This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa File: a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa (raw, json) Hash identifier: u2suJZ9dSTEdpIWAwFWYGCWey0B3AvIkAHlBujdVtCc= Subject key identifier: 6B:55:B3:CE:6E:9D:F9:12:D1:CC:07:02:85:F2:E4:CE:30:FA:CA:3E Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399 Certificate serial: 019B783473E10A1B9BDAC98D77BD0A43BEEC Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199702 IP address blocks: 77.77.49.0/24 maxlen: 24 88.80.127.0/24 maxlen: 24 213.149.154.0/24 maxlen: 24 213.149.156.0/24 maxlen: 24 213.149.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:73:e1:0a:1b:9b:da:c9:8d:77:bd:0a:43:be:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193743467b4da41c6295e9351153309586ba2399 Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b55b3ce6e9df912d1cc070285f2e4ce30faca3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:09:db:c0:7e:d9:f7:a2:bc:30:d9:fd:7a: 31:e2:cb:15:13:da:a9:b4:9b:1c:db:9a:28:03:6f: 96:48:f7:f6:91:2b:f0:e5:75:51:a8:7b:26:1c:2b: b7:c3:a8:cc:3d:9c:ed:f9:5f:cf:e7:19:98:f6:27: 97:b6:85:64:e0:49:c8:e7:40:23:cb:3d:13:19:d2: e3:26:62:1d:2e:2d:d1:9c:40:c3:2e:44:e4:5a:73: c4:12:ad:6e:57:32:e2:af:b6:e7:29:a8:57:11:a2: 3c:d5:3d:48:9f:f9:4a:fc:be:f3:16:87:45:00:f1: 82:97:f7:48:36:fe:fa:ea:08:1e:e6:76:e0:b7:db: b6:4c:6d:e5:9e:57:9e:72:05:1f:05:d2:07:2e:73: 65:3a:88:b7:25:1d:41:17:76:ac:f4:51:7e:a1:2e: a1:55:27:90:36:17:40:ba:63:41:21:97:65:55:b8: 69:cc:54:36:10:10:2e:f5:fa:80:3b:83:65:52:de: 6b:e8:5e:b3:1a:e3:b6:cf:a9:b5:6a:43:d2:c4:91: d7:a2:8d:8a:b7:87:d5:21:42:43:29:d8:fa:3d:7d: 7e:bd:5d:9c:c9:b6:b0:41:dc:1c:b1:62:4e:36:ac: f0:7a:7e:27:18:3f:52:34:b0:08:07:9f:84:19:ca: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:55:B3:CE:6E:9D:F9:12:D1:CC:07:02:85:F2:E4:CE:30:FA:CA:3E X509v3 Authority Key Identifier: keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/a1Wzzm6d-RLRzAcChfLkzjD6yj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.77.49.0/24 88.80.127.0/24 213.149.154.0/24 213.149.156.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:02:7e:ee:27:f4:59:3f:57:9d:e6:74:97:27:98:5b:1e:a3: d1:d3:41:82:42:54:48:ba:50:28:9c:ca:33:18:5e:eb:d8:16: 8f:bc:77:84:2c:c9:3f:b1:1f:9f:a4:19:65:56:67:27:03:d5: 3a:50:44:2c:67:ad:f2:91:13:2b:60:d1:12:cd:9e:f3:5a:19: a5:a0:e5:29:09:a9:b5:3c:89:0e:07:4c:29:5a:4c:82:c4:f9: b2:3a:6e:e4:dc:bd:ce:b4:1a:38:04:65:9f:68:86:71:c9:b2: 30:1c:2a:ac:c5:35:76:9b:d1:44:8e:3a:b5:ef:a4:d6:c2:86: 57:47:71:79:f7:ee:1c:5e:62:09:a4:91:7c:c9:ea:f9:04:53: fd:3d:69:df:97:48:a3:59:27:75:91:eb:71:68:1f:cd:06:54: 43:ef:da:36:56:77:08:31:2b:20:39:98:11:0a:a8:26:29:57: b4:c3:e6:a4:fa:50:bc:ae:83:c1:87:9d:26:af:11:ad:61:83: e5:22:c7:e6:ee:34:28:15:5b:48:e6:2f:b2:68:5b:a8:4d:d7: cd:4d:ec:10:d5:eb:c3:11:17:91:73:0b:97:76:c8:b3:77:f6: 3e:a2:a2:cd:e1:c4:07:82:c6:74:03:7c:47:84:bd:21:63:07: d8:e1:4a:fd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NHPhChub2smNd70KQ77sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Mzc0MzQ2N2I0ZGE0MWM2Mjk1ZTkzNTExNTMzMDk1ODZi YTIzOTkwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjU1YjNjZTZlOWRmOTEyZDFjYzA3MDI4NWYyZTRjZTMwZmFjYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaIJ28B+2feivDDZ/Xox4ssVE9qp tJsc25ooA2+WSPf2kSvw5XVRqHsmHCu3w6jMPZzt+V/P5xmY9ieXtoVk4EnI50Aj yz0TGdLjJmIdLi3RnEDDLkTkWnPEEq1uVzLir7bnKahXEaI81T1In/lK/L7zFodF APGCl/dINv766gge5nbgt9u2TG3lnleecgUfBdIHLnNlOoi3JR1BF3as9FF+oS6h VSeQNhdAumNBIZdlVbhpzFQ2EBAu9fqAO4NlUt5r6F6zGuO2z6m1akPSxJHXoo2K t4fVIUJDKdj6PX1+vV2cybawQdwcsWJONqzwen4nGD9SNLAIB5+EGcqXMwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGtVs85unfkS0cwHAoXy5M4w+so+MB8GA1UdIwQY MBaAFBk3Q0Z7TaQcYpXpNRFTMJWGuiOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTct Y2E1ZmNjYmY3YThjLzEvYTFXenptNmQtUkxSekFjQ2hmTGt6akQ2eWo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTctY2E1ZmNjYmY3YThj LzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATU0xAwQA WFB/AwQA1ZWaAwQB1ZWcMA0GCSqGSIb3DQEBCwUAA4IBAQCMAn7uJ/RZP1ed5nSX J5hbHqPR00GCQlRIulAonMozGF7r2BaPvHeELMk/sR+fpBllVmcnA9U6UEQsZ63y kRMrYNESzZ7zWhmloOUpCam1PIkOB0wpWkyCxPmyOm7k3L3OtBo4BGWfaIZxybIw HCqsxTV2m9FEjjq176TWwoZXR3F59+4cXmIJpJF8yer5BFP9PWnfl0ijWSd1ketx aB/NBlRD79o2VncIMSsgOZgRCqgmKVe0w+ak+lC8roPBh50mrxGtYYPlIsfm7jQo FVtI5i+yaFuoTdfNTewQ1evDEReRcwuXdsizd/Y+oqLN4cQHgsZ0A3xHhL0hYwfY 4Ur9 -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:05 2026 by rpki-client