This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/V7dSFe54YguWMOBd5igSa3CG0jM.roa File: V7dSFe54YguWMOBd5igSa3CG0jM.roa (raw, json) Hash identifier: rMSDIp9OV5dVl6Akl8E0YEDyEMw4raUR7F/H+734+DI= Subject key identifier: 57:B7:52:15:EE:78:62:0B:96:30:E0:5D:E6:28:12:6B:70:86:D2:33 Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276 Certificate serial: 019B7B359C06414BC4904C502A2ED75297E9 Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/V7dSFe54YguWMOBd5igSa3CG0jM.roa Signing time: Thu 01 Jan 2026 20:17:49 +0000 ROA not before: Thu 01 Jan 2026 20:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49456 IP address blocks: 193.169.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9c:06:41:4b:c4:90:4c:50:2a:2e:d7:52:97:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276 Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57b75215ee78620b9630e05de628126b7086d233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:95:e7:1f:55:ce:ea:72:70:08:92:66:7a: ae:8e:4e:dd:b3:7c:3f:68:ce:fa:b3:21:9f:f5:dc: 04:63:7c:68:e4:91:d7:70:18:3d:58:90:77:22:87: 43:62:b6:9e:e4:53:c9:18:65:7f:a4:98:c8:56:d9: fc:17:6c:5d:5b:6d:ba:33:3a:41:c8:3a:b3:6c:f8: 3e:5b:4e:38:dd:f8:5d:fd:30:0b:ca:4f:a0:c4:09: df:47:2b:d4:08:ca:fa:49:bc:9e:ec:a1:13:be:9f: ee:cb:76:ef:f9:d2:2c:b7:53:7e:64:04:1a:85:08: ca:16:9d:a7:cc:aa:f6:8d:c3:98:fb:7c:df:e5:44: 9a:fe:68:7d:2b:90:47:96:69:1f:c1:fd:56:a3:7e: 15:f5:27:2b:6d:41:57:fb:32:38:84:c0:88:40:c8: 6a:66:41:a3:0d:2f:13:90:b2:7d:57:8c:66:c0:b0: 71:33:4b:31:b3:79:e1:65:4a:8f:36:37:d8:01:d6: 8f:0c:9c:31:68:b4:7a:f1:70:9f:bb:0f:25:14:28: e3:21:b3:6f:9f:c6:2a:32:e4:6f:58:60:1a:60:ee: 4c:89:f4:86:c6:7d:02:3a:d9:bc:25:ac:ce:be:6c: b6:dc:20:ef:17:d5:b4:e7:be:2b:ee:f8:67:ef:e5: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B7:52:15:EE:78:62:0B:96:30:E0:5D:E6:28:12:6B:70:86:D2:33 X509v3 Authority Key Identifier: keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/V7dSFe54YguWMOBd5igSa3CG0jM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.70.0/23 Signature Algorithm: sha256WithRSAEncryption 22:ef:7b:31:c4:8c:a4:6c:4c:fe:0f:49:5c:49:ad:b8:0d:b4: ae:68:9b:03:f2:f9:82:42:28:7d:76:df:46:fc:73:d1:da:9d: 85:4e:ef:49:c1:dd:e5:1b:3f:74:eb:b6:ff:d7:44:58:17:c8: 1a:79:84:1e:fb:7c:f6:fc:ed:fa:1b:67:3f:76:0c:01:3b:45: 6a:36:b8:12:4f:c4:80:9c:5c:11:d1:2b:18:4a:c4:f2:e8:db: 5d:8c:57:78:60:2a:76:1b:a6:71:ea:a4:eb:08:b9:53:01:5c: 95:8f:9b:48:7a:0e:0b:b2:3b:87:f2:82:a3:50:6f:38:05:54: 83:fb:9d:27:bd:a7:87:74:34:49:6d:50:32:87:3e:b8:51:7c: 95:c9:29:15:93:d3:29:56:54:c6:88:6e:78:d8:7e:22:90:46: 76:2b:23:be:0e:dd:df:82:64:24:98:4a:d6:7b:f9:93:d1:e0: 58:a3:71:85:3a:b0:94:c5:63:ae:31:b2:cc:62:ec:db:9c:5c: b9:bf:e6:46:f1:65:2d:6e:9a:0f:c0:3d:d4:5f:55:2d:6e:c1: 8e:60:46:db:b4:28:05:e9:a3:ae:4f:63:7e:81:67:89:31:0c: 60:9b:5c:34:1d:0f:4b:72:56:ff:3a:39:ab:2d:3d:9d:ec:97: a3:59:32:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZwGQUvEkExQKi7XUpfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWIyYzYwMWZhNmQwNzUwNzk3MzA4MWZhYTEzMjVmZTE5 MGIyNzYwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2I3NTIxNWVlNzg2MjBiOTYzMGUwNWRlNjI4MTI2YjcwODZkMjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeGV5x9VzupycAiSZnqujk7ds3w/ aM76syGf9dwEY3xo5JHXcBg9WJB3IodDYrae5FPJGGV/pJjIVtn8F2xdW226MzpB yDqzbPg+W0443fhd/TALyk+gxAnfRyvUCMr6Sbye7KETvp/uy3bv+dIst1N+ZAQa hQjKFp2nzKr2jcOY+3zf5USa/mh9K5BHlmkfwf1Wo34V9ScrbUFX+zI4hMCIQMhq ZkGjDS8TkLJ9V4xmwLBxM0sxs3nhZUqPNjfYAdaPDJwxaLR68XCfuw8lFCjjIbNv n8YqMuRvWGAaYO5MifSGxn0COtm8JazOvmy23CDvF9W0574r7vhn7+W+xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFe3UhXueGILljDgXeYoEmtwhtIzMB8GA1UdIwQY MBaAFMHrLGAfptB1B5cwgfqhMl/hkLJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEt OTBlZjdiZGExZGMzLzEvVjdkU0ZlNTRZZ3VXTU9CZDVpZ1NhM0NHMGpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEtOTBlZjdiZGExZGMz LzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwalGMA0G CSqGSIb3DQEBCwUAA4IBAQAi73sxxIykbEz+D0lcSa24DbSuaJsD8vmCQih9dt9G /HPR2p2FTu9Jwd3lGz9067b/10RYF8gaeYQe+3z2/O36G2c/dgwBO0VqNrgST8SA nFwR0SsYSsTy6NtdjFd4YCp2G6Zx6qTrCLlTAVyVj5tIeg4LsjuH8oKjUG84BVSD +50nvaeHdDRJbVAyhz64UXyVySkVk9MpVlTGiG542H4ikEZ2KyO+Dt3fgmQkmErW e/mT0eBYo3GFOrCUxWOuMbLMYuzbnFy5v+ZG8WUtbpoPwD3UX1UtbsGOYEbbtCgF 6aOuT2N+gWeJMQxgm1w0HQ9Lclb/OjmrLT2d7JejWTK7 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:02 2026 by rpki-client