This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/V31h9beA1NjOun41S2jwpOz78Is.roa File: V31h9beA1NjOun41S2jwpOz78Is.roa (raw, json) Hash identifier: GlMTMFuGGPPKj686KygzUnOcrCykbZKdt6LpxxyxucY= Subject key identifier: 57:7D:61:F5:B7:80:D4:D8:CE:BA:7E:35:4B:68:F0:A4:EC:FB:F0:8B Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019B7DC9E567ED93123EADC9E8577761F872 Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/V31h9beA1NjOun41S2jwpOz78Is.roa Signing time: Fri 02 Jan 2026 08:19:02 +0000 ROA not before: Fri 02 Jan 2026 08:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29752 IP address blocks: 104.166.158.0/24 maxlen: 24 2a0b:21c1:601c::/48 maxlen: 48 2a0b:21c1:602a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e5:67:ed:93:12:3e:ad:c9:e8:57:77:61:f8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Jan 2 08:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=577d61f5b780d4d8ceba7e354b68f0a4ecfbf08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:30:d2:36:da:12:1b:1d:68:5c:3c:9b:d9: 21:c8:36:25:f6:ac:c1:09:7b:be:58:2b:68:fd:11: 91:e5:5f:e8:4b:6a:71:35:2e:4c:f9:b2:3a:93:22: 95:c4:d6:a4:ab:8d:b2:e5:6c:71:98:be:3b:9f:d6: e8:d8:04:f4:d0:f9:b0:c0:e4:9d:b6:d9:a9:b8:7b: f3:37:20:b5:91:34:25:6a:bc:ae:e3:15:6b:c7:53: f0:67:7d:15:88:3f:37:20:7e:e1:3d:a0:16:fe:70: 32:93:be:ef:e7:f6:d5:6d:bd:e6:ec:53:5f:cf:46: b8:0d:88:61:ff:1f:4b:ea:45:da:04:49:d5:3c:98: 2b:db:d9:06:76:d2:95:c3:d2:fe:e6:c4:24:22:14: 8d:b6:12:5c:1e:2a:87:a3:1b:6c:6a:ae:ae:92:7d: 18:5c:15:b0:77:93:5f:01:76:1e:f4:5b:a4:1b:c5: 4d:82:47:da:7e:cd:ad:2e:2a:9a:0c:d9:97:97:3e: 73:85:c7:31:55:dc:e2:b1:d5:89:63:23:3e:50:0c: 5b:8f:af:1f:61:90:2a:fa:6d:2c:3f:95:06:1e:f2: a2:0b:47:3c:bd:71:9d:29:6c:50:e4:15:d3:f6:1a: 97:b3:b3:43:5b:0b:c5:86:70:70:f7:38:e5:83:cb: fc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7D:61:F5:B7:80:D4:D8:CE:BA:7E:35:4B:68:F0:A4:EC:FB:F0:8B X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/V31h9beA1NjOun41S2jwpOz78Is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.166.158.0/24 IPv6: 2a0b:21c1:601c::/48 2a0b:21c1:602a::/48 Signature Algorithm: sha256WithRSAEncryption 0b:2d:7b:48:6f:1e:63:32:36:70:64:39:0a:fa:a3:dd:0e:73: 38:59:71:c0:61:e5:66:2e:7d:e1:31:68:27:ba:33:12:b2:01: d6:de:31:73:9f:3c:09:21:f9:90:49:55:52:6a:42:e9:6c:41: 92:2c:33:cf:c5:0d:81:e4:0f:39:0c:fd:aa:0a:86:a0:f9:a9: e6:5f:5e:86:29:fd:3a:40:f1:e4:06:b0:bd:69:c5:d6:04:58: 54:e8:0d:c8:d3:69:ec:9d:20:7d:aa:a2:b6:c5:76:2a:94:eb: 38:f5:e7:4a:be:c6:0a:f1:6f:0f:f0:ca:05:80:59:30:bd:32: b1:fc:b1:83:75:65:67:e0:78:52:60:b3:9d:fe:ff:c8:47:f3: bb:29:42:63:fa:cf:0f:b5:0a:63:9e:e8:bd:67:ef:a5:80:33: 46:06:c0:61:cf:b6:63:66:8c:34:d4:f4:78:80:e1:b6:71:33: ef:29:e7:d1:b7:ef:e1:a0:43:5a:ff:aa:6a:a4:a3:5e:2a:82: d1:04:30:3c:e6:23:66:57:5d:92:24:98:0f:ea:d7:5c:ef:c0: dd:f5:cb:25:13:a2:97:cd:f1:8e:ac:82:da:72:93:34:a0:2f: 70:3a:09:af:ba:ec:70:0e:65:32:1a:62:83:4f:3c:6f:18:94: 4c:20:63:a3 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9yeVn7ZMSPq3J6Fd3YfhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzdkNjFmNWI3ODBkNGQ4Y2ViYTdlMzU0YjY4ZjBhNGVjZmJmMDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kgw0jbaEhsdaFw8m9khyDYl9qzB CXu+WCto/RGR5V/oS2pxNS5M+bI6kyKVxNakq42y5WxxmL47n9bo2AT00PmwwOSd ttmpuHvzNyC1kTQlaryu4xVrx1PwZ30ViD83IH7hPaAW/nAyk77v5/bVbb3m7FNf z0a4DYhh/x9L6kXaBEnVPJgr29kGdtKVw9L+5sQkIhSNthJcHiqHoxtsaq6ukn0Y XBWwd5NfAXYe9FukG8VNgkfafs2tLiqaDNmXlz5zhccxVdzisdWJYyM+UAxbj68f YZAq+m0sP5UGHvKiC0c8vXGdKWxQ5BXT9hqXs7NDWwvFhnBw9zjlg8v8WQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFFd9YfW3gNTYzrp+NUto8KTs+/CLMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvVjMxaDliZUExTmpPdW40MVMyandwT3o3OElzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAaKaeMBgE AgACMBIDBwAqCyHBYBwDBwAqCyHBYCowDQYJKoZIhvcNAQELBQADggEBAAste0hv HmMyNnBkOQr6o90OczhZccBh5WYufeExaCe6MxKyAdbeMXOfPAkh+ZBJVVJqQuls QZIsM8/FDYHkDzkM/aoKhqD5qeZfXoYp/TpA8eQGsL1pxdYEWFToDcjTaeydIH2q orbFdiqU6zj150q+xgrxbw/wygWAWTC9MrH8sYN1ZWfgeFJgs53+/8hH87spQmP6 zw+1CmOe6L1n76WAM0YGwGHPtmNmjDTU9HiA4bZxM+8p59G37+GgQ1r/qmqko14q gtEEMDzmI2ZXXZIkmA/q11zvwN31yyUTopfN8Y6sgtpykzSgL3A6Ca+67HAOZTIa YoNPPG8YlEwgY6M= -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:17 2026 by rpki-client