This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/g5zvUc47daXiwW8MR7Ooy7ZGGhM.roa File: g5zvUc47daXiwW8MR7Ooy7ZGGhM.roa (raw, json) Hash identifier: VTog9oqmf4YsW9f1RIMMmAHBzttgFZnh44Uy6cLAglk= Subject key identifier: 83:9C:EF:51:CE:3B:75:A5:E2:C1:6F:0C:47:B3:A8:CB:B6:46:1A:13 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 019BB6FDA3BC82C9D3DA91D96A90ADE9D3EA Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/g5zvUc47daXiwW8MR7Ooy7ZGGhM.roa Signing time: Tue 13 Jan 2026 10:53:54 +0000 ROA not before: Tue 13 Jan 2026 10:53:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51964 IP address blocks: 57.7.0.0/16 maxlen: 24 57.21.0.0/16 maxlen: 24 57.35.0.0/16 maxlen: 24 57.66.0.0/15 maxlen: 32 57.68.0.0/15 maxlen: 32 57.70.0.0/16 maxlen: 32 57.72.0.0/15 maxlen: 32 57.74.0.0/16 maxlen: 32 57.76.0.0/14 maxlen: 32 57.82.0.0/15 maxlen: 32 57.86.0.0/16 maxlen: 32 57.90.0.0/16 maxlen: 32 57.92.0.0/16 maxlen: 24 57.96.0.0/15 maxlen: 24 57.98.0.0/16 maxlen: 24 57.100.0.0/16 maxlen: 24 57.194.0.0/15 maxlen: 24 57.197.0.0/16 maxlen: 24 57.199.0.0/16 maxlen: 24 57.200.0.0/16 maxlen: 24 57.202.0.0/15 maxlen: 24 57.205.0.0/16 maxlen: 24 57.207.0.0/16 maxlen: 24 57.208.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:fd:a3:bc:82:c9:d3:da:91:d9:6a:90:ad:e9:d3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 13 10:53:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=839cef51ce3b75a5e2c16f0c47b3a8cbb6461a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:3d:f0:15:91:b1:6f:4c:66:e2:5f:e5:ae: 1d:67:13:f7:4b:a6:52:1d:3f:10:d3:7c:8f:d5:1d: d9:2f:e0:5c:06:08:28:4e:68:e1:8e:aa:5c:e5:45: ce:00:6e:49:ef:bc:30:62:ba:b5:14:63:8c:df:b0: 7f:a1:2b:a4:0c:4d:20:e0:12:35:dd:ba:10:e3:14: cc:24:a6:ef:d3:fe:01:b1:ee:d6:5f:9c:1c:57:55: d1:50:90:a2:3f:f1:be:96:55:bd:e3:c1:99:4e:3e: db:e8:1c:de:ad:63:da:90:e3:e4:be:29:d9:cc:e8: 72:4d:42:88:34:b7:ae:cd:22:9e:09:67:21:09:df: 41:ff:4c:08:ab:cc:01:3d:f0:73:45:7d:b0:b7:89: 8a:b1:85:a3:54:45:fa:44:c1:46:c7:fe:20:9e:d3: 24:ad:81:17:9a:f8:94:ab:9a:d0:a3:be:ae:03:21: d0:ee:82:9e:35:d2:b7:a7:51:37:ec:e6:1c:07:bf: 50:e8:fa:de:fa:02:a8:ca:93:cc:33:bb:da:88:3a: f5:f2:ca:6e:ce:ce:7c:89:b9:c7:88:b6:28:71:5d: c0:bb:ed:81:db:95:74:20:71:7a:27:21:b9:98:49: 0c:2d:b6:8b:7a:66:96:f4:09:0f:04:de:7f:1f:da: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:EF:51:CE:3B:75:A5:E2:C1:6F:0C:47:B3:A8:CB:B6:46:1A:13 X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/g5zvUc47daXiwW8MR7Ooy7ZGGhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.7.0.0/16 57.21.0.0/16 57.35.0.0/16 57.66.0.0-57.70.255.255 