This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/FS6qKdeSnKpkyP4KDGh8dJRbaHo.roa File: FS6qKdeSnKpkyP4KDGh8dJRbaHo.roa (raw, json) Hash identifier: /bleCUlTHodFMRUrIClkQu+L3DOefkymAjlInaomTNQ= Subject key identifier: 15:2E:AA:29:D7:92:9C:AA:64:C8:FE:0A:0C:68:7C:74:94:5B:68:7A Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019B7B36A42ED0F4E0BB7E902C6561CB3D1C Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/FS6qKdeSnKpkyP4KDGh8dJRbaHo.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13879 IP address blocks: 57.197.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a4:2e:d0:f4:e0:bb:7e:90:2c:65:61:cb:3d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=152eaa29d7929caa64c8fe0a0c687c74945b687a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3b:83:50:bb:50:02:31:c1:68:af:d6:75:d2: 71:b6:6b:73:f8:23:ea:88:41:95:c5:3d:a7:d7:97: ae:51:7d:b3:da:ef:06:32:93:36:a0:70:2c:f0:21: fe:ec:20:27:89:e5:0b:ff:59:ec:fb:d3:15:42:31: 31:3b:02:26:32:87:11:5f:2a:69:b8:fc:c7:21:e3: d2:67:dc:46:4b:40:1c:cc:6f:64:ed:ab:e3:ac:93: c6:50:a0:32:28:09:b8:3c:22:e7:69:df:7f:dd:f1: fe:0c:48:7d:4c:55:22:da:db:41:c4:06:b2:4c:e3: 73:22:ef:9d:86:6c:f5:36:e6:ec:61:08:f0:04:06: 33:c5:85:12:47:7c:aa:77:1a:d4:e3:3a:70:bd:9f: c2:8e:cb:a3:72:40:09:ae:79:b9:07:54:6a:f0:7e: 08:5d:58:58:b0:72:90:ac:50:93:68:d3:fe:5d:c6: 5a:9f:7d:7d:2e:6e:35:3c:bc:52:40:4e:88:c3:b0: 2a:f9:dd:51:0f:d5:ea:bc:c5:c1:cb:c7:f8:75:b8: fc:0f:53:c9:cf:44:ef:e4:01:53:14:55:ef:5e:58: ae:4a:38:db:25:f9:3a:5c:82:5a:99:55:ad:42:37: 4c:ce:fd:46:79:26:91:19:83:99:2a:a6:99:29:ce: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2E:AA:29:D7:92:9C:AA:64:C8:FE:0A:0C:68:7C:74:94:5B:68:7A X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/FS6qKdeSnKpkyP4KDGh8dJRbaHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.197.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3d:dc:5f:93:5b:0a:79:28:83:ce:bb:53:35:52:09:58:14:60: 2f:92:40:61:fe:ab:7c:2e:ee:dd:bc:33:a3:8f:7c:5b:61:9a: 02:81:c1:9b:ad:df:16:ee:e0:51:ad:dd:3a:33:d3:1f:7f:0b: cb:e9:3d:df:36:ea:46:b7:bc:9e:89:bc:25:65:f4:35:ec:10: 4c:d9:38:39:6e:a8:a6:b5:e8:c4:fc:b6:65:4f:30:16:27:88: 60:be:ef:b6:e9:fd:57:02:d4:bc:60:7f:e3:ff:e4:9e:dc:f8: f0:c8:a7:36:f6:f4:51:20:e8:5c:fd:00:33:ce:3c:e7:c7:39: d4:e7:de:1f:43:bd:a9:73:09:2c:81:c1:de:44:c8:72:bc:9c: 52:e7:89:e8:65:60:1b:66:2f:7c:f4:db:a4:dc:b9:ef:b1:d5: ff:7b:18:68:cc:ba:f7:cc:ec:86:2f:ee:11:89:fd:87:89:9b: c0:f7:39:fb:d6:d0:e9:40:01:0d:04:e5:03:f1:07:b9:49:14: 88:82:72:45:c1:33:5d:2c:2b:8b:eb:e4:79:a9:d1:49:d1:ec: ff:fd:93:a1:09:d0:b2:8b:27:52:28:5a:a8:c3:be:00:7b:de: 3e:b3:66:c7:d4:9c:36:5e:24:11:bc:bd:32:d1:59:e6:8f:9d: e9:d0:91:ef -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7NqQu0PTgu36QLGVhyz0cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTJlYWEyOWQ3OTI5Y2FhNjRjOGZlMGEwYzY4N2M3NDk0NWI2ODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTuDULtQAjHBaK/WddJxtmtz+CPq iEGVxT2n15euUX2z2u8GMpM2oHAs8CH+7CAnieUL/1ns+9MVQjExOwImMocRXypp uPzHIePSZ9xGS0AczG9k7avjrJPGUKAyKAm4PCLnad9/3fH+DEh9TFUi2ttBxAay TONzIu+dhmz1NubsYQjwBAYzxYUSR3yqdxrU4zpwvZ/CjsujckAJrnm5B1Rq8H4I XVhYsHKQrFCTaNP+XcZan319Lm41PLxSQE6Iw7Aq+d1RD9XqvMXBy8f4dbj8D1PJ z0Tv5AFTFFXvXliuSjjbJfk6XIJamVWtQjdMzv1GeSaRGYOZKqaZKc5BZQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBUuqinXkpyqZMj+CgxofHSUW2h6MB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvRlM2cUtkZVNuS3BreVA0S0RHaDhkSlJiYUhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOcUwDQYJ KoZIhvcNAQELBQADggEBAD3cX5NbCnkog867UzVSCVgUYC+SQGH+q3wu7t28M6OP fFthmgKBwZut3xbu4FGt3Toz0x9/C8vpPd826ka3vJ6JvCVl9DXsEEzZODluqKa1 6MT8tmVPMBYniGC+77bp/VcC1Lxgf+P/5J7c+PDIpzb29FEg6Fz9ADPOPOfHOdTn 3h9DvalzCSyBwd5EyHK8nFLniehlYBtmL3z026Tcue+x1f97GGjMuvfM7IYv7hGJ /YeJm8D3OfvW0OlAAQ0E5QPxB7lJFIiCckXBM10sK4vr5Hmp0UnR7P/9k6EJ0LKL J1IoWqjDvgB73j6zZsfUnDZeJBG8vTLRWeaPnenQke8= -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:09 2026 by rpki-client