This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/0znPCmRXXortybeT9gkyaL_6c2Y.roa File: 0znPCmRXXortybeT9gkyaL_6c2Y.roa (raw, json) Hash identifier: jOiC+H7JBz0XT1t0VFe8SK1DGYNPRQTrke6wLeqGUYY= Subject key identifier: D3:39:CF:0A:64:57:5E:8A:ED:C9:B7:93:F6:09:32:68:BF:FA:73:66 Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db Certificate serial: 019B77C75AFB9D6DBFE85AFC84BBA27644F9 Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/0znPCmRXXortybeT9gkyaL_6c2Y.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49902 IP address blocks: 5.57.96.0/19 maxlen: 20 5.57.110.0/24 maxlen: 24 109.122.128.0/18 maxlen: 19 185.147.224.0/22 maxlen: 22 213.55.0.0/18 maxlen: 19 2a00:a080::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5a:fb:9d:6d:bf:e8:5a:fc:84:bb:a2:76:44:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d339cf0a64575e8aedc9b793f6093268bffa7366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f1:a7:48:30:93:ec:8b:45:81:02:a4:a4:5d: 15:11:b3:bf:58:d9:8d:88:d5:54:e0:ef:4e:0a:27: 1b:77:70:cc:c7:1f:ab:f6:b4:25:57:68:1c:90:a3: a3:39:f2:9a:92:4f:b5:94:b6:23:ae:37:31:f8:39: 40:1f:7b:87:f3:0e:c5:2f:1a:76:95:68:6e:57:48: 02:ad:3b:d2:86:0d:be:f8:02:61:aa:60:cd:53:78: 11:a1:87:ea:73:0a:86:4c:22:c0:e8:5d:15:0b:91: b7:02:1b:94:b5:f8:bf:7d:e9:31:54:8f:27:a5:77: 24:39:da:fa:05:9b:ff:90:a7:55:d7:e3:0c:d4:58: 18:9c:87:c3:96:16:15:3a:f9:ac:49:89:85:84:88: 45:d5:3d:88:0d:a1:bc:b9:eb:3b:0b:63:3e:7f:e4: 24:16:1b:05:e0:2f:1b:fd:37:5d:38:a4:a8:bc:ba: 48:17:cc:99:65:32:28:3f:b5:53:4d:8e:00:c1:db: 66:35:c9:5d:5e:54:ca:e3:e1:bb:1f:d8:64:62:64: 76:4d:f8:47:d2:96:44:ad:b3:d3:79:86:8b:f7:61: bb:36:4f:30:c4:b1:94:c2:7b:89:13:13:8b:36:c7: 81:66:46:7e:80:5a:60:cf:80:f3:4d:46:a6:4c:9c: bd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:39:CF:0A:64:57:5E:8A:ED:C9:B7:93:F6:09:32:68:BF:FA:73:66 X509v3 Authority Key Identifier: keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/0znPCmRXXortybeT9gkyaL_6c2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.57.96.0/19 109.122.128.0/18 185.147.224.0/22 213.55.0.0/18 IPv6: 2a00:a080::/32 Signature Algorithm: sha256WithRSAEncryption 8b:fc:fa:b0:ea:7b:8d:87:4a:51:f9:10:c8:5b:f9:b6:10:c2: df:54:df:a3:de:d3:12:b0:56:e3:57:19:25:a2:d8:c5:a0:3e: 3c:1a:a9:86:45:39:d0:1a:62:41:56:fd:90:44:a8:46:6d:9e: 8c:3e:fc:9d:eb:a6:8c:00:83:60:1d:70:b0:29:78:4a:1f:ff: 29:b6:ed:db:87:e0:b0:d7:cb:76:1c:37:2c:b3:bb:33:4a:07: bf:0b:4d:f1:36:49:ac:16:7b:fb:32:90:43:f3:b3:ad:54:6e: 34:2b:68:e1:84:0d:28:d6:c5:18:da:bc:26:b3:d2:55:e8:38: d1:36:88:2a:5c:0b:5c:2c:b3:55:15:47:ae:72:9d:44:36:f2: 6b:8f:58:4e:38:ce:af:54:33:c7:35:16:b7:b5:fa:8c:d6:9f: a2:75:33:2b:78:29:d2:39:e5:73:8d:c0:d0:3e:f4:90:d4:dd: 7c:7f:09:38:6b:cc:9f:72:3a:a4:cc:7b:55:7d:b8:ee:bd:76: 0f:f7:9f:14:70:5a:30:fa:6f:47:10:fe:7f:01:6b:9d:ea:2a: 38:35:88:9d:bb:e7:99:bf:be:61:b7:cd:52:b3:8f:38:dc:0c: e6:a1:22:bd:75:04:78:43:10:65:9a:b4:c7:1e:96:cf:db:3e: 9c:05:d6:eb -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3x1r7nW2/6Fr8hLuidkT5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YjgwZTYwYjVhZGY0NWFlYmE1YzBjOGFiY2NjNjM5OTdh MGYxZGIwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzM5Y2YwYTY0NTc1ZThhZWRjOWI3OTNmNjA5MzI2OGJmZmE3MzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvGnSDCT7ItFgQKkpF0VEbO/WNmN iNVU4O9OCicbd3DMxx+r9rQlV2gckKOjOfKakk+1lLYjrjcx+DlAH3uH8w7FLxp2 lWhuV0gCrTvShg2++AJhqmDNU3gRoYfqcwqGTCLA6F0VC5G3AhuUtfi/fekxVI8n pXckOdr6BZv/kKdV1+MM1FgYnIfDlhYVOvmsSYmFhIhF1T2IDaG8ues7C2M+f+Qk FhsF4C8b/TddOKSovLpIF8yZZTIoP7VTTY4AwdtmNcldXlTK4+G7H9hkYmR2TfhH 0pZErbPTeYaL92G7Nk8wxLGUwnuJExOLNseBZkZ+gFpgz4DzTUamTJy9KQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNM5zwpkV16K7cm3k/YJMmi/+nNmMB8GA1UdIwQY MBaAFFe4DmC1rfRa66XAyKvMxjmXoPHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjdnT1lMV3Q5RnJycGNESXE4ekdPWmVnOGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83OWRkOWMtY2U2NC00YjI1LThmMjMt ZTZlOGFhZTM0ODI2LzEvMHpuUENtUlhYb3J0eWJlVDlna3lhTF82YzJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83OWRkOWMtY2U2NC00YjI1LThmMjMtZTZlOGFhZTM0ODI2 LzEvVjdnT1lMV3Q5RnJycGNESXE4ekdPWmVnOGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFBTlgAwQG bXqAAwQCuZPgAwQG1TcAMA0EAgACMAcDBQAqAKCAMA0GCSqGSIb3DQEBCwUAA4IB AQCL/Pqw6nuNh0pR+RDIW/m2EMLfVN+j3tMSsFbjVxklotjFoD48GqmGRTnQGmJB Vv2QRKhGbZ6MPvyd66aMAINgHXCwKXhKH/8ptu3bh+Cw18t2HDcss7szSge/C03x NkmsFnv7MpBD87OtVG40K2jhhA0o1sUY2rwms9JV6DjRNogqXAtcLLNVFUeucp1E NvJrj1hOOM6vVDPHNRa3tfqM1p+idTMreCnSOeVzjcDQPvSQ1N18fwk4a8yfcjqk zHtVfbjuvXYP958UcFow+m9HEP5/AWud6io4NYidu+eZv75ht81Ss4843AzmoSK9 dQR4QxBlmrTHHpbP2z6cBdbr -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:07 2026 by rpki-client