This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/S2NE7ivxA_6uSF3faj9xM7QLVgw.roa File: S2NE7ivxA_6uSF3faj9xM7QLVgw.roa (raw, json) Hash identifier: qDphZ//ssVu7S99t/OF3SeD4wpZPqNUE9vHt5D6PaMI= Subject key identifier: 4B:63:44:EE:2B:F1:03:FE:AE:48:5D:DF:6A:3F:71:33:B4:0B:56:0C Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B364F1D645615528D1F0BAB6484EA38 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/S2NE7ivxA_6uSF3faj9xM7QLVgw.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 2.57.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4f:1d:64:56:15:52:8d:1f:0b:ab:64:84:ea:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b6344ee2bf103feae485ddf6a3f7133b40b560c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:4d:57:22:b2:d1:52:5a:09:02:38:19:09: 54:84:04:c5:6a:37:80:1e:15:3e:ae:f8:fc:04:5c: c5:91:92:6c:7e:44:10:e2:46:ec:cd:9c:86:9a:e0: 91:ca:76:11:f1:b3:cb:37:51:17:40:b3:46:0b:57: 49:4e:f3:a3:51:9e:01:10:95:7f:87:53:ad:72:cf: 9c:85:69:e9:ac:93:68:30:02:da:a5:12:f5:fa:2f: a6:3f:6e:41:08:35:c4:d1:b9:17:05:3b:20:ea:c1: eb:3a:87:35:0e:af:3d:71:db:5d:b7:a2:d1:5b:4f: a0:61:3d:6b:36:10:28:6a:6e:aa:33:26:0f:14:0e: 77:7b:ba:49:7c:9c:cb:e9:a4:dd:9d:d5:6f:f3:e0: e5:2d:f1:d9:b4:ad:42:ed:d8:5f:84:02:99:1b:b3: a5:d3:ca:13:88:a0:c9:d7:ed:38:6f:db:c7:27:7a: 17:93:66:3e:c4:0b:2a:4f:0b:fe:6d:0e:3e:b5:3d: 4e:23:20:be:2e:e4:ec:01:ff:84:f8:c5:3b:e7:7e: 44:de:8b:d5:b2:af:f8:11:01:74:9b:47:d2:0e:c4: 71:5f:f8:6f:75:c2:45:6c:0b:4f:1b:30:07:a1:e3: 6b:34:be:e9:ec:94:0f:cb:ec:be:75:05:31:2e:ee: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:63:44:EE:2B:F1:03:FE:AE:48:5D:DF:6A:3F:71:33:B4:0B:56:0C X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/S2NE7ivxA_6uSF3faj9xM7QLVgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.168.0/24 Signature Algorithm: sha256WithRSAEncryption 83:79:91:89:6b:2e:20:cb:c3:77:5c:31:06:31:cc:85:b5:b3: 9a:ca:fc:98:fa:23:fc:3a:42:b5:40:77:13:58:d4:b3:2d:bc: 40:84:4e:09:9a:e2:0a:19:b8:04:d6:93:9e:99:52:b4:83:b9: 94:3e:1b:fc:4d:b6:0a:6f:c4:f8:02:65:dc:b3:c8:ce:02:bb: 88:ff:fe:e2:d2:12:8e:d6:0d:a5:d6:6b:76:5d:d9:12:c0:aa: 97:34:1c:f2:1d:f3:97:87:6e:6f:20:2c:43:7a:77:fe:af:7a: b1:b3:b5:fb:eb:3b:fb:45:58:3f:45:90:49:78:6c:a9:1d:09: 63:66:d2:7e:1b:da:fa:6d:9c:48:27:fd:be:3e:5f:8c:4b:77: 95:c6:34:ee:c9:5e:8e:a4:7f:53:7a:5e:ca:65:0c:52:3f:16: 51:4d:74:11:ad:af:60:17:bf:bd:4a:53:82:42:92:71:38:cc: d3:09:75:82:4b:31:71:b5:c3:52:2d:b4:73:54:9d:e4:b1:6b: 0d:cd:b3:b7:f5:8b:57:77:c0:68:a7:e5:0c:3b:81:b2:0f:0f: 43:fc:d3:4f:a0:cc:14:e2:ee:34:66:20:c2:88:ef:45:cd:60: f1:fd:21:66:39:df:71:3a:3a:23:6e:8c:e1:ad:5d:9c:b1:e4: a8:90:86:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nk8dZFYVUo0fC6tkhOo4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjYzNDRlZTJiZjEwM2ZlYWU0ODVkZGY2YTNmNzEzM2I0MGI1NjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjipNVyKy0VJaCQI4GQlUhATFajeA HhU+rvj8BFzFkZJsfkQQ4kbszZyGmuCRynYR8bPLN1EXQLNGC1dJTvOjUZ4BEJV/ h1Otcs+chWnprJNoMALapRL1+i+mP25BCDXE0bkXBTsg6sHrOoc1Dq89cdtdt6LR W0+gYT1rNhAoam6qMyYPFA53e7pJfJzL6aTdndVv8+DlLfHZtK1C7dhfhAKZG7Ol 08oTiKDJ1+04b9vHJ3oXk2Y+xAsqTwv+bQ4+tT1OIyC+LuTsAf+E+MU7535E3ovV sq/4EQF0m0fSDsRxX/hvdcJFbAtPGzAHoeNrNL7p7JQPy+y+dQUxLu5yoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEtjRO4r8QP+rkhd32o/cTO0C1YMMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvUzJORTdpdnhBXzZ1U0YzZmFqOXhNN1FMVmd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjmoMA0G CSqGSIb3DQEBCwUAA4IBAQCDeZGJay4gy8N3XDEGMcyFtbOayvyY+iP8OkK1QHcT WNSzLbxAhE4JmuIKGbgE1pOemVK0g7mUPhv8TbYKb8T4AmXcs8jOAruI//7i0hKO 1g2l1mt2XdkSwKqXNBzyHfOXh25vICxDenf+r3qxs7X76zv7RVg/RZBJeGypHQlj ZtJ+G9r6bZxIJ/2+Pl+MS3eVxjTuyV6OpH9Tel7KZQxSPxZRTXQRra9gF7+9SlOC QpJxOMzTCXWCSzFxtcNSLbRzVJ3ksWsNzbO39YtXd8Bop+UMO4GyDw9D/NNPoMwU 4u40ZiDCiO9FzWDx/SFmOd9xOjojbozhrV2cseSokIZW -----END CERTIFICATE-----Generated at Sun Jan 25 10:07:43 2026 by rpki-client