This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/23D13zVh0lxnV6wqT9G8OQpIzbk.roa File: 23D13zVh0lxnV6wqT9G8OQpIzbk.roa (raw, json) Hash identifier: 9tKZpVV4QTGwDjEBmfC0cE/pR6rIK/y06jjpKw6H3j4= Subject key identifier: DB:70:F5:DF:35:61:D2:5C:67:57:AC:2A:4F:D1:BC:39:0A:48:CD:B9 Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396 Certificate serial: 019B7834BA3CBBA7CC0E358C393814789AA1 Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/23D13zVh0lxnV6wqT9G8OQpIzbk.roa Signing time: Thu 01 Jan 2026 06:18:00 +0000 ROA not before: Thu 01 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 2.59.21.0/24 maxlen: 24 2.59.22.0/24 maxlen: 24 2a01:e943::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ba:3c:bb:a7:cc:0e:35:8c:39:38:14:78:9a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396 Validity Not Before: Jan 1 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db70f5df3561d25c6757ac2a4fd1bc390a48cdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:54:91:13:94:e3:c4:af:e4:ba:9f:9c:a7: 1f:7e:c7:65:ca:d2:6d:e0:bd:82:a3:93:c6:75:13: 7c:3a:88:0e:d7:f1:af:0a:3e:66:23:df:f6:7d:e1: 78:60:aa:8c:75:59:45:a2:65:41:7c:51:68:8e:38: bc:44:51:98:ae:1d:5e:13:ac:0e:1c:82:e9:15:83: 3c:98:34:6f:2a:be:7b:61:23:4b:0a:20:3f:e2:d6: 2f:8b:ec:df:77:98:a9:1c:1d:b0:e6:81:05:54:08: c6:f0:9c:f2:bb:2b:6d:7a:e6:d8:80:37:92:05:13: 71:9f:77:41:7a:c0:cc:a7:04:c5:de:be:f1:f0:ed: a9:c2:56:1f:0a:b4:4e:36:0e:e2:52:cb:19:89:28: 59:4a:3b:cc:10:a4:82:c6:02:2b:b6:73:3b:df:a4: 2f:21:b9:04:78:e9:5c:ae:d6:8c:6e:eb:d0:50:69: 55:b3:2b:19:86:45:33:15:0c:f5:ec:bc:e0:50:67: c2:0c:b9:71:f9:67:9e:e3:b7:1d:4c:6d:24:d3:33: 9c:09:36:2a:98:57:1a:0b:19:48:49:3a:f0:c2:c2: 5b:f3:88:37:4b:f8:ed:4e:5f:9d:33:1d:34:10:46: 5d:26:cf:0a:25:73:96:a5:2e:be:7e:ac:10:0c:8b: 86:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:70:F5:DF:35:61:D2:5C:67:57:AC:2A:4F:D1:BC:39:0A:48:CD:B9 X509v3 Authority Key Identifier: keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/23D13zVh0lxnV6wqT9G8OQpIzbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.21.0-2.59.22.255 IPv6: 2a01:e943::/48 Signature Algorithm: sha256WithRSAEncryption 00:41:d0:0f:7e:1e:64:31:ed:f3:46:88:ca:67:44:c7:d3:2f: 76:3f:72:1d:a9:e3:4b:70:3a:5e:cd:e8:e2:09:77:ae:10:7e: cb:6c:13:27:3f:be:ce:e9:87:da:21:77:5c:ad:60:19:8d:95: ed:58:8a:2f:b7:d7:79:f3:9c:6d:56:98:b3:7f:62:bf:d9:5f: aa:0a:8a:48:37:a1:9a:82:6c:f3:ac:6d:f8:b9:7e:d8:6f:b4: d1:7e:e0:62:13:58:91:e9:78:db:db:a7:62:fc:24:93:68:90: 4a:d0:ff:ad:52:b6:83:b6:72:9e:82:f3:6c:50:7b:d2:61:47: bd:97:e4:5c:ca:52:cb:93:5f:d2:09:68:ae:d5:a5:56:4c:ee: 3c:48:69:62:ac:66:06:84:79:19:cf:15:82:44:1c:22:ef:37: 44:eb:dd:6b:8d:e1:b6:a0:17:f8:5f:8d:72:4b:2a:e3:0f:c4: ed:60:cc:a8:cd:18:cf:ad:ba:27:19:0e:7d:04:c3:5a:f9:89: e2:f4:59:5a:7f:21:93:02:ae:46:fb:ab:d9:aa:8f:5e:12:a1: f8:06:40:b6:7a:67:57:50:a2:d6:70:66:26:9a:98:c8:fd:0d: 31:ee:d6:7c:36:0b:e0:23:93:be:ce:8b:d6:5d:3f:45:48:1c: a0:c7:67:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4NLo8u6fMDjWMOTgUeJqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2YwOTUwOGZkZjI1NjQ0ODIxOWIyODRiYjA5YjIzYjJi NTEzOTYwHhcNMjYwMTAxMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjcwZjVkZjM1NjFkMjVjNjc1N2FjMmE0ZmQxYmMzOTBhNDhjZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPNUkROU48Sv5LqfnKcffsdlytJt 4L2Co5PGdRN8OogO1/GvCj5mI9/2feF4YKqMdVlFomVBfFFojji8RFGYrh1eE6wO HILpFYM8mDRvKr57YSNLCiA/4tYvi+zfd5ipHB2w5oEFVAjG8JzyuytteubYgDeS BRNxn3dBesDMpwTF3r7x8O2pwlYfCrRONg7iUssZiShZSjvMEKSCxgIrtnM736Qv IbkEeOlcrtaMbuvQUGlVsysZhkUzFQz17LzgUGfCDLlx+Wee47cdTG0k0zOcCTYq mFcaCxlISTrwwsJb84g3S/jtTl+dMx00EEZdJs8KJXOWpS6+fqwQDIuGsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtw9d81YdJcZ1esKk/RvDkKSM25MB8GA1UdIwQY MBaAFDY/CVCP3yVkSCGbKEuwmyOytROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTIt ZmQ4MTQ0NTVhODY4LzEvMjNEMTN6VmgwbHhuVjZ3cVQ5RzhPUXBJemJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTItZmQ4MTQ0NTVhODY4 LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAACOxUD BAACOxYwDwQCAAIwCQMHACoB6UMAADANBgkqhkiG9w0BAQsFAAOCAQEAAEHQD34e ZDHt80aIymdEx9Mvdj9yHanjS3A6Xs3o4gl3rhB+y2wTJz++zumH2iF3XK1gGY2V 7ViKL7fXefOcbVaYs39iv9lfqgqKSDehmoJs86xt+Ll+2G+00X7gYhNYkel429un Yvwkk2iQStD/rVK2g7ZynoLzbFB70mFHvZfkXMpSy5Nf0glortWlVkzuPEhpYqxm BoR5Gc8VgkQcIu83ROvda43htqAX+F+Ncksq4w/E7WDMqM0Yz626JxkOfQTDWvmJ 4vRZWn8hkwKuRvur2aqPXhKh+AZAtnpnV1Ci1nBmJpqYyP0NMe7WfDYL4COTvs6L 1l0/RUgcoMdnUQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:52:36 2026 by rpki-client