This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/PTblVwI2pEuayFVs15O8VzhVtcE.roa File: PTblVwI2pEuayFVs15O8VzhVtcE.roa (raw, json) Hash identifier: BZMI5kioCtcsLQnN5vspUQmXLq1H6ZDsa+ACcaZ9hIE= Subject key identifier: 3D:36:E5:57:02:36:A4:4B:9A:C8:55:6C:D7:93:BC:57:38:55:B5:C1 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019B7B369FD1F6B78578E93294E038C52F87 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/PTblVwI2pEuayFVs15O8VzhVtcE.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2647 IP address blocks: 57.68.0.0/15 maxlen: 32 57.68.10.0/24 maxlen: 24 57.70.0.0/16 maxlen: 32 57.74.29.0/24 maxlen: 24 57.77.0.0/16 maxlen: 32 57.100.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9f:d1:f6:b7:85:78:e9:32:94:e0:38:c5:2f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d36e5570236a44b9ac8556cd793bc573855b5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:24:d2:30:c4:bf:52:63:da:1c:82:ec:53: cf:3e:08:12:eb:01:9c:6c:f3:14:80:66:56:19:48: 72:d4:f1:d8:80:87:fc:af:28:f7:30:34:b6:fa:33: 49:51:f8:be:46:2d:3b:83:72:03:22:a1:89:f2:27: e8:7f:82:6c:c8:58:36:b9:ed:a5:10:c8:e3:44:d1: c1:da:0d:01:7f:a5:6e:4e:a6:2a:db:43:46:63:6e: d2:ff:ba:ca:2f:16:29:d4:03:55:2a:43:12:54:f3: 57:17:8e:c4:09:2b:5f:82:54:1a:8f:08:b9:38:c7: 78:24:47:9c:1a:4a:9e:cb:03:9a:d5:97:3b:3c:18: 90:ab:6d:21:66:18:a0:63:bd:e1:b1:30:89:16:26: cc:4d:df:14:4f:35:43:b5:27:27:fe:7d:1e:d5:37: 41:57:55:ac:a1:a6:83:9e:35:1c:f5:34:f7:40:2b: 8c:0f:54:50:92:b5:df:84:4e:c2:ea:67:f7:8b:15: 99:86:81:78:2b:e3:71:df:d4:c8:ab:17:ab:39:7d: be:a2:bc:43:21:d6:44:46:1d:10:42:a3:18:dd:7b: f2:d5:c3:9a:53:f0:cc:42:41:5e:82:02:3a:2d:d0: 1c:e7:35:c6:b6:3b:38:5f:5e:a8:5d:02:c1:9a:c1: c4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:36:E5:57:02:36:A4:4B:9A:C8:55:6C:D7:93:BC:57:38:55:B5:C1 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/PTblVwI2pEuayFVs15O8VzhVtcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.68.0.0-57.70.255.255 57.74.29.0/24 57.77.0.0/16 57.100.0.0/16 Signature Algorithm: sha256WithRSAEncryption 65:e3:e0:71:b5:96:98:d5:0b:89:5e:41:f7:c2:a5:c9:7d:c4: 51:a0:d1:47:66:8e:bc:d5:4a:91:8c:cf:7d:7f:8d:c4:02:05: 02:3d:cf:99:f6:44:93:ec:0c:74:d1:53:bb:00:bf:a3:06:e5: d8:45:90:34:6a:96:1b:9e:b8:44:7f:f8:65:72:1e:e1:ca:e7: 3f:20:85:5e:e6:39:04:68:0a:53:92:99:53:85:c9:96:8d:46: d4:8a:d4:71:bd:ff:4f:78:92:7c:a1:7e:bd:2f:d4:49:b5:cf: 98:8f:1e:81:fb:18:d4:bc:9a:0d:e3:93:aa:74:37:53:82:cf: f4:68:f4:b4:a7:b3:a9:bc:c0:3b:68:a8:5c:30:5e:a3:75:23: b2:b5:97:a1:14:84:1c:91:bf:ba:6b:71:a0:52:43:fa:65:57: 09:ae:5c:f5:4f:7a:42:7a:d9:e0:71:ed:6d:9f:5e:79:43:f6: b4:a6:96:bd:fe:35:3b:07:95:f5:3f:c4:a8:79:26:29:b5:30: f4:e2:5e:f3:72:76:2e:7b:a5:57:7d:21:ad:a0:2c:c0:b9:8b: 2c:4b:40:c4:71:97:60:19:38:2c:73:d9:b4:ad:d6:1e:a5:e4: 1d:0a:83:d8:ea:da:b4:9a:2e:56:0e:63:95:46:f0:e2:1d:1a: a3:38:b8:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt7Np/R9reFeOkylOA4xS+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDM2ZTU1NzAyMzZhNDRiOWFjODU1NmNkNzkzYmM1NzM4NTViNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU4k0jDEv1Jj2hyC7FPPPggS6wGc bPMUgGZWGUhy1PHYgIf8ryj3MDS2+jNJUfi+Ri07g3IDIqGJ8ifof4JsyFg2ue2l EMjjRNHB2g0Bf6VuTqYq20NGY27S/7rKLxYp1ANVKkMSVPNXF47ECStfglQajwi5 OMd4JEecGkqeywOa1Zc7PBiQq20hZhigY73hsTCJFibMTd8UTzVDtScn/n0e1TdB V1WsoaaDnjUc9TT3QCuMD1RQkrXfhE7C6mf3ixWZhoF4K+Nx39TIqxerOX2+orxD IdZERh0QQqMY3Xvy1cOaU/DMQkFeggI6LdAc5zXGtjs4X16oXQLBmsHEswIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFD025VcCNqRLmshVbNeTvFc4VbXBMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvUFRibFZ3STJwRXVheUZWczE1TzhWemhWdGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAoDAwI5RAMD ADlGAwQAOUodAwMAOU0DAwA5ZDANBgkqhkiG9w0BAQsFAAOCAQEAZePgcbWWmNUL iV5B98KlyX3EUaDRR2aOvNVKkYzPfX+NxAIFAj3PmfZEk+wMdNFTuwC/owbl2EWQ NGqWG564RH/4ZXIe4crnPyCFXuY5BGgKU5KZU4XJlo1G1IrUcb3/T3iSfKF+vS/U SbXPmI8egfsY1LyaDeOTqnQ3U4LP9Gj0tKezqbzAO2ioXDBeo3UjsrWXoRSEHJG/ umtxoFJD+mVXCa5c9U96QnrZ4HHtbZ9eeUP2tKaWvf41OweV9T/EqHkmKbUw9OJe 83J2LnulV30hraAswLmLLEtAxHGXYBk4LHPZtK3WHqXkHQqD2OratJouVg5jlUbw 4h0aozi4cg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:54 2026 by rpki-client