This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/m57YsWq8w_ZAQgkm8smpZ3EN5N0.roa File: m57YsWq8w_ZAQgkm8smpZ3EN5N0.roa (raw, json) Hash identifier: DOPMeZOfGq+jzc64BcbcPLyOPAp+75vksjgsOjXMlhQ= Subject key identifier: 9B:9E:D8:B1:6A:BC:C3:F6:40:42:09:26:F2:C9:A9:67:71:0D:E4:DD Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844D9B1A5108C47C042FBF6FBDBCFA Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/m57YsWq8w_ZAQgkm8smpZ3EN5N0.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207273 IP address blocks: 45.148.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4d:9b:1a:51:08:c4:7c:04:2f:bf:6f:bd:bc:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b9ed8b16abcc3f640420926f2c9a967710de4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:24:7f:38:1e:cc:d4:66:2d:3b:25:3f:c0: 14:58:91:35:ea:f6:60:fc:78:9c:d1:31:05:92:5f: 3b:38:83:67:61:85:b4:3a:c0:bb:94:3b:18:54:79: cc:6d:fa:c1:38:e1:7e:64:9d:a1:73:dd:7b:00:53: a5:0a:57:39:0e:e5:6a:f2:04:bb:d7:6a:57:69:bc: 62:09:70:98:42:b5:ea:00:26:7e:bf:c5:25:41:ac: 50:2c:8f:85:fa:28:de:42:59:73:7b:4e:b4:ee:8f: d1:c3:1d:69:a5:2b:2c:79:d4:c4:77:ad:54:cb:2b: 57:0e:3d:f2:ba:f8:94:9a:4e:b4:df:84:fd:15:10: 31:f7:73:4a:e2:ae:61:e9:9e:73:c5:16:3e:49:b5: ac:ab:97:f4:81:1e:5e:9a:b1:cb:78:23:47:59:13: f3:66:85:8a:45:74:57:3c:75:30:d1:69:d5:f5:5b: 1d:a6:02:11:d7:35:24:8f:4d:b4:52:e6:79:be:7a: 77:27:0a:25:a9:28:d0:8f:90:d0:f8:7a:3e:25:d6: b4:03:7c:e3:9d:07:79:64:3f:cd:f8:6a:68:7e:f2: 72:38:43:34:b9:ea:14:97:45:9c:8e:a6:78:81:1d: f0:69:4e:68:68:9d:f7:d7:8f:ae:93:89:8b:0b:dc: 01:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9E:D8:B1:6A:BC:C3:F6:40:42:09:26:F2:C9:A9:67:71:0D:E4:DD X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/m57YsWq8w_ZAQgkm8smpZ3EN5N0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.50.0/24 Signature Algorithm: sha256WithRSAEncryption a6:55:28:c7:c5:8d:95:98:5f:3c:77:e5:f9:96:fc:fb:5b:5b: e9:90:08:aa:d4:36:87:c6:51:8f:db:1c:5b:62:d9:30:f6:a3: a5:5e:5d:08:90:6e:8d:cd:5a:fb:dc:a0:7a:d5:92:d5:df:f0: ba:20:4a:38:62:14:e3:95:2f:df:a2:87:9d:36:c6:c3:4d:c0: 51:21:58:d8:bf:7e:12:e3:21:e2:fd:0e:15:fc:b2:a9:1d:a4: c2:16:c2:ae:c5:77:84:0c:56:f0:2f:aa:88:08:bb:f6:3f:1c: 70:2f:22:2e:2f:e1:e6:1c:07:e4:28:a9:87:c5:2e:11:e3:63: 0c:d5:1d:4c:ae:ae:6e:95:5b:c7:d1:33:86:3a:c2:3f:84:25: b1:b4:03:a4:f0:58:fe:d1:81:ca:ad:cd:9b:bf:15:42:f9:62: 22:b4:6b:35:4c:84:de:a4:fc:87:d1:c4:ad:4d:66:c5:10:7d: 0e:7c:c2:9a:3a:9e:89:f7:8a:18:06:99:c6:08:b9:27:10:a5: f9:5b:5f:f2:63:f1:ee:2e:73:7f:8b:b4:90:f2:2d:14:e2:fb: d3:e4:d1:73:11:d6:20:ef:54:6e:21:ee:8f:e3:45:44:64:7d: 41:4a:cf:79:03:aa:e5:10:c9:98:5f:a4:81:5a:39:f3:b3:e0: be:b2:b3:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hE2bGlEIxHwEL79vvbz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjllZDhiMTZhYmNjM2Y2NDA0MjA5MjZmMmM5YTk2NzcxMGRlNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5wkfzgezNRmLTslP8AUWJE16vZg /Hic0TEFkl87OINnYYW0OsC7lDsYVHnMbfrBOOF+ZJ2hc917AFOlClc5DuVq8gS7 12pXabxiCXCYQrXqACZ+v8UlQaxQLI+F+ijeQllze0607o/Rwx1ppSssedTEd61U yytXDj3yuviUmk6034T9FRAx93NK4q5h6Z5zxRY+SbWsq5f0gR5emrHLeCNHWRPz ZoWKRXRXPHUw0WnV9VsdpgIR1zUkj020UuZ5vnp3JwolqSjQj5DQ+Ho+Jda0A3zj nQd5ZD/N+GpofvJyOEM0ueoUl0WcjqZ4gR3waU5oaJ3314+uk4mLC9wBxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJue2LFqvMP2QEIJJvLJqWdxDeTdMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvbTU3WXNXcTh3X1pBUWdrbThzbXBaM0VONU4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZQyMA0G CSqGSIb3DQEBCwUAA4IBAQCmVSjHxY2VmF88d+X5lvz7W1vpkAiq1DaHxlGP2xxb Ytkw9qOlXl0IkG6NzVr73KB61ZLV3/C6IEo4YhTjlS/fooedNsbDTcBRIVjYv34S 4yHi/Q4V/LKpHaTCFsKuxXeEDFbwL6qICLv2PxxwLyIuL+HmHAfkKKmHxS4R42MM 1R1Mrq5ulVvH0TOGOsI/hCWxtAOk8Fj+0YHKrc2bvxVC+WIitGs1TITepPyH0cSt TWbFEH0OfMKaOp6J94oYBpnGCLknEKX5W1/yY/HuLnN/i7SQ8i0U4vvT5NFzEdYg 71RuIe6P40VEZH1BSs95A6rlEMmYX6SBWjnzs+C+srP9 -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:55 2026 by rpki-client