This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/57ExRImlY_J1W0DiqCuzHtZc1-M.roa File: 57ExRImlY_J1W0DiqCuzHtZc1-M.roa (raw, json) Hash identifier: H/MP7YqHoUUdNXYELvg7nbZxJWneiFMYDH3qjOKnph8= Subject key identifier: E7:B1:31:44:89:A5:63:F2:75:5B:40:E2:A8:2B:B3:1E:D6:5C:D7:E3 Certificate issuer: /CN=0a670ed2bc71191cb60bd9660148510b236d3acf Certificate serial: 019B76EB8F457226F7C02D819A10A3761847 Authority key identifier: 0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/57ExRImlY_J1W0DiqCuzHtZc1-M.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 185.252.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.mft rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8f:45:72:26:f7:c0:2d:81:9a:10:a3:76:18:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a670ed2bc71191cb60bd9660148510b236d3acf Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7b1314489a563f2755b40e2a82bb31ed65cd7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:52:dd:d9:6b:bc:f0:66:79:85:8b:22:56: 85:32:99:81:ab:64:dd:30:76:70:e3:a5:45:33:0f: 01:37:88:58:eb:04:7d:0a:0b:dc:d0:05:d8:83:bf: 62:79:af:2a:ff:3b:e1:37:18:2f:4a:38:cd:d2:d9: 14:0f:6f:86:a1:b3:d0:f6:bf:09:4a:99:e4:00:02: 8b:37:54:5c:dd:10:52:f3:e6:9e:ec:dc:e1:9e:58: 9b:75:94:39:8d:d0:1e:76:0b:d4:13:ce:8c:a4:a6: ce:5f:77:6a:df:aa:9a:81:f0:7b:da:17:24:5b:79: 7b:ad:51:c3:19:2d:76:d6:b3:31:d4:a4:1c:26:11: 30:e5:a7:30:3f:f4:12:77:db:7f:b2:3c:8c:d6:20: 03:8b:2b:86:07:fd:e5:6b:5d:39:58:32:aa:e0:ab: c7:3f:92:6f:1e:9b:69:40:a5:dd:35:b3:44:22:51: 40:0e:d8:76:e3:c4:f2:9e:6c:a2:d2:a6:be:93:93: 77:97:de:28:d0:c4:cb:81:01:92:31:c5:e2:1f:9b: a7:02:4e:92:26:c2:81:f3:5e:38:57:d6:ef:3f:9e: c4:e1:81:7f:8c:81:80:eb:cb:03:8e:f2:8a:03:19: 1a:a6:0d:a9:b9:08:35:0b:3f:28:67:60:a2:3f:d9: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B1:31:44:89:A5:63:F2:75:5B:40:E2:A8:2B:B3:1E:D6:5C:D7:E3 X509v3 Authority Key Identifier: keyid:0A:67:0E:D2:BC:71:19:1C:B6:0B:D9:66:01:48:51:0B:23:6D:3A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmcO0rxxGRy2C9lmAUhRCyNtOs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/57ExRImlY_J1W0DiqCuzHtZc1-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dc2c1f-14c1-45e0-9e3b-ee34ae61549f/1/CmcO0rxxGRy2C9lmAUhRCyNtOs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.193.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:21:47:a1:73:9f:86:b8:db:3c:eb:a4:c8:50:b3:84:57:36: 9e:48:51:33:76:0a:76:1d:c8:69:ee:b1:2b:9c:5a:b7:29:12: 33:8a:03:48:7e:55:e4:22:0d:27:2f:2d:81:c2:70:f5:bd:2b: 2b:fa:f5:52:8c:7f:ae:00:53:71:96:46:56:e5:99:86:11:b7: ab:cf:7a:0d:62:19:63:ef:95:64:42:15:00:8c:c3:5d:ac:e7: 04:58:54:22:57:93:39:98:cd:54:2f:48:2a:0c:d8:7a:8f:8c: 5a:df:b4:d5:ba:12:bd:a8:c4:a2:e6:ed:3f:4f:56:b1:1d:8e: 5d:54:fd:74:1c:32:e6:16:b7:bb:94:29:9c:14:90:d8:a9:02: d0:99:40:af:d7:d0:ba:3c:35:17:73:c7:10:07:ad:29:66:47: 47:b3:e2:42:ae:bc:1f:46:5a:3c:09:98:ec:77:2a:e1:92:a8: de:60:2f:ae:6f:49:63:88:19:fa:43:42:7c:62:a9:ff:7e:aa: 86:57:b2:6b:63:c6:2b:14:c7:f2:8e:39:e9:31:96:dc:d0:cf: b1:0f:78:21:77:27:9e:4a:e1:2b:16:eb:ad:9c:37:f5:d6:3c: 00:94:9f:ba:ae:e0:a8:76:4b:a1:af:fe:70:6a:42:38:a8:88: 63:a9:cd:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2649Fcib3wC2BmhCjdhhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNjcwZWQyYmM3MTE5MWNiNjBiZDk2NjAxNDg1MTBiMjM2 ZDNhY2YwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2IxMzE0NDg5YTU2M2YyNzU1YjQwZTJhODJiYjMxZWQ2NWNkN2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxglS3dlrvPBmeYWLIlaFMpmBq2Td MHZw46VFMw8BN4hY6wR9Cgvc0AXYg79iea8q/zvhNxgvSjjN0tkUD2+GobPQ9r8J SpnkAAKLN1Rc3RBS8+ae7NzhnlibdZQ5jdAedgvUE86MpKbOX3dq36qagfB72hck W3l7rVHDGS121rMx1KQcJhEw5acwP/QSd9t/sjyM1iADiyuGB/3la105WDKq4KvH P5JvHptpQKXdNbNEIlFADth248Tynmyi0qa+k5N3l94o0MTLgQGSMcXiH5unAk6S JsKB8144V9bvP57E4YF/jIGA68sDjvKKAxkapg2puQg1Cz8oZ2CiP9kt7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOexMUSJpWPydVtA4qgrsx7WXNfjMB8GA1UdIwQY MBaAFApnDtK8cRkctgvZZgFIUQsjbTrPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kYzJjMWYtMTRjMS00NWUwLTllM2It ZWUzNGFlNjE1NDlmLzEvNTdFeFJJbWxZX0oxVzBEaXFDdXpIdFpjMS1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kYzJjMWYtMTRjMS00NWUwLTllM2ItZWUzNGFlNjE1NDlm LzEvQ21jTzByeHhHUnkyQzlsbUFVaFJDeU50T3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufzBMA0G CSqGSIb3DQEBCwUAA4IBAQCKIUehc5+GuNs866TIULOEVzaeSFEzdgp2Hchp7rEr nFq3KRIzigNIflXkIg0nLy2BwnD1vSsr+vVSjH+uAFNxlkZW5ZmGEberz3oNYhlj 75VkQhUAjMNdrOcEWFQiV5M5mM1UL0gqDNh6j4xa37TVuhK9qMSi5u0/T1axHY5d VP10HDLmFre7lCmcFJDYqQLQmUCv19C6PDUXc8cQB60pZkdHs+JCrrwfRlo8CZjs dyrhkqjeYC+ub0ljiBn6Q0J8Yqn/fqqGV7JrY8YrFMfyjjnpMZbc0M+xD3ghdyee SuErFuutnDf11jwAlJ+6ruCodkuhr/5wakI4qIhjqc3W -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:37 2026 by rpki-client