This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Ww8aZKLWkRI-x7Ohy3Fcnsi1ul0.roa File: Ww8aZKLWkRI-x7Ohy3Fcnsi1ul0.roa (raw, json) Hash identifier: gAJjrD9GXwohxnEc9Aq6e20wP3VX82F+EosQHqw0XhM= Subject key identifier: 5B:0F:1A:64:A2:D6:91:12:3E:C7:B3:A1:CB:71:5C:9E:C8:B5:BA:5D Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758FBB2031234436F8D7560C0F01C6D Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Ww8aZKLWkRI-x7Ohy3Fcnsi1ul0.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198408 IP address blocks: 77.65.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fb:b2:03:12:34:43:6f:8d:75:60:c0:f0:1c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b0f1a64a2d691123ec7b3a1cb715c9ec8b5ba5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:03:79:df:ca:4a:74:54:c8:d3:80:24:d4:fe: 9e:57:94:95:64:35:78:23:6b:97:39:1a:22:ab:58: 0d:fc:62:63:5f:06:f8:21:dc:e4:a2:71:80:95:30: de:54:12:cc:08:30:83:bf:99:36:dd:76:60:64:f4: 64:9b:25:2a:2a:9c:00:c8:2c:d9:7f:6f:08:53:4a: 78:57:64:c1:54:9d:6b:8f:41:f9:52:c3:79:33:93: 25:ee:83:b3:e7:47:bf:77:ae:35:cc:b1:69:e4:37: b0:4c:6e:2b:bb:e9:ab:7c:be:6f:06:c7:f8:a5:fa: f5:68:00:6e:b0:99:a2:b4:d3:b2:a3:87:f1:6c:7e: 23:76:d7:80:37:e4:7e:6c:1c:f0:d2:a1:3c:ca:53: 61:b7:1a:21:86:fa:ff:b6:89:5f:99:8b:43:67:cd: 18:c2:d6:9e:3b:ec:59:31:10:b5:52:d4:3f:4f:ee: 33:de:fc:95:61:00:63:2f:5a:3b:20:93:78:f6:88: 0d:b4:a1:33:31:e4:b3:4b:62:96:f1:48:cf:4b:fa: cd:0b:8d:0b:a9:27:67:02:64:64:63:b7:75:fb:c6: fa:c9:c6:f6:53:89:a5:09:6d:c2:a1:2f:81:94:41: fc:01:df:2c:37:3a:8b:5b:0e:ea:b0:d3:da:87:2f: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0F:1A:64:A2:D6:91:12:3E:C7:B3:A1:CB:71:5C:9E:C8:B5:BA:5D X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Ww8aZKLWkRI-x7Ohy3Fcnsi1ul0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.65.189.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:1d:21:a8:98:1a:f4:70:ba:89:e0:5c:aa:53:23:d5:44:02: e6:03:ae:d7:1b:5f:2b:da:37:bb:60:71:a1:8c:7c:2b:3e:a7: 56:27:61:f3:bb:0e:9c:c9:55:d1:d1:bd:15:6f:58:32:92:a1: 0f:9c:f2:f7:95:0e:ae:65:43:40:fd:32:1c:06:e2:15:1e:47: f3:71:df:c1:39:9a:f6:3a:fd:b2:ee:e6:f9:f2:a8:5b:f2:18: 82:7e:b5:59:fc:a2:0b:5f:f0:66:51:d4:2c:24:81:95:c7:15: 57:ae:60:3c:3a:31:de:26:34:0a:01:36:6c:41:21:86:89:f8: cb:d1:30:1d:1c:09:13:30:46:85:e3:d1:e3:d5:7c:bb:97:cd: fe:81:f0:15:ea:38:d8:a4:cc:92:db:99:f3:ea:11:5f:c7:8f: d1:9e:18:46:bb:f1:ec:52:e4:e7:4b:98:99:48:b3:a5:00:70: b8:ae:f0:be:16:38:96:08:a0:a9:fe:16:bf:6e:57:f3:2b:4c: 3b:45:a4:12:e9:eb:1a:ea:9d:66:fe:c0:fa:94:65:92:84:8d: 8c:e3:68:11:18:53:8f:2b:5d:ec:6e:48:5d:51:2f:5b:af:b8: 1a:6e:ad:38:57:66:93:1c:6f:46:48:ab:bb:96:d2:da:0e:82: 4a:05:c3:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPuyAxI0Q2+NdWDA8BxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjBmMWE2NGEyZDY5MTEyM2VjN2IzYTFjYjcxNWM5ZWM4YjViYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gN538pKdFTI04Ak1P6eV5SVZDV4 I2uXORoiq1gN/GJjXwb4IdzkonGAlTDeVBLMCDCDv5k23XZgZPRkmyUqKpwAyCzZ f28IU0p4V2TBVJ1rj0H5UsN5M5Ml7oOz50e/d641zLFp5DewTG4ru+mrfL5vBsf4 pfr1aABusJmitNOyo4fxbH4jdteAN+R+bBzw0qE8ylNhtxohhvr/tolfmYtDZ80Y wtaeO+xZMRC1UtQ/T+4z3vyVYQBjL1o7IJN49ogNtKEzMeSzS2KW8UjPS/rNC40L qSdnAmRkY7d1+8b6ycb2U4mlCW3CoS+BlEH8Ad8sNzqLWw7qsNPahy8ZiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFsPGmSi1pESPsezoctxXJ7ItbpdMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvV3c4YVpLTFdrUkkteDdPaHkzRmNuc2kxdWwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUG9MA0G CSqGSIb3DQEBCwUAA4IBAQBuHSGomBr0cLqJ4FyqUyPVRALmA67XG18r2je7YHGh jHwrPqdWJ2Hzuw6cyVXR0b0Vb1gykqEPnPL3lQ6uZUNA/TIcBuIVHkfzcd/BOZr2 Ov2y7ub58qhb8hiCfrVZ/KILX/BmUdQsJIGVxxVXrmA8OjHeJjQKATZsQSGGifjL 0TAdHAkTMEaF49Hj1Xy7l83+gfAV6jjYpMyS25nz6hFfx4/RnhhGu/HsUuTnS5iZ SLOlAHC4rvC+FjiWCKCp/ha/blfzK0w7RaQS6esa6p1m/sD6lGWShI2M42gRGFOP K13sbkhdUS9br7gabq04V2aTHG9GSKu7ltLaDoJKBcP9 -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:15 2026 by rpki-client