This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/My1lWafqU6ikUvtq4M-ub2MxD1I.roa File: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (raw, json) Hash identifier: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c= Subject key identifier: 33:2D:65:59:A7:EA:53:A8:A4:52:FB:6A:E0:CF:AE:6F:63:31:0F:52 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 019B7F80D463B40F81C9527B7E184AB693E5 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/My1lWafqU6ikUvtq4M-ub2MxD1I.roa Signing time: Fri 02 Jan 2026 16:18:27 +0000 ROA not before: Fri 02 Jan 2026 16:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25151 IP address blocks: 2.57.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:d4:63:b4:0f:81:c9:52:7b:7e:18:4a:b6:93:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Jan 2 16:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=332d6559a7ea53a8a452fb6ae0cfae6f63310f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:fa:23:f5:ef:9b:ca:70:8a:94:7e:2d:1c: d6:34:c4:89:b0:4c:d8:26:80:bb:6b:f8:f4:c5:6f: 17:9b:fb:bf:81:80:b2:41:c0:07:ba:c8:91:c3:8c: c6:85:39:20:15:b2:7e:7e:1c:f2:fa:3c:b9:0d:08: 60:cf:57:5b:e1:07:f4:92:6d:d1:fb:f0:95:58:7f: 29:91:f2:5a:9e:18:b3:43:56:29:0e:0f:90:c1:de: b9:79:c9:42:d9:dc:2a:65:7d:f3:b8:34:97:0a:a5: ef:10:d4:33:af:3a:48:8f:ce:ea:e0:6d:c0:55:cf: 58:ed:54:47:f9:43:18:dd:16:50:77:a9:92:be:8d: 04:70:7a:44:06:39:ad:b9:71:f5:2f:bf:b0:25:d3: 47:d5:fa:7d:ee:52:bb:91:a5:a9:bc:d3:db:2a:fb: c9:a9:76:f7:e7:61:60:04:bb:e6:83:0f:06:b8:95: 79:ed:70:41:96:a7:01:dd:bc:5e:1c:e1:37:df:0d: 51:d1:1b:3c:df:cc:f5:63:f3:f5:7a:e4:e1:1b:08: 00:ce:fb:76:16:e4:ca:d1:71:c6:3f:f6:df:a9:f6: 05:30:96:31:ac:22:fa:6b:b2:bf:3b:85:25:f2:a4: 1b:9f:62:d2:5d:db:d2:36:80:53:22:19:87:23:0a: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2D:65:59:A7:EA:53:A8:A4:52:FB:6A:E0:CF:AE:6F:63:31:0F:52 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/My1lWafqU6ikUvtq4M-ub2MxD1I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.56.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:f3:dd:18:cc:c3:91:8e:af:4a:cd:e6:f1:44:bb:68:31:c7: a9:06:70:17:7d:96:d9:c8:32:3c:07:25:55:4a:ba:49:e0:5a: a6:f3:16:dd:55:e7:09:ba:2b:da:b8:6f:01:6c:10:10:4c:d8: 9e:13:94:d1:c2:5e:12:3b:22:e8:e2:a4:4b:0e:3f:ed:56:b3: 9e:97:0e:dd:08:19:ec:b0:a3:96:e2:b1:60:9c:05:26:f2:0b: 00:49:e2:7c:40:d5:c6:91:d2:ff:72:1d:6d:0d:21:f2:30:60: 61:57:af:7e:c9:30:6d:d1:b4:14:68:bc:2f:8a:22:be:96:a9: ef:56:f2:ac:65:a3:f9:24:8d:53:d7:0f:de:80:03:0a:3d:45: 35:32:bf:c9:8e:8a:01:0a:93:ce:19:94:f7:53:88:a5:f5:29: ff:69:4f:5d:23:f9:77:b8:9f:08:48:26:0b:8d:c1:bd:25:7c: 6c:c0:9b:e8:25:0f:5e:6b:37:6c:90:51:e0:f0:ef:b1:80:99: e8:2b:1b:33:07:56:88:3d:6c:27:8c:44:73:31:06:c2:99:1e: ab:79:0b:2f:5e:f8:d4:9f:69:c0:36:75:47:9c:d5:69:c6:ed: db:51:bd:07:63:55:3b:be:03:cb:41:a0:e3:2e:1a:53:c1:28: 63:49:94:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gNRjtA+ByVJ7fhhKtpPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYwMTAyMTYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzJkNjU1OWE3ZWE1M2E4YTQ1MmZiNmFlMGNmYWU2ZjYzMzEwZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfL6I/Xvm8pwipR+LRzWNMSJsEzY JoC7a/j0xW8Xm/u/gYCyQcAHusiRw4zGhTkgFbJ+fhzy+jy5DQhgz1db4Qf0km3R +/CVWH8pkfJanhizQ1YpDg+Qwd65eclC2dwqZX3zuDSXCqXvENQzrzpIj87q4G3A Vc9Y7VRH+UMY3RZQd6mSvo0EcHpEBjmtuXH1L7+wJdNH1fp97lK7kaWpvNPbKvvJ qXb352FgBLvmgw8GuJV57XBBlqcB3bxeHOE33w1R0Rs838z1Y/P1euThGwgAzvt2 FuTK0XHGP/bfqfYFMJYxrCL6a7K/O4Ul8qQbn2LSXdvSNoBTIhmHIwp5YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDMtZVmn6lOopFL7auDPrm9jMQ9SMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvTXkxbFdhZnFVNmlrVXZ0cTRNLXViMk14RDFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjk4MA0G CSqGSIb3DQEBCwUAA4IBAQCc890YzMORjq9KzebxRLtoMcepBnAXfZbZyDI8ByVV SrpJ4Fqm8xbdVecJuivauG8BbBAQTNieE5TRwl4SOyLo4qRLDj/tVrOelw7dCBns sKOW4rFgnAUm8gsASeJ8QNXGkdL/ch1tDSHyMGBhV69+yTBt0bQUaLwviiK+lqnv VvKsZaP5JI1T1w/egAMKPUU1Mr/JjooBCpPOGZT3U4il9Sn/aU9dI/l3uJ8ISCYL jcG9JXxswJvoJQ9eazdskFHg8O+xgJnoKxszB1aIPWwnjERzMQbCmR6reQsvXvjU n2nANnVHnNVpxu3bUb0HY1U7vgPLQaDjLhpTwShjSZSN -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:11 2026 by rpki-client