0jXhLLb82ZBNsT0/sOMk4xp4r3XlEcNG+/zuyITU7ZBF -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:00 2026 by rpki-client