This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/V1dXjVL5eg8gDJxHqKz0eodPkis.roa File: V1dXjVL5eg8gDJxHqKz0eodPkis.roa (raw, json) Hash identifier: oAVjG8l8qEsvrM53r2r+TaJaOK1tsDjY980E/tUbOKw= Subject key identifier: 57:57:57:8D:52:F9:7A:0F:20:0C:9C:47:A8:AC:F4:7A:87:4F:92:2B Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019B7F80C2E5FC240410941C9BB70D6760B4 Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/V1dXjVL5eg8gDJxHqKz0eodPkis.roa Signing time: Fri 02 Jan 2026 16:18:23 +0000 ROA not before: Fri 02 Jan 2026 16:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 185.65.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:c2:e5:fc:24:04:10:94:1c:9b:b7:0d:67:60:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Jan 2 16:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5757578d52f97a0f200c9c47a8acf47a874f922b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:68:f8:5e:12:c1:52:34:df:7c:c5:ec:72: f9:1d:e6:77:38:c2:3d:11:25:9a:e8:fc:d3:24:34: df:36:3d:4c:11:3d:1c:ec:5a:8c:08:fa:4e:d2:6e: a7:9c:68:0d:b4:32:47:5c:3d:a6:6b:85:cb:a8:86: 36:08:8b:ce:34:c3:44:14:74:a9:b8:35:0e:67:66: b7:58:73:71:d8:ce:44:55:13:63:26:95:55:05:75: 20:06:5d:aa:cc:13:4b:63:e6:75:14:04:6d:fe:fc: 27:a7:d8:11:b9:cf:f8:bc:87:53:6a:d0:34:cf:81: 0b:e7:d8:3e:be:be:31:df:22:92:99:40:1d:0e:3d: 89:e5:ec:69:e4:bb:65:cc:f0:d9:60:05:d3:7d:f8: fa:4b:3e:2d:ec:0c:36:73:e8:f2:35:ec:3d:49:03: 44:e7:ca:cb:73:6d:fe:87:62:f2:49:27:99:91:68: 5b:b5:61:6e:c4:18:a3:70:33:26:fa:cd:f7:14:fa: 6b:48:4f:43:d9:42:42:f5:69:1a:81:94:a2:7b:a6: d4:1d:94:6c:b3:93:2a:7e:80:49:2f:1b:26:49:84: b1:5d:f4:12:d2:b5:28:23:1a:9d:0e:1e:7f:6b:d4: 0e:b2:29:b2:0d:2e:8f:91:0b:cc:70:aa:da:1d:98: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:57:57:8D:52:F9:7A:0F:20:0C:9C:47:A8:AC:F4:7A:87:4F:92:2B X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/V1dXjVL5eg8gDJxHqKz0eodPkis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.63.0/24 Signature Algorithm: sha256WithRSAEncryption 71:fc:ef:09:c4:5d:6d:a8:b8:73:79:87:a4:fa:e6:2e:0a:d6: d4:96:ca:24:90:2f:46:e3:31:94:c5:df:5c:71:4f:64:12:fd: 18:7c:c7:aa:a5:d4:f2:76:93:5d:5d:ec:a3:6e:b1:e3:1d:70: cf:97:7d:53:a4:9c:35:1f:5b:4e:4c:4b:de:09:68:11:8b:35: 82:fc:0d:bd:59:0f:8a:93:b0:b2:d0:7a:21:55:c1:83:15:ae: 44:6b:ef:b3:13:62:98:6f:52:c4:41:a3:62:f4:57:b6:2e:28: cf:6b:1d:db:16:1d:f2:19:c7:7b:28:cc:53:f5:01:b9:26:89: 57:58:d3:83:00:8a:51:74:52:5e:40:dd:e8:d8:03:b5:f6:50: 23:76:fc:69:db:a8:be:7a:05:95:35:35:f5:4b:ad:d8:bd:90: 59:01:7f:bc:ce:20:8a:e4:bb:ee:c8:fa:aa:2c:6b:21:da:0f: da:dc:67:48:d4:ed:20:29:25:53:93:bb:27:64:b4:b0:89:01: 1c:59:39:0c:aa:85:59:1b:c7:da:f8:46:a9:c0:ff:7f:75:32: c9:5d:75:3d:af:59:83:68:ab:50:71:25:3c:44:7d:2e:c5:36: 0f:9c:6b:61:6c:c7:ec:d7:6c:7f:b0:6f:a0:f0:ba:c3:40:20: ec:7e:f3:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gMLl/CQEEJQcm7cNZ2C0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjYwMTAyMTYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzU3NTc4ZDUyZjk3YTBmMjAwYzljNDdhOGFjZjQ3YTg3NGY5MjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHpo+F4SwVI033zF7HL5HeZ3OMI9 ESWa6PzTJDTfNj1MET0c7FqMCPpO0m6nnGgNtDJHXD2ma4XLqIY2CIvONMNEFHSp uDUOZ2a3WHNx2M5EVRNjJpVVBXUgBl2qzBNLY+Z1FARt/vwnp9gRuc/4vIdTatA0 z4EL59g+vr4x3yKSmUAdDj2J5exp5LtlzPDZYAXTffj6Sz4t7Aw2c+jyNew9SQNE 58rLc23+h2LySSeZkWhbtWFuxBijcDMm+s33FPprSE9D2UJC9WkagZSie6bUHZRs s5MqfoBJLxsmSYSxXfQS0rUoIxqdDh5/a9QOsimyDS6PkQvMcKraHZhWjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFdXV41S+XoPIAycR6is9HqHT5IrMB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvVjFkWGpWTDVlZzhnREp4SHFLejBlb2RQa2lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUE/MA0G CSqGSIb3DQEBCwUAA4IBAQBx/O8JxF1tqLhzeYek+uYuCtbUlsokkC9G4zGUxd9c cU9kEv0YfMeqpdTydpNdXeyjbrHjHXDPl31TpJw1H1tOTEveCWgRizWC/A29WQ+K k7Cy0HohVcGDFa5Ea++zE2KYb1LEQaNi9Fe2LijPax3bFh3yGcd7KMxT9QG5JolX WNODAIpRdFJeQN3o2AO19lAjdvxp26i+egWVNTX1S63YvZBZAX+8ziCK5LvuyPqq LGsh2g/a3GdI1O0gKSVTk7snZLSwiQEcWTkMqoVZG8fa+EapwP9/dTLJXXU9r1mD aKtQcSU8RH0uxTYPnGthbMfs12x/sG+g8LrDQCDsfvOK -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:29 2026 by rpki-client