This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/59Qy54NWnnaF0UonsrF_AIsT2AM.roa File: 59Qy54NWnnaF0UonsrF_AIsT2AM.roa (raw, json) Hash identifier: fe8mUsn7ORXLXCy47FezO3nIOf1E6XAt4wFRWRU6mf0= Subject key identifier: E7:D4:32:E7:83:56:9E:76:85:D1:4A:27:B2:B1:7F:00:8B:13:D8:03 Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Certificate serial: 019B77595FC2D1B28F586080238F49FD02BA Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/59Qy54NWnnaF0UonsrF_AIsT2AM.roa Signing time: Thu 01 Jan 2026 02:18:24 +0000 ROA not before: Thu 01 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56443 IP address blocks: 185.127.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5f:c2:d1:b2:8f:58:60:80:23:8f:49:fd:02:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66 Validity Not Before: Jan 1 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7d432e783569e7685d14a27b2b17f008b13d803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a4:18:52:5a:dd:c9:12:21:26:76:eb:a8:e0: b5:60:20:48:e1:e0:24:8e:b3:5c:0b:0d:55:dc:1f: c5:3a:6d:a0:04:5d:4b:e4:79:a2:b6:63:e1:21:5e: 0d:c3:eb:09:4b:41:af:e7:17:bc:c7:48:f6:bb:cd: d2:fe:99:55:8a:03:26:23:f8:48:64:8e:bc:9d:d0: de:05:61:4d:15:9e:41:e5:62:fc:e9:1d:91:36:ca: c5:c1:bd:2d:4e:cc:f1:99:b7:2e:d6:a3:be:a9:e2: 4d:74:7b:4f:10:63:c4:bb:d3:1d:8b:00:2e:6d:31: d7:5c:61:38:4a:c5:1b:fe:ad:09:be:ab:d2:bc:30: ea:b9:ab:b9:73:ee:5b:1a:67:d4:ec:e5:64:43:aa: ae:f1:52:3e:dd:98:98:77:dc:36:08:63:fc:14:ec: 08:08:73:d1:df:7d:df:a5:7f:d4:72:a3:a0:a6:51: b9:33:bf:e7:6a:35:cc:39:3f:d5:fb:38:65:2f:38: c1:4a:8d:6d:48:5f:6c:28:2f:59:7e:64:a2:55:51: 41:40:9c:74:1d:a4:92:43:0c:00:aa:6f:4d:14:26: 08:41:6f:64:5f:55:93:d3:f7:86:8b:29:01:c1:c9: 46:c4:40:c4:5e:4b:5c:99:b6:98:70:73:16:45:ac: 9a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D4:32:E7:83:56:9E:76:85:D1:4A:27:B2:B1:7F:00:8B:13:D8:03 X509v3 Authority Key Identifier: keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/59Qy54NWnnaF0UonsrF_AIsT2AM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.176.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:a9:0b:d0:2f:6b:03:a2:13:a2:60:61:9c:04:4a:f7:e5:70: fa:46:e3:cf:36:a1:92:25:2e:28:fc:42:cd:e1:f4:46:57:78: 2d:18:e6:2c:18:d3:f8:1a:6e:cd:90:2c:1d:a2:bc:6a:8e:8c: ef:8c:be:0f:91:e3:28:b9:70:f3:46:4f:48:ff:c2:0d:fb:fd: 84:ae:4e:7f:03:7b:1d:81:71:b0:41:ff:82:82:d2:32:52:f9: ef:c2:29:1c:6a:b8:4e:1f:22:28:24:60:7b:db:30:49:ca:10: 6e:e5:37:be:20:29:bc:ba:51:e0:c9:ec:dd:5a:33:24:23:1b: 63:67:ca:81:21:88:10:2e:a3:5c:6b:6b:a5:61:5c:aa:a5:08: 42:42:fc:91:96:48:a7:9c:25:c1:87:a7:b0:ce:d6:3f:c9:9f: 0f:89:7f:9d:e5:e9:1c:a3:f3:0b:7e:a0:f6:ee:02:01:8e:02: 63:a4:11:34:c9:8f:97:cd:4a:8a:63:40:6c:fa:1e:32:c3:01: fd:ec:1b:2b:78:49:61:ab:8a:bb:a7:f8:74:d7:b6:76:e1:6d: d6:4d:0a:56:30:cd:ed:b6:a1:c8:ad:25:e7:97:04:96:67:11: f1:b1:29:1c:8a:7b:34:ce:b9:ba:ff:91:0c:22:49:8b:bc:63: 57:9f:c1:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WV/C0bKPWGCAI49J/QK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2MWJkN2RkMWY4YWM4YjQxOTJiYTc4YTU5MjM0OGI1ZGQw YTFhNjYwHhcNMjYwMTAxMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2Q0MzJlNzgzNTY5ZTc2ODVkMTRhMjdiMmIxN2YwMDhiMTNkODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aQYUlrdyRIhJnbrqOC1YCBI4eAk jrNcCw1V3B/FOm2gBF1L5HmitmPhIV4Nw+sJS0Gv5xe8x0j2u83S/plVigMmI/hI ZI68ndDeBWFNFZ5B5WL86R2RNsrFwb0tTszxmbcu1qO+qeJNdHtPEGPEu9MdiwAu bTHXXGE4SsUb/q0JvqvSvDDquau5c+5bGmfU7OVkQ6qu8VI+3ZiYd9w2CGP8FOwI CHPR333fpX/UcqOgplG5M7/najXMOT/V+zhlLzjBSo1tSF9sKC9ZfmSiVVFBQJx0 HaSSQwwAqm9NFCYIQW9kX1WT0/eGiykBwclGxEDEXktcmbaYcHMWRayaMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOfUMueDVp52hdFKJ7KxfwCLE9gDMB8GA1UdIwQY MBaAFOYb190fisi0GSunilkjSLXdChpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2Njct ZGU5YjJmOGY3ZTI5LzEvNTlReTU0TldubmFGMFVvbnNyRl9BSXNUMkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80YWNjMTUtYmJhMC00NDU5LTk2NjctZGU5YjJmOGY3ZTI5 LzEvNWh2WDNSLUt5TFFaSzZlS1dTTkl0ZDBLR21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuX+wMA0G CSqGSIb3DQEBCwUAA4IBAQA6qQvQL2sDohOiYGGcBEr35XD6RuPPNqGSJS4o/ELN 4fRGV3gtGOYsGNP4Gm7NkCwdorxqjozvjL4PkeMouXDzRk9I/8IN+/2Erk5/A3sd gXGwQf+CgtIyUvnvwikcarhOHyIoJGB72zBJyhBu5Te+ICm8ulHgyezdWjMkIxtj Z8qBIYgQLqNca2ulYVyqpQhCQvyRlkinnCXBh6ewztY/yZ8PiX+d5ekco/MLfqD2 7gIBjgJjpBE0yY+XzUqKY0Bs+h4ywwH97BsreElhq4q7p/h017Z24W3WTQpWMM3t tqHIrSXnlwSWZxHxsSkcins0zrm6/5EMIkmLvGNXn8G8 -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:16 2026 by rpki-client