This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/lYzSKqCVCluyzh0YMnJ23vOcSrw.roa File: lYzSKqCVCluyzh0YMnJ23vOcSrw.roa (raw, json) Hash identifier: XhhSnlfR0q73ZJWnCDlOWwIWb2v29MCJSsAVMd16rUo= Subject key identifier: 95:8C:D2:2A:A0:95:0A:5B:B2:CE:1D:18:32:72:76:DE:F3:9C:4A:BC Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F8424A6F27F64F3F92F54CE7161BF5B Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/lYzSKqCVCluyzh0YMnJ23vOcSrw.roa Signing time: Fri 02 Jan 2026 16:22:05 +0000 ROA not before: Fri 02 Jan 2026 16:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205191 IP address blocks: 77.224.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:24:a6:f2:7f:64:f3:f9:2f:54:ce:71:61:bf:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=958cd22aa0950a5bb2ce1d18327276def39c4abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f3:c1:c6:e7:89:20:9d:ac:67:6a:c8:c1:d9: 88:1c:03:b3:ca:8d:9f:6c:da:0a:94:3f:29:89:94: 1e:8a:ba:a0:da:7d:c2:17:5c:c1:1a:25:87:1a:2a: bf:c5:ef:91:74:b9:56:2f:bf:c6:d5:dc:53:24:a6: 01:32:27:0b:63:c2:39:17:78:ec:94:f0:b7:04:a0: 57:09:75:36:12:cf:41:20:de:9f:0d:0e:f2:da:ed: e1:5e:f0:a5:d6:5e:cb:da:b6:32:b5:e6:2e:03:83: 74:87:3b:0d:1e:ac:8e:fd:5f:ee:49:0b:74:29:03: 21:3b:a0:1c:6d:58:bb:7a:fb:59:5a:92:03:73:bf: dd:6c:44:ed:8a:c2:8f:93:c8:8a:d2:42:d4:c4:63: 5f:01:92:65:e8:74:7d:09:34:0f:0d:26:90:a5:51: 55:8a:bd:72:95:0b:8c:03:a9:d1:99:04:33:26:dc: 3e:4d:49:11:98:43:b0:53:91:6a:a6:c5:51:c3:83: f3:18:d5:eb:8d:75:b3:40:08:15:f2:3a:b9:3b:42: 8c:24:09:a4:6b:a2:b1:af:88:cd:77:0b:88:88:ea: cb:62:ea:1b:eb:1e:9e:46:94:10:69:cb:56:0a:76: f7:ff:e2:17:63:98:fd:8e:43:70:be:e1:2e:a8:20: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8C:D2:2A:A0:95:0A:5B:B2:CE:1D:18:32:72:76:DE:F3:9C:4A:BC X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/lYzSKqCVCluyzh0YMnJ23vOcSrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.224.68.0/24 Signature Algorithm: sha256WithRSAEncryption 50:02:5a:ec:e1:88:e9:88:cf:3d:6b:b7:cd:ef:4a:2c:73:0c: 67:04:43:18:ab:ab:d6:9d:87:5b:8c:b6:d0:88:c6:ec:ac:db: bc:2a:84:00:ac:ef:2d:33:33:59:72:3d:bc:18:f1:35:9c:b4: 20:69:d2:95:98:18:86:2d:76:c1:b4:37:fa:9d:15:d8:d1:96: b8:14:1e:0e:2c:87:00:1a:e2:61:3f:62:ff:e3:bd:e1:c2:58: 2c:b3:f5:20:e3:9d:9b:59:9c:03:6d:b3:bd:b1:fa:d2:bd:e3: 42:bc:72:40:2e:92:c8:1e:fc:62:32:7b:46:4b:98:ec:bf:7c: 0b:ae:e8:95:4f:1e:11:7f:88:6d:f7:72:f4:08:29:49:a8:5c: f8:0d:33:69:35:27:3e:a3:6a:23:b3:dc:22:9a:a2:b3:e1:bc: 99:eb:2f:2c:e7:07:6e:71:ff:0f:cf:30:7a:e4:58:5d:b5:18: d6:f0:a0:5a:53:8d:3c:a9:2c:09:e5:9e:d8:5f:1e:5a:c9:5f: 04:77:9a:18:d3:3a:7c:80:71:66:ab:a0:1c:40:34:39:ea:15: 33:2f:67:01:78:0a:db:56:04:6c:31:02:88:88:45:34:89:fa: d8:78:67:b9:3e:b9:14:c7:e9:ad:b4:2a:9d:86:06:2e:af:ff: e9:52:bc:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hCSm8n9k8/kvVM5xYb9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NThjZDIyYWEwOTUwYTViYjJjZTFkMTgzMjcyNzZkZWYzOWM0YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/PBxueJIJ2sZ2rIwdmIHAOzyo2f bNoKlD8piZQeirqg2n3CF1zBGiWHGiq/xe+RdLlWL7/G1dxTJKYBMicLY8I5F3js lPC3BKBXCXU2Es9BIN6fDQ7y2u3hXvCl1l7L2rYyteYuA4N0hzsNHqyO/V/uSQt0 KQMhO6AcbVi7evtZWpIDc7/dbETtisKPk8iK0kLUxGNfAZJl6HR9CTQPDSaQpVFV ir1ylQuMA6nRmQQzJtw+TUkRmEOwU5FqpsVRw4PzGNXrjXWzQAgV8jq5O0KMJAmk a6Kxr4jNdwuIiOrLYuob6x6eRpQQactWCnb3/+IXY5j9jkNwvuEuqCBjgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJWM0iqglQpbss4dGDJydt7znEq8MB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvbFl6U0txQ1ZDbHV5emgwWU1uSjIzdk9jU3J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATeBEMA0G CSqGSIb3DQEBCwUAA4IBAQBQAlrs4YjpiM89a7fN70oscwxnBEMYq6vWnYdbjLbQ iMbsrNu8KoQArO8tMzNZcj28GPE1nLQgadKVmBiGLXbBtDf6nRXY0Za4FB4OLIcA GuJhP2L/473hwlgss/Ug452bWZwDbbO9sfrSveNCvHJALpLIHvxiMntGS5jsv3wL ruiVTx4Rf4ht93L0CClJqFz4DTNpNSc+o2ojs9wimqKz4byZ6y8s5wducf8PzzB6 5FhdtRjW8KBaU408qSwJ5Z7YXx5ayV8Ed5oY0zp8gHFmq6AcQDQ56hUzL2cBeArb VgRsMQKIiEU0ifrYeGe5PrkUx+mttCqdhgYur//pUrw9 -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:17 2026 by rpki-client