This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-WyKcpgB6MLkTzlSne5QdUSGXVo.roa File: 1-WyKcpgB6MLkTzlSne5QdUSGXVo.roa (raw, json) Hash identifier: i3nU05TlrEtx7ECJKVx9PpFRr4+SbiL7F7+73XzscTs= Subject key identifier: F9:6C:8A:72:98:01:E8:C2:E4:4F:39:52:9D:EE:50:75:44:86:5D:5A Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758F4E508D7B93ADC6E74A7C07BC476 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-WyKcpgB6MLkTzlSne5QdUSGXVo.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42503 IP address blocks: 77.65.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f4:e5:08:d7:b9:3a:dc:6e:74:a7:c0:7b:c4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f96c8a729801e8c2e44f39529dee507544865d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fa:91:be:63:f1:17:a1:be:6f:21:7a:9c:67: b7:e2:6e:60:8e:4b:e8:97:d5:4b:3d:d3:8c:f8:a8: 89:7f:bb:82:90:9b:e6:91:8e:b2:28:05:e7:9c:6a: 79:f7:00:b2:cf:ef:db:b5:42:f4:03:1f:a3:7a:70: 4a:cb:9f:cd:71:a9:d9:ad:65:7e:6b:fd:dc:d5:44: dc:18:67:b0:9b:ea:a9:14:bb:7d:d9:03:d6:98:38: 33:1f:2e:a2:1b:49:25:17:2a:35:8d:d5:7a:8d:1d: e4:e1:a1:f2:36:06:2c:a1:9a:36:71:33:b2:45:c3: 4d:f2:e8:a6:b3:8d:fe:67:af:ca:15:ed:a5:ea:78: 42:30:8a:d1:83:53:f1:1a:2c:31:bd:e3:77:36:a1: 3e:a6:09:a6:23:4f:c0:40:83:8c:c4:22:44:0f:90: 65:3a:89:e5:e1:72:36:54:29:36:3e:f1:57:27:b8: 05:17:2d:fe:bb:19:07:e6:5a:3b:49:d6:03:ea:83: f5:a5:4e:6f:cb:36:dd:c5:df:d9:85:32:ff:a7:03: e1:59:3e:c9:29:c3:f5:d7:4e:fa:83:1c:07:10:8c: 9a:ef:07:df:c9:94:4b:ef:e8:8a:4d:43:2b:d2:79: 0b:6c:86:07:10:7a:f3:b7:ee:0e:c7:4d:2d:a4:3b: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6C:8A:72:98:01:E8:C2:E4:4F:39:52:9D:EE:50:75:44:86:5D:5A X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/1-WyKcpgB6MLkTzlSne5QdUSGXVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.65.204.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:5e:58:3a:6d:74:01:fc:0c:c9:cc:ca:7a:61:fd:e3:6a:25: 3b:4c:b5:fe:42:16:a5:cb:77:34:69:5e:bc:8d:0e:dd:d4:81: 6b:cd:c4:bd:f8:22:7c:be:98:ef:1c:07:61:f7:b6:92:0f:24: c9:55:83:97:06:72:f2:a8:a1:92:16:0d:70:62:3b:4a:3a:37: 8b:dd:2e:18:84:d2:87:b5:e3:66:a5:67:f9:a0:a8:22:4c:b9: 2d:a5:e7:79:6e:1f:81:00:f2:64:95:30:f9:19:f7:cd:ad:04: 76:68:23:f0:14:d1:f7:38:af:ee:ea:dc:a3:e8:66:7a:a4:84: 86:60:ce:fe:34:42:c5:96:d4:cc:91:07:ea:f6:1b:72:3f:d6: bc:bc:59:dd:c9:08:33:29:25:5e:f8:02:ca:37:5b:5e:14:ed: ab:e6:bf:65:e6:24:ef:9a:6c:68:38:06:00:61:43:07:ac:0f: be:1e:cb:0a:b0:7d:7d:81:80:a4:b5:3c:2d:6b:12:51:ed:05: 57:92:4b:e4:64:a7:e4:5c:08:2e:7d:50:7c:73:88:fe:a6:a7: a1:dd:3f:05:08:93:95:ff:4e:1a:97:3b:1b:3e:51:b9:81:4f: ed:28:81:7e:87:4e:e6:e5:6f:5b:e7:c5:06:5d:fa:ad:83:d7: 32:69:bb:e2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3WPTlCNe5OtxudKfAe8R2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTZjOGE3Mjk4MDFlOGMyZTQ0ZjM5NTI5ZGVlNTA3NTQ0ODY1ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvqRvmPxF6G+byF6nGe34m5gjkvo l9VLPdOM+KiJf7uCkJvmkY6yKAXnnGp59wCyz+/btUL0Ax+jenBKy5/NcanZrWV+ a/3c1UTcGGewm+qpFLt92QPWmDgzHy6iG0klFyo1jdV6jR3k4aHyNgYsoZo2cTOy RcNN8uims43+Z6/KFe2l6nhCMIrRg1PxGiwxveN3NqE+pgmmI0/AQIOMxCJED5Bl Oonl4XI2VCk2PvFXJ7gFFy3+uxkH5lo7SdYD6oP1pU5vyzbdxd/ZhTL/pwPhWT7J KcP11076gxwHEIya7wffyZRL7+iKTUMr0nkLbIYHEHrzt+4Ox00tpDvjhQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlsinKYAejC5E85Up3uUHVEhl1aMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvMS1XeUtjcGdCNk1Ma1R6bFNuZTVRZFVTR1hWby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0 Ny8xL3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1BzDAN BgkqhkiG9w0BAQsFAAOCAQEAOl5YOm10AfwMyczKemH942olO0y1/kIWpct3NGle vI0O3dSBa83EvfgifL6Y7xwHYfe2kg8kyVWDlwZy8qihkhYNcGI7Sjo3i90uGITS h7XjZqVn+aCoIky5LaXneW4fgQDyZJUw+Rn3za0Edmgj8BTR9ziv7urco+hmeqSE hmDO/jRCxZbUzJEH6vYbcj/WvLxZ3ckIMyklXvgCyjdbXhTtq+a/ZeYk75psaDgG AGFDB6wPvh7LCrB9fYGApLU8LWsSUe0FV5JL5GSn5FwILn1QfHOI/qanod0/BQiT lf9OGpc7Gz5RuYFP7SiBfodO5uVvW+fFBl36rYPXMmm74g== -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:00 2026 by rpki-client