This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/57_pJKO7tOgXH0MplNvXkDg8tRA.roa File: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (raw, json) Hash identifier: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA= Subject key identifier: E7:BF:E9:24:A3:BB:B4:E8:17:1F:43:29:94:DB:D7:90:38:3C:B5:10 Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Certificate serial: 019B7F839C32E4E41EDECB7A66277D25731E Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/57_pJKO7tOgXH0MplNvXkDg8tRA.roa Signing time: Fri 02 Jan 2026 16:21:30 +0000 ROA not before: Fri 02 Jan 2026 16:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25098 IP address blocks: 152.89.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9c:32:e4:e4:1e:de:cb:7a:66:27:7d:25:73:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17 Validity Not Before: Jan 2 16:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7bfe924a3bbb4e8171f432994dbd790383cb510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:34:b0:01:20:da:6f:28:1a:f5:ad:93:9e: 41:2d:e6:6a:8f:cf:64:b5:4d:35:37:a6:66:ff:c6: bb:07:8b:00:3e:70:41:57:a3:11:4f:0e:af:f6:76: db:ff:1b:1c:5b:b1:df:68:01:a9:3d:74:6b:39:36: 6e:b5:2f:fa:71:d1:ab:6a:86:69:ab:f4:72:8b:11: b5:a8:6d:9e:54:f3:02:e8:ab:f6:c4:4c:d7:a8:ee: 0d:a2:1a:34:1f:0c:39:05:95:03:7b:26:89:68:64: 5c:c3:7f:26:9c:ea:7e:a5:67:b7:f3:3d:2d:82:c8: a0:c5:78:a5:0c:05:9d:95:5d:2a:41:29:35:31:d9: 7a:b2:c2:aa:c9:7f:77:20:65:bb:ea:80:91:87:61: 88:9d:cd:c6:0d:e9:bd:b9:46:24:0d:07:cf:75:94: 05:ca:7c:a1:5e:db:9b:2d:5e:b8:91:67:d4:e3:4f: 61:08:0d:2f:19:ae:e8:77:e0:95:1f:d7:01:b4:28: 2a:92:d6:5b:81:d7:0b:a1:29:ae:cc:9e:0e:6c:fc: 0f:dc:13:ed:82:4e:85:60:78:3e:3d:61:d2:16:f0: 25:59:7b:59:3f:d2:ab:3c:bc:d8:3b:af:c3:b0:ba: 9c:a8:83:6d:e2:03:c6:50:bc:77:b2:c8:81:a9:44: 22:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BF:E9:24:A3:BB:B4:E8:17:1F:43:29:94:DB:D7:90:38:3C:B5:10 X509v3 Authority Key Identifier: keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/57_pJKO7tOgXH0MplNvXkDg8tRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.30.0/23 Signature Algorithm: sha256WithRSAEncryption 40:5a:a1:41:80:19:a2:01:57:56:ab:d8:ff:96:0f:ca:b8:34: ba:86:6f:dc:e4:02:c0:59:c2:8b:15:57:e2:83:d8:c8:d2:e5: 44:ed:82:43:d7:38:12:33:dd:f6:d1:c4:0a:71:51:87:78:94: dd:01:70:52:89:39:79:56:d6:26:5c:50:f9:21:1f:ca:eb:a4: ae:85:d3:58:2b:f0:a2:1f:98:a6:f9:52:8a:f3:dd:b7:c0:ab: b5:db:32:78:a4:6e:00:ad:6f:f2:04:f5:70:cc:c8:c2:b8:b0: b0:f5:93:e5:25:91:81:f9:56:79:c0:09:ee:37:9a:59:af:50: 81:53:65:2a:f3:f4:26:15:0a:cc:6b:52:73:62:65:14:2c:34: e2:d2:41:73:64:25:7f:83:f9:a2:30:ff:42:cb:74:2b:ab:a4: 47:f9:b8:6d:d3:b3:ab:f7:dd:01:23:11:0a:6f:95:7e:7b:d8: bd:27:59:b5:99:3b:2b:f8:b5:69:67:ec:9b:5d:fd:5e:23:0f: 4f:50:d2:3a:b0:5f:06:da:42:29:bc:ad:16:8f:19:15:74:b3: ce:32:51:17:0c:9f:34:6f:5a:0e:12:2d:41:da:1e:98:63:21: dc:2a:04:26:e0:04:8c:36:65:62:69:b6:ee:01:e2:b3:aa:a5: 87:0f:5d:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5wy5OQe3st6Zid9JXMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx ZTZiMTcwHhcNMjYwMTAyMTYyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2JmZTkyNGEzYmJiNGU4MTcxZjQzMjk5NGRiZDc5MDM4M2NiNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBo0sAEg2m8oGvWtk55BLeZqj89k tU01N6Zm/8a7B4sAPnBBV6MRTw6v9nbb/xscW7HfaAGpPXRrOTZutS/6cdGraoZp q/RyixG1qG2eVPMC6Kv2xEzXqO4Noho0Hww5BZUDeyaJaGRcw38mnOp+pWe38z0t gsigxXilDAWdlV0qQSk1Mdl6ssKqyX93IGW76oCRh2GInc3GDem9uUYkDQfPdZQF ynyhXtubLV64kWfU409hCA0vGa7od+CVH9cBtCgqktZbgdcLoSmuzJ4ObPwP3BPt gk6FYHg+PWHSFvAlWXtZP9KrPLzYO6/DsLqcqINt4gPGULx3ssiBqUQizwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOe/6SSju7ToFx9DKZTb15A4PLUQMB8GA1UdIwQY MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt OWU4OTVkMGVmOGQyLzEvNTdfcEpLTzd0T2dYSDBNcGxOdlhrRGc4dFJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmFkeMA0G CSqGSIb3DQEBCwUAA4IBAQBAWqFBgBmiAVdWq9j/lg/KuDS6hm/c5ALAWcKLFVfi g9jI0uVE7YJD1zgSM9320cQKcVGHeJTdAXBSiTl5VtYmXFD5IR/K66SuhdNYK/Ci H5im+VKK8923wKu12zJ4pG4ArW/yBPVwzMjCuLCw9ZPlJZGB+VZ5wAnuN5pZr1CB U2Uq8/QmFQrMa1JzYmUULDTi0kFzZCV/g/miMP9Cy3Qrq6RH+bht07Or990BIxEK b5V+e9i9J1m1mTsr+LVpZ+ybXf1eIw9PUNI6sF8G2kIpvK0WjxkVdLPOMlEXDJ80 b1oOEi1B2h6YYyHcKgQm4ASMNmViabbuAeKzqqWHD129 -----END CERTIFICATE-----Generated at Thu Jan 8 09:14:10 2026 by rpki-client