This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/_sJaMgsC9vZYHJ1-sJ2DQDObNds.roa File: _sJaMgsC9vZYHJ1-sJ2DQDObNds.roa (raw, json) Hash identifier: tdKFcf6lEHJohX/dDC1SKuCr0lFpoQm/9xayJVcBCOc= Subject key identifier: FE:C2:5A:32:0B:02:F6:F6:58:1C:9D:7E:B0:9D:83:40:33:9B:35:DB Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019B7B36A725E2FB78F97853322B67BCEB09 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/_sJaMgsC9vZYHJ1-sJ2DQDObNds.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25186 IP address blocks: 57.197.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a7:25:e2:fb:78:f9:78:53:32:2b:67:bc:eb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fec25a320b02f6f6581c9d7eb09d8340339b35db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:9a:79:9c:22:a9:e3:9e:e5:7d:e4:68:c2: 05:f7:5a:f9:1d:fa:28:97:33:64:12:33:8d:dc:04: e4:39:1e:88:9f:83:ab:74:b6:25:9f:d7:12:5a:fa: 4d:fc:94:10:89:d0:57:af:cf:a5:29:5b:fd:98:c4: 7d:24:f1:22:dd:81:12:ac:47:cf:09:e0:6f:53:07: 1e:90:aa:8b:4a:f3:73:ce:c6:2f:53:a3:16:f8:be: ac:41:ec:b2:4a:75:93:c0:62:79:91:1e:33:1b:10: 8a:30:59:d4:95:5c:35:84:30:83:0d:98:eb:b4:49: 4f:b8:c2:ed:e1:81:de:dd:37:3f:a8:fa:69:d6:31: c4:3b:38:30:bc:d9:9d:ce:06:69:0f:92:54:8f:f8: 43:eb:06:88:82:6d:3f:15:93:7c:91:0d:f0:2a:70: b0:6f:9f:cf:30:8a:b1:db:f8:1d:90:70:6f:ce:6d: df:e0:2e:1d:60:e1:38:ab:b9:48:0a:d1:37:47:8e: b2:9f:75:41:9a:3a:b7:0e:95:5e:e9:aa:9e:c6:fa: 5a:11:ef:a3:e5:ce:23:1b:9b:25:50:ec:4d:dd:6f: 2c:f9:e2:96:bc:c7:a0:64:c6:e3:f4:c5:60:c0:ba: dc:2f:2b:6f:a7:05:1f:9a:ea:d6:88:fa:94:e6:7e: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C2:5A:32:0B:02:F6:F6:58:1C:9D:7E:B0:9D:83:40:33:9B:35:DB X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/_sJaMgsC9vZYHJ1-sJ2DQDObNds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.197.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2a:36:77:e8:66:48:0a:a5:a9:1e:53:b6:55:32:43:22:9d:9e: 60:69:43:1d:95:fe:4c:0b:1c:16:c9:26:7b:65:88:f2:24:31: c7:4f:2e:1a:07:c0:20:fa:86:76:92:f8:67:b3:ba:26:bf:0d: f8:91:09:28:dd:03:cc:c7:92:45:bf:f0:5c:f6:19:9a:e0:0b: b9:1c:55:54:26:6f:7a:d8:ee:84:95:85:81:9f:b4:4d:56:fa: 1a:6e:d1:53:a2:16:9c:ee:20:6e:76:17:2d:6d:75:e7:ec:f5: 56:38:4c:b4:33:01:69:ac:34:6a:6b:0c:ea:15:56:b6:1a:5d: f9:12:fa:2b:6f:ba:20:0a:41:19:f6:7a:87:bc:06:94:fa:4e: bc:03:52:18:86:87:fa:e6:55:89:60:37:4b:c7:9e:69:af:20: 29:cf:32:3e:4a:e2:7d:8b:c5:3b:87:dc:18:28:36:88:08:3d: 7a:67:f0:0f:9f:1f:46:10:86:e5:07:f1:e0:c5:f4:76:a5:89: 80:4c:6a:f4:43:0a:b3:0e:9f:c2:71:aa:05:c0:bb:f5:c3:e7: 4e:c3:dc:84:3c:a5:6a:1b:20:d0:2a:37:83:37:c8:fa:49:26: 61:26:54:29:a1:f6:e5:b6:f4:d3:b8:3c:64:a8:8d:d8:5f:20: cc:a4:33:13 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7Nqcl4vt4+XhTMitnvOsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWMyNWEzMjBiMDJmNmY2NTgxYzlkN2ViMDlkODM0MDMzOWIzNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH2aeZwiqeOe5X3kaMIF91r5Hfoo lzNkEjON3ATkOR6In4OrdLYln9cSWvpN/JQQidBXr8+lKVv9mMR9JPEi3YESrEfP CeBvUwcekKqLSvNzzsYvU6MW+L6sQeyySnWTwGJ5kR4zGxCKMFnUlVw1hDCDDZjr tElPuMLt4YHe3Tc/qPpp1jHEOzgwvNmdzgZpD5JUj/hD6waIgm0/FZN8kQ3wKnCw b5/PMIqx2/gdkHBvzm3f4C4dYOE4q7lICtE3R46yn3VBmjq3DpVe6aqexvpaEe+j 5c4jG5slUOxN3W8s+eKWvMegZMbj9MVgwLrcLytvpwUfmurWiPqU5n5nIQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFP7CWjILAvb2WBydfrCdg0AzmzXbMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvX3NKYU1nc0M5dlpZSEoxLXNKMkRRRE9iTmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOcUwDQYJ KoZIhvcNAQELBQADggEBACo2d+hmSAqlqR5TtlUyQyKdnmBpQx2V/kwLHBbJJntl iPIkMcdPLhoHwCD6hnaS+Gezuia/DfiRCSjdA8zHkkW/8Fz2GZrgC7kcVVQmb3rY 7oSVhYGftE1W+hpu0VOiFpzuIG52Fy1tdefs9VY4TLQzAWmsNGprDOoVVrYaXfkS +itvuiAKQRn2eoe8BpT6TrwDUhiGh/rmVYlgN0vHnmmvICnPMj5K4n2LxTuH3Bgo NogIPXpn8A+fH0YQhuUH8eDF9HaliYBMavRDCrMOn8JxqgXAu/XD507D3IQ8pWob INAqN4M3yPpJJmEmVCmh9uW29NO4PGSojdhfIMykMxM= -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:29 2026 by rpki-client