This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/5CYe2w6R8bIP53LSediQOkU8X6Y.roa File: 5CYe2w6R8bIP53LSediQOkU8X6Y.roa (raw, json) Hash identifier: 62hxmbI0Pt2Gc+kE97Qd4+IWL8YV1uOGUoBpSifMc4g= Subject key identifier: E4:26:1E:DB:0E:91:F1:B2:0F:E7:72:D2:79:D8:90:3A:45:3C:5F:A6 Certificate issuer: /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Certificate serial: 019B7DCA57D93795298646E4374A653F9280 Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/5CYe2w6R8bIP53LSediQOkU8X6Y.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13448 IP address blocks: 157.167.1.0/24 maxlen: 24 157.167.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:57:d9:37:95:29:86:46:e4:37:4a:65:3f:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4261edb0e91f1b20fe772d279d8903a453c5fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:f8:5c:18:0e:e4:3e:cc:d1:33:0f:96:95: e7:26:e3:e1:3e:72:38:03:31:64:89:12:3d:98:cd: 8d:5e:24:56:31:99:d9:10:d8:c5:02:7f:24:5f:18: 54:d4:d1:74:4b:b4:ca:72:29:67:0d:bc:60:19:fc: 1d:0b:71:96:59:18:7c:34:56:44:0c:af:3d:0f:30: 53:c6:c4:f2:37:a7:fc:eb:29:ec:4a:bd:ca:58:7d: 49:5e:24:6a:5f:0a:3a:bc:d9:2c:08:77:a3:3d:50: 8e:58:6a:2e:b1:07:23:ad:d8:c5:fc:71:a6:3d:ca: 31:f9:1a:c1:7a:fe:be:6f:cc:42:6d:d0:fc:76:03: 2c:bd:3b:12:1d:dc:59:d5:d3:c5:c2:61:74:f8:e9: 3c:65:94:93:1c:33:0f:c1:42:79:65:6b:11:0a:01: 33:b6:25:b8:4e:6c:4c:f0:e7:33:c5:a2:75:67:31: e4:84:cb:36:03:02:42:90:78:31:ed:18:cd:2d:90: 83:9b:df:81:b6:61:56:e8:6a:ec:77:72:47:cc:8f: ca:c3:87:c2:99:c2:ce:0d:7d:8b:cf:c0:ef:ef:7f: 3c:c3:54:a1:c8:5e:fd:f7:fe:4a:ee:87:3b:14:f8: d0:a7:06:6c:2e:03:ab:c7:ec:f7:62:e2:3c:18:e4: c9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:26:1E:DB:0E:91:F1:B2:0F:E7:72:D2:79:D8:90:3A:45:3C:5F:A6 X509v3 Authority Key Identifier: keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/5CYe2w6R8bIP53LSediQOkU8X6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.167.1.0/24 157.167.3.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:d5:e9:28:a7:c9:79:95:a0:a3:01:18:73:cc:3f:86:cd:34: ce:9c:ec:2a:78:e2:7e:56:8d:7d:ea:8b:07:6a:fe:6c:e7:2e: 18:87:53:92:dd:16:3c:1a:69:16:ea:03:1f:cb:c3:3c:f4:c2: f9:5f:69:9b:9b:65:ce:1a:aa:99:e1:80:41:13:fd:f8:53:4b: 2a:7b:7e:f9:0e:97:60:c0:5e:0b:21:af:19:68:5b:4f:b3:4a: 48:cb:9a:cd:8e:6d:4e:bf:88:91:bd:80:60:a5:5a:e8:79:6f: 13:3c:a7:12:a3:51:23:c2:f8:61:c6:c0:f0:02:d9:ab:19:2d: c2:22:cd:64:9e:d5:0c:8f:e2:0b:95:f7:a1:54:be:70:ac:b2: 9b:8b:8b:a6:22:48:0e:18:13:33:43:d2:82:a2:88:bb:2a:90: 35:85:38:71:49:e6:34:65:91:9f:1d:6d:6b:65:3e:85:25:e1: c7:36:8f:4a:ef:16:32:25:59:14:ab:6e:dc:6b:6b:fa:97:23: 4c:57:3e:4a:c8:a8:9d:d8:78:3e:31:16:b8:00:8a:43:0a:26: 5d:0d:20:f3:39:29:32:ae:fb:0f:d9:80:3f:9b:b6:25:8b:ee: 8a:3d:cf:d6:ff:aa:89:76:4a:a0:af:21:01:c8:33:01:3c:da: 43:33:73:ab -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ylfZN5UphkbkN0plP5KAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTFhYWQwZTQxNDhhYmUzZjJhOGI4ZDQzMThmMzRiNDU2 YjY1ZjEwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDI2MWVkYjBlOTFmMWIyMGZlNzcyZDI3OWQ4OTAzYTQ1M2M1ZmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroL4XBgO5D7M0TMPlpXnJuPhPnI4 AzFkiRI9mM2NXiRWMZnZENjFAn8kXxhU1NF0S7TKcilnDbxgGfwdC3GWWRh8NFZE DK89DzBTxsTyN6f86ynsSr3KWH1JXiRqXwo6vNksCHejPVCOWGousQcjrdjF/HGm Pcox+RrBev6+b8xCbdD8dgMsvTsSHdxZ1dPFwmF0+Ok8ZZSTHDMPwUJ5ZWsRCgEz tiW4TmxM8OczxaJ1ZzHkhMs2AwJCkHgx7RjNLZCDm9+BtmFW6Grsd3JHzI/Kw4fC mcLODX2Lz8Dv7388w1ShyF799/5K7oc7FPjQpwZsLgOrx+z3YuI8GOTJwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOQmHtsOkfGyD+dy0nnYkDpFPF+mMB8GA1UdIwQY MBaAFI9RqtDkFIq+PyqLjUMY80tFa2XxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQt NzYyZDI3Mjc3NTkxLzEvNUNZZTJ3NlI4YklQNTNMU2VkaVFPa1U4WDZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQtNzYyZDI3Mjc3NTkx LzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnacBAwQA nacDMA0GCSqGSIb3DQEBCwUAA4IBAQB91ekop8l5laCjARhzzD+GzTTOnOwqeOJ+ Vo196osHav5s5y4Yh1OS3RY8GmkW6gMfy8M89ML5X2mbm2XOGqqZ4YBBE/34U0sq e375DpdgwF4LIa8ZaFtPs0pIy5rNjm1Ov4iRvYBgpVroeW8TPKcSo1EjwvhhxsDw AtmrGS3CIs1kntUMj+ILlfehVL5wrLKbi4umIkgOGBMzQ9KCooi7KpA1hThxSeY0 ZZGfHW1rZT6FJeHHNo9K7xYyJVkUq27ca2v6lyNMVz5KyKid2Hg+MRa4AIpDCiZd DSDzOSkyrvsP2YA/m7Yli+6KPc/W/6qJdkqgryEByDMBPNpDM3Or -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:48 2026 by rpki-client