This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/_3eACqWgcDV77Z5GJVk82wrfcAQ.roa File: _3eACqWgcDV77Z5GJVk82wrfcAQ.roa (raw, json) Hash identifier: zugyJ9au3EVgX9ZrQItHOQ/dgQnBWoZfW27IbF2rS7o= Subject key identifier: FF:77:80:0A:A5:A0:70:35:7B:ED:9E:46:25:59:3C:DB:0A:DF:70:04 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 019B76EB7A4F14CC18A48C8E8203316DA34E Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/_3eACqWgcDV77Z5GJVk82wrfcAQ.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51913 IP address blocks: 185.157.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7a:4f:14:cc:18:a4:8c:8e:82:03:31:6d:a3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff77800aa5a070357bed9e4625593cdb0adf7004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:47:16:43:17:b2:a8:4b:73:76:ac:14:48:00: f8:c3:a4:b4:5b:af:d0:ea:24:3a:13:13:6e:a2:f6: 9f:d6:17:4b:8f:2e:61:73:34:b0:e6:89:b2:a6:27: 4c:2e:d4:28:bb:f6:bc:32:bb:03:33:0b:c9:ae:e3: 9d:ce:b7:21:f3:34:d3:5a:a2:5c:fe:c2:4f:ac:be: d1:1f:43:ca:27:54:f2:b1:84:ca:dd:cb:4a:c6:8f: b8:24:e5:d6:ea:56:b2:a5:09:e2:89:59:9d:f5:a6: b1:0b:80:11:a6:bc:7f:16:f1:ff:db:6c:af:b8:8c: 77:66:f8:f2:bb:42:62:34:ff:96:15:69:be:fe:e8: 4d:05:f5:81:6e:08:3b:3c:8c:fc:14:23:63:bc:69: 96:33:7f:78:55:18:73:85:58:03:53:0d:6f:e0:23: 07:fa:a0:2b:64:b6:81:e0:a8:dd:5e:d0:7e:a0:a1: 27:30:40:66:03:50:21:76:aa:ad:a4:76:ec:d2:b7: b5:fe:9b:26:4f:73:05:2b:96:9c:d3:70:85:44:fc: 22:56:2e:68:e9:c3:36:a7:66:56:41:5c:75:9d:48: 97:5e:00:c7:fe:cc:34:00:14:57:71:23:08:de:76: b3:0a:ab:53:36:d5:66:01:14:91:58:0c:ff:92:70: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:77:80:0A:A5:A0:70:35:7B:ED:9E:46:25:59:3C:DB:0A:DF:70:04 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/_3eACqWgcDV77Z5GJVk82wrfcAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.88.0/22 Signature Algorithm: sha256WithRSAEncryption 52:6f:a1:79:f8:18:b1:a9:04:96:79:dc:97:f2:a0:cc:6c:40: 4e:f8:dc:d1:81:f1:d2:24:9d:00:9c:af:7e:57:1f:91:6e:f9: 52:7c:04:65:d9:ac:fb:e6:25:39:e8:7d:4b:60:e5:57:7c:5c: ef:83:4f:49:a9:9d:98:da:1f:95:ad:3a:90:aa:ff:e4:d4:9d: dd:c3:e3:19:af:d9:c9:b1:4a:69:47:4d:20:2d:23:b4:53:b4: ca:9f:ad:fb:90:f3:c9:18:68:ec:d3:22:77:8d:0b:2d:1f:fd: 36:9a:c9:aa:0e:5f:80:3f:67:fb:bd:a3:e3:d0:0c:b2:81:be: 7d:06:f1:03:95:65:0c:29:41:f4:5a:e8:f4:dc:87:c5:13:7a: 3b:08:af:d2:11:3d:a1:97:f0:35:54:bc:39:69:e5:00:41:18: 60:2e:64:5b:34:7d:92:29:58:40:b8:1a:3a:eb:0b:29:6d:21: a9:42:3b:a0:14:40:3b:6e:36:96:fb:f5:ae:23:51:50:ad:a3: f3:03:41:5a:58:29:2e:1b:fd:19:46:82:08:3a:ca:70:2a:65: 59:7c:8e:12:1e:8c:fd:80:be:07:1f:25:dd:a1:8f:34:b9:aa: ac:65:61:e6:c3:08:f9:db:d6:d1:30:c6:d8:b3:e6:de:65:d4: c2:ad:77:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt263pPFMwYpIyOggMxbaNOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjc3ODAwYWE1YTA3MDM1N2JlZDllNDYyNTU5M2NkYjBhZGY3MDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEcWQxeyqEtzdqwUSAD4w6S0W6/Q 6iQ6ExNuovaf1hdLjy5hczSw5omypidMLtQou/a8MrsDMwvJruOdzrch8zTTWqJc /sJPrL7RH0PKJ1TysYTK3ctKxo+4JOXW6laypQniiVmd9aaxC4ARprx/FvH/22yv uIx3Zvjyu0JiNP+WFWm+/uhNBfWBbgg7PIz8FCNjvGmWM394VRhzhVgDUw1v4CMH +qArZLaB4KjdXtB+oKEnMEBmA1AhdqqtpHbs0re1/psmT3MFK5ac03CFRPwiVi5o 6cM2p2ZWQVx1nUiXXgDH/sw0ABRXcSMI3nazCqtTNtVmARSRWAz/knDV8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP93gAqloHA1e+2eRiVZPNsK33AEMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvXzNlQUNxV2djRFY3N1o1R0pWazgyd3JmY0FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ1YMA0G CSqGSIb3DQEBCwUAA4IBAQBSb6F5+BixqQSWedyX8qDMbEBO+NzRgfHSJJ0AnK9+ Vx+RbvlSfARl2az75iU56H1LYOVXfFzvg09JqZ2Y2h+VrTqQqv/k1J3dw+MZr9nJ sUppR00gLSO0U7TKn637kPPJGGjs0yJ3jQstH/02msmqDl+AP2f7vaPj0Ayygb59 BvEDlWUMKUH0Wuj03IfFE3o7CK/SET2hl/A1VLw5aeUAQRhgLmRbNH2SKVhAuBo6 6wspbSGpQjugFEA7bjaW+/WuI1FQraPzA0FaWCkuG/0ZRoIIOspwKmVZfI4SHoz9 gL4HHyXdoY80uaqsZWHmwwj529bRMMbYs+beZdTCrXfT -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:05 2026 by rpki-client