This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/1VJc7ft8TlNEuOzgNAve0dUg5ts.roa File: 1VJc7ft8TlNEuOzgNAve0dUg5ts.roa (raw, json) Hash identifier: u9EUB0oer4BE1uLDqYmT9DNzu0VsYJr/VpAxRhL9w6U= Subject key identifier: D5:52:5C:ED:FB:7C:4E:53:44:B8:EC:E0:34:0B:DE:D1:D5:20:E6:DB Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c Certificate serial: 019B7C807DE77A5817A7EB756D0214DA7731 Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/1VJc7ft8TlNEuOzgNAve0dUg5ts.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7233 IP address blocks: 77.238.189.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7d:e7:7a:58:17:a7:eb:75:6d:02:14:da:77:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5525cedfb7c4e5344b8ece0340bded1d520e6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:e9:08:e4:47:5e:8e:35:eb:c4:27:b4:b0: 16:46:7a:ff:5f:79:71:3f:1d:dc:8c:b3:27:00:6b: 3d:f5:8c:32:5b:36:16:a3:fd:de:92:9f:e6:7d:7f: 64:f4:6e:20:75:d3:c6:55:00:34:a6:a1:fc:6c:17: c0:0c:61:dc:d0:05:65:2d:a3:95:d8:e3:3d:1a:c3: 6a:88:5b:8e:3f:58:a3:d9:10:15:e6:a1:d0:ef:22: 34:41:92:c0:5f:ea:00:f4:de:7c:3f:54:fa:a3:3f: c9:f5:a7:3c:24:32:f7:01:19:94:1d:25:91:f9:4d: e4:f6:43:2b:c5:49:ea:6b:22:e3:61:e1:6f:0b:ef: 9d:35:b4:7c:d7:e8:97:44:12:df:b6:e3:5c:5e:72: 85:70:7e:3b:03:17:f8:38:27:d9:33:8d:ec:c3:78: 75:8f:18:f6:52:69:e0:76:15:d2:56:54:69:de:a8: e6:7c:ee:5f:e6:7d:9b:b2:6a:66:bf:90:a0:f7:f0: f4:07:69:98:61:51:48:a3:56:b0:d1:ce:c0:3a:fe: 76:3b:fb:bf:aa:0b:5d:07:d0:fe:ac:66:74:e4:31: 12:7a:04:e7:50:63:5c:65:2e:eb:c4:ee:fb:c0:f0: d1:ba:f4:b9:b3:8f:b2:57:a1:49:9c:d7:d3:f4:bd: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:52:5C:ED:FB:7C:4E:53:44:B8:EC:E0:34:0B:DE:D1:D5:20:E6:DB X509v3 Authority Key Identifier: keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/1VJc7ft8TlNEuOzgNAve0dUg5ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.238.189.0/25 Signature Algorithm: sha256WithRSAEncryption d5:8b:cb:bd:2f:88:11:ce:73:7b:15:64:bf:a8:bd:9e:d2:43: 56:8b:3f:ab:6b:c0:9c:b4:5a:da:4e:58:fe:76:fe:ee:2e:b5: 07:e3:c8:03:af:82:f4:6b:f7:16:7f:d8:dc:70:2e:3e:33:7b: e2:98:61:98:53:d7:21:dd:69:96:f3:84:b9:b1:dd:18:74:b8: ce:dc:e3:d8:d3:7c:4e:a3:d4:71:30:67:4b:33:68:14:ab:93: 22:9c:ef:7e:b5:6a:1c:c2:ad:89:ef:5f:07:15:3a:81:0a:3c: fb:a6:d9:ed:a1:86:c6:48:a1:16:91:e5:ad:91:d4:20:17:2b: ad:ab:f2:cb:72:12:4f:9a:f7:62:a2:66:49:1a:67:75:c7:5b: f5:c9:bb:7c:f9:ac:82:04:96:a3:4c:ec:c3:81:d9:65:13:7d: f7:78:a8:07:a1:74:08:6d:fb:10:c4:16:bc:cd:30:db:a0:ec: a7:ce:cf:f4:3f:f6:3c:f8:2e:6f:e0:9c:19:da:bc:76:b6:d9: aa:f5:37:4d:9b:af:ee:c9:8c:01:b1:fd:2f:f0:b4:59:eb:46: 61:ca:bb:c4:63:77:d1:77:16:21:f8:5b:3b:07:e0:c9:5c:14: b7:e6:c7:aa:02:b3:4c:f2:31:bd:4a:0a:7b:c7:15:77:64:5b: 3c:54:ce:db -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gH3nelgXp+t1bQIU2ncxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZjE0NTcyN2QzNGFlNjYwN2E2MTUzMDEyODNlZWViZDVk NjI5MWMwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTUyNWNlZGZiN2M0ZTUzNDRiOGVjZTAzNDBiZGVkMWQ1MjBlNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBvpCORHXo4168QntLAWRnr/X3lx Px3cjLMnAGs99YwyWzYWo/3ekp/mfX9k9G4gddPGVQA0pqH8bBfADGHc0AVlLaOV 2OM9GsNqiFuOP1ij2RAV5qHQ7yI0QZLAX+oA9N58P1T6oz/J9ac8JDL3ARmUHSWR +U3k9kMrxUnqayLjYeFvC++dNbR81+iXRBLftuNcXnKFcH47Axf4OCfZM43sw3h1 jxj2UmngdhXSVlRp3qjmfO5f5n2bsmpmv5Cg9/D0B2mYYVFIo1aw0c7AOv52O/u/ qgtdB9D+rGZ05DESegTnUGNcZS7rxO77wPDRuvS5s4+yV6FJnNfT9L3qvwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFNVSXO37fE5TRLjs4DQL3tHVIObbMB8GA1UdIwQY MBaAFBbxRXJ9NK5mB6YVMBKD7uvV1ikcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZGRmNuMDBybVlIcGhVd0VvUHU2OVhXS1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82YzgwOGUtMDAxNS00ZDYyLTgxZDgt ZWNiN2FlMjcyMmMxLzEvMVZKYzdmdDhUbE5FdU96Z05BdmUwZFVnNXRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82YzgwOGUtMDAxNS00ZDYyLTgxZDgtZWNiN2FlMjcyMmMx LzEvRnZGRmNuMDBybVlIcGhVd0VvUHU2OVhXS1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHTe69ADAN BgkqhkiG9w0BAQsFAAOCAQEA1YvLvS+IEc5zexVkv6i9ntJDVos/q2vAnLRa2k5Y /nb+7i61B+PIA6+C9Gv3Fn/Y3HAuPjN74phhmFPXId1plvOEubHdGHS4ztzj2NN8 TqPUcTBnSzNoFKuTIpzvfrVqHMKtie9fBxU6gQo8+6bZ7aGGxkihFpHlrZHUIBcr ravyy3IST5r3YqJmSRpndcdb9cm7fPmsggSWo0zsw4HZZRN993ioB6F0CG37EMQW vM0w26Dsp87P9D/2PPgub+CcGdq8drbZqvU3TZuv7smMAbH9L/C0WetGYcq7xGN3 0XcWIfhbOwfgyVwUt+bHqgKzTPIxvUoKe8cVd2RbPFTO2w== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:30 2026 by rpki-client