This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/0qoPAwW3u4O3nuBTKa5PONBSOks.roa File: 0qoPAwW3u4O3nuBTKa5PONBSOks.roa (raw, json) Hash identifier: zDLIjLJ9kfaX9ORhSymbZg9RPOjO5+ciHEoVCWTh8ow= Subject key identifier: D2:AA:0F:03:05:B7:BB:83:B7:9E:E0:53:29:AE:4F:38:D0:52:3A:4B Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F84275615066021DB2E435D8521F2EC Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/0qoPAwW3u4O3nuBTKa5PONBSOks.roa Signing time: Fri 02 Jan 2026 16:22:05 +0000 ROA not before: Fri 02 Jan 2026 16:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207294 IP address blocks: 77.228.237.0/24 maxlen: 24 188.86.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:27:56:15:06:60:21:db:2e:43:5d:85:21:f2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2aa0f0305b7bb83b79ee05329ae4f38d0523a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4d:2d:a3:ab:ac:1b:ea:a5:c0:57:36:c8:c0: 47:e5:36:be:11:e7:64:24:cc:92:1c:0b:ae:05:f3: 38:92:61:c5:60:1d:95:0c:4e:50:e5:03:97:69:45: a5:20:29:66:85:6b:04:98:74:2d:dd:83:d3:35:d5: 4d:76:03:a2:7b:8a:b5:83:f3:5f:43:58:55:98:a6: 1c:2b:e8:50:47:65:d5:84:68:3a:cc:29:1e:b4:20: b6:a9:96:0d:b1:ff:ea:15:08:cf:4f:72:d3:59:5a: dd:b2:5d:cf:47:e5:c1:47:5f:13:71:0e:3c:2b:b1: 33:dd:ea:e1:82:36:35:7d:cb:c3:b8:2d:45:1b:e0: 57:12:5f:83:9e:bf:b0:f0:0c:9c:ce:25:ec:1f:b6: ab:be:de:40:66:f3:b1:52:8e:37:3f:0e:8a:62:e5: 75:e1:8b:f5:53:be:19:d7:1f:b0:ba:11:67:e1:7e: bd:8a:3b:a2:43:5a:84:04:66:64:29:00:67:d7:fb: 40:70:85:0b:db:1b:40:33:18:c8:17:57:5b:cf:77: a7:ee:c0:8c:dc:b5:fb:e4:5c:3d:e2:95:c8:a4:97: d4:0c:7b:83:fa:dc:b0:38:5a:ce:bc:2f:d9:57:ce: bd:54:4c:36:de:8c:79:9c:c5:27:0a:59:1b:07:4c: bd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:0F:03:05:B7:BB:83:B7:9E:E0:53:29:AE:4F:38:D0:52:3A:4B X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/0qoPAwW3u4O3nuBTKa5PONBSOks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.228.237.0/24 188.86.29.0/24 Signature Algorithm: sha256WithRSAEncryption a6:a2:a8:6c:01:0e:ec:cd:fa:9e:02:d5:b8:59:13:82:87:85: d3:cc:e2:7f:d7:37:2e:74:2e:22:20:69:87:98:f1:71:2c:17: 89:df:a7:2f:92:54:dc:5b:02:99:53:de:4c:75:6f:fe:21:eb: 28:77:23:eb:aa:09:36:8c:5e:8e:b8:64:d6:e2:39:99:e4:23: bb:84:24:de:76:c4:ce:af:cb:3f:b6:ef:aa:cb:18:20:a8:4a: f0:cd:f2:0f:72:e3:e3:02:70:55:3f:f6:ea:d1:a9:7e:21:9f: 2f:a7:df:fd:f4:fd:be:70:dd:13:ec:8b:c1:bc:ca:7c:bb:6f: 31:f8:41:c3:66:37:36:f9:d8:4c:13:06:c4:24:b1:8b:2a:92: 48:d3:ae:f1:86:be:94:43:05:7b:9a:1f:ba:03:ad:a0:4b:b9: 51:05:cd:f5:67:6b:53:60:fa:21:cc:64:fb:9e:21:9e:a7:ee: f2:35:8b:27:b5:6b:4f:10:59:ac:da:c2:7b:17:94:d8:c6:91: e1:68:2c:59:84:f7:5b:bc:c7:79:96:49:ee:62:23:98:7a:0a: e3:de:df:f1:00:5a:83:db:bf:aa:66:84:b3:49:3a:a2:e8:4c: df:1a:7a:4f:12:72:f9:4f:51:e2:f7:2b:7b:ee:56:a1:1b:d7: ee:c8:0e:d6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hCdWFQZgIdsuQ12FIfLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmFhMGYwMzA1YjdiYjgzYjc5ZWUwNTMyOWFlNGYzOGQwNTIzYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA200to6usG+qlwFc2yMBH5Ta+Eedk JMySHAuuBfM4kmHFYB2VDE5Q5QOXaUWlIClmhWsEmHQt3YPTNdVNdgOie4q1g/Nf Q1hVmKYcK+hQR2XVhGg6zCketCC2qZYNsf/qFQjPT3LTWVrdsl3PR+XBR18TcQ48 K7Ez3erhgjY1fcvDuC1FG+BXEl+Dnr+w8AycziXsH7arvt5AZvOxUo43Pw6KYuV1 4Yv1U74Z1x+wuhFn4X69ijuiQ1qEBGZkKQBn1/tAcIUL2xtAMxjIF1dbz3en7sCM 3LX75Fw94pXIpJfUDHuD+tywOFrOvC/ZV869VEw23ox5nMUnClkbB0y9NwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNKqDwMFt7uDt57gUymuTzjQUjpLMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvMHFvUEF3VzN1NE8zbnVCVEthNVBPTkJTT2tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATeTtAwQA vFYdMA0GCSqGSIb3DQEBCwUAA4IBAQCmoqhsAQ7szfqeAtW4WROCh4XTzOJ/1zcu dC4iIGmHmPFxLBeJ36cvklTcWwKZU95MdW/+IesodyPrqgk2jF6OuGTW4jmZ5CO7 hCTedsTOr8s/tu+qyxggqErwzfIPcuPjAnBVP/bq0al+IZ8vp9/99P2+cN0T7IvB vMp8u28x+EHDZjc2+dhMEwbEJLGLKpJI067xhr6UQwV7mh+6A62gS7lRBc31Z2tT YPohzGT7niGep+7yNYsntWtPEFms2sJ7F5TYxpHhaCxZhPdbvMd5lknuYiOYegrj 3t/xAFqD27+qZoSzSTqi6EzfGnpPEnL5T1Hi9yt77lahG9fuyA7W -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:16 2026 by rpki-client