This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/tVllXtsvNqnnGT4ghCbeFVO4eK8.roa File: tVllXtsvNqnnGT4ghCbeFVO4eK8.roa (raw, json) Hash identifier: m5YFGULB9rnteTPaC4KcDVufk0CwF1ak5Ttvba2UEXs= Subject key identifier: B5:59:65:5E:DB:2F:36:A9:E7:19:3E:20:84:26:DE:15:53:B8:78:AF Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438 Certificate serial: 019B7F13B8D653E9F8F488AA9CEDB74C3AF8 Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/tVllXtsvNqnnGT4ghCbeFVO4eK8.roa Signing time: Fri 02 Jan 2026 14:19:17 +0000 ROA not before: Fri 02 Jan 2026 14:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201893 IP address blocks: 2.57.132.0/22 maxlen: 22 185.229.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b8:d6:53:e9:f8:f4:88:aa:9c:ed:b7:4c:3a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438 Validity Not Before: Jan 2 14:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b559655edb2f36a9e7193e208426de1553b878af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:80:26:d1:0c:6d:13:73:43:cf:27:92:6d: bd:76:5f:ba:27:9b:86:9d:94:e3:7e:3e:82:37:4c: 31:2b:48:dc:c2:38:c7:f6:28:91:62:bf:64:53:4e: 12:8c:aa:fa:db:91:b1:d5:e3:71:f9:57:58:06:69: c4:d2:67:ce:ad:86:c7:c1:84:92:94:a2:ad:5e:db: 57:ea:bb:da:b1:df:96:08:fd:98:88:6c:77:f7:d9: be:86:88:56:3c:b7:49:31:d0:e1:c5:14:89:e3:49: e0:98:25:0c:17:54:fe:ba:95:e3:9c:83:e3:32:4b: e1:6e:8f:fd:22:2f:67:03:dc:27:27:10:84:a4:4d: ae:96:8b:ea:f3:c3:9a:36:e6:4d:89:01:de:7e:03: 41:df:36:38:36:81:eb:1f:65:5e:5b:c7:0a:79:41: 9d:d4:74:ec:29:1b:5d:10:2a:3c:24:a4:ba:c3:39: 3f:8b:21:13:06:10:ad:f2:11:b2:02:0a:24:b7:1d: 42:8e:61:b5:38:91:84:5e:01:e5:4e:61:f9:58:1d: b8:18:39:25:18:9b:2d:b3:55:cb:40:ba:8a:49:01: c2:4a:fc:07:d1:9d:b9:9d:17:2b:3a:93:bc:90:fa: ba:79:47:7d:7c:66:35:7f:98:b6:f7:70:d1:be:bb: 51:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:59:65:5E:DB:2F:36:A9:E7:19:3E:20:84:26:DE:15:53:B8:78:AF X509v3 Authority Key Identifier: keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/tVllXtsvNqnnGT4ghCbeFVO4eK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.132.0/22 185.229.124.0/22 Signature Algorithm: sha256WithRSAEncryption a9:b3:75:3c:2f:3f:2c:c8:6c:ce:c7:25:b4:3e:ef:1b:47:4c: ec:3e:f2:5f:1b:a4:21:4d:0f:71:c9:55:7b:79:ad:0f:02:c1: 47:49:1f:21:34:68:fb:ae:da:b5:d0:36:00:a9:91:a2:22:f0: 89:a1:b6:b0:73:b5:c9:0c:c2:7e:22:84:90:62:c1:b7:44:55: 64:86:da:ac:e3:15:12:5f:a2:e0:af:32:1e:93:6e:f3:80:d2: 0a:77:99:6e:61:79:3d:9c:49:e4:ee:6a:3e:19:c8:e6:8e:00: 19:ee:70:0b:23:45:ca:98:9b:3c:15:60:c0:32:82:48:f7:b4: 91:a6:8e:88:7e:f1:cb:7c:7e:a1:43:6c:ad:fe:c1:bb:95:bc: 83:86:04:51:cf:93:f7:28:bd:a1:db:03:ca:c5:74:76:40:e6: 6c:09:f9:05:23:fe:26:0a:db:ca:33:c4:98:df:e7:fc:1c:d5: 9e:d7:b6:b5:2c:e5:0c:b1:0f:63:d6:42:60:e9:57:35:37:b9: 14:a9:fc:8d:ef:50:74:8e:6c:d9:1a:b8:fe:3f:be:3e:98:b0: af:1b:c9:dd:3b:e7:03:33:f6:04:cd:ce:53:1a:77:de:82:c6: 6d:2e:34:4d:4a:3a:8b:10:fb:d9:e0:7c:16:09:38:00:46:5c: e9:37:02:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E7jWU+n49IiqnO23TDr4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3M2I0MGFlYmY4OGMxN2IxYjU2MjEyOGE1NmY0MjQ1ZjJm MTU0MzgwHhcNMjYwMTAyMTQxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTU5NjU1ZWRiMmYzNmE5ZTcxOTNlMjA4NDI2ZGUxNTUzYjg3OGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfWAJtEMbRNzQ88nkm29dl+6J5uG nZTjfj6CN0wxK0jcwjjH9iiRYr9kU04SjKr625Gx1eNx+VdYBmnE0mfOrYbHwYSS lKKtXttX6rvasd+WCP2YiGx399m+hohWPLdJMdDhxRSJ40ngmCUMF1T+upXjnIPj Mkvhbo/9Ii9nA9wnJxCEpE2ulovq88OaNuZNiQHefgNB3zY4NoHrH2VeW8cKeUGd 1HTsKRtdECo8JKS6wzk/iyETBhCt8hGyAgoktx1CjmG1OJGEXgHlTmH5WB24GDkl GJsts1XLQLqKSQHCSvwH0Z25nRcrOpO8kPq6eUd9fGY1f5i293DRvrtR5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLVZZV7bLzap5xk+IIQm3hVTuHivMB8GA1UdIwQY MBaAFNc7QK6/iMF7G1YhKKVvQkXy8VQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZmUyYjktZjlhNS00YzZiLWFiNWUt YjlkN2Y0MWZjMTg5LzEvdFZsbFh0c3ZOcW5uR1Q0Z2hDYmVGVk80ZUs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9hZmUyYjktZjlhNS00YzZiLWFiNWUtYjlkN2Y0MWZjMTg5 LzEvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCAjmEAwQC ueV8MA0GCSqGSIb3DQEBCwUAA4IBAQCps3U8Lz8syGzOxyW0Pu8bR0zsPvJfG6Qh TQ9xyVV7ea0PAsFHSR8hNGj7rtq10DYAqZGiIvCJobawc7XJDMJ+IoSQYsG3RFVk htqs4xUSX6LgrzIek27zgNIKd5luYXk9nEnk7mo+GcjmjgAZ7nALI0XKmJs8FWDA MoJI97SRpo6IfvHLfH6hQ2yt/sG7lbyDhgRRz5P3KL2h2wPKxXR2QOZsCfkFI/4m CtvKM8SY3+f8HNWe17a1LOUMsQ9j1kJg6Vc1N7kUqfyN71B0jmzZGrj+P74+mLCv G8ndO+cDM/YEzc5TGnfegsZtLjRNSjqLEPvZ4HwWCTgARlzpNwLP -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:21 2026 by rpki-client