This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/s3SiFbjGLYw4z-cZBm6v_MDzcQo.roa File: s3SiFbjGLYw4z-cZBm6v_MDzcQo.roa (raw, json) Hash identifier: fpw/E3H+9mrakNuOIil0ibYAOjXBvJNgXyUw+gB5Wr0= Subject key identifier: B3:74:A2:15:B8:C6:2D:8C:38:CF:E7:19:06:6E:AF:FC:C0:F3:71:0A Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808E832642D7CDECDD19095AA63F21 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/s3SiFbjGLYw4z-cZBm6v_MDzcQo.roa Signing time: Fri 02 Jan 2026 02:19:18 +0000 ROA not before: Fri 02 Jan 2026 02:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215943 IP address blocks: 109.69.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8e:83:26:42:d7:cd:ec:dd:19:09:5a:a6:3f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b374a215b8c62d8c38cfe719066eaffcc0f3710a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:8a:23:e1:99:dd:ec:0b:9d:f1:32:88:9a: 3a:6b:e1:ff:c2:ea:8d:a1:f4:63:ae:a1:e2:c8:a9: df:b2:71:17:9e:f9:14:7e:5a:b5:01:91:a2:27:c0: 79:cc:af:63:3c:10:0c:42:15:37:b6:1c:d0:8d:f1: 20:d7:23:fe:2b:8e:a0:3c:c3:eb:db:07:a1:d4:9d: ba:3e:2f:28:a8:8a:4a:fa:30:c9:e6:52:b1:42:7d: 64:22:cb:ea:fc:77:7d:d2:3e:72:ff:f4:6f:a3:7c: b5:b1:fc:b0:4c:69:80:c4:8f:40:b8:65:a5:ed:77: 55:5b:fe:9b:b8:12:fb:1e:fb:e7:2b:3d:a6:de:db: aa:f6:31:d6:4d:b7:c6:34:8d:24:7a:d7:da:89:6d: b6:f1:49:44:88:14:8e:7c:d7:1a:88:a3:3e:9b:46: 78:f6:00:81:a5:e4:93:54:98:fc:1c:c9:0c:34:da: 11:ca:bb:71:05:76:47:3b:66:f3:05:c9:2b:73:60: 92:0d:d2:d1:48:24:72:08:f6:87:c9:7a:ec:ba:fc: 8f:a3:57:86:e7:76:7e:a9:e0:ca:ec:2f:67:5c:81: 98:95:18:53:27:43:2e:c4:90:89:0b:34:91:54:ad: 85:51:23:c6:cc:99:90:4e:f9:be:d1:39:f0:c7:eb: 88:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:74:A2:15:B8:C6:2D:8C:38:CF:E7:19:06:6E:AF:FC:C0:F3:71:0A X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/s3SiFbjGLYw4z-cZBm6v_MDzcQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.69.63.0/24 Signature Algorithm: sha256WithRSAEncryption a2:da:c9:57:1e:19:a5:f6:8f:9f:95:2f:15:14:5b:41:41:34: ed:4e:d2:26:f0:03:8a:2a:88:d1:85:f3:6a:db:d6:5e:fb:85: 4a:b2:48:10:ef:0d:35:5d:4f:5e:09:21:f4:cf:86:48:c0:ad: 24:94:d6:3d:8d:59:20:8a:ad:92:40:9d:4e:d4:20:c4:e6:9b: a9:36:2b:e7:bd:fd:db:39:d2:9a:c9:33:f8:74:f1:7e:c4:fe: 01:cf:99:93:cd:ea:d4:09:a3:24:f0:52:91:11:87:31:05:09: ec:79:c9:25:ef:2d:e1:60:ab:4a:c5:ce:97:7f:61:d5:c5:04: 53:cb:e6:56:e1:e2:12:20:74:d3:79:ef:1d:e5:c3:b2:4a:36: 2f:b7:36:0c:52:90:f1:f5:b1:46:02:b7:48:8c:92:93:36:89: 9a:ca:66:0d:ef:ca:99:f2:f5:d7:9d:5f:74:62:5c:71:cd:54: fc:38:fc:d7:8b:b2:0c:5b:d2:1d:a2:cc:30:5b:e7:51:10:80: a5:3b:5e:18:b6:3c:78:af:33:00:fb:12:91:28:06:29:14:e8: fe:40:a6:cd:06:d0:f6:fd:8f:e5:0d:12:4c:9d:4f:c0:7c:e5: 2a:7b:70:c6:4c:ec:93:93:e0:b7:26:3f:34:85:bd:ad:59:ed: 9c:f4:28:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gI6DJkLXzezdGQlapj8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzc0YTIxNWI4YzYyZDhjMzhjZmU3MTkwNjZlYWZmY2MwZjM3MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M2KI+GZ3ewLnfEyiJo6a+H/wuqN ofRjrqHiyKnfsnEXnvkUflq1AZGiJ8B5zK9jPBAMQhU3thzQjfEg1yP+K46gPMPr 2weh1J26Pi8oqIpK+jDJ5lKxQn1kIsvq/Hd90j5y//Rvo3y1sfywTGmAxI9AuGWl 7XdVW/6buBL7HvvnKz2m3tuq9jHWTbfGNI0ketfaiW228UlEiBSOfNcaiKM+m0Z4 9gCBpeSTVJj8HMkMNNoRyrtxBXZHO2bzBckrc2CSDdLRSCRyCPaHyXrsuvyPo1eG 53Z+qeDK7C9nXIGYlRhTJ0MuxJCJCzSRVK2FUSPGzJmQTvm+0Tnwx+uIWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLN0ohW4xi2MOM/nGQZur/zA83EKMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvczNTaUZiakdMWXc0ei1jWkJtNnZfTUR6Y1FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUU/MA0G CSqGSIb3DQEBCwUAA4IBAQCi2slXHhml9o+flS8VFFtBQTTtTtIm8AOKKojRhfNq 29Ze+4VKskgQ7w01XU9eCSH0z4ZIwK0klNY9jVkgiq2SQJ1O1CDE5pupNivnvf3b OdKayTP4dPF+xP4Bz5mTzerUCaMk8FKREYcxBQnseckl7y3hYKtKxc6Xf2HVxQRT y+ZW4eISIHTTee8d5cOySjYvtzYMUpDx9bFGArdIjJKTNomaymYN78qZ8vXXnV90 YlxxzVT8OPzXi7IMW9IdoswwW+dREIClO14Ytjx4rzMA+xKRKAYpFOj+QKbNBtD2 /Y/lDRJMnU/AfOUqe3DGTOyTk+C3Jj80hb2tWe2c9ChR -----END CERTIFICATE-----Generated at Wed Jan 21 08:05:28 2026 by rpki-client