This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/51xn4STL4iZZj62JSvhJ4zl6d6g.roa File: 51xn4STL4iZZj62JSvhJ4zl6d6g.roa (raw, json) Hash identifier: +puelUbKWuzaIoLcZeNYJ6k1vQgt2kHRx9TFlxyzoEI= Subject key identifier: E7:5C:67:E1:24:CB:E2:26:59:8F:AD:89:4A:F8:49:E3:39:7A:77:A8 Certificate issuer: /CN=ea93edfc2aa748e4981050ec06e3a66920265e17 Certificate serial: 019B77591F0CD72D3AF31C207B8FEDE8EA8C Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/51xn4STL4iZZj62JSvhJ4zl6d6g.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 132.72.6.0/24 maxlen: 24 132.72.23.0/24 maxlen: 24 132.72.41.0/24 maxlen: 24 132.72.116.0/24 maxlen: 24 132.72.118.0/24 maxlen: 24 132.72.138.0/24 maxlen: 24 132.73.84.0/24 maxlen: 24 132.73.85.0/24 maxlen: 24 132.73.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1f:0c:d7:2d:3a:f3:1c:20:7b:8f:ed:e8:ea:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17 Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e75c67e124cbe226598fad894af849e3397a77a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1a:89:0b:2f:8e:1d:70:a6:33:3d:22:6d:54: 51:98:1d:2a:9e:50:cb:b6:3b:04:12:45:4e:3c:a3: 20:ae:e7:53:70:82:0b:4b:aa:9a:0a:fd:d6:fd:73: b4:61:ea:e1:31:80:3f:18:50:e8:30:59:3b:db:b4: 11:d9:37:85:36:89:1d:9c:5e:98:ca:37:f1:f3:31: 76:6c:a0:32:a3:d0:8c:69:10:5e:69:b0:fd:33:e0: 13:01:d9:eb:45:41:73:0e:2a:0a:fd:e7:97:01:89: 0e:a3:b0:16:73:fa:6e:52:a0:12:a2:d7:60:ec:28: 5b:ef:a2:e6:3c:22:a3:d3:70:25:89:04:39:b7:15: a4:f8:5d:71:5a:07:70:a6:48:17:75:7d:66:17:26: f9:fe:15:ae:be:16:07:df:a6:cd:e5:2f:b5:02:ae: bd:7e:85:e0:c7:96:f4:62:86:07:09:50:80:8f:92: a9:a5:fa:e8:44:75:f5:8f:8c:48:83:c5:c0:4e:83: 48:da:fb:d7:92:e2:a9:2d:c5:b9:ef:9f:ec:ac:c4: 31:54:0c:e3:2f:20:9a:5b:b1:8e:fd:eb:05:c5:93: d1:1d:43:14:37:cd:7c:3c:ac:35:3c:fc:0b:b2:a4: ec:49:73:cf:e3:d0:0f:72:b1:f2:fb:db:8f:65:64: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5C:67:E1:24:CB:E2:26:59:8F:AD:89:4A:F8:49:E3:39:7A:77:A8 X509v3 Authority Key Identifier: keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/51xn4STL4iZZj62JSvhJ4zl6d6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.72.6.0/24 132.72.23.0/24 132.72.41.0/24 132.72.116.0/24 132.72.118.0/24 132.72.138.0/24 132.73.84.0/23 132.73.124.0/24 Signature Algorithm: sha256WithRSAEncryption d6:ef:5c:14:7a:bc:01:52:6f:5c:5f:bb:54:f0:7e:d5:01:6f: 9d:d3:ce:bf:80:d9:00:00:b1:4c:79:0f:7c:56:66:c6:60:bd: