This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/tDWgVsxN09kg7oAdG68IGAVT8Zg.roa File: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (raw, json) Hash identifier: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA= Subject key identifier: B4:35:A0:56:CC:4D:D3:D9:20:EE:80:1D:1B:AF:08:18:05:53:F1:98 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019B7D5B7239C193DBACA7EFDAF10A5C9B48 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/tDWgVsxN09kg7oAdG68IGAVT8Zg.roa Signing time: Fri 02 Jan 2026 06:18:23 +0000 ROA not before: Fri 02 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215428 IP address blocks: 77.105.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:72:39:c1:93:db:ac:a7:ef:da:f1:0a:5c:9b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Jan 2 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b435a056cc4dd3d920ee801d1baf08180553f198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bb:73:ed:e1:45:b6:e6:00:94:ea:85:d0:1f: 7e:de:ab:92:c0:20:d7:83:80:0e:be:8f:ec:73:47: a5:b1:00:4b:6a:1a:4f:32:d4:27:3c:f5:c2:ff:ec: 35:07:fe:d2:12:34:2f:ed:3d:21:cb:1e:09:4c:a9: 0d:b2:2f:a0:3e:f8:13:04:2a:1c:d5:b0:59:0a:28: af:b5:7b:f8:ac:cf:24:27:30:e1:25:18:0d:cf:c7: b8:d7:51:d4:60:2a:7a:8f:b5:7c:c1:a0:8c:5c:26: d2:e3:14:37:d0:c9:27:59:8e:74:fd:1f:07:fa:ba: d0:5f:f9:32:3a:95:7c:78:89:86:26:52:66:b9:a6: ca:1b:57:3b:42:7a:6b:76:86:a2:95:15:0e:2c:6f: 55:72:6f:93:ed:84:0d:e4:94:92:d8:0b:7c:65:e4: fb:e0:f1:f9:db:c1:31:17:12:b3:b9:b4:ea:e7:7d: 5a:48:dc:3e:5e:ad:03:1c:5a:fb:44:c5:ea:48:a3: 95:eb:00:15:4f:f2:ac:0a:e3:21:69:56:54:33:5e: 0f:5d:fa:6f:2e:d3:48:36:14:b1:72:b2:47:50:e8: 66:ec:61:4d:66:2a:e7:a4:47:d5:c0:ed:25:2d:be: 27:df:ec:7b:2d:fc:24:4a:a6:32:61:5b:d2:c8:97: 5d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:35:A0:56:CC:4D:D3:D9:20:EE:80:1D:1B:AF:08:18:05:53:F1:98 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/tDWgVsxN09kg7oAdG68IGAVT8Zg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.161.0/24 Signature Algorithm: sha256WithRSAEncryption 53:06:18:b7:11:e3:b0:9d:d1:16:1b:af:91:2a:e5:b8:d9:6c: 1f:4a:41:47:ba:f1:84:60:02:61:82:49:c6:02:1b:49:27:58: e0:a1:12:bb:3e:8e:06:d2:6b:ff:80:53:de:d0:a1:9a:30:68: a2:ab:da:50:e2:f8:19:fb:dc:12:0f:6d:25:72:a5:6d:e7:1d: b9:f6:a5:ad:ab:2c:f4:4d:46:1c:cd:bc:ca:b6:81:e1:07:e0: 73:86:99:f3:b9:36:a0:09:ff:d9:5a:dd:a2:77:54:09:d2:7a: 4b:5d:21:c3:ee:5f:63:3b:76:ba:72:76:8c:23:8b:60:d4:41: a7:6a:d9:bb:af:bb:e7:43:06:40:ee:42:21:e0:97:11:ee:c4: a8:69:08:f3:a2:2f:2b:6c:a5:ea:b8:93:36:cb:c7:5d:aa:a3: a7:5a:a9:5c:72:57:c6:34:83:69:64:cf:12:f9:ad:89:91:eb: 6b:71:66:92:9f:cc:95:0c:46:77:82:d4:34:14:9a:bf:de:7d: be:dc:aa:08:de:42:4b:b4:b9:24:ad:1e:e0:c1:aa:0e:1d:96: 60:1c:49:90:b5:de:7e:be:f3:37:c6:1c:ac:c6:db:87:f7:5c: d2:30:55:a3:19:4e:b0:3d:ce:67:49:18:9c:01:c2:40:6f:ff: 7c:55:74:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W3I5wZPbrKfv2vEKXJtIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwMTAyMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDM1YTA1NmNjNGRkM2Q5MjBlZTgwMWQxYmFmMDgxODA1NTNmMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1btz7eFFtuYAlOqF0B9+3quSwCDX g4AOvo/sc0elsQBLahpPMtQnPPXC/+w1B/7SEjQv7T0hyx4JTKkNsi+gPvgTBCoc 1bBZCiivtXv4rM8kJzDhJRgNz8e411HUYCp6j7V8waCMXCbS4xQ30MknWY50/R8H +rrQX/kyOpV8eImGJlJmuabKG1c7QnprdoailRUOLG9Vcm+T7YQN5JSS2At8ZeT7 4PH528ExFxKzubTq531aSNw+Xq0DHFr7RMXqSKOV6wAVT/KsCuMhaVZUM14PXfpv LtNINhSxcrJHUOhm7GFNZirnpEfVwO0lLb4n3+x7LfwkSqYyYVvSyJddFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQ1oFbMTdPZIO6AHRuvCBgFU/GYMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvdERXZ1ZzeE4wOWtnN29BZEc2OElHQVZUOFpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWmhMA0G CSqGSIb3DQEBCwUAA4IBAQBTBhi3EeOwndEWG6+RKuW42WwfSkFHuvGEYAJhgknG AhtJJ1jgoRK7Po4G0mv/gFPe0KGaMGiiq9pQ4vgZ+9wSD20lcqVt5x259qWtqyz0 TUYczbzKtoHhB+BzhpnzuTagCf/ZWt2id1QJ0npLXSHD7l9jO3a6cnaMI4tg1EGn atm7r7vnQwZA7kIh4JcR7sSoaQjzoi8rbKXquJM2y8ddqqOnWqlcclfGNINpZM8S +a2JketrcWaSn8yVDEZ3gtQ0FJq/3n2+3KoI3kJLtLkkrR7gwaoOHZZgHEmQtd5+ vvM3xhysxtuH91zSMFWjGU6wPc5nSRicAcJAb/98VXRD -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:42 2026 by rpki-client