This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/50_RqUM3HM1DTyeXhDBU-vljMns.roa File: 50_RqUM3HM1DTyeXhDBU-vljMns.roa (raw, json) Hash identifier: jLfna8CaKrQXjGhh5I5+7KDotyKYCpxYaW8lSXxCxYI= Subject key identifier: E7:4F:D1:A9:43:37:1C:CD:43:4F:27:97:84:30:54:FA:F9:63:32:7B Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019B77C723BB8F6B162CFB879720A2306673 Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/50_RqUM3HM1DTyeXhDBU-vljMns.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207459 IP address blocks: 212.64.223.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:23:bb:8f:6b:16:2c:fb:87:97:20:a2:30:66:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e74fd1a943371ccd434f2797843054faf963327b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c8:82:4e:d5:ee:b8:1c:68:a1:13:23:3e:ca: 3b:90:25:2c:15:d5:1e:4e:3b:07:16:45:b2:f3:0e: 94:e4:3a:a6:c5:f6:7c:e8:6c:91:0e:ad:ed:47:26: 8d:23:c9:ab:33:2a:2d:0b:51:ce:30:a3:96:c0:7b: 64:7a:cc:5f:bf:54:09:8d:ad:e8:d5:5f:e4:a0:08: 67:55:fd:77:c0:4e:89:e7:1d:cd:aa:30:47:94:21: 94:c1:83:22:94:71:bf:89:fa:ba:de:97:12:0c:e5: 21:04:7f:be:1c:50:76:1e:f4:ce:d5:e3:d6:46:04: d9:91:25:d5:93:8f:37:22:67:ff:0c:0d:c7:59:f6: 65:74:74:29:31:44:02:11:25:2d:b1:ba:68:d2:41: ac:ff:a9:77:f7:3e:40:21:ab:c1:ae:f7:2e:ef:5c: 64:1c:cc:af:ee:7b:99:f7:0c:a7:ad:f3:ac:bb:4b: 52:01:be:02:8b:c1:12:07:6e:99:f5:02:d8:e8:82: 2c:75:b1:0d:74:6e:fe:bb:3b:1a:37:12:a4:ad:29: a4:3b:e3:71:33:df:06:94:6f:59:1d:31:0c:4d:80: 95:cc:60:5f:6d:42:8a:28:5b:df:28:ed:81:e8:d4: 89:7d:b9:ce:d4:9f:6e:80:a3:cf:ec:f6:df:9e:0e: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4F:D1:A9:43:37:1C:CD:43:4F:27:97:84:30:54:FA:F9:63:32:7B X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/50_RqUM3HM1DTyeXhDBU-vljMns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.64.223.0/24 Signature Algorithm: sha256WithRSAEncryption 12:28:4e:12:d4:a0:9f:00:bb:8d:9d:7f:9d:5b:11:71:98:1e: 8c:d1:e1:43:82:39:ca:f4:61:66:44:67:f0:f8:f1:d4:ed:dc: 33:66:fd:c0:46:7c:14:61:38:c4:b0:63:56:27:6c:6d:a1:e7: 3d:e5:89:5a:ad:60:6b:5b:00:3e:f2:9e:3e:8c:17:0b:86:90: e5:61:e2:4d:97:0c:e3:72:1f:79:51:04:4c:09:42:90:46:5f: fd:05:9e:f6:9a:85:00:af:77:59:48:11:9f:d5:18:9e:a2:eb: 56:e8:f4:51:bf:d2:67:21:fc:1f:98:a5:e6:56:70:3b:04:f7: ee:3b:62:fb:89:0c:19:fc:06:0b:ff:9d:42:16:de:1b:2f:c8: c6:2d:54:b3:16:df:bb:25:c8:78:b8:c3:59:8d:3e:bb:a3:d9: 4a:72:8f:39:52:84:29:5d:fe:92:bd:f1:87:8c:b1:bd:20:6f: 2b:8d:cb:f7:66:e9:8d:52:d3:06:04:b5:d7:b4:cc:ca:b8:25: 06:d0:7d:fe:ee:24:ce:ba:60:91:bd:79:a7:f6:ab:2b:9b:8f: 78:71:de:c9:03:aa:d4:1f:52:93:5d:0a:3b:10:b4:2d:0f:40: 5a:1e:da:c5:c9:8a:41:c3:ae:81:3d:03:7a:1c:1f:2d:dc:fb: 52:a1:85:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyO7j2sWLPuHlyCiMGZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzRmZDFhOTQzMzcxY2NkNDM0ZjI3OTc4NDMwNTRmYWY5NjMzMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48iCTtXuuBxooRMjPso7kCUsFdUe TjsHFkWy8w6U5DqmxfZ86GyRDq3tRyaNI8mrMyotC1HOMKOWwHtkesxfv1QJja3o 1V/koAhnVf13wE6J5x3NqjBHlCGUwYMilHG/ifq63pcSDOUhBH++HFB2HvTO1ePW RgTZkSXVk483Imf/DA3HWfZldHQpMUQCESUtsbpo0kGs/6l39z5AIavBrvcu71xk HMyv7nuZ9wynrfOsu0tSAb4Ci8ESB26Z9QLY6IIsdbENdG7+uzsaNxKkrSmkO+Nx M98GlG9ZHTEMTYCVzGBfbUKKKFvfKO2B6NSJfbnO1J9ugKPP7Pbfng7tiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOdP0alDNxzNQ08nl4QwVPr5YzJ7MB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvNTBfUnFVTTNITTFEVHllWGhEQlUtdmxqTW5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EDfMA0G CSqGSIb3DQEBCwUAA4IBAQASKE4S1KCfALuNnX+dWxFxmB6M0eFDgjnK9GFmRGfw +PHU7dwzZv3ARnwUYTjEsGNWJ2xtoec95YlarWBrWwA+8p4+jBcLhpDlYeJNlwzj ch95UQRMCUKQRl/9BZ72moUAr3dZSBGf1RieoutW6PRRv9JnIfwfmKXmVnA7BPfu O2L7iQwZ/AYL/51CFt4bL8jGLVSzFt+7Jch4uMNZjT67o9lKco85UoQpXf6SvfGH jLG9IG8rjcv3ZumNUtMGBLXXtMzKuCUG0H3+7iTOumCRvXmn9qsrm494cd7JA6rU H1KTXQo7ELQtD0BaHtrFyYpBw66BPQN6HB8t3PtSoYXb -----END CERTIFICATE-----Generated at Wed Jan 21 19:07:21 2026 by rpki-client