57.72.0.0-57.74.255.255 57.76.0.0/14 57.82.0.0/15 57.86.0.0/16 57.90.0.0/16 57.92.0.0/16 57.96.0.0-57.98.255.255 57.100.0.0/16 57.194.0.0/15 57.197.0.0/16 57.199.0.0-57.200.255.255 57.202.0.0/15 57.205.0.0/16 57.207.0.0-57.223.255.255 Signature Algorithm: sha256WithRSAEncryption 88:44:94:16:1d:f4:9f:b8:14:26:f3:fa:f3:28:4c:c6:34:ea: 7b:b2:93:47:5c:96:32:af:56:dd:ea:0e:c1:b7:76:be:06:c3: 45:4b:a9:9f:09:7d:67:bb:ae:fa:aa:a8:75:1c:44:26:b2:cc: 99:73:d1:87:8e:c2:71:d3:d7:ce:8a:65:cf:24:fe:44:0c:f4: 5d:07:b6:85:99:cc:f6:b1:c1:98:e6:ff:6d:e0:22:63:47:d4: 5a:1c:3a:6d:f1:42:55:ba:92:79:28:71:84:07:3d:da:98:86: 6b:e0:b1:80:51:71:b4:23:89:15:81:11:b1:b9:cf:2e:e1:2e: 4e:24:33:a0:28:5f:88:7e:83:61:8a:59:76:62:29:bf:d7:a3: c3:eb:1d:88:7a:a8:d6:39:0b:e6:3f:a4:6e:bc:b6:88:ba:e9: 0d:54:f5:ab:9f:72:ae:56:74:80:29:3f:be:d1:79:7c:80:59: 53:36:57:a2:e3:05:2e:8d:93:29:50:9a:2c:81:45:26:85:d9: d0:9c:2d:b2:a8:9f:77:13:d7:96:03:0d:f8:aa:77:50:a9:c7: 35:76:e3:3a:9e:c2:d1:3c:65:da:b7:65:0e:8d:d0:8b:46:83: 53:3e:18:a6:7d:7f:9f:23:fd:40:ed:b3:e0:75:3e:63:c8:7d: ab:32:7d:73 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZu2/aO8gsnT2pHZapCt6dPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjYwMTEzMTA1MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzljZWY1MWNlM2I3NWE1ZTJjMTZmMGM0N2IzYThjYmI2NDYxYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHU98BWRsW9MZuJf5a4dZxP3S6ZS HT8Q03yP1R3ZL+BcBggoTmjhjqpc5UXOAG5J77wwYrq1FGOM37B/oSukDE0g4BI1 3boQ4xTMJKbv0/4Bse7WX5wcV1XRUJCiP/G+llW948GZTj7b6BzerWPakOPkvinZ zOhyTUKINLeuzSKeCWchCd9B/0wIq8wBPfBzRX2wt4mKsYWjVEX6RMFGx/4gntMk rYEXmviUq5rQo76uAyHQ7oKeNdK3p1E37OYcB79Q6Pre+gKoypPMM7vaiDr18spu zs58ibnHiLYocV3Au+2B25V0IHF6JyG5mEkMLbaLemaW9AkPBN5/H9rPpwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFIOc71HOO3Wl4sFvDEezqMu2RhoTMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvZzV6dlVjNDdkYVhpd1c4TVI3T295N1pHR2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjCBgwQCAAEwfQMDADkH AwMAORUDAwA5IzAKAwMBOUIDAwA5RjAKAwMDOUgDAwA5SgMDAjlMAwMBOVIDAwA5 VgMDADlaAwMAOVwwCgMDBTlgAwMAOWIDAwA5ZAMDATnCAwMAOcUwCgMDADnHAwMA OcgDAwE5ygMDADnNMAoDAwA5zwMDBTnAMA0GCSqGSIb3DQEBCwUAA4IBAQCIRJQW HfSfuBQm8/rzKEzGNOp7spNHXJYyr1bd6g7Bt3a+BsNFS6mfCX1nu676qqh1HEQm ssyZc9GHjsJx09fOimXPJP5EDPRdB7aFmcz2scGY5v9t4CJjR9RaHDpt8UJVupJ5 KHGEBz3amIZr4LGAUXG0I4kVgRGxuc8u4S5OJDOgKF+IfoNhill2Yim/16PD6x2I eqjWOQvmP6RuvLaIuukNVPWrn3KuVnSAKT++0Xl8gFlTNlei4wUujZMpUJosgUUm hdnQnC2yqJ93E9eWAw34qndQqcc1duM6nsLRPGXat2UOjdCLRoNTPhimfX+fI/1A 7bPgdT5jyH2rMn1z -----END CERTIFICATE-----Generated at Fri Jan 23 15:09:25 2026 by rpki-client