This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/pX4-zHrOaGGZmLrFodKOqsDRVt8.roa File: pX4-zHrOaGGZmLrFodKOqsDRVt8.roa (raw, json) Hash identifier: oNNoPaGL9tiGcsnmh6pVkfSYR8zyTqJrDL9WChZzfdA= Subject key identifier: A5:7E:3E:CC:7A:CE:68:61:99:98:BA:C5:A1:D2:8E:AA:C0:D1:56:DF Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Certificate serial: 019B7A5B338783611C1FFFC5A8E8986F0F14 Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/pX4-zHrOaGGZmLrFodKOqsDRVt8.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47493 IP address blocks: 77.237.128.0/19 maxlen: 19 2a0a:4080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:33:87:83:61:1c:1f:ff:c5:a8:e8:98:6f:0f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a57e3ecc7ace68619998bac5a1d28eaac0d156df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:ea:02:9c:17:ea:13:39:02:ef:f6:4d:b7: 06:7b:6c:25:d5:57:56:97:12:14:3c:e9:6a:45:df: c0:71:08:56:b6:82:a2:28:83:dc:1c:e3:24:0c:27: 91:1e:59:c8:b6:50:64:c4:1c:8a:56:d8:ba:13:a1: a9:49:9b:27:1c:76:8d:49:ef:e9:66:e8:75:a1:b9: 45:a7:dc:57:af:88:6f:14:2e:81:e3:20:d2:b3:82: 2b:17:d0:32:ee:53:19:0b:40:6f:e5:e6:15:22:86: 6b:c4:35:13:ac:12:70:27:33:b5:2c:22:09:32:39: 12:80:a0:24:68:24:84:37:87:d0:d8:50:62:14:3d: 73:f9:7d:bc:0d:b4:69:87:85:77:dd:19:e1:d8:35: 83:2f:fb:29:dd:2a:67:21:0e:90:9a:eb:4c:f4:62: 72:aa:6d:6b:f1:91:85:87:34:1a:14:77:ce:e3:db: ca:b9:81:7a:e9:30:87:35:fc:3a:07:1d:53:50:de: e2:f2:95:6f:8e:7a:e8:12:2b:05:b9:a6:89:82:42: 9b:ba:88:b2:84:3f:42:4a:8d:48:ad:31:17:15:3c: 3e:09:01:9a:06:0c:e9:ac:f4:65:c1:7b:9c:66:a6: f8:9f:d6:8e:e5:af:12:6d:d5:7a:5c:99:e4:15:ae: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7E:3E:CC:7A:CE:68:61:99:98:BA:C5:A1:D2:8E:AA:C0:D1:56:DF X509v3 Authority Key Identifier: keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/pX4-zHrOaGGZmLrFodKOqsDRVt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.237.128.0/19 IPv6: 2a0a:4080::/32 Signature Algorithm: sha256WithRSAEncryption 6e:ab:1a:34:8f:e7:f0:ba:b4:6a:93:82:9e:65:74:01:8c:4c: 9a:6f:62:6d:df:84:7c:d8:37:b7:e0:75:e3:18:c2:f2:f1:b2: c7:4f:47:01:87:14:5f:8b:3b:ea:bb:d4:17:70:f5:9f:4b:c5: 0d:e2:8b:0d:1d:d2:42:8e:f2:71:c6:17:20:b4:91:f2:e2:ac: 1b:41:d4:1d:ea:6d:f7:a3:c6:bf:b4:2f:56:9f:5b:8d:f0:09: 2e:3e:e0:c7:c9:76:16:1b:b1:93:35:1c:b2:14:ec:cd:23:80: cc:fe:07:3c:8f:30:83:d4:a2:9a:ac:2a:81:27:b3:a4:c8:4d: 29:17:63:f9:0d:0b:46:14:59:cc:74:dc:d3:1f:90:e8:f2:bc: b6:31:ff:d3:14:dd:e5:78:2e:2b:3c:7e:65:32:51:fd:c9:ec: b6:1d:f8:b2:da:1a:84:c3:c5:ec:3a:ee:cf:60:f9:d0:db:3b: 2b:c8:0f:ea:d5:4d:ac:24:f0:5b:c0:e3:ff:5e:1f:2b:1e:c0: 6d:01:27:49:7e:9b:c0:73:be:50:08:62:78:ab:d1:2b:d3:41: c4:6f:67:7f:57:bb:86:d1:fe:40:3e:ba:84:d3:46:36:e1:b0: c0:8b:db:1b:34:0a:5b:38:96:a0:68:4f:fe:6a:2c:96:f6:c9: a0:33:bd:7c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WzOHg2EcH//FqOiYbw8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMjU5ZGEzYjFiMzhjYTA5MzlmNDkwZmI5MDQzZmNkODlj ZmQwNjIwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTdlM2VjYzdhY2U2ODYxOTk5OGJhYzVhMWQyOGVhYWMwZDE1NmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5PqApwX6hM5Au/2TbcGe2wl1VdW lxIUPOlqRd/AcQhWtoKiKIPcHOMkDCeRHlnItlBkxByKVti6E6GpSZsnHHaNSe/p Zuh1oblFp9xXr4hvFC6B4yDSs4IrF9Ay7lMZC0Bv5eYVIoZrxDUTrBJwJzO1LCIJ MjkSgKAkaCSEN4fQ2FBiFD1z+X28DbRph4V33Rnh2DWDL/sp3SpnIQ6QmutM9GJy qm1r8ZGFhzQaFHfO49vKuYF66TCHNfw6Bx1TUN7i8pVvjnroEisFuaaJgkKbuoiy hD9CSo1IrTEXFTw+CQGaBgzprPRlwXucZqb4n9aO5a8SbdV6XJnkFa5ugQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKV+Psx6zmhhmZi6xaHSjqrA0VbfMB8GA1UdIwQY MBaAFCMlnaOxs4ygk59JD7kEP82Jz9BiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUt NjU0ZGQ2NDQyY2U0LzEvcFg0LXpIck9hR0dabUxyRm9kS09xc0RSVnQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MWE1ZmQtZTU2Yy00ZDg3LWJkNzUtNjU0ZGQ2NDQyY2U0 LzEvSXlXZG83R3pqS0NUbjBrUHVRUV96WW5QMEdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFTe2AMA0E AgACMAcDBQAqCkCAMA0GCSqGSIb3DQEBCwUAA4IBAQBuqxo0j+fwurRqk4KeZXQB jEyab2Jt34R82De34HXjGMLy8bLHT0cBhxRfizvqu9QXcPWfS8UN4osNHdJCjvJx xhcgtJHy4qwbQdQd6m33o8a/tC9Wn1uN8AkuPuDHyXYWG7GTNRyyFOzNI4DM/gc8 jzCD1KKarCqBJ7OkyE0pF2P5DQtGFFnMdNzTH5Do8ry2Mf/TFN3leC4rPH5lMlH9 yey2Hfiy2hqEw8XsOu7PYPnQ2zsryA/q1U2sJPBbwOP/Xh8rHsBtASdJfpvAc75Q CGJ4q9Er00HEb2d/V7uG0f5APrqE00Y24bDAi9sbNApbOJagaE/+aiyW9smgM718 -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:50 2026 by rpki-client