This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/tYauO89UbkmwK_N9XQExSS1v_Nc.roa File: tYauO89UbkmwK_N9XQExSS1v_Nc.roa (raw, json) Hash identifier: d/1zWN1EmLOyscLiJiM90yzoqktyhFzjpIvKSzKk96Q= Subject key identifier: B5:86:AE:3B:CF:54:6E:49:B0:2B:F3:7D:5D:01:31:49:2D:6F:FC:D7 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019B7B36A5A5052BA2BB175F13BB29083542 Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/tYauO89UbkmwK_N9XQExSS1v_Nc.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17650 IP address blocks: 57.68.248.0/21 maxlen: 24 57.100.0.0/21 maxlen: 24 57.100.64.0/21 maxlen: 24 57.100.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a5:a5:05:2b:a2:bb:17:5f:13:bb:29:08:35:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b586ae3bcf546e49b02bf37d5d0131492d6ffcd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:58:8b:fa:52:56:6b:4a:49:8d:ad:eb:07: cb:d4:bd:08:4c:5a:81:f5:80:3e:fa:62:3d:72:e2: f0:c3:82:fd:48:66:19:58:dc:18:f5:3e:63:05:4d: 76:34:04:97:7f:32:98:2d:35:d3:aa:4c:46:4e:aa: aa:bb:bd:68:94:fc:6e:dd:64:b1:ce:9a:19:85:09: f5:54:b6:1c:38:ff:d4:c8:ef:4a:5f:fa:e4:a2:39: 30:0b:9d:0f:27:cc:63:2d:be:e4:68:d2:33:02:dc: ac:9f:0d:fa:29:49:74:bb:1b:ab:8e:3e:90:20:c8: 6e:6a:ff:9d:f6:98:c6:3d:9f:be:d5:15:be:dd:73: 3f:89:6f:d7:94:ea:37:33:14:76:fb:89:0e:fe:96: b1:4e:8d:83:4a:7f:02:98:aa:22:d8:a1:f2:2e:8e: a8:28:7b:49:33:58:59:48:24:15:1f:ee:09:70:70: fc:ca:20:4c:52:c3:44:1b:8b:07:a8:39:be:a8:b6: f8:0f:3d:14:c1:71:17:f4:53:f2:8a:b1:4a:db:98: fe:15:b9:b4:14:b5:33:06:46:db:cc:01:e1:f3:3e: 26:1e:7a:3d:ed:0e:0f:cb:86:52:e7:a9:8d:53:b5: 8a:55:be:57:ae:58:d1:34:d9:6c:dc:0a:66:7c:fd: 29:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:86:AE:3B:CF:54:6E:49:B0:2B:F3:7D:5D:01:31:49:2D:6F:FC:D7 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/tYauO89UbkmwK_N9XQExSS1v_Nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.68.248.0/21 57.100.0.0/21 57.100.64.0/21 57.100.96.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:86:d7:10:ce:6e:e7:08:5e:c9:6b:d0:83:ec:1c:2e:0b:a4: 19:a8:98:c4:69:23:85:28:2a:09:cc:c3:5b:fd:b7:29:1f:21: 86:3f:38:fa:ba:7d:fc:6a:1d:5a:cf:ed:55:15:ed:1a:2d:87: 1e:46:ef:cf:e6:f4:e4:63:3a:da:7b:5d:49:ad:b2:6d:1d:05: c1:e4:56:21:73:ce:b0:a3:47:5c:a1:f8:8f:00:d7:56:78:43: 45:81:c2:28:eb:19:a9:2b:86:18:1c:b1:33:cb:77:c6:55:34: 99:a5:50:62:e9:b8:66:57:aa:ac:c1:a8:37:9c:00:42:a6:3c: 91:91:1b:f1:e6:c2:41:a6:0b:8d:a3:46:ad:d6:51:e1:f2:31: f0:4c:00:1b:f9:dd:47:06:63:f8:60:92:0a:ce:98:bf:95:a5: 3c:56:b3:52:cd:18:2d:3f:14:39:8b:fd:c3:26:3e:45:d6:02: ba:26:47:09:7d:4b:cb:a6:dc:d8:37:0a:71:51:a2:c9:ea:a7: b6:ff:5d:c4:e1:25:21:b2:1d:6a:80:56:c6:19:32:ac:f7:3e: 6a:ee:2c:c6:8c:c6:db:6f:a3:8b:78:15:e3:5b:50:52:be:45: 4f:1a:ff:0e:b1:14:27:e0:1d:2f:e5:ca:84:a7:41:45:0e:b7: 89:19:9b:d8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NqWlBSuiuxdfE7spCDVCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTg2YWUzYmNmNTQ2ZTQ5YjAyYmYzN2Q1ZDAxMzE0OTJkNmZmY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfRYi/pSVmtKSY2t6wfL1L0ITFqB 9YA++mI9cuLww4L9SGYZWNwY9T5jBU12NASXfzKYLTXTqkxGTqqqu71olPxu3WSx zpoZhQn1VLYcOP/UyO9KX/rkojkwC50PJ8xjLb7kaNIzAtysnw36KUl0uxurjj6Q IMhuav+d9pjGPZ++1RW+3XM/iW/XlOo3MxR2+4kO/paxTo2DSn8CmKoi2KHyLo6o KHtJM1hZSCQVH+4JcHD8yiBMUsNEG4sHqDm+qLb4Dz0UwXEX9FPyirFK25j+Fbm0 FLUzBkbbzAHh8z4mHno97Q4Py4ZS56mNU7WKVb5XrljRNNls3ApmfP0pbwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLWGrjvPVG5JsCvzfV0BMUktb/zXMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvdFlhdU84OVVia213S19OOVhRRXhTUzF2X05jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDOUT4AwQD OWQAAwQDOWRAAwQDOWRgMA0GCSqGSIb3DQEBCwUAA4IBAQAshtcQzm7nCF7Ja9CD 7BwuC6QZqJjEaSOFKCoJzMNb/bcpHyGGPzj6un38ah1az+1VFe0aLYceRu/P5vTk Yzrae11JrbJtHQXB5FYhc86wo0dcofiPANdWeENFgcIo6xmpK4YYHLEzy3fGVTSZ pVBi6bhmV6qswag3nABCpjyRkRvx5sJBpguNo0at1lHh8jHwTAAb+d1HBmP4YJIK zpi/laU8VrNSzRgtPxQ5i/3DJj5F1gK6JkcJfUvLptzYNwpxUaLJ6qe2/13E4SUh sh1qgFbGGTKs9z5q7izGjMbbb6OLeBXjW1BSvkVPGv8OsRQn4B0v5cqEp0FFDreJ GZvY -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:14 2026 by rpki-client