This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/fP0g3WG03fRKQvk9nCrI5dbtVbw.roa File: fP0g3WG03fRKQvk9nCrI5dbtVbw.roa (raw, json) Hash identifier: iqvY0ZnRaOtLATbSx1mHSetMiM19OQ+QCDRCVXbVWCo= Subject key identifier: 7C:FD:20:DD:61:B4:DD:F4:4A:42:F9:3D:9C:2A:C8:E5:D6:ED:55:BC Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019B7B36A0488AAFF49C3621FEA2BB215818 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/fP0g3WG03fRKQvk9nCrI5dbtVbw.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2874 IP address blocks: 57.79.0.0/16 maxlen: 32 57.86.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a0:48:8a:af:f4:9c:36:21:fe:a2:bb:21:58:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cfd20dd61b4ddf44a42f93d9c2ac8e5d6ed55bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0d:32:fa:73:5c:52:82:86:cd:13:25:a8:a0: b6:fd:dd:e9:c3:6f:1e:d1:f7:3d:4f:e8:fd:17:85: b4:f6:9c:b6:40:ac:30:8c:64:b3:12:73:24:42:55: 05:ce:87:86:e0:73:90:7e:b7:ed:4c:3f:db:9c:b5: 78:ca:85:60:7d:7d:a4:a0:80:fc:ea:74:f3:b6:a9: 9b:98:bc:32:4e:a7:71:83:91:c1:f9:6b:b7:80:08: 63:f1:c3:0c:20:27:91:e1:a9:05:0f:1d:8e:85:c6: a4:91:85:ef:4e:c3:f7:ab:f1:40:c2:2f:0c:5a:d3: 71:22:11:ba:21:07:8c:4e:4e:67:6c:d6:5f:97:c1: 45:e5:4f:87:aa:e0:bb:b7:57:26:d5:06:d3:0d:fb: 62:d5:b3:d3:a7:b0:9d:3a:8e:0e:40:43:c0:4f:12: e7:21:00:c3:fd:7a:a1:d9:f6:8e:c8:20:9d:7f:63: 6d:30:5b:d7:80:d9:d2:1c:7a:1a:2b:04:51:29:1d: 39:ca:c2:a7:5a:0d:76:22:43:7f:d0:1a:7e:2e:be: d9:6e:5b:17:2f:8d:8c:4d:15:62:bf:b8:80:5d:37: 8d:56:d4:05:89:74:9c:3c:7c:29:b1:85:9f:e3:33: d7:40:2d:19:ef:ad:16:be:73:97:bf:de:7f:7c:19: f0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FD:20:DD:61:B4:DD:F4:4A:42:F9:3D:9C:2A:C8:E5:D6:ED:55:BC X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/fP0g3WG03fRKQvk9nCrI5dbtVbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.79.0.0/16 57.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:3d:85:11:39:33:71:c4:00:bd:45:8e:a9:02:31:2e:48:43: 6d:7a:f7:0c:3b:db:5d:f7:54:ac:77:57:66:db:2f:93:e3:33: 7a:60:3d:7b:ec:95:d6:a2:0e:e6:63:a3:3b:2e:92:74:7e:fa: 9d:e7:6b:10:05:0c:3c:e7:f5:b1:f4:b0:69:bc:41:06:65:8b: 66:50:fc:55:67:d8:98:10:1e:68:8a:9e:04:1d:4b:44:56:cd: 7f:c3:02:be:17:12:ba:57:08:72:7d:25:33:86:01:fa:f3:49: c1:06:2c:b0:ca:6c:00:f5:31:5e:f0:70:8e:39:4c:a4:74:7c: 6e:07:e8:a5:fc:4d:66:b7:aa:9a:16:9f:62:51:5b:d7:a0:33: 86:7d:94:dd:f1:d6:56:4c:2e:96:14:ac:30:09:e5:19:e5:bb: 7d:b2:fe:d8:d5:07:65:aa:a0:a4:d6:a7:36:bb:53:57:2e:31: 15:0b:9f:f4:db:6f:84:92:00:e9:f0:4d:d5:b3:75:b3:71:9e: e7:cf:22:a1:4d:5c:a5:0d:21:4e:2c:3b:94:1f:50:89:84:e1: 77:3d:af:0c:7a:ca:2e:86:4c:26:a1:70:49:33:b7:a1:43:a0: ad:bc:b1:ee:0a:4d:ce:f2:20:19:b3:76:eb:12:8d:f9:45:1b: 4c:34:7b:4b -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt7NqBIiq/0nDYh/qK7IVgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2ZkMjBkZDYxYjRkZGY0NGE0MmY5M2Q5YzJhYzhlNWQ2ZWQ1NWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA0y+nNcUoKGzRMlqKC2/d3pw28e 0fc9T+j9F4W09py2QKwwjGSzEnMkQlUFzoeG4HOQfrftTD/bnLV4yoVgfX2koID8 6nTztqmbmLwyTqdxg5HB+Wu3gAhj8cMMICeR4akFDx2OhcakkYXvTsP3q/FAwi8M WtNxIhG6IQeMTk5nbNZfl8FF5U+HquC7t1cm1QbTDfti1bPTp7CdOo4OQEPATxLn IQDD/Xqh2faOyCCdf2NtMFvXgNnSHHoaKwRRKR05ysKnWg12IkN/0Bp+Lr7ZblsX L42MTRViv7iAXTeNVtQFiXScPHwpsYWf4zPXQC0Z760WvnOXv95/fBnw3QIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFHz9IN1htN30SkL5PZwqyOXW7VW8MB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvZlAwZzNXRzAzZlJLUXZrOW5Dckk1ZGJ0VmJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAOU8DAwA5 VjANBgkqhkiG9w0BAQsFAAOCAQEAQz2FETkzccQAvUWOqQIxLkhDbXr3DDvbXfdU rHdXZtsvk+MzemA9e+yV1qIO5mOjOy6SdH76nedrEAUMPOf1sfSwabxBBmWLZlD8 VWfYmBAeaIqeBB1LRFbNf8MCvhcSulcIcn0lM4YB+vNJwQYssMpsAPUxXvBwjjlM pHR8bgfopfxNZreqmhafYlFb16Azhn2U3fHWVkwulhSsMAnlGeW7fbL+2NUHZaqg pNanNrtTVy4xFQuf9NtvhJIA6fBN1bN1s3Ge588ioU1cpQ0hTiw7lB9QiYThdz2v DHrKLoZMJqFwSTO3oUOgrbyx7gpNzvIgGbN26xKN+UUbTDR7Sw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:50:24 2026 by rpki-client