This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/c57e1whtl5eogTBCeFXU_KrAjnI.roa File: c57e1whtl5eogTBCeFXU_KrAjnI.roa (raw, json) Hash identifier: rui/Yx3IAn8AclnySbYIVuFoxnyBxQ2AYt9fq4YiyHI= Subject key identifier: 73:9E:DE:D7:08:6D:97:97:A8:81:30:42:78:55:D4:FC:AA:C0:8E:72 Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c Certificate serial: 019B797E58E47E6F857D7034142B80F6F912 Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/c57e1whtl5eogTBCeFXU_KrAjnI.roa Signing time: Thu 01 Jan 2026 12:18:02 +0000 ROA not before: Thu 01 Jan 2026 12:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204053 IP address blocks: 45.143.16.0/22 maxlen: 32 45.152.152.0/22 maxlen: 32 91.198.78.0/24 maxlen: 32 185.115.172.0/22 maxlen: 32 185.203.92.0/22 maxlen: 32 193.16.97.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:58:e4:7e:6f:85:7d:70:34:14:2b:80:f6:f9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=739eded7086d9797a88130427855d4fcaac08e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9c:0f:7e:0d:55:e2:04:89:18:a3:b5:72:bb: 32:6a:37:62:7c:f5:ff:cd:04:97:84:68:18:d1:b1: 9e:2d:a1:63:00:4d:b2:f3:dd:eb:67:d8:71:2d:c8: f0:f6:c0:c7:38:f2:52:84:ef:3d:94:e2:21:f5:23: a0:85:27:44:a7:ec:75:ab:96:28:10:0e:e7:dd:36: f6:55:96:d5:24:8d:df:2f:92:11:b9:42:e2:80:01: 54:92:6b:aa:8c:b7:b6:0a:86:e2:b2:f8:6d:f9:14: fd:ac:bf:93:b5:5d:f8:53:14:a6:56:88:47:5d:52: d9:f2:dd:15:52:e3:43:21:cf:41:3a:70:a1:d9:29: b5:80:6d:c9:8c:1b:d4:2e:93:1e:76:b6:59:1e:60: 53:24:6b:52:7c:3b:dd:3c:84:57:e0:39:e5:34:6d: ed:c0:27:0b:92:df:d7:d8:69:89:cb:10:a5:2a:38: 80:ff:7d:bf:47:01:42:9e:86:ae:18:ef:4d:1a:95: 51:c6:35:b4:58:55:ab:9c:a5:48:f5:56:7d:67:91: e0:8f:98:72:0c:cd:a2:2d:4e:77:4f:86:e7:a9:6f: 12:1f:cc:57:9c:43:eb:82:5e:49:d0:1b:43:db:ab: c4:17:1d:71:ea:f9:bd:b8:e4:26:bc:e8:30:bb:31: 08:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9E:DE:D7:08:6D:97:97:A8:81:30:42:78:55:D4:FC:AA:C0:8E:72 X509v3 Authority Key Identifier: keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/c57e1whtl5eogTBCeFXU_KrAjnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.16.0/22 45.152.152.0/22 91.198.78.0/24 185.115.172.0/22 185.203.92.0/22 193.16.97.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:11:9c:58:c1:a4:2f:7e:2d:4b:3e:38:ce:55:39:61:38:90: 61:e8:e9:1e:58:7f:cd:40:d0:99:c3:28:dd:ed:d2:c6:c8:3e: 8a:57:da:4d:a6:05:8c:3d:33:27:ea:6b:fb:fa:77:b4:84:23: 3b:b4:68:48:9b:43:c4:4f:59:37:c1:33:d4:73:78:90:a6:ac: 4c:d1:da:78:16:b8:b0:8b:a4:d8:10:5a:07:52:a6:d8:a4:6d: e3:1e:1e:b1:0b:26:26:6b:9f:b4:9f:da:28:fd:19:74:72:02: f6:93:76:a3:4b:ea:07:2c:1e:4e:a8:a4:3f:ba:7c:2f:24:8d: 4d:d1:07:ac:74:be:7c:9e:27:c9:db:b4:75:e2:4c:9a:cb:89: 23:ee:3f:83:c6:28:56:e8:8a:6e:8c:50:b2:ad:4c:00:dd:5f: df:45:22:26:85:fa:81:cb:07:55:e4:38:d0:3b:fa:2b:88:a7: be:8e:81:d8:35:a0:56:13:5c:e2:b4:d2:f9:ef:97:a3:f5:ef: c3:6a:7d:43:2e:ce:79:93:20:2c:3a:ad:8b:ee:75:03:49:5a: 6b:17:ee:ef:f1:fb:d2:7c:a6:ab:ce:1c:16:41:89:db:63:22: 12:49:7a:43:5a:0b:02:e0:8d:83:dc:c0:e4:71:aa:53:1b:75: 2e:89:01:1c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt5fljkfm+FfXA0FCuA9vkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljOGExODc2ZmRkYzJiNjM3NDhiNDU3Yjc3MGI3OWE3ZTY2 ZTc5M2MwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzllZGVkNzA4NmQ5Nzk3YTg4MTMwNDI3ODU1ZDRmY2FhYzA4ZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJwPfg1V4gSJGKO1crsyajdifPX/ zQSXhGgY0bGeLaFjAE2y893rZ9hxLcjw9sDHOPJShO89lOIh9SOghSdEp+x1q5Yo EA7n3Tb2VZbVJI3fL5IRuULigAFUkmuqjLe2Cobisvht+RT9rL+TtV34UxSmVohH XVLZ8t0VUuNDIc9BOnCh2Sm1gG3JjBvULpMedrZZHmBTJGtSfDvdPIRX4DnlNG3t wCcLkt/X2GmJyxClKjiA/32/RwFCnoauGO9NGpVRxjW0WFWrnKVI9VZ9Z5Hgj5hy DM2iLU53T4bnqW8SH8xXnEPrgl5J0BtD26vEFx1x6vm9uOQmvOgwuzEI6wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHOe3tcIbZeXqIEwQnhV1PyqwI5yMB8GA1UdIwQY MBaAFJyKGHb93CtjdItFe3cLeafmbnk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMt NzA5ZmJlODRjZGZiLzEvYzU3ZTF3aHRsNWVvZ1RCQ2VGWFVfS3JBam5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMtNzA5ZmJlODRjZGZi LzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLY8QAwQC LZiYAwQAW8ZOAwQCuXOsAwQCuctcAwQAwRBhMA0GCSqGSIb3DQEBCwUAA4IBAQBv EZxYwaQvfi1LPjjOVTlhOJBh6OkeWH/NQNCZwyjd7dLGyD6KV9pNpgWMPTMn6mv7 +ne0hCM7tGhIm0PET1k3wTPUc3iQpqxM0dp4Friwi6TYEFoHUqbYpG3jHh6xCyYm a5+0n9oo/Rl0cgL2k3ajS+oHLB5OqKQ/unwvJI1N0QesdL58nifJ27R14kyay4kj 7j+DxihW6IpujFCyrUwA3V/fRSImhfqBywdV5DjQO/oriKe+joHYNaBWE1zitNL5 75ej9e/Dan1DLs55kyAsOq2L7nUDSVprF+7v8fvSfKarzhwWQYnbYyISSXpDWgsC 4I2D3MDkcapTG3UuiQEc -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:25 2026 by rpki-client