This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/B57-CxrMuEzIEEhmwZCju0k2N_0.roa File: B57-CxrMuEzIEEhmwZCju0k2N_0.roa (raw, json) Hash identifier: kk16ISCfMj6OEufoNAp8iMMK2SekKgR5sII3ecfctac= Subject key identifier: 07:9E:FE:0B:1A:CC:B8:4C:C8:10:48:66:C1:90:A3:BB:49:36:37:FD Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f Certificate serial: 019B7B353FBBF7E41F6723D5BB992E38CC16 Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/B57-CxrMuEzIEEhmwZCju0k2N_0.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60387 IP address blocks: 45.87.220.0/24 maxlen: 24 45.87.221.0/24 maxlen: 24 45.87.222.0/24 maxlen: 24 82.115.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3f:bb:f7:e4:1f:67:23:d5:bb:99:2e:38:cc:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=079efe0b1accb84cc8104866c190a3bb493637fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c1:79:b1:32:a2:48:c6:5e:97:0a:b3:32:96: 4b:f7:a6:01:fd:40:16:e0:41:77:54:32:c2:e4:87: c7:2c:8f:2b:dd:45:4e:8c:99:2b:e7:9b:be:72:f5: a3:40:23:e5:12:b2:7c:d1:c6:c4:72:59:7d:54:17: a0:79:a3:76:37:b0:5e:31:80:73:a2:8f:01:ee:40: 1d:a6:6a:25:7a:4e:98:9d:d8:9d:98:d1:f0:7e:84: 46:68:a1:36:51:eb:b3:a6:63:90:92:5a:dd:85:ee: 33:2d:0c:af:7b:6d:50:6e:cb:60:68:db:c2:e8:a2: 45:d3:fc:4a:00:d6:3e:ff:63:6b:ba:92:44:e0:d2: e5:28:00:e0:81:71:d4:d0:9a:cd:28:5b:ad:76:6c: 78:14:f6:bb:91:a9:7d:32:0a:d2:dc:ed:36:cb:45: 71:5a:a4:6a:da:66:9d:be:1d:52:e5:ef:5c:e9:86: e1:52:b7:c9:9f:4f:cc:3d:a9:13:5f:d7:b7:4e:e9: 44:93:58:55:85:3e:ff:60:ad:7f:95:23:b1:fe:a3: f0:11:71:e2:6f:40:d6:ec:d7:cc:b9:27:de:ac:8e: 48:62:0f:bf:41:9c:84:a7:e2:a6:8c:70:14:62:a2: 40:d4:dc:7c:0c:55:e2:ee:ba:e9:2e:8a:53:3d:76: 8e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:9E:FE:0B:1A:CC:B8:4C:C8:10:48:66:C1:90:A3:BB:49:36:37:FD X509v3 Authority Key Identifier: keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/B57-CxrMuEzIEEhmwZCju0k2N_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.220.0-45.87.222.255 82.115.15.0/24 Signature Algorithm: sha256WithRSAEncryption 02:56:0f:e0:73:c2:fc:1a:95:ee:d9:1e:48:b4:a4:05:5a:f6: 71:eb:6a:a8:97:70:c5:1b:ad:c8:85:d5:08:d3:2a:ca:7a:7c: ec:1e:37:2e:c1:79:8e:68:e4:74:32:cf:3e:12:25:68:27:f5: a4:1a:76:bf:e1:a3:0f:48:6a:91:4d:f4:dc:77:25:db:ef:c1: 76:00:24:76:a0:31:01:90:16:e9:67:ff:b1:41:be:8e:bd:36: 31:b8:5b:38:32:e5:a9:0a:1e:dd:69:97:2c:73:ad:7c:39:41: 7e:51:04:0c:80:02:e2:a0:67:bd:fb:ce:62:bb:8f:60:2d:37: b2:6a:95:81:ea:8a:e5:79:fb:bf:de:ed:cb:d5:7d:79:b0:47: 2c:d1:9b:f3:57:85:bc:64:94:b9:30:7e:b9:81:5e:97:46:0f: f3:5e:a7:56:dd:82:03:15:04:f5:31:11:cb:1f:5e:c2:80:d5: b2:e3:f0:af:f1:db:64:a7:29:b9:93:34:85:1e:57:ed:31:68: 45:a5:3f:67:04:7b:ba:38:8f:2c:98:4d:a0:e8:f9:2b:18:54: 49:ec:81:3c:de:4f:d3:06:c9:cc:13:7e:5e:52:7b:3d:6d:4f: 93:2c:69:b0:a3:b3:db:ec:12:3d:b8:37:8d:ef:c9:a7:af:b7: cf:c8:93:7c -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7NT+79+QfZyPVu5kuOMwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNzMyYjZlNTcxMGJhODI4OWNmZjRiYjIyNmI3NWJjNGIw NzgxOWYwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzllZmUwYjFhY2NiODRjYzgxMDQ4NjZjMTkwYTNiYjQ5MzYzN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8F5sTKiSMZelwqzMpZL96YB/UAW 4EF3VDLC5IfHLI8r3UVOjJkr55u+cvWjQCPlErJ80cbEcll9VBegeaN2N7BeMYBz oo8B7kAdpmolek6YndidmNHwfoRGaKE2UeuzpmOQklrdhe4zLQyve21QbstgaNvC 6KJF0/xKANY+/2NrupJE4NLlKADggXHU0JrNKFutdmx4FPa7kal9MgrS3O02y0Vx WqRq2madvh1S5e9c6YbhUrfJn0/MPakTX9e3TulEk1hVhT7/YK1/lSOx/qPwEXHi b0DW7NfMuSferI5IYg+/QZyEp+KmjHAUYqJA1Nx8DFXi7rrpLopTPXaOKwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAee/gsazLhMyBBIZsGQo7tJNjf9MB8GA1UdIwQY MBaAFHtzK25XELqCic/0uyJrdbxLB4GfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQt YTRkMGQxMGM5MDE2LzEvQjU3LUN4ck11RXpJRUVobXdaQ2p1MGsyTl8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQtYTRkMGQxMGM5MDE2 LzEvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAItV9wD BAAtV94DBABScw8wDQYJKoZIhvcNAQELBQADggEBAAJWD+Bzwvwale7ZHki0pAVa 9nHraqiXcMUbrciF1QjTKsp6fOweNy7BeY5o5HQyzz4SJWgn9aQadr/how9IapFN 9Nx3JdvvwXYAJHagMQGQFuln/7FBvo69NjG4Wzgy5akKHt1plyxzrXw5QX5RBAyA AuKgZ737zmK7j2AtN7JqlYHqiuV5+7/e7cvVfXmwRyzRm/NXhbxklLkwfrmBXpdG D/Nep1bdggMVBPUxEcsfXsKA1bLj8K/x22SnKbmTNIUeV+0xaEWlP2cEe7o4jyyY TaDo+SsYVEnsgTzeT9MGycwTfl5Sez1tT5MsabCjs9vsEj24N43vyaevt8/Ik3w= -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:46 2026 by rpki-client