This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/50zWtLjzrrHoza7TturnnWNCqLY.roa File: 50zWtLjzrrHoza7TturnnWNCqLY.roa (raw, json) Hash identifier: R1mg70BKhEBsT87VpVLGsevEAeUkVGDh49Hy8IvF5SI= Subject key identifier: E7:4C:D6:B4:B8:F3:AE:B1:E8:CD:AE:D3:B6:EA:E7:9D:63:42:A8:B6 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2C8EF9006E21169364F16C0B854A7 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/50zWtLjzrrHoza7TturnnWNCqLY.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 109.72.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c8:ef:90:06:e2:11:69:36:4f:16:c0:b8:54:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e74cd6b4b8f3aeb1e8cdaed3b6eae79d6342a8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:de:9f:35:fc:5e:f8:bc:d1:27:21:80:3e: 17:e2:69:f8:67:79:78:8c:a6:69:f3:02:5d:26:25: b1:9e:79:22:ff:39:de:83:80:cc:06:69:c4:e8:49: f9:7d:d1:1f:0e:f7:aa:2a:63:2f:c4:df:0b:12:23: f8:bb:a8:60:fe:a1:4b:d6:6e:c9:88:20:77:34:8f: 96:e0:ad:5b:94:7f:c3:59:81:0e:1e:95:76:fc:e7: e2:b9:02:3d:17:9c:41:a0:63:34:37:2c:f8:1b:ad: e4:90:35:37:c7:cc:c2:22:ee:e8:8f:d1:b7:cf:16: 84:d1:87:ef:0e:b7:74:28:14:22:3a:41:a3:32:f2: 96:fa:70:4c:66:e5:ac:74:a3:bc:9c:93:6c:7a:ca: 95:68:cf:22:7d:1f:fa:75:a5:ac:29:04:cd:f9:00: ec:9d:4d:e8:0a:f0:3e:59:ef:2a:ae:a8:b8:c8:84: 6d:8e:8f:74:5c:27:c7:3d:2c:8d:a2:39:3f:bf:25: 44:b8:8a:df:b5:73:f2:c5:a9:c8:21:70:b3:fa:c1: 14:c8:f5:1a:a2:ce:c6:ee:4f:20:46:e5:78:d7:86: 68:3c:6d:4c:e2:30:91:28:90:94:9b:5b:7e:6e:3d: 03:e1:01:7c:cb:78:b8:f1:db:eb:e3:d6:29:b0:4b: 33:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4C:D6:B4:B8:F3:AE:B1:E8:CD:AE:D3:B6:EA:E7:9D:63:42:A8:B6 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/50zWtLjzrrHoza7TturnnWNCqLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.112.0/24 Signature Algorithm: sha256WithRSAEncryption 78:93:b5:85:90:48:ae:e4:c6:5f:f3:a4:f2:00:0f:d8:f1:88: 12:84:dd:9c:48:29:d3:bf:75:75:27:37:b5:56:8b:c1:27:b2: bf:ef:14:62:50:1e:0a:7b:79:e4:be:e5:ca:4a:23:39:8c:88: c1:0b:95:3e:76:70:75:9a:81:68:6b:4e:ce:3f:56:29:02:e0: d2:4c:74:3f:f0:ac:d9:bf:9b:b5:3e:4b:2d:18:2c:35:14:11: d9:55:e9:76:07:f6:9e:bb:96:b0:83:e9:35:a7:0a:0b:1a:95: 3f:59:89:e0:cb:ac:a5:da:24:db:60:8d:3e:32:f5:29:bc:53: 4f:39:76:f4:02:a6:48:09:40:3d:17:dd:99:ca:8b:94:d7:ff: 74:45:e7:48:df:7b:56:e9:38:33:dc:e6:89:86:d3:9e:c8:56: 4b:a5:3c:a8:9b:8d:5d:6a:64:d6:25:b7:8e:2f:64:53:3f:33: d7:dc:55:53:39:af:31:3b:df:87:30:a7:23:d6:0f:6b:7c:f5: 0e:48:f3:8a:0a:42:02:c3:33:6f:1f:6e:c7:f0:37:c1:6b:a2: 25:31:45:22:79:f4:38:ef:d6:e6:44:0e:83:41:bb:68:d0:01: e5:3e:09:1b:ee:8a:5e:99:c6:51:22:a5:51:b2:c4:57:62:9e: 30:7a:90:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osjvkAbiEWk2TxbAuFSnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzRjZDZiNGI4ZjNhZWIxZThjZGFlZDNiNmVhZTc5ZDYzNDJhOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTPenzX8Xvi80SchgD4X4mn4Z3l4 jKZp8wJdJiWxnnki/zneg4DMBmnE6En5fdEfDveqKmMvxN8LEiP4u6hg/qFL1m7J iCB3NI+W4K1blH/DWYEOHpV2/OfiuQI9F5xBoGM0Nyz4G63kkDU3x8zCIu7oj9G3 zxaE0YfvDrd0KBQiOkGjMvKW+nBMZuWsdKO8nJNsesqVaM8ifR/6daWsKQTN+QDs nU3oCvA+We8qrqi4yIRtjo90XCfHPSyNojk/vyVEuIrftXPyxanIIXCz+sEUyPUa os7G7k8gRuV414ZoPG1M4jCRKJCUm1t+bj0D4QF8y3i48dvr49YpsEszxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOdM1rS4866x6M2u07bq551jQqi2MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvNTB6V3RManpyckhvemE3VHR1cm5uV05DcUxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUhwMA0G CSqGSIb3DQEBCwUAA4IBAQB4k7WFkEiu5MZf86TyAA/Y8YgShN2cSCnTv3V1Jze1 VovBJ7K/7xRiUB4Ke3nkvuXKSiM5jIjBC5U+dnB1moFoa07OP1YpAuDSTHQ/8KzZ v5u1PkstGCw1FBHZVel2B/aeu5awg+k1pwoLGpU/WYngy6yl2iTbYI0+MvUpvFNP OXb0AqZICUA9F92ZyouU1/90RedI33tW6Tgz3OaJhtOeyFZLpTyom41damTWJbeO L2RTPzPX3FVTOa8xO9+HMKcj1g9rfPUOSPOKCkICwzNvH27H8DfBa6IlMUUiefQ4 79bmRA6DQbto0AHlPgkb7opemcZRIqVRssRXYp4wepAQ -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:18 2026 by rpki-client