da:dd:f1:1f:d4:ab:67:f3:b7:8a:ec:1d:59:ea:e4:39:41:8e: 0f:31:c2:db:d5:de:f6:97:39:46:da:bd:35:d0:ce:8d:2e:6d: e7:52:67:53:90:1d:d8:6f:45:92:03:86:f3:af:b3:f6:c2:1c: 1a:e0:a8:0b:f7:1b:d8:21:4a:05:97:42:8f:ae:c3:f2:38:74: 1e:69:7d:ba:c5:10:ba:77:28:a7:4a:1c:3d:80:c7:53:70:20: 9e:1f:38:cd:08:5e:71:cd:79:bc:23:df:f3:22:b5:49:ff:66: 0d:81:f1:34:23:4f:32:5e:55:ba:32:9f:82:9d:a3:ae:7f:b8: e8:be:fe:53:d2:81:99:00:b4:72:5d:b4:a0:86:3a:58:d8:25: a8:35:f2:3d:19:f3:d5:88:13:52:d4:5b:c6:05:7e:b8:28:58: 5f:7b:6c:db:e3:a0:3b:53:07:d8:22:26:da:22:6f:00:bf:0b: 27:5a:5f:16:ba:27:86:26:ee:a3:6f:9a:c3:47:f8:e7:bd:4c: 8f:05:0a:11:9f:31:73:23:87:3b:3e:e2:58:97:32:7c:c8:0c: 3e:f1:12:c5 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt3WR8M1y068xwge4/t6OqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOTNlZGZjMmFhNzQ4ZTQ5ODEwNTBlYzA2ZTNhNjY5MjAy NjVlMTcwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzVjNjdlMTI0Y2JlMjI2NTk4ZmFkODk0YWY4NDllMzM5N2E3N2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRqJCy+OHXCmMz0ibVRRmB0qnlDL tjsEEkVOPKMgrudTcIILS6qaCv3W/XO0YerhMYA/GFDoMFk727QR2TeFNokdnF6Y yjfx8zF2bKAyo9CMaRBeabD9M+ATAdnrRUFzDioK/eeXAYkOo7AWc/puUqASotdg 7Chb76LmPCKj03AliQQ5txWk+F1xWgdwpkgXdX1mFyb5/hWuvhYH36bN5S+1Aq69 foXgx5b0YoYHCVCAj5KppfroRHX1j4xIg8XAToNI2vvXkuKpLcW575/srMQxVAzj LyCaW7GO/esFxZPRHUMUN818PKw1PPwLsqTsSXPP49APcrHy+9uPZWRdXQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFOdcZ+Eky+ImWY+tiUr4SeM5eneoMB8GA1UdIwQY MBaAFOqT7fwqp0jkmBBQ7AbjpmkgJl4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnBQdF9DcW5TT1NZRUZEc0J1T21hU0FtWGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wZmQ1ZjQtNTZjMC00OGJhLWIwMmIt ZDEzOGE5YzRlNDNmLzEvNTF4bjRTVEw0aVpaajYySlN2aEo0emw2ZDZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8wZmQ1ZjQtNTZjMC00OGJhLWIwMmItZDEzOGE5YzRlNDNm LzEvNnBQdF9DcW5TT1NZRUZEc0J1T21hU0FtWGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAhEgGAwQA hEgXAwQAhEgpAwQAhEh0AwQAhEh2AwQAhEiKAwQBhElUAwQAhEl8MA0GCSqGSIb3 DQEBCwUAA4IBAQDW71wUerwBUm9cX7tU8H7VAW+d086/gNkAALFMeQ98VmbGYL3a 3fEf1Ktn87eK7B1Z6uQ5QY4PMcLb1d72lzlG2r010M6NLm3nUmdTkB3Yb0WSA4bz r7P2whwa4KgL9xvYIUoFl0KPrsPyOHQeaX26xRC6dyinShw9gMdTcCCeHzjNCF5x zXm8I9/zIrVJ/2YNgfE0I08yXlW6Mp+CnaOuf7jovv5T0oGZALRyXbSghjpY2CWo NfI9GfPViBNS1FvGBX64KFhfe2zb46A7UwfYIibaIm8AvwsnWl8WuieGJu6jb5rD R/jnvUyPBQoRnzFzI4c7PuJYlzJ8yAw+8RLF -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:49 2026 by rpki-client