This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/lIpHzg71RT-PeirVKV9nCNiMi9Y.roa File: lIpHzg71RT-PeirVKV9nCNiMi9Y.roa (raw, json) Hash identifier: 6MLGxVsia1uyKZ8DPBhY1eefvKRrjqkRw/2EjWi5Yj8= Subject key identifier: 94:8A:47:CE:0E:F5:45:3F:8F:7A:2A:D5:29:5F:67:08:D8:8C:8B:D6 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B775918A714997C9E51C1B775B3590CC0 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/lIpHzg71RT-PeirVKV9nCNiMi9Y.roa Signing time: Thu 01 Jan 2026 02:18:06 +0000 ROA not before: Thu 01 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213144 IP address blocks: 77.65.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:18:a7:14:99:7c:9e:51:c1:b7:75:b3:59:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=948a47ce0ef5453f8f7a2ad5295f6708d88c8bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a8:35:6a:49:f4:8e:6f:26:cf:1d:0f:2b:bb: 94:08:f4:68:63:36:95:e5:ca:14:65:ac:7e:d0:21: 75:3d:29:6c:24:d7:19:e5:81:63:91:51:7f:73:e9: db:37:6e:63:56:5c:8b:db:6c:98:9b:53:54:d9:b3: 6c:3c:46:41:b7:cd:40:31:53:b6:23:66:23:2e:31: fd:13:d3:60:40:11:1f:09:ef:2a:f2:30:a3:74:a8: 2f:21:53:88:5a:46:ae:52:52:95:5a:0c:5b:80:77: 99:1c:31:b3:2e:38:52:66:54:80:91:5b:7b:af:a5: f2:7d:bb:aa:c7:2d:54:91:98:e5:89:8c:9f:66:c4: f8:70:d4:67:f2:90:b6:80:b5:42:94:9c:61:ab:15: 32:96:58:c9:eb:49:0b:b2:80:4e:4a:97:03:6a:e1: 74:60:ce:c9:de:cc:ed:1b:66:6f:16:83:87:eb:c8: 33:0b:04:a9:b8:77:78:57:0f:98:f9:3c:e6:f6:7d: 4c:8d:b7:46:ab:2b:16:a3:02:ec:b9:e4:26:75:45: fc:4c:3b:0f:04:91:d3:6e:b4:46:0b:5d:a3:a6:77: 74:88:0a:a1:31:ed:91:34:58:fa:0a:eb:74:f4:3d: dc:db:f2:55:21:f5:12:68:93:ef:b9:0d:61:df:df: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:8A:47:CE:0E:F5:45:3F:8F:7A:2A:D5:29:5F:67:08:D8:8C:8B:D6 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/lIpHzg71RT-PeirVKV9nCNiMi9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.65.154.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:d5:d9:57:9d:f5:5a:b8:9b:0a:5a:de:40:08:dc:85:9e:55: 7f:20:b7:9f:ad:32:d0:70:ba:ba:fa:50:78:18:13:64:4a:1e: a5:06:7c:b7:43:56:60:d2:1f:f7:54:96:2e:71:3a:f9:09:6f: 44:d4:ac:09:6a:e3:f0:91:de:1b:b2:1d:a9:e7:cf:79:d1:75: d1:c4:ff:da:ee:55:19:a9:3a:38:c1:17:a6:d5:29:54:0d:a6: e3:0c:c6:e3:b9:eb:52:7b:04:5c:1b:69:02:80:74:72:d5:d4: 00:67:56:e4:70:fa:ab:2a:a8:fe:a0:6e:29:a0:d1:31:a7:ad: b4:ec:85:f4:11:d0:99:96:e4:4c:cf:1c:da:3c:7b:07:16:e0: 3f:e8:65:75:68:74:00:0f:9c:74:9b:17:ae:56:45:e2:1d:f4: 4a:2d:ca:ca:a6:e7:cf:0e:44:7c:38:13:a3:b4:69:d7:60:62: c5:46:a9:e0:ab:e9:8e:72:90:70:40:71:2c:08:8c:5d:e5:f2: 48:eb:10:b3:17:80:17:8e:c6:bb:7f:d0:99:49:c6:2b:61:6b: eb:43:e0:37:eb:35:e3:b4:28:3c:7e:40:aa:08:ff:a9:f0:45: 06:f7:6c:b8:2a:7c:79:e5:2d:f5:fc:27:74:3c:69:36:a7:2c: a7:55:6d:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRinFJl8nlHBt3WzWQzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDhhNDdjZTBlZjU0NTNmOGY3YTJhZDUyOTVmNjcwOGQ4OGM4YmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkag1akn0jm8mzx0PK7uUCPRoYzaV 5coUZax+0CF1PSlsJNcZ5YFjkVF/c+nbN25jVlyL22yYm1NU2bNsPEZBt81AMVO2 I2YjLjH9E9NgQBEfCe8q8jCjdKgvIVOIWkauUlKVWgxbgHeZHDGzLjhSZlSAkVt7 r6Xyfbuqxy1UkZjliYyfZsT4cNRn8pC2gLVClJxhqxUylljJ60kLsoBOSpcDauF0 YM7J3sztG2ZvFoOH68gzCwSpuHd4Vw+Y+Tzm9n1MjbdGqysWowLsueQmdUX8TDsP BJHTbrRGC12jpnd0iAqhMe2RNFj6Cut09D3c2/JVIfUSaJPvuQ1h39//nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSKR84O9UU/j3oq1SlfZwjYjIvWMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvbElwSHpnNzFSVC1QZWlyVktWOW5DTmlNaTlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUGaMA0G CSqGSIb3DQEBCwUAA4IBAQAc1dlXnfVauJsKWt5ACNyFnlV/ILefrTLQcLq6+lB4 GBNkSh6lBny3Q1Zg0h/3VJYucTr5CW9E1KwJauPwkd4bsh2p58950XXRxP/a7lUZ qTo4wRem1SlUDabjDMbjuetSewRcG2kCgHRy1dQAZ1bkcPqrKqj+oG4poNExp620 7IX0EdCZluRMzxzaPHsHFuA/6GV1aHQAD5x0mxeuVkXiHfRKLcrKpufPDkR8OBOj tGnXYGLFRqngq+mOcpBwQHEsCIxd5fJI6xCzF4AXjsa7f9CZScYrYWvrQ+A36zXj tCg8fkCqCP+p8EUG92y4Knx55S31/Cd0PGk2pyynVW2N -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:43 2026 by rpki-client