This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/S9G5psiJeIcbArfBTp1QLAQdHYg.roa File: S9G5psiJeIcbArfBTp1QLAQdHYg.roa (raw, json) Hash identifier: Zc2Nnr9uGhkOJwiMMBzf+F7Jqn4jLoEjO1hmaVvwrus= Subject key identifier: 4B:D1:B9:A6:C8:89:78:87:1B:02:B7:C1:4E:9D:50:2C:04:1D:1D:88 Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9 Certificate serial: 019B7BA53540767E0995B240685AEE898A0D Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/S9G5psiJeIcbArfBTp1QLAQdHYg.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17307 IP address blocks: 77.247.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:35:40:76:7e:09:95:b2:40:68:5a:ee:89:8a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bd1b9a6c88978871b02b7c14e9d502c041d1d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:d2:31:ab:b0:c5:84:61:29:52:bc:a9:fc: 7c:df:a9:8b:cc:f7:5e:dc:2a:c6:93:83:75:53:df: 64:87:5c:bc:36:a8:a3:17:da:34:94:f9:6f:52:cb: 23:1d:74:c0:20:4f:80:79:2a:2f:48:4a:2f:a1:06: 1e:99:2a:79:bd:76:5a:4c:59:5a:4d:98:0e:f1:78: 82:44:2c:ee:5f:37:b7:bb:3c:77:e0:cf:7f:3c:63: 73:77:1f:25:a2:39:44:ae:0c:60:39:fb:b7:8f:8d: 21:e1:17:79:1f:8c:ca:36:ac:cb:56:8e:71:b5:75: 10:89:9d:8f:02:ae:d5:ad:eb:a6:a9:84:48:d0:b0: 2e:15:8e:ea:4b:1a:fb:7c:a1:c7:1d:1b:a5:73:ae: 2f:45:f7:ee:31:d3:ce:cf:7b:fe:e9:23:cc:42:dd: 17:fe:68:58:37:33:cd:ad:a1:1e:29:69:a7:b3:f4: a5:b8:ba:59:f2:37:2a:d8:85:9d:d2:80:b6:67:a9: 92:fe:57:aa:81:04:a3:1d:5b:c3:9c:90:3b:f3:92: 30:1d:44:cf:ed:e4:3a:44:fc:59:43:01:69:76:d8: e2:db:c0:64:ab:c9:2a:30:93:88:1a:85:5c:58:eb: 90:28:15:0d:56:d8:d2:52:50:ac:cc:36:c7:71:63: 17:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D1:B9:A6:C8:89:78:87:1B:02:B7:C1:4E:9D:50:2C:04:1D:1D:88 X509v3 Authority Key Identifier: keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/S9G5psiJeIcbArfBTp1QLAQdHYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.0.0/20 Signature Algorithm: sha256WithRSAEncryption a1:be:ba:f4:a3:70:41:a2:e4:bc:df:e4:10:38:4e:39:97:ae: 92:4c:aa:fc:ba:4c:b0:68:79:5c:1a:76:2f:ee:6f:34:56:6e: 6f:09:13:db:e1:52:e7:fd:bd:a7:af:98:bb:e0:29:7b:4b:9d: 0f:06:5d:43:1e:8f:4a:67:a5:63:74:f8:1c:71:72:80:ce:16: 96:fc:10:78:03:1d:0b:20:33:39:b0:62:b7:08:f4:0d:aa:6b: 50:a7:ed:a0:b8:bd:be:ce:d7:46:bf:3c:35:3e:21:f1:2e:47: 75:62:35:a6:de:b7:e0:d9:4c:08:a8:ce:20:bb:eb:df:26:9c: ef:52:2a:59:ae:c3:47:7d:f8:ef:4f:59:b9:7f:95:89:f0:c7: 77:47:d5:a4:55:1f:85:65:a6:31:4d:72:28:5c:12:33:7a:ad: d1:ff:df:e4:17:2c:58:33:9e:20:a3:18:70:dd:60:a1:eb:e2: ec:95:52:a4:11:51:77:22:2a:a5:5a:80:bd:cf:6f:7d:71:e7: 76:bd:bc:27:31:62:ec:e2:54:07:9c:c2:5b:67:fc:e2:3a:d0: 1b:9d:f2:74:7a:39:99:4e:d8:ba:26:ad:f3:70:7e:27:c3:37: 8d:5e:40:66:52:b3:83:00:8a:66:b9:45:02:a0:57:ca:83:3f: 03:11:dd:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTVAdn4JlbJAaFruiYoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll Yzk3YzkwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmQxYjlhNmM4ODk3ODg3MWIwMmI3YzE0ZTlkNTAyYzA0MWQxZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC3SMauwxYRhKVK8qfx836mLzPde 3CrGk4N1U99kh1y8NqijF9o0lPlvUssjHXTAIE+AeSovSEovoQYemSp5vXZaTFla TZgO8XiCRCzuXze3uzx34M9/PGNzdx8lojlErgxgOfu3j40h4Rd5H4zKNqzLVo5x tXUQiZ2PAq7VreumqYRI0LAuFY7qSxr7fKHHHRulc64vRffuMdPOz3v+6SPMQt0X /mhYNzPNraEeKWmns/SluLpZ8jcq2IWd0oC2Z6mS/leqgQSjHVvDnJA785IwHUTP 7eQ6RPxZQwFpdtji28Bkq8kqMJOIGoVcWOuQKBUNVtjSUlCszDbHcWMX8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEvRuabIiXiHGwK3wU6dUCwEHR2IMB8GA1UdIwQY MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt ZjYxNTU0YzZjMTQ1LzEvUzlHNXBzaUplSWNiQXJmQlRwMVFMQVFkSFlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1 LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETfcAMA0G CSqGSIb3DQEBCwUAA4IBAQChvrr0o3BBouS83+QQOE45l66STKr8ukywaHlcGnYv 7m80Vm5vCRPb4VLn/b2nr5i74Cl7S50PBl1DHo9KZ6VjdPgccXKAzhaW/BB4Ax0L IDM5sGK3CPQNqmtQp+2guL2+ztdGvzw1PiHxLkd1YjWm3rfg2UwIqM4gu+vfJpzv UipZrsNHffjvT1m5f5WJ8Md3R9WkVR+FZaYxTXIoXBIzeq3R/9/kFyxYM54goxhw 3WCh6+LslVKkEVF3IiqlWoC9z299ced2vbwnMWLs4lQHnMJbZ/ziOtAbnfJ0ejmZ Tti6Jq3zcH4nwzeNXkBmUrODAIpmuUUCoFfKgz8DEd2L -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:32 2026 by rpki-client