This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Pm1x97bW5_9zMwEqlnMBnW0pzvk.roa File: Pm1x97bW5_9zMwEqlnMBnW0pzvk.roa (raw, json) Hash identifier: 9qleDiBGGhOmq2jXD2rYDllruPlHLt6O9NFgqXQmLoM= Subject key identifier: 3E:6D:71:F7:B6:D6:E7:FF:73:33:01:2A:96:73:01:9D:6D:29:CE:F9 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B3428035BA1464B347117B8C2300 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Pm1x97bW5_9zMwEqlnMBnW0pzvk.roa Signing time: Fri 02 Jan 2026 14:20:21 +0000 ROA not before: Fri 02 Jan 2026 14:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49699 IP address blocks: 77.77.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b3:42:80:35:ba:14:64:b3:47:11:7b:8c:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e6d71f7b6d6e7ff7333012a9673019d6d29cef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:40:fa:49:aa:1d:ac:af:a6:be:f3:a2:a6:e7: b5:b9:23:6c:51:82:79:cd:0f:88:8a:e5:d9:40:fc: 72:05:4e:09:e9:81:9c:87:c3:bf:ee:d9:eb:fd:34: 3f:77:c3:8f:6f:a4:84:b1:db:83:8c:53:4e:81:5c: c7:a9:d4:8a:db:10:85:53:fc:a6:b8:c3:4f:fb:79: ac:cb:5a:a5:a2:97:c3:bf:cc:08:52:51:78:aa:c2: 91:88:1b:68:44:e5:d4:83:7f:8a:85:02:48:75:30: b6:c9:ee:a3:6a:1a:86:62:eb:13:97:f3:d6:0c:2f: 4e:c5:13:59:e1:10:c5:f0:a4:cd:73:ae:5a:b5:98: a1:e1:4c:65:67:a7:cf:98:84:7e:29:da:73:3a:c3: 88:6d:b4:02:c9:ab:29:04:4a:21:a7:62:eb:47:7c: 12:8b:8c:d7:19:42:86:e1:ca:b2:e3:f1:6c:37:dc: 7c:2f:a5:12:5e:dc:7a:65:b0:2a:98:4c:16:ec:f1: 68:bc:9c:4d:93:dd:59:ed:a7:87:25:11:37:68:fa: 0c:c1:9d:b3:1d:2a:6f:89:ca:16:ae:23:22:46:bc: 3f:8c:5a:be:01:e7:19:a4:86:e5:0e:fa:e6:5c:c1: 98:f7:26:48:6b:5d:24:5e:70:b9:a6:19:89:ca:6e: 27:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6D:71:F7:B6:D6:E7:FF:73:33:01:2A:96:73:01:9D:6D:29:CE:F9 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Pm1x97bW5_9zMwEqlnMBnW0pzvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.77.148.0/22 Signature Algorithm: sha256WithRSAEncryption b0:04:f1:33:cb:9f:f1:8d:7b:a8:c1:60:d5:ff:91:20:fa:91: c6:73:47:18:c1:27:95:8a:f2:9f:2f:98:59:e2:0c:f0:8d:40: 6d:2d:ee:64:8e:77:21:ae:da:7e:ea:9b:d3:9e:6b:9a:36:ba: 33:4b:8c:2e:4f:0c:75:e8:b5:e8:cd:28:2c:f8:a4:62:62:84: 90:da:37:f0:d3:39:1e:0a:e9:01:5b:d4:c9:07:a2:70:82:03: 77:62:4b:08:54:be:cf:33:09:df:d1:4c:2e:35:fb:b9:b5:0c: 60:6d:7a:94:37:0f:d2:6c:65:59:44:52:37:ff:ec:2e:24:1a: d8:ef:cc:65:61:fd:74:af:94:cd:ec:c7:3f:47:31:21:f6:b9: 7a:75:4a:95:94:14:ab:3b:3e:66:29:6f:90:5e:5a:04:82:a0: 51:28:2c:d9:1d:64:3b:fb:f4:d4:94:c2:ee:cb:fc:7d:dd:73: 4e:b1:97:1b:e3:5b:07:59:bf:0c:5c:69:6b:12:69:b0:19:aa: f8:5a:4f:45:d8:8b:5d:cf:3a:86:5a:a7:72:e5:16:d5:f0:01: fe:86:84:e3:cf:b1:a7:05:92:d4:7b:ae:de:19:f3:6c:45:43: 36:bd:83:54:5b:e6:3f:68:b9:a0:a8:a8:a3:b7:03:e0:4f:c3: 1b:39:db:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FLNCgDW6FGSzRxF7jCMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTZkNzFmN2I2ZDZlN2ZmNzMzMzAxMmE5NjczMDE5ZDZkMjljZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UD6SaodrK+mvvOipue1uSNsUYJ5 zQ+IiuXZQPxyBU4J6YGch8O/7tnr/TQ/d8OPb6SEsduDjFNOgVzHqdSK2xCFU/ym uMNP+3msy1qlopfDv8wIUlF4qsKRiBtoROXUg3+KhQJIdTC2ye6jahqGYusTl/PW DC9OxRNZ4RDF8KTNc65atZih4UxlZ6fPmIR+KdpzOsOIbbQCyaspBEohp2LrR3wS i4zXGUKG4cqy4/FsN9x8L6USXtx6ZbAqmEwW7PFovJxNk91Z7aeHJRE3aPoMwZ2z HSpvicoWriMiRrw/jFq+AecZpIblDvrmXMGY9yZIa10kXnC5phmJym4nvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD5tcfe21uf/czMBKpZzAZ1tKc75MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvUG0xeDk3Ylc1Xzl6TXdFcWxuTUJuVzBwenZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTU2UMA0G CSqGSIb3DQEBCwUAA4IBAQCwBPEzy5/xjXuowWDV/5Eg+pHGc0cYwSeVivKfL5hZ 4gzwjUBtLe5kjnchrtp+6pvTnmuaNrozS4wuTwx16LXozSgs+KRiYoSQ2jfw0zke CukBW9TJB6JwggN3YksIVL7PMwnf0UwuNfu5tQxgbXqUNw/SbGVZRFI3/+wuJBrY 78xlYf10r5TN7Mc/RzEh9rl6dUqVlBSrOz5mKW+QXloEgqBRKCzZHWQ7+/TUlMLu y/x93XNOsZcb41sHWb8MXGlrEmmwGar4Wk9F2ItdzzqGWqdy5RbV8AH+hoTjz7Gn BZLUe67eGfNsRUM2vYNUW+Y/aLmgqKijtwPgT8MbOduX -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:26 2026 by rpki-client