This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/rcJDPkI4eynfWrTLoSdqLg60fG4.roa File: rcJDPkI4eynfWrTLoSdqLg60fG4.roa (raw, json) Hash identifier: EXzqiGJMATe2PwXCIjt1gE9L/khTBoqYQQscvLJnOxM= Subject key identifier: AD:C2:43:3E:42:38:7B:29:DF:5A:B4:CB:A1:27:6A:2E:0E:B4:7C:6E Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B364C5AA9597973ABB60A3B45E15132 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/rcJDPkI4eynfWrTLoSdqLg60fG4.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 2.57.170.0/24 maxlen: 24 45.8.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4c:5a:a9:59:79:73:ab:b6:0a:3b:45:e1:51:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adc2433e42387b29df5ab4cba1276a2e0eb47c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5b:a0:4d:21:d6:98:9e:63:bb:d1:e9:75:ab: b4:0f:a7:fd:f6:f5:d8:7a:f7:4a:20:e2:f2:3d:bc: fe:be:75:ef:0b:36:52:ad:c9:00:61:a2:65:ba:58: 62:37:14:48:a4:e2:4f:1b:0b:bd:09:6a:76:55:c0: 50:05:38:6e:c2:84:23:63:ed:5b:00:ae:6f:53:98: 61:79:58:ca:ce:ed:df:71:26:f0:ac:3d:46:64:e1: f4:b6:79:75:4e:08:b8:92:b5:e9:e0:2c:28:04:96: 21:f4:83:cd:9d:e0:29:17:52:c2:b8:95:96:98:03: 5b:48:c0:c4:58:e4:b0:ea:78:be:99:33:e4:b2:a7: 81:be:65:38:e6:4f:d4:79:3b:63:7c:f5:f2:c4:de: d2:41:59:9b:7b:85:84:54:7c:59:e5:7d:c3:ab:a6: 8d:90:e0:c5:84:46:26:64:93:78:07:b4:65:25:b1: a6:f6:d7:5b:c7:2d:79:c5:26:1e:24:61:1c:a2:54: af:0f:46:4c:16:a5:59:dc:32:a1:72:26:c4:89:5f: e1:df:9c:e7:84:b0:4b:ec:1f:77:31:a2:1f:9f:9a: b0:a8:62:ca:b7:96:b2:8e:61:34:fb:3d:22:59:c9: fd:56:c8:44:68:3c:52:f4:b6:f7:53:ab:2f:5b:0e: 48:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C2:43:3E:42:38:7B:29:DF:5A:B4:CB:A1:27:6A:2E:0E:B4:7C:6E X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/rcJDPkI4eynfWrTLoSdqLg60fG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.170.0/24 45.8.19.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:46:61:e0:c3:20:7c:a2:30:80:6a:ce:ce:24:f6:53:b1:f2: f5:71:b8:1c:4b:2b:a3:9f:a9:74:b6:b2:30:97:f4:eb:28:44: 8f:b7:25:c1:b9:5f:14:7d:2c:72:91:18:f7:8f:4e:42:14:46: 07:bc:62:64:6b:2c:fe:73:e8:2f:90:68:84:b2:4c:bf:88:e7: 10:d6:d9:3a:53:25:91:98:4c:9d:1e:24:cc:35:66:6b:bc:47: 97:c0:29:c5:3f:5b:a9:20:cb:50:6b:13:00:69:e5:8a:ac:86: f8:c7:6c:e2:31:53:72:22:a1:c3:5d:07:50:4e:f3:6f:79:2d: 0f:25:8f:c1:d3:92:5a:03:56:d7:a7:ac:c4:b2:4c:5f:29:ec: 66:ba:8f:77:98:15:98:27:a1:36:76:ee:49:65:b8:c6:98:b8: 60:0f:18:8f:68:6f:28:9d:36:e1:d8:31:55:0a:e6:ee:e6:b3: 03:cb:23:46:c9:d9:4e:94:90:55:79:3e:ee:80:5d:85:c3:28: 7a:ea:52:c1:ed:76:c5:eb:05:14:b5:a0:1d:8e:14:9e:2d:2f: 31:f6:37:ad:14:44:0a:a5:dc:03:04:63:86:10:da:40:3e:a8: 19:9c:0c:d7:26:db:57:b0:41:2d:95:fa:db:50:6c:d0:d9:4a: ea:9b:32:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NkxaqVl5c6u2CjtF4VEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGMyNDMzZTQyMzg3YjI5ZGY1YWI0Y2JhMTI3NmEyZTBlYjQ3YzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFugTSHWmJ5ju9Hpdau0D6f99vXY evdKIOLyPbz+vnXvCzZSrckAYaJlulhiNxRIpOJPGwu9CWp2VcBQBThuwoQjY+1b AK5vU5hheVjKzu3fcSbwrD1GZOH0tnl1Tgi4krXp4CwoBJYh9IPNneApF1LCuJWW mANbSMDEWOSw6ni+mTPksqeBvmU45k/UeTtjfPXyxN7SQVmbe4WEVHxZ5X3Dq6aN kODFhEYmZJN4B7RlJbGm9tdbxy15xSYeJGEcolSvD0ZMFqVZ3DKhcibEiV/h35zn hLBL7B93MaIfn5qwqGLKt5ayjmE0+z0iWcn9VshEaDxS9Lb3U6svWw5IDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK3CQz5COHsp31q0y6Enai4OtHxuMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvcmNKRFBrSTRleW5mV3JUTG9TZHFMZzYwZkc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjmqAwQA LQgTMA0GCSqGSIb3DQEBCwUAA4IBAQBPRmHgwyB8ojCAas7OJPZTsfL1cbgcSyuj n6l0trIwl/TrKESPtyXBuV8UfSxykRj3j05CFEYHvGJkayz+c+gvkGiEsky/iOcQ 1tk6UyWRmEydHiTMNWZrvEeXwCnFP1upIMtQaxMAaeWKrIb4x2ziMVNyIqHDXQdQ TvNveS0PJY/B05JaA1bXp6zEskxfKexmuo93mBWYJ6E2du5JZbjGmLhgDxiPaG8o nTbh2DFVCubu5rMDyyNGydlOlJBVeT7ugF2Fwyh66lLB7XbF6wUUtaAdjhSeLS8x 9jetFEQKpdwDBGOGENpAPqgZnAzXJttXsEEtlfrbUGzQ2UrqmzJj -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:31 2026 by rpki-client