This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/mRAbVrC4vL4GmozrjHi2i0Iaytw.roa File: mRAbVrC4vL4GmozrjHi2i0Iaytw.roa (raw, json) Hash identifier: vC24nQiiHK47q4YRBJHF/HkE+eYaEpAw6ZvG99eAnwU= Subject key identifier: 99:10:1B:56:B0:B8:BC:BE:06:9A:8C:EB:8C:78:B6:8B:42:1A:CA:DC Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Certificate serial: 019B7AC8BB2527CE2C6F73363A2AC41FB7C7 Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/mRAbVrC4vL4GmozrjHi2i0Iaytw.roa Signing time: Thu 01 Jan 2026 18:18:53 +0000 ROA not before: Thu 01 Jan 2026 18:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39931 IP address blocks: 77.245.128.0/20 maxlen: 20 77.245.136.0/22 maxlen: 22 77.245.136.0/23 maxlen: 23 77.245.140.0/22 maxlen: 22 185.172.12.0/22 maxlen: 22 2a00:4fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:bb:25:27:ce:2c:6f:73:36:3a:2a:c4:1f:b7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189 Validity Not Before: Jan 1 18:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99101b56b0b8bcbe069a8ceb8c78b68b421acadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:f2:2a:1f:64:f1:85:6a:95:18:2d:e3:07: 73:b7:ec:15:02:bb:60:e9:f8:4a:c6:71:b7:c8:5c: c1:3f:90:00:8a:b4:cf:85:4d:f5:4e:f9:db:f5:55: aa:a4:8f:98:c8:55:6d:26:c6:b8:9b:3a:3c:d3:81: c4:73:8c:d5:47:8a:46:ef:56:cf:4b:cf:c3:cf:d2: e6:9c:89:20:94:fe:22:2f:e3:d3:08:86:72:f4:83: 06:7e:0d:53:b3:85:61:55:23:c4:bf:e9:df:f2:e2: ce:59:8d:ed:ec:16:e7:4c:73:4e:07:ab:65:5d:6e: 59:91:44:e2:a3:cc:b1:89:ed:b5:bc:de:05:0b:46: e3:23:6a:29:90:05:f7:a7:6a:86:16:2b:60:a7:5d: 8f:0c:c4:a0:62:c9:c6:94:67:be:ae:34:0a:ae:2d: 5b:b2:17:2c:31:5a:43:3d:de:a9:7e:81:ba:ed:a7: cc:0a:49:3d:b3:5b:9a:01:84:44:52:b6:33:99:f6: d7:51:d2:43:0b:b0:cd:e6:0c:31:35:f9:ba:c4:c8: c4:6f:1c:13:e6:9f:ce:96:20:34:94:0c:eb:c4:4d: 32:8b:0b:20:7f:c1:0e:5b:3c:d8:0f:60:55:c6:57: 78:7b:42:21:14:71:fa:67:05:0e:21:0e:78:12:78: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:10:1B:56:B0:B8:BC:BE:06:9A:8C:EB:8C:78:B6:8B:42:1A:CA:DC X509v3 Authority Key Identifier: keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/mRAbVrC4vL4GmozrjHi2i0Iaytw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.245.128.0/20 185.172.12.0/22 IPv6: 2a00:4fc0::/32 Signature Algorithm: sha256WithRSAEncryption 10:d6:17:28:96:03:b8:2d:73:c4:9b:dc:3c:a6:c5:68:0b:55: a6:88:68:ef:ab:7d:32:08:1d:3c:c4:6b:4c:78:fb:5c:fd:f2: c4:6b:21:76:88:ad:48:2d:79:66:79:7a:95:75:a9:a3:ed:8d: 3d:75:24:82:e1:ed:98:9a:9c:14:79:55:bb:3f:a8:9f:ea:9e: 7a:64:ac:a2:01:b0:6a:ad:09:dd:df:ba:78:41:71:78:68:d3: a4:7f:71:77:1b:98:fa:20:3f:8f:5e:0b:1f:d7:db:a5:70:3c: 5c:89:41:1e:a0:21:2a:a8:ff:0e:29:ac:cd:44:cb:43:01:53: 75:0a:65:8b:7d:80:01:60:64:9c:bb:9d:77:cc:e3:41:2c:a6: c5:e6:7e:e7:5f:7f:d9:d9:a6:3f:63:ba:71:7e:a5:21:5e:79: 14:fe:fd:79:67:88:4d:fb:9b:b6:29:93:e6:96:2a:e4:a0:69: 09:81:b0:cf:2c:d9:84:9f:57:7e:3a:8d:72:a9:ce:4f:10:d0: 12:5c:27:b0:c4:c1:0f:5a:90:10:03:fc:15:cf:d0:b5:aa:f4: 19:41:69:4c:12:8c:f4:c1:4c:cf:c9:c5:e0:1f:1c:d2:6e:f6: f4:ea:19:4a:9c:64:85:58:7a:64:2c:c0:8b:c0:b8:c7:f1:52: 8c:74:62:c1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6yLslJ84sb3M2OirEH7fHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTg4MmY3MTcxYWY2ZGNkY2NjOWNkNzlmOThkZWM2NzU3 ZmUxODkwHhcNMjYwMTAxMTgxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTEwMWI1NmIwYjhiY2JlMDY5YThjZWI4Yzc4YjY4YjQyMWFjYWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYnyKh9k8YVqlRgt4wdzt+wVArtg 6fhKxnG3yFzBP5AAirTPhU31Tvnb9VWqpI+YyFVtJsa4mzo804HEc4zVR4pG71bP S8/Dz9LmnIkglP4iL+PTCIZy9IMGfg1Ts4VhVSPEv+nf8uLOWY3t7BbnTHNOB6tl XW5ZkUTio8yxie21vN4FC0bjI2opkAX3p2qGFitgp12PDMSgYsnGlGe+rjQKri1b shcsMVpDPd6pfoG67afMCkk9s1uaAYREUrYzmfbXUdJDC7DN5gwxNfm6xMjEbxwT 5p/OliA0lAzrxE0yiwsgf8EOWzzYD2BVxld4e0IhFHH6ZwUOIQ54Enj6xwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJkQG1awuLy+BpqM64x4totCGsrcMB8GA1UdIwQY MBaAFLTogvcXGvbc3Myc15+Y3sZ1f+GJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAt ZmVmZThlMzQwMDZjLzEvbVJBYlZyQzR2TDRHbW96cmpIaTJpMElheXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81ZjViYzgtZTVmMy00MjFkLTlmYTAtZmVmZThlMzQwMDZj LzEvdE9pQzl4Y2E5dHpjekp6WG41amV4blZfNFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQETfWAAwQC uawMMA0EAgACMAcDBQAqAE/AMA0GCSqGSIb3DQEBCwUAA4IBAQAQ1hcolgO4LXPE m9w8psVoC1WmiGjvq30yCB08xGtMePtc/fLEayF2iK1ILXlmeXqVdamj7Y09dSSC 4e2YmpwUeVW7P6if6p56ZKyiAbBqrQnd37p4QXF