This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/IDF_CX1QyCE2EuWoKLUiT_JMGfg.roa File: IDF_CX1QyCE2EuWoKLUiT_JMGfg.roa (raw, json) Hash identifier: 0eBaEgdSTeeRpyxqCaR5FX1cdFybBW7OVNAteT9Raoc= Subject key identifier: 20:31:7F:09:7D:50:C8:21:36:12:E5:A8:28:B5:22:4F:F2:4C:19:F8 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758F77C1DD2EC01E5859E4B34F60E36 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/IDF_CX1QyCE2EuWoKLUiT_JMGfg.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51769 IP address blocks: 77.65.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f7:7c:1d:d2:ec:01:e5:85:9e:4b:34:f6:0e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20317f097d50c8213612e5a828b5224ff24c19f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a2:d2:14:81:35:a8:b2:8a:d9:ec:c5:5a:74: b9:51:00:5d:57:a3:ce:f5:59:1c:61:0b:a6:a2:c2: 0f:d1:32:cf:ff:d7:b7:7d:9e:bd:ce:54:53:ae:05: 6f:0e:b4:bd:8e:a0:d6:3f:09:c6:51:2d:f1:29:f4: c1:37:98:07:1d:e0:3f:4f:e0:10:15:7a:ce:92:09: b1:52:bd:77:07:68:b7:c1:1b:47:9e:36:e9:7e:50: a1:d8:d2:96:0c:66:67:fe:e7:08:bd:4c:db:be:51: 3b:ca:aa:5f:4d:df:d9:73:09:93:20:34:52:b1:33: 26:c9:02:81:c5:e7:39:0c:ef:6f:bd:22:bd:29:42: 46:5b:74:c2:a8:dc:b2:3a:9d:ae:d1:b8:91:f7:69: 71:5c:66:65:4f:6e:3f:b2:03:fc:38:e1:8d:1b:2f: 2f:cf:c0:3a:d8:47:60:87:4c:72:35:fd:2e:ab:56: 6d:37:88:21:62:63:e3:0a:64:a1:28:e5:4b:a2:a8: 18:42:d3:e3:4a:be:f9:ac:a3:a8:a8:1a:a6:62:73: 0e:b6:56:b9:dd:ee:b7:7f:63:9a:c2:0c:8e:3f:fe: 82:dc:ca:b0:47:95:f9:90:89:0c:63:95:a4:bb:2f: 33:20:c0:b0:9f:14:23:da:41:64:36:ce:b1:58:22: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:31:7F:09:7D:50:C8:21:36:12:E5:A8:28:B5:22:4F:F2:4C:19:F8 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/IDF_CX1QyCE2EuWoKLUiT_JMGfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.65.190.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:68:ec:c6:20:79:ce:57:cf:cc:5b:76:a5:06:87:1f:f6:57: 26:40:25:0c:39:d4:9f:0b:9b:49:a9:64:6b:e1:67:96:62:fa: aa:45:95:a1:19:86:ee:fd:ca:b3:96:ac:b0:24:59:b0:2f:b9: 8f:cd:05:79:63:0f:e4:b1:5c:68:e1:b4:61:ad:0c:98:80:dd: c9:72:11:79:44:de:bd:59:c4:25:51:b1:fb:87:0a:aa:b4:0b: 33:0c:2d:d5:9c:b5:71:64:57:9f:f3:aa:d3:89:fa:12:3c:fd: dd:e3:30:4c:83:5c:9a:da:06:09:00:47:6f:2c:72:9a:47:0d: 7c:d9:a9:9a:1a:53:83:3e:11:2c:85:35:b1:3e:8a:82:93:ad: 42:2c:e6:aa:6f:69:83:df:c5:7f:a4:b8:01:b3:3a:6e:26:98: 95:c4:ff:07:d7:6e:7d:72:3e:6d:22:ac:dc:7f:71:3e:b9:5b: f4:ea:29:d1:2c:b8:76:17:cd:c3:49:15:32:c3:f3:5e:b9:84: 32:84:4c:4e:9e:9b:00:2a:40:7e:0f:5e:a4:2f:5b:4c:d5:4e: 5f:52:a1:fa:62:be:03:ce:72:ee:c9:8b:05:5c:80:1d:03:63: bf:7f:75:7e:9d:49:08:31:9f:84:54:d9:70:b5:c1:10:7e:bd: 07:34:c9:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPd8HdLsAeWFnks09g42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDMxN2YwOTdkNTBjODIxMzYxMmU1YTgyOGI1MjI0ZmYyNGMxOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaLSFIE1qLKK2ezFWnS5UQBdV6PO 9VkcYQumosIP0TLP/9e3fZ69zlRTrgVvDrS9jqDWPwnGUS3xKfTBN5gHHeA/T+AQ FXrOkgmxUr13B2i3wRtHnjbpflCh2NKWDGZn/ucIvUzbvlE7yqpfTd/ZcwmTIDRS sTMmyQKBxec5DO9vvSK9KUJGW3TCqNyyOp2u0biR92lxXGZlT24/sgP8OOGNGy8v z8A62Edgh0xyNf0uq1ZtN4ghYmPjCmShKOVLoqgYQtPjSr75rKOoqBqmYnMOtla5 3e63f2OawgyOP/6C3MqwR5X5kIkMY5Wkuy8zIMCwnxQj2kFkNs6xWCKNkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAxfwl9UMghNhLlqCi1Ik/yTBn4MB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvSURGX0NYMVF5Q0UyRXVXb0tMVWlUX0pNR2ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTUG+MA0G CSqGSIb3DQEBCwUAA4IBAQBPaOzGIHnOV8/MW3alBocf9lcmQCUMOdSfC5tJqWRr 4WeWYvqqRZWhGYbu/cqzlqywJFmwL7mPzQV5Yw/ksVxo4bRhrQyYgN3JchF5RN69 WcQlUbH7hwqqtAszDC3VnLVxZFef86rTifoSPP3d4zBMg1ya2gYJAEdvLHKaRw18 2amaGlODPhEshTWxPoqCk61CLOaqb2mD38V/pLgBszpuJpiVxP8H1259cj5tIqzc f3E+uVv06inRLLh2F83DSRUyw/NeuYQyhExOnpsAKkB+D16kL1tM1U5fUqH6Yr4D znLuyYsFXIAdA2O/f3V+nUkIMZ+EVNlwtcEQfr0HNMmw -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:13 2026 by rpki-client