This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/St6cINBiYFYzDsvoHQ0HIuhRHRE.roa File: St6cINBiYFYzDsvoHQ0HIuhRHRE.roa (raw, json) Hash identifier: TerSeMXT2wx/qxnCAM2X+sHCfRQgQnB7xYChR1RCmTU= Subject key identifier: 4A:DE:9C:20:D0:62:60:56:33:0E:CB:E8:1D:0D:07:22:E8:51:1D:11 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019B7B36A3FF1AA3945120D5711EF2B3076A Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/St6cINBiYFYzDsvoHQ0HIuhRHRE.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10282 IP address blocks: 57.66.0.0/15 maxlen: 32 57.90.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a3:ff:1a:a3:94:51:20:d5:71:1e:f2:b3:07:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ade9c20d0626056330ecbe81d0d0722e8511d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3a:52:8a:20:8f:2e:0e:e7:16:b7:7a:7e:66: b6:a1:e3:76:5d:6b:47:2c:19:13:69:73:4f:c6:f7: 52:0e:07:91:8a:f2:00:81:c9:73:95:b5:fe:6e:fa: 8e:ac:43:2e:f2:8e:30:a1:26:94:6b:bf:38:cc:03: de:5f:42:1c:98:30:16:4d:c6:7d:35:f7:e1:74:65: 2b:96:1e:f3:61:20:0e:ab:a0:7f:7f:73:62:c8:32: 93:e7:ab:f0:21:95:9b:14:1c:9b:9e:93:5f:6b:da: ed:62:06:b1:70:a3:77:10:e3:df:1f:7b:b2:ed:c2: a5:91:5c:74:d3:f1:8a:1b:97:d8:d5:fe:da:e1:28: cb:58:23:f7:ea:c1:b4:d8:d5:16:97:8a:4e:c4:b7: d9:a3:98:9a:2a:e6:c4:2f:92:89:34:9f:a1:12:b6: 70:d0:cb:56:c8:d3:50:2f:9a:e7:80:4d:85:4f:86: 84:06:4f:52:46:b4:b0:ba:77:92:49:d8:94:aa:99: 96:1d:eb:dd:d8:26:b3:a2:64:2b:a5:a3:fb:62:a4: c4:ce:41:96:19:d7:45:0a:dd:82:9b:9d:15:30:74: 4c:fa:fd:db:80:96:5c:ed:2e:78:e4:86:ca:4b:61: cb:e6:61:af:e5:15:cb:12:26:8f:6b:f4:2f:c3:24: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DE:9C:20:D0:62:60:56:33:0E:CB:E8:1D:0D:07:22:E8:51:1D:11 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/St6cINBiYFYzDsvoHQ0HIuhRHRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.66.0.0/15 57.90.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9f:cb:26:99:74:0f:77:55:11:62:9c:2a:4f:cf:72:00:af:ee: b5:c6:1d:ea:3e:48:93:3e:81:65:8a:31:2a:fe:c2:57:26:e3: 4e:65:83:b8:2e:17:d3:59:1a:29:79:ea:98:d4:a8:62:4c:c7: 42:29:3e:62:cf:a3:2a:99:91:4d:5a:e0:48:55:af:b6:51:60: b6:33:9f:c0:bb:f8:13:75:63:90:dd:d0:21:16:bd:bc:24:c0: c4:a6:d6:fa:50:5a:7a:8d:e8:02:96:5d:b3:6c:74:cc:84:0f: e9:d1:c5:0d:7e:a7:af:23:12:42:dc:8e:f0:9a:70:8f:62:e4: 48:58:3d:e3:84:ff:a5:f0:0c:4c:fb:bb:49:6f:0a:ce:95:40: a3:f6:8a:12:d4:15:0e:e9:54:25:34:e3:a6:a7:72:97:ae:dd: f8:2c:1e:c2:6e:fc:bd:0e:2d:b0:f5:7f:e8:33:0d:f3:4c:b1: bf:69:73:37:19:66:52:45:96:85:b2:19:1c:20:c0:9b:74:7c: d1:b8:e0:03:ad:8c:4d:29:83:c9:aa:d3:a5:49:a7:98:04:34: 9b:14:11:11:29:05:d5:fb:48:8f:ec:ae:0a:0d:7f:24:12:d7: 9c:c8:69:41:e4:35:44:74:0d:df:a8:4f:eb:21:b0:ff:81:59: 38:f0:e0:ca -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt7NqP/GqOUUSDVcR7yswdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWRlOWMyMGQwNjI2MDU2MzMwZWNiZTgxZDBkMDcyMmU4NTExZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDpSiiCPLg7nFrd6fma2oeN2XWtH LBkTaXNPxvdSDgeRivIAgclzlbX+bvqOrEMu8o4woSaUa784zAPeX0IcmDAWTcZ9 NffhdGUrlh7zYSAOq6B/f3NiyDKT56vwIZWbFBybnpNfa9rtYgaxcKN3EOPfH3uy 7cKlkVx00/GKG5fY1f7a4SjLWCP36sG02NUWl4pOxLfZo5iaKubEL5KJNJ+hErZw 0MtWyNNQL5rngE2FT4aEBk9SRrSwuneSSdiUqpmWHevd2CazomQrpaP7YqTEzkGW GddFCt2Cm50VMHRM+v3bgJZc7S545IbKS2HL5mGv5RXLEiaPa/QvwyR93QIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFErenCDQYmBWMw7L6B0NByLoUR0RMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvU3Q2Y0lOQmlZRll6RHN2b0hRMEhJdWhSSFJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMBOUIDAwA5 WjANBgkqhkiG9w0BAQsFAAOCAQEAn8smmXQPd1URYpwqT89yAK/utcYd6j5Ikz6B ZYoxKv7CVybjTmWDuC4X01kaKXnqmNSoYkzHQik+Ys+jKpmRTVrgSFWvtlFgtjOf wLv4E3VjkN3QIRa9vCTAxKbW+lBaeo3oApZds2x0zIQP6dHFDX6nryMSQtyO8Jpw j2LkSFg944T/pfAMTPu7SW8KzpVAo/aKEtQVDulUJTTjpqdyl67d+Cwewm78vQ4t sPV/6DMN80yxv2lzNxlmUkWWhbIZHCDAm3R80bjgA62MTSmDyarTpUmnmAQ0mxQR ESkF1ftIj+yuCg1/JBLXnMhpQeQ1RHQN36hP6yGw/4FZOPDgyg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:09 2026 by rpki-client