This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/cJiubHQvHYR5Esd1XVcnoAH7nVc.roa File: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (raw, json) Hash identifier: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts= Subject key identifier: 70:98:AE:6C:74:2F:1D:84:79:12:C7:75:5D:57:27:A0:01:FB:9D:57 Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C1312818CAE27640F0DCD5D834C5A8C Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/cJiubHQvHYR5Esd1XVcnoAH7nVc.roa Signing time: Fri 02 Jan 2026 00:19:43 +0000 ROA not before: Fri 02 Jan 2026 00:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 92.51.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:12:81:8c:ae:27:64:0f:0d:cd:5d:83:4c:5a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7098ae6c742f1d847912c7755d5727a001fb9d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:41:eb:50:9d:39:b2:71:88:0d:44:79:14:37: 0d:30:69:5b:4a:80:3b:df:8a:25:c2:a0:d2:43:2a: c3:ba:b4:be:9f:16:4b:bd:c8:3c:4e:20:33:14:4d: 13:aa:41:26:cb:b5:7a:cd:20:0b:58:a0:28:e5:2f: 86:82:ef:ee:16:2f:40:1b:2e:d4:1a:cd:7b:17:d7: c3:e1:61:71:4e:d5:df:8f:e0:07:bf:d3:c8:8c:38: ee:9f:7f:93:b9:9b:51:3d:f3:b4:67:83:83:a4:31: 03:9a:e2:c9:2f:36:6b:51:b5:b2:78:53:07:e6:c3: a7:8e:87:cf:06:bf:72:ed:b3:22:f2:37:c9:2d:28: a5:e8:c7:bf:11:3e:6e:34:d5:a1:9a:44:da:0d:4a: a0:a3:b6:38:46:88:b2:5e:2a:4e:bb:36:d2:fd:c2: 5e:23:25:59:72:3a:90:34:23:aa:05:9d:f3:7f:de: cb:84:a6:15:df:4d:ae:60:93:0d:3f:04:58:2d:81: 8b:c3:78:8e:60:ac:cf:8a:ee:ae:5c:9e:38:13:2e: 12:3e:5b:21:3e:41:b5:b6:a6:f6:8e:55:5b:94:63: e9:81:e7:10:39:36:96:91:d1:5b:d3:ef:cb:c1:64: 51:f7:85:b3:e0:84:08:00:9d:f7:87:30:a7:1c:ad: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:98:AE:6C:74:2F:1D:84:79:12:C7:75:5D:57:27:A0:01:FB:9D:57 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/cJiubHQvHYR5Esd1XVcnoAH7nVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.51.3.0/24 Signature Algorithm: sha256WithRSAEncryption 74:e8:f4:32:92:31:9e:32:db:9a:e8:fc:28:ee:ec:a0:59:c1: 75:e6:8e:d1:59:ef:78:26:16:f1:1b:da:f9:45:04:97:fa:49: 34:6d:28:f1:29:08:e2:f9:29:9a:b4:44:66:a1:2f:a3:82:e4: d3:f9:2a:39:7f:92:e4:74:dd:af:a6:d6:56:38:5f:f5:75:0e: 0c:4b:79:e2:53:a6:3e:78:a6:8a:54:78:93:d9:a6:3c:f6:4c: a2:13:75:b9:1b:f0:d1:97:37:33:86:81:c5:77:a1:e9:9b:71: 61:80:40:fd:04:1a:18:15:97:20:f5:a2:80:11:98:dd:c2:17: e9:e9:78:e9:92:4a:f5:6d:38:aa:74:6f:70:ed:b9:84:33:d1: e0:94:69:e2:a6:42:d7:20:4c:aa:19:2f:b1:79:f3:01:ac:70: aa:c3:d0:ac:3d:6c:63:a2:6b:8b:77:74:66:66:af:51:8a:f8: e3:8f:a0:b4:ad:96:18:11:98:9a:22:42:fe:94:32:19:ab:79: 25:fa:8d:13:13:9a:19:78:68:12:71:f7:ef:99:b2:a3:26:df: 5e:ee:bb:af:7a:3c:91:e7:0a:80:64:f1:8b:6b:2c:46:ca:bb: db:65:b9:b7:60:f1:fb:a9:66:b7:68:ca:8a:6f:e1:2f:e9:80: 49:18:7b:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExKBjK4nZA8NzV2DTFqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDk4YWU2Yzc0MmYxZDg0NzkxMmM3NzU1ZDU3MjdhMDAxZmI5ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kHrUJ05snGIDUR5FDcNMGlbSoA7 34olwqDSQyrDurS+nxZLvcg8TiAzFE0TqkEmy7V6zSALWKAo5S+Ggu/uFi9AGy7U Gs17F9fD4WFxTtXfj+AHv9PIjDjun3+TuZtRPfO0Z4ODpDEDmuLJLzZrUbWyeFMH 5sOnjofPBr9y7bMi8jfJLSil6Me/ET5uNNWhmkTaDUqgo7Y4RoiyXipOuzbS/cJe IyVZcjqQNCOqBZ3zf97LhKYV302uYJMNPwRYLYGLw3iOYKzPiu6uXJ44Ey4SPlsh PkG1tqb2jlVblGPpgecQOTaWkdFb0+/LwWRR94Wz4IQIAJ33hzCnHK1XLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCYrmx0Lx2EeRLHdV1XJ6AB+51XMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvY0ppdWJIUXZIWVI1RXNkMVhWY25vQUg3blZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDMDMA0G CSqGSIb3DQEBCwUAA4IBAQB06PQykjGeMtua6Pwo7uygWcF15o7RWe94JhbxG9r5 RQSX+kk0bSjxKQji+SmatERmoS+jguTT+So5f5LkdN2vptZWOF/1dQ4MS3niU6Y+ eKaKVHiT2aY89kyiE3W5G/DRlzczhoHFd6Hpm3FhgED9BBoYFZcg9aKAEZjdwhfp 6Xjpkkr1bTiqdG9w7bmEM9HglGnipkLXIEyqGS+xefMBrHCqw9CsPWxjomuLd3Rm Zq9Rivjjj6C0rZYYEZiaIkL+lDIZq3kl+o0TE5oZeGgScffvmbKjJt9e7ruvejyR 5wqAZPGLayxGyrvbZbm3YPH7qWa3aMqKb+Ev6YBJGHsh -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:42 2026 by rpki-client