This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/S1l-2dzwb-2zQHtI9oeC_VpCPtE.roa File: S1l-2dzwb-2zQHtI9oeC_VpCPtE.roa (raw, json) Hash identifier: kgjDYJvzpvvXhGpA6SOSZpPon+c9XSP1iW9dljXHh6I= Subject key identifier: 4B:59:7E:D9:DC:F0:6F:ED:B3:40:7B:48:F6:87:82:FD:5A:42:3E:D1 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019B7B36A3803391A4B2334B07F2D47A2344 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/S1l-2dzwb-2zQHtI9oeC_VpCPtE.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6853 IP address blocks: 57.66.0.0/15 maxlen: 32 57.78.0.0/16 maxlen: 32 57.79.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a3:80:33:91:a4:b2:33:4b:07:f2:d4:7a:23:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b597ed9dcf06fedb3407b48f68782fd5a423ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:02:2d:c4:b6:5a:8b:4e:10:0b:93:eb:ad: 32:6d:90:80:1b:ef:d9:7a:e7:bd:d0:86:39:7e:87: 52:dc:1c:c0:cd:5f:86:fc:b6:18:61:68:cf:dc:9e: 63:e4:a6:54:64:52:22:b8:f1:f6:8a:4a:fd:2d:74: 25:67:ac:3a:99:ed:77:e9:56:5d:28:d1:b7:d5:24: 24:f0:bf:d0:9e:5c:ad:9f:bb:bc:a9:da:a6:32:b5: 65:7d:a6:04:a1:1f:24:ad:23:6f:24:7e:ac:b8:7d: 04:66:1d:eb:fd:6c:18:12:76:23:be:82:56:0e:b7: 56:7d:04:20:60:8a:f4:76:e4:ce:bd:3b:8f:80:9e: c4:d2:bc:c8:76:2e:4c:53:c2:6d:29:e3:79:1e:1d: 90:bf:2a:6d:b8:95:b3:0a:1d:04:5e:e3:02:32:82: 53:d5:e5:b6:10:c4:6a:70:a8:49:bb:9e:17:a6:55: b3:b5:5d:a0:4c:48:98:92:b6:39:4e:a9:47:8d:d0: ef:a8:92:40:ad:8f:56:91:8c:4e:0e:5b:ce:f6:62: fd:62:e8:41:b3:8e:f5:9a:f7:57:ab:98:52:fa:24: e7:96:35:16:88:4f:6e:99:17:81:f3:31:31:38:34: 34:1a:8d:b2:d7:4d:0c:b5:73:c8:78:4f:12:00:5e: 6c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:59:7E:D9:DC:F0:6F:ED:B3:40:7B:48:F6:87:82:FD:5A:42:3E:D1 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/S1l-2dzwb-2zQHtI9oeC_VpCPtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.66.0.0/15 57.78.0.0/15 Signature Algorithm: sha256WithRSAEncryption 9d:3c:fb:c3:a9:7e:3a:3e:5a:19:68:b2:c6:e6:4f:77:ea:0d: ce:1a:8d:fa:82:b9:67:1b:5e:01:48:26:5c:4d:a2:c9:2d:ee: b7:38:e9:3a:23:f6:a1:3a:ff:65:d3:4e:f8:86:8f:97:ce:1b: a6:fb:02:c5:60:2a:0b:14:1e:31:e0:d1:bf:ef:b9:d9:37:b8: 51:21:21:dd:54:64:15:2a:c8:4e:9a:03:2c:04:45:89:bf:a4: 46:fc:23:a4:d5:90:a3:26:0f:6b:b4:2c:1b:3c:3d:5a:55:db: 5c:22:c2:18:11:fb:da:24:50:91:ec:60:15:3c:d2:c3:9b:88: 8e:56:6f:24:c8:57:96:1b:45:68:f1:29:93:63:37:b8:7f:d6: bc:dc:7e:e5:57:ef:e5:63:d6:fb:62:4b:34:ff:3c:59:24:a6: 79:4a:4f:42:d5:8f:d4:0c:ba:ee:c7:db:f4:c3:53:a9:7f:32: 55:e5:3d:be:a5:f3:75:08:d1:10:68:39:c9:88:0b:54:d0:e5: a4:97:5a:4e:e5:64:07:80:cf:52:66:d5:31:b5:82:37:9e:b0: cc:7a:be:28:c5:15:ec:11:12:c2:08:ff:12:7a:c8:39:c1:23: a6:57:2f:b4:6f:54:be:0d:45:a3:fd:a0:78:96:53:39:c3:6a: d4:f6:89:bc -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt7NqOAM5GksjNLB/LUeiNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjU5N2VkOWRjZjA2ZmVkYjM0MDdiNDhmNjg3ODJmZDVhNDIzZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/4CLcS2WotOEAuT660ybZCAG+/Z eue90IY5fodS3BzAzV+G/LYYYWjP3J5j5KZUZFIiuPH2ikr9LXQlZ6w6me136VZd KNG31SQk8L/Qnlytn7u8qdqmMrVlfaYEoR8krSNvJH6suH0EZh3r/WwYEnYjvoJW DrdWfQQgYIr0duTOvTuPgJ7E0rzIdi5MU8JtKeN5Hh2QvyptuJWzCh0EXuMCMoJT 1eW2EMRqcKhJu54XplWztV2gTEiYkrY5TqlHjdDvqJJArY9WkYxODlvO9mL9YuhB s471mvdXq5hS+iTnljUWiE9umReB8zExODQ0Go2y100MtXPIeE8SAF5s1wIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFEtZftnc8G/ts0B7SPaHgv1aQj7RMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvUzFsLTJkendiLTJ6UUh0STlvZUNfVnBDUHRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMBOUIDAwE5 TjANBgkqhkiG9w0BAQsFAAOCAQEAnTz7w6l+Oj5aGWiyxuZPd+oNzhqN+oK5Zxte AUgmXE2iyS3utzjpOiP2oTr/ZdNO+IaPl84bpvsCxWAqCxQeMeDRv++52Te4USEh 3VRkFSrITpoDLARFib+kRvwjpNWQoyYPa7QsGzw9WlXbXCLCGBH72iRQkexgFTzS w5uIjlZvJMhXlhtFaPEpk2M3uH/WvNx+5Vfv5WPW+2JLNP88WSSmeUpPQtWP1Ay6 7sfb9MNTqX8yVeU9vqXzdQjREGg5yYgLVNDlpJdaTuVkB4DPUmbVMbWCN56wzHq+ KMUV7BESwgj/EnrIOcEjplcvtG9Uvg1Fo/2geJZTOcNq1PaJvA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:19 2026 by rpki-client