This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/1--RggRk_qlH26F-8QTH2ie7muc0.roa File: 1--RggRk_qlH26F-8QTH2ie7muc0.roa (raw, json) Hash identifier: Hqhf4xa2ID1VNwxmhITZqAJ15hDU/4FyBARifnG6Ixc= Subject key identifier: FB:E4:60:81:19:3F:AA:51:F6:E8:5F:BC:41:31:F6:89:EE:E6:B9:CD Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019B7B36A301B9AD65EF36D5FDBA954C3558 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/1--RggRk_qlH26F-8QTH2ie7muc0.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5583 IP address blocks: 57.66.0.0/15 maxlen: 32 57.79.0.0/16 maxlen: 32 57.82.0.0/15 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a3:01:b9:ad:65:ef:36:d5:fd:ba:95:4c:35:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbe46081193faa51f6e85fbc4131f689eee6b9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a8:c6:62:1b:ab:3d:76:ca:9c:86:d2:6f:c1: 48:ab:c0:5d:eb:62:e1:79:c7:e7:8d:7a:ac:2b:0b: 6e:8a:a5:1a:20:6d:cd:29:f1:37:41:51:20:91:74: 1e:0b:bf:16:5a:c8:7c:1a:5b:25:a4:b1:4e:eb:5d: e0:8b:39:a8:fd:2e:05:4d:b4:87:ab:57:41:f3:2c: 26:fd:4b:0e:f0:7a:5c:31:e9:a5:2d:d2:2e:db:15: e1:9b:02:9f:d9:c7:e4:66:b4:ef:4a:a7:90:7c:10: 0e:67:66:cc:16:d7:0e:16:45:18:b2:39:9e:1a:b8: 13:ba:0b:4b:bc:30:1b:d8:e1:d5:5f:56:b2:f4:d5: 46:a4:7a:30:d4:31:aa:70:4b:7e:c9:96:94:cb:ec: 76:b2:0c:56:fc:b8:da:87:da:03:dd:9c:03:f7:8d: 4c:dd:2d:1e:f7:8c:1e:df:17:8b:e9:05:34:fe:7b: 5a:5e:01:6c:85:0d:bf:9f:94:6c:88:9e:46:56:41: c1:a7:86:d3:c8:73:24:eb:83:af:75:9e:b3:6f:cb: 43:69:24:45:a4:7a:dd:98:fd:bf:07:3c:3a:bd:17: c1:29:d8:d3:5e:7a:af:40:b9:46:62:13:f3:73:e9: 4a:5e:54:e7:57:09:08:1a:9f:19:7b:78:23:b8:da: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E4:60:81:19:3F:AA:51:F6:E8:5F:BC:41:31:F6:89:EE:E6:B9:CD X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/1--RggRk_qlH26F-8QTH2ie7muc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.66.0.0/15 57.79.0.0/16 57.82.0.0/15 Signature Algorithm: sha256WithRSAEncryption 3b:72:31:54:22:39:51:3b:d4:b3:c6:c5:be:e2:9b:96:54:41: 87:f9:13:df:1d:bd:48:71:96:dc:90:5d:b1:32:69:a3:1f:46: 88:be:96:e0:9a:69:47:b6:7a:70:a3:0c:4a:9d:13:ed:7c:47: 15:b2:f4:bd:1a:0a:4a:30:c2:b9:be:c6:d7:44:ab:24:64:99: a8:83:59:9b:24:c0:65:ea:fd:58:7c:4c:35:b5:70:3e:31:fa: 0d:69:eb:38:d9:11:4d:e3:e1:75:56:7a:ae:0e:df:f1:ca:4b: b1:2b:4d:74:d0:0d:e1:d7:61:90:63:9c:77:f7:3d:9e:ea:11: 7a:fc:7c:e9:48:9a:60:0a:b8:1e:6a:c8:d3:3e:af:b5:98:d1: cb:04:19:72:a6:fe:1e:f0:14:4f:93:3b:6a:43:cf:67:d2:44: 05:7a:14:92:bf:58:5e:1a:e0:07:46:9b:d5:9e:1d:f9:17:47: 94:5e:f8:34:9b:70:0a:c5:2a:41:01:fd:41:b5:f2:f9:3e:2e: 03:8e:73:b7:fc:d5:b9:c0:cd:0b:15:07:4f:c4:d8:b2:53:22: f2:ee:b3:39:ae:d7:b4:bf:49:10:f9:47:16:a3:bc:52:7c:d0: fc:c5:a6:4a:c8:97:47:89:cf:27:4b:96:6f:98:25:99:1a:00: 26:53:09:95 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt7NqMBua1l7zbV/bqVTDVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmU0NjA4MTE5M2ZhYTUxZjZlODVmYmM0MTMxZjY4OWVlZTZiOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqjGYhurPXbKnIbSb8FIq8Bd62Lh ecfnjXqsKwtuiqUaIG3NKfE3QVEgkXQeC78WWsh8GlslpLFO613gizmo/S4FTbSH q1dB8ywm/UsO8HpcMemlLdIu2xXhmwKf2cfkZrTvSqeQfBAOZ2bMFtcOFkUYsjme GrgTugtLvDAb2OHVX1ay9NVGpHow1DGqcEt+yZaUy+x2sgxW/Ljah9oD3ZwD941M 3S0e94we3xeL6QU0/ntaXgFshQ2/n5RsiJ5GVkHBp4bTyHMk64OvdZ6zb8tDaSRF pHrdmP2/Bzw6vRfBKdjTXnqvQLlGYhPzc+lKXlTnVwkIGp8Ze3gjuNoU5QIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFPvkYIEZP6pR9uhfvEEx9onu5rnNMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvMS0tUmdnUmtfcWxIMjZGLThRVEgyaWU3bXVjMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzEvNzM5NzE2LTlhZjItNDdmNS1hNmYxLWEzYjc0Zjk2NDFh Yy8xL3piZzhfbFNKZzE4cFRRcjAzVTIyNDl3bDhmTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAoBggrBgEFBQcBBwEB/wQZMBcwFQQCAAEwDwMDATlCAwMA OU8DAwE5UjANBgkqhkiG9w0BAQsFAAOCAQEAO3IxVCI5UTvUs8bFvuKbllRBh/kT 3x29SHGW3JBdsTJpox9GiL6W4JppR7Z6cKMMSp0T7XxHFbL0vRoKSjDCub7G10Sr JGSZqINZmyTAZer9WHxMNbVwPjH6DWnrONkRTePhdVZ6rg7f8cpLsStNdNAN4ddh kGOcd/c9nuoRevx86UiaYAq4HmrI0z6vtZjRywQZcqb+HvAUT5M7akPPZ9JEBXoU kr9YXhrgB0ab1Z4d+RdHlF74NJtwCsUqQQH9QbXy+T4uA45zt/zVucDNCxUHT8TY slMi8u6zOa7XtL9JEPlHFqO8UnzQ/MWmSsiXR4nPJ0uWb5glmRoAJlMJlQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:18 2026 by rpki-client