This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/UrAwf58fhahFUOSzWtBJdSxqbEY.roa File: UrAwf58fhahFUOSzWtBJdSxqbEY.roa (raw, json) Hash identifier: i0STbq1FvyERG4BX0Y5U86QJxom1+453IaNfNJ6A64s= Subject key identifier: 52:B0:30:7F:9F:1F:85:A8:45:50:E4:B3:5A:D0:49:75:2C:6A:6C:46 Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9 Certificate serial: 019B7BA5372C0B90A98F44FA3F4FDD289FCC Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/UrAwf58fhahFUOSzWtBJdSxqbEY.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42808 IP address blocks: 77.247.0.0/24 maxlen: 24 77.247.13.0/24 maxlen: 24 185.71.49.0/24 maxlen: 24 185.71.51.0/24 maxlen: 24 212.11.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:37:2c:0b:90:a9:8f:44:fa:3f:4f:dd:28:9f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52b0307f9f1f85a84550e4b35ad049752c6a6c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:5f:92:70:e1:ec:5a:ed:10:08:90:3b:8d: 93:36:23:61:35:f3:99:72:9d:b8:d3:17:eb:33:ab: f5:74:7a:44:cb:02:20:78:bd:17:33:f6:d6:c0:45: b9:36:52:ec:59:7d:ee:59:71:1c:57:a9:39:42:87: 38:4a:bc:22:68:4c:14:1a:9d:cb:79:3b:e7:2e:a6: ff:9b:e7:b7:e7:08:a4:d8:9a:dc:de:f8:db:2f:3b: ae:08:d5:9d:e9:8a:ad:8f:87:f2:e2:1a:20:bd:ba: 30:be:72:7e:65:5c:fa:49:e2:78:c4:2e:a5:1a:24: 71:33:a6:7e:6b:f0:4a:18:8b:f2:c9:cc:8f:df:85: 63:bc:c2:d0:9c:d0:63:57:f4:7d:6e:d3:3f:b7:9f: e2:68:cb:88:e8:16:6b:89:e6:4f:f9:7e:4d:c6:08: 56:54:f0:22:db:96:70:83:5b:96:fe:fd:47:a0:20: 2f:b2:a3:b0:b2:08:9c:d4:9e:13:b1:b9:b3:03:62: 96:14:9a:49:1a:c1:6e:5b:87:e8:50:89:fc:97:c4: 82:3a:73:57:0c:81:a2:65:c9:99:ce:f3:07:53:ad: 94:ac:85:6a:2f:9b:a0:84:05:dd:fe:1c:68:80:9c: 00:86:96:b6:74:81:f4:95:2e:18:1e:25:34:ec:dd: de:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B0:30:7F:9F:1F:85:A8:45:50:E4:B3:5A:D0:49:75:2C:6A:6C:46 X509v3 Authority Key Identifier: keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/UrAwf58fhahFUOSzWtBJdSxqbEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.0.0/24 77.247.13.0/24 185.71.49.0/24 185.71.51.0/24 212.11.81.0/24 Signature Algorithm: sha256WithRSAEncryption ba:e0:c9:2d:d1:9f:d0:7f:5b:90:7b:32:f6:08:d1:b3:9b:60: 92:94:77:ff:c0:7c:fd:71:3d:a7:17:46:33:6a:43:da:c8:00: ac:fa:e7:7e:4f:75:e8:ae:2a:59:df:5e:49:06:20:1f:5f:91: 46:ac:dd:a5:1f:b1:6d:08:7c:00:9d:98:30:d4:e8:f5:6e:dd: 5c:10:d0:05:65:38:32:af:0e:4d:97:cd:91:ee:70:cc:71:0a: 7d:c3:f3:5c:92:39:17:69:5d:2d:80:67:46:29:6a:fa:48:1a: 80:52:54:47:3d:26:ff:44:a9:1d:c9:7b:dd:4f:04:34:64:b0: 35:14:54:18:cd:9d:cf:e6:e7:ec:9f:c3:32:7e:40:1d:81:27: 32:46:bc:03:14:1d:6f:a8:23:51:7a:4e:65:e0:08:2f:9d:cd: ba:3c:c6:49:9b:2f:cd:bf:f8:d4:4e:20:be:bb:19:6d:86:13: 33:83:f9:07:10:c9:1b:f4:62:53:a8:3e:48:5c:39:92:b6:35: 20:3a:a7:a2:7b:f6:03:6f:01:ed:d5:e8:36:a0:59:e8:d7:a2: bb:5c:d6:5e:f1:0a:fc:48:3a:3a:a4:da:22:76:17:d9:89:08: 72:65:95:cd:40:f9:bc:54:b0:92:6c:24:07:49:d8:71:06:f5: 35:cb:cd:f9 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7pTcsC5Cpj0T6P0/dKJ/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll Yzk3YzkwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmIwMzA3ZjlmMWY4NWE4NDU1MGU0YjM1YWQwNDk3NTJjNmE2YzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilJfknDh7FrtEAiQO42TNiNhNfOZ cp240xfrM6v1dHpEywIgeL0XM/bWwEW5NlLsWX3uWXEcV6k5Qoc4SrwiaEwUGp3L eTvnLqb/m+e35wik2Jrc3vjbLzuuCNWd6Yqtj4fy4hogvbowvnJ+ZVz6SeJ4xC6l GiRxM6Z+a/BKGIvyycyP34VjvMLQnNBjV/R9btM/t5/iaMuI6BZrieZP+X5NxghW VPAi25Zwg1uW/v1HoCAvsqOwsgic1J4TsbmzA2KWFJpJGsFuW4foUIn8l8SCOnNX DIGiZcmZzvMHU62UrIVqL5ughAXd/hxogJwAhpa2dIH0lS4YHiU07N3eCQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFKwMH+fH4WoRVDks1rQSXUsamxGMB8GA1UdIwQY MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt ZjYxNTU0YzZjMTQ1LzEvVXJBd2Y1OGZoYWhGVU9Teld0QkpkU3hxYkVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1 LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATfcAAwQA TfcNAwQAuUcxAwQAuUczAwQA1AtRMA0GCSqGSIb3DQEBCwUAA4IBAQC64Mkt0Z/Q f1uQezL2CNGzm2CSlHf/wHz9cT2nF0YzakPayACs+ud+T3XoripZ315JBiAfX5FG rN2lH7FtCHwAnZgw1Oj1bt1cENAFZTgyrw5Nl82R7nDMcQp9w/NckjkXaV0tgGdG KWr6SBqAUlRHPSb/RKkdyXvdTwQ0ZLA1FFQYzZ3P5ufsn8MyfkAdgScyRrwDFB1v qCNRek5l4Agvnc26PMZJmy/Nv/jUTiC+uxlthhMzg/kHEMkb9GJTqD5IXDmStjUg Oqeie/YDbwHt1eg2oFno16K7XNZe8Qr8SDo6pNoidhfZiQhyZZXNQPm8VLCSbCQH SdhxBvU1y835 -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:56 2026 by rpki-client