This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cu1ZBl9pTXMoUfbvqV36t7lrydc.roa File: cu1ZBl9pTXMoUfbvqV36t7lrydc.roa (raw, json) Hash identifier: PmBmp0oA0bJzrpAjf6rJ/tIcErht7TFeRxDbLDdIykE= Subject key identifier: 72:ED:59:06:5F:69:4D:73:28:51:F6:EF:A9:5D:FA:B7:B9:6B:C9:D7 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDE82F65B550CBC559789381C79EA1 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cu1ZBl9pTXMoUfbvqV36t7lrydc.roa Signing time: Fri 02 Jan 2026 04:18:44 +0000 ROA not before: Fri 02 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205361 IP address blocks: 176.57.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e8:2f:65:b5:50:cb:c5:59:78:93:81:c7:9e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72ed59065f694d732851f6efa95dfab7b96bc9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:08:54:62:bb:2b:9b:8d:f8:d1:ca:d1:00: cc:c8:87:8f:a9:76:56:dd:53:08:32:36:d5:72:be: dc:5f:f6:d7:67:49:a6:e2:9c:5d:e4:72:d8:0f:bc: e3:c7:ab:bb:aa:f8:8e:6c:fc:f4:1e:97:20:32:b8: b8:e5:52:a7:dc:a7:67:48:45:9e:db:61:70:5f:f8: 0a:cb:db:ed:20:0e:7c:36:8f:dd:3e:c4:27:20:25: d8:e1:c6:5e:33:f1:46:c0:8d:60:85:03:1e:94:2c: aa:f3:ba:2b:fa:65:14:d8:2a:21:f3:31:c9:ee:b6: 9b:e5:75:a0:5e:bf:a8:30:97:da:93:1c:48:24:2b: 34:18:ef:f8:34:58:a0:8a:96:03:3d:9f:bb:c6:e2: 97:ac:51:59:5b:85:f0:11:9b:e9:df:87:07:af:80: 1b:71:93:b4:46:f4:d4:a8:e6:2f:ea:a6:0a:a3:34: d9:07:32:9b:e8:e7:85:fc:c4:b1:cd:ac:b2:02:b0: 8f:33:a1:1d:47:98:9b:c1:47:d0:a7:27:5e:16:0f: 2d:85:fc:15:5e:00:4f:38:54:fb:0f:39:be:a9:5d: 9c:be:92:e0:23:6f:b0:e1:2f:33:0c:bd:a1:6e:7a: 86:95:b3:32:e4:a0:c7:5f:1f:6d:a2:06:b8:34:26: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:ED:59:06:5F:69:4D:73:28:51:F6:EF:A9:5D:FA:B7:B9:6B:C9:D7 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/cu1ZBl9pTXMoUfbvqV36t7lrydc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.50.0/24 Signature Algorithm: sha256WithRSAEncryption 84:e6:db:f0:cf:97:42:49:da:fa:c7:35:de:49:0c:1d:cb:f4: 71:95:8c:82:f4:97:fc:f4:78:e8:56:d9:1f:c3:f5:e6:08:73: 39:ec:8b:36:a8:71:98:1b:f3:47:b5:71:62:bc:f4:0c:c7:16: d1:92:7c:1f:da:55:29:3c:2f:10:a5:74:3b:5f:4c:bf:e1:76: 00:8a:47:6e:71:cb:91:08:be:b7:c9:09:91:3d:99:cf:93:8a: 41:35:45:fa:19:1c:a2:32:d3:f3:05:d5:6f:e6:06:20:8a:93: 8b:5f:aa:c5:37:b8:9c:67:50:90:f6:c4:ff:31:e4:1b:9e:4f: 72:c8:5a:ec:2c:9c:05:0a:ee:4f:bd:ba:3a:ca:94:89:93:7b: cd:53:64:15:05:88:ba:7c:03:e7:1e:cc:45:6b:5a:16:76:aa: 09:a2:42:05:c4:e7:86:d5:6e:56:73:e2:c1:81:01:70:08:d8: 97:a0:33:96:7a:f7:03:f9:7e:49:5e:50:e2:7d:81:f7:ec:96: 3a:fa:90:1f:c1:ee:12:e3:aa:14:76:ce:1b:9f:3f:1c:4b:41: 8d:87:b6:f3:31:27:ad:c8:01:b2:d3:d1:07:09:2f:e0:94:9c: ac:6d:e5:b1:2a:50:41:2a:67:c1:30:03:44:a4:93:fe:33:3f: b1:77:7e:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87egvZbVQy8VZeJOBx56hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmVkNTkwNjVmNjk0ZDczMjg1MWY2ZWZhOTVkZmFiN2I5NmJjOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoMIVGK7K5uN+NHK0QDMyIePqXZW 3VMIMjbVcr7cX/bXZ0mm4pxd5HLYD7zjx6u7qviObPz0HpcgMri45VKn3KdnSEWe 22FwX/gKy9vtIA58No/dPsQnICXY4cZeM/FGwI1ghQMelCyq87or+mUU2Coh8zHJ 7rab5XWgXr+oMJfakxxIJCs0GO/4NFigipYDPZ+7xuKXrFFZW4XwEZvp34cHr4Ab cZO0RvTUqOYv6qYKozTZBzKb6OeF/MSxzayyArCPM6EdR5ibwUfQpydeFg8thfwV XgBPOFT7Dzm+qV2cvpLgI2+w4S8zDL2hbnqGlbMy5KDHXx9toga4NCZfGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHLtWQZfaU1zKFH276ld+re5a8nXMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvY3UxWkJsOXBUWE1vVWZidnFWMzZ0N2xyeWRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDkyMA0G CSqGSIb3DQEBCwUAA4IBAQCE5tvwz5dCSdr6xzXeSQwdy/RxlYyC9Jf89HjoVtkf w/XmCHM57Is2qHGYG/NHtXFivPQMxxbRknwf2lUpPC8QpXQ7X0y/4XYAikduccuR CL63yQmRPZnPk4pBNUX6GRyiMtPzBdVv5gYgipOLX6rFN7icZ1CQ9sT/MeQbnk9y yFrsLJwFCu5Pvbo6ypSJk3vNU2QVBYi6fAPnHsxFa1oWdqoJokIFxOeG1W5Wc+LB gQFwCNiXoDOWevcD+X5JXlDifYH37JY6+pAfwe4S46oUds4bnz8cS0GNh7bzMSet yAGy09EHCS/glJysbeWxKlBBKmfBMANEpJP+Mz+xd36m -----END CERTIFICATE-----Generated at Fri Jan 2 17:50:39 2026 by rpki-client