This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tPXeRkFnFJYSMt4vquPDQ6jZW0I.roa File: tPXeRkFnFJYSMt4vquPDQ6jZW0I.roa (raw, json) Hash identifier: ngk7p0lEcPN58FPmqvE4YauvXmT9HaB59XGraSUy0fA= Subject key identifier: B4:F5:DE:46:41:67:14:96:12:32:DE:2F:AA:E3:C3:43:A8:D9:5B:42 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B77590E0A593D1F0CAA60EFC9D53A51A7 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tPXeRkFnFJYSMt4vquPDQ6jZW0I.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207033 IP address blocks: 77.65.171.0/24 maxlen: 24 188.114.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0e:0a:59:3d:1f:0c:aa:60:ef:c9:d5:3a:51:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4f5de46416714961232de2faae3c343a8d95b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:db:b3:0b:70:89:07:e6:ab:55:d6:b8:3a:b1: 75:bc:b1:79:7e:77:19:93:03:d5:84:79:2e:a8:d3: a4:f7:9d:5f:15:56:1a:89:e4:25:eb:0b:f0:3c:73: f5:e6:51:c3:97:26:1f:4d:00:80:b7:a7:f3:ed:5d: 74:cd:dc:2b:8a:58:50:44:2b:ae:64:8e:e5:f4:fc: 46:43:72:f2:28:ce:40:6e:62:99:9c:3d:d6:ff:02: bc:6c:f1:cf:e2:02:fd:19:84:15:89:15:71:97:53: 35:bc:c4:33:70:c6:93:0a:d0:1a:84:cd:5a:a3:b7: 10:fd:ff:d4:05:a9:f2:f5:9e:82:8d:ad:ff:e9:d6: 4f:c7:79:de:ff:b2:f3:28:9c:5a:31:93:0e:f9:a9: bf:a0:a0:31:3f:99:27:46:5a:55:10:7f:54:e3:60: ef:ff:70:e9:a8:43:30:70:2b:4b:69:ff:1e:98:22: 31:9a:ae:51:f5:91:5a:25:ba:50:c5:52:d7:09:d4: bd:a8:2a:9c:64:82:53:ee:d7:fc:ed:f7:73:0e:fe: 70:cc:b0:e8:eb:74:e3:34:ea:99:e6:84:d1:f9:b8: 5f:0e:e9:a5:1b:33:81:18:9c:e4:ef:b4:c4:c8:2c: 09:c0:00:39:80:21:35:ca:b9:ce:ab:27:18:ad:4f: 5f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F5:DE:46:41:67:14:96:12:32:DE:2F:AA:E3:C3:43:A8:D9:5B:42 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tPXeRkFnFJYSMt4vquPDQ6jZW0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.65.171.0/24 188.114.68.0/24 Signature Algorithm: sha256WithRSAEncryption 63:2e:ab:3e:4b:f9:23:2a:ad:d7:70:c3:4c:ae:ea:d5:f9:b0: c8:55:f6:5d:ef:dd:4e:1e:7b:17:47:aa:55:9c:57:f7:5b:0c: 40:a9:e1:a1:d5:3e:af:f3:ee:2d:c3:87:7b:05:97:58:ec:71: b8:0d:b6:0d:4e:91:41:41:f9:26:b2:98:04:3d:78:0c:bc:30: c5:c1:2d:c1:52:dd:43:5d:a5:a3:60:70:40:5d:76:1e:39:74: 20:f6:79:32:b4:fa:21:49:6a:2a:97:c7:34:5b:85:7c:b6:4a: be:fb:66:bb:0d:c0:e9:2a:be:23:06:6c:60:3d:af:ea:93:60: 5a:2d:bf:4d:9d:3e:88:ec:ff:68:c9:76:f9:b1:6a:f2:ad:94: b1:2e:06:f2:bb:a8:b2:50:c0:9e:ae:80:73:f7:8b:3f:36:19: d2:63:14:74:57:a1:41:2f:00:44:bb:0d:17:6c:84:d0:2e:5d: 24:48:b5:e1:bd:6c:55:4e:59:21:09:94:de:d5:56:73:65:97: d3:4e:53:93:04:b9:9b:9f:99:7e:fa:ef:36:b0:e4:82:83:ee: ab:a1:f9:14:81:8c:85:90:95:7f:54:76:84:63:bb:9e:c4:df: a5:ee:c6:9a:ab:ff:f4:72:f1:79:9d:ac:10:ac:5a:30:56:c4: 07:e8:a3:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WQ4KWT0fDKpg78nVOlGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGY1ZGU0NjQxNjcxNDk2MTIzMmRlMmZhYWUzYzM0M2E4ZDk1YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgduzC3CJB+arVda4OrF1vLF5fncZ kwPVhHkuqNOk951fFVYaieQl6wvwPHP15lHDlyYfTQCAt6fz7V10zdwrilhQRCuu ZI7l9PxGQ3LyKM5AbmKZnD3W/wK8bPHP4gL9GYQViRVxl1M1vMQzcMaTCtAahM1a o7cQ/f/UBany9Z6Cja3/6dZPx3ne/7LzKJxaMZMO+am/oKAxP5knRlpVEH9U42Dv /3DpqEMwcCtLaf8emCIxmq5R9ZFaJbpQxVLXCdS9qCqcZIJT7tf87fdzDv5wzLDo 63TjNOqZ5oTR+bhfDumlGzOBGJzk77TEyCwJwAA5gCE1yrnOqycYrU9fNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLT13kZBZxSWEjLeL6rjw0Oo2VtCMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvdFBYZVJrRm5GSllTTXQ0dnF1UERRNmpaVzBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUGrAwQA vHJEMA0GCSqGSIb3DQEBCwUAA4IBAQBjLqs+S/kjKq3XcMNMrurV+bDIVfZd791O HnsXR6pVnFf3WwxAqeGh1T6v8+4tw4d7BZdY7HG4DbYNTpFBQfkmspgEPXgMvDDF wS3BUt1DXaWjYHBAXXYeOXQg9nkytPohSWoql8c0W4V8tkq++2a7DcDpKr4jBmxg Pa/qk2BaLb9NnT6I7P9oyXb5sWryrZSxLgbyu6iyUMCeroBz94s/NhnSYxR0V6FB LwBEuw0XbITQLl0kSLXhvWxVTlkhCZTe1VZzZZfTTlOTBLmbn5l++u82sOSCg+6r ofkUgYyFkJV/VHaEY7uexN+l7saaq//0cvF5nawQrFowVsQH6KMF -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:59 2026 by rpki-client