This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ri2kRfoeQocgVX-o-wlTw31O6zg.roa File: Ri2kRfoeQocgVX-o-wlTw31O6zg.roa (raw, json) Hash identifier: 8w4SGOx0dr1CvCZhW3C7KV3trRp58ZnlmumErpLvllM= Subject key identifier: 46:2D:A4:45:FA:1E:42:87:20:55:7F:A8:FB:09:53:C3:7D:4E:EB:38 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDED84DA04F7A32DB9AD960AE3AD44 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ri2kRfoeQocgVX-o-wlTw31O6zg.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212388 IP address blocks: 176.57.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ed:84:da:04:f7:a3:2d:b9:ad:96:0a:e3:ad:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=462da445fa1e428720557fa8fb0953c37d4eeb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:45:74:d5:d8:5f:0e:f4:20:4c:15:98:a5: 47:b5:a1:28:bf:92:c7:dd:84:53:6d:52:db:cb:1b: 69:c1:df:78:8c:56:4e:89:77:60:82:1e:b7:84:5d: 55:25:ed:52:b5:23:74:dd:cf:d4:c3:16:46:1a:bd: 26:ed:a3:d7:f4:15:1f:68:e0:76:a2:ce:52:e5:9c: f1:8d:b0:51:2b:63:e3:af:1e:c8:02:6a:5c:11:56: 85:5b:77:18:06:37:05:da:b6:a3:79:e0:76:be:46: 5c:f4:77:2a:5c:83:c3:81:45:80:3d:9b:4f:fc:c3: 39:0e:74:46:22:18:60:69:82:6d:a0:e2:eb:ee:03: 9c:d9:f3:1d:98:80:77:f1:35:35:60:fb:07:fa:0a: d9:e3:b4:cf:48:32:c8:86:ce:0c:32:f8:b6:23:f0: 23:f2:42:1f:85:29:9b:00:91:2b:2b:84:ab:ae:da: ea:77:fa:41:e4:fa:03:01:a1:64:40:49:2f:55:42: 34:f4:3f:3f:f5:0d:ed:14:c5:f1:39:06:e2:6f:22: 91:b9:46:7b:76:a5:69:cd:ad:3c:96:92:51:91:51: e6:35:6f:c9:ca:39:9e:35:b5:66:f9:7c:96:a4:1d: bf:25:a0:a6:09:60:65:42:be:ed:34:ed:65:99:21: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2D:A4:45:FA:1E:42:87:20:55:7F:A8:FB:09:53:C3:7D:4E:EB:38 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/Ri2kRfoeQocgVX-o-wlTw31O6zg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.57.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:43:97:61:00:76:d0:85:a5:13:7d:08:28:f2:86:37:e4:42: 30:01:7e:d3:c6:a3:a8:ed:65:d1:3f:cd:9f:b2:a5:4f:3b:83: 54:d4:04:93:02:88:d9:0e:8d:27:01:ef:c4:34:c5:4d:57:3c: 6f:f2:50:06:15:af:84:93:08:d1:1d:56:5d:a1:5a:f5:08:be: 57:e6:4c:15:bb:27:bd:5f:a0:bd:44:f1:c2:d6:61:10:d0:c4: 71:78:a1:03:5b:73:74:7f:39:59:66:e3:73:79:ca:ba:bd:05: 77:3a:a3:62:73:45:88:ec:a4:7e:2e:b6:c6:73:d4:5f:21:41: 80:37:b0:f2:82:90:96:af:b5:e3:57:a0:27:3c:94:90:d5:0d: a1:65:57:3f:42:15:db:13:58:29:46:1e:31:99:cb:b4:48:20: a5:71:9d:b1:a3:0d:c2:66:de:d3:7f:0f:55:bf:5f:82:d1:23: ec:36:4a:e1:3f:ed:08:70:1e:db:96:af:a6:f8:7c:b0:6e:c6: f7:6f:af:93:f4:cb:96:a0:ff:24:be:a6:32:45:27:39:65:c4: 2b:7c:79:9b:f2:5a:9c:93:c7:97:51:d6:1a:54:1c:2c:e0:11: 76:95:35:7c:a5:70:db:d5:66:47:e7:2a:c6:7b:d8:df:b3:f7: 2b:63:cf:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87e2E2gT3oy25rZYK461EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjJkYTQ0NWZhMWU0Mjg3MjA1NTdmYThmYjA5NTNjMzdkNGVlYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLdFdNXYXw70IEwVmKVHtaEov5LH 3YRTbVLbyxtpwd94jFZOiXdggh63hF1VJe1StSN03c/UwxZGGr0m7aPX9BUfaOB2 os5S5ZzxjbBRK2Pjrx7IAmpcEVaFW3cYBjcF2rajeeB2vkZc9HcqXIPDgUWAPZtP /MM5DnRGIhhgaYJtoOLr7gOc2fMdmIB38TU1YPsH+grZ47TPSDLIhs4MMvi2I/Aj 8kIfhSmbAJErK4Srrtrqd/pB5PoDAaFkQEkvVUI09D8/9Q3tFMXxOQbibyKRuUZ7 dqVpza08lpJRkVHmNW/JyjmeNbVm+XyWpB2/JaCmCWBlQr7tNO1lmSFJbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYtpEX6HkKHIFV/qPsJU8N9Tus4MB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvUmkya1Jmb2VRb2NnVlgtby13bFR3MzFPNnpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDk5MA0G CSqGSIb3DQEBCwUAA4IBAQBLQ5dhAHbQhaUTfQgo8oY35EIwAX7TxqOo7WXRP82f sqVPO4NU1ASTAojZDo0nAe/ENMVNVzxv8lAGFa+EkwjRHVZdoVr1CL5X5kwVuye9 X6C9RPHC1mEQ0MRxeKEDW3N0fzlZZuNzecq6vQV3OqNic0WI7KR+LrbGc9RfIUGA N7DygpCWr7XjV6AnPJSQ1Q2hZVc/QhXbE1gpRh4xmcu0SCClcZ2xow3CZt7Tfw9V v1+C0SPsNkrhP+0IcB7blq+m+Hywbsb3b6+T9MuWoP8kvqYyRSc5ZcQrfHmb8lqc k8eXUdYaVBws4BF2lTV8pXDb1WZH5yrGe9jfs/crY88c -----END CERTIFICATE-----Generated at Fri Jan 2 17:52:24 2026 by rpki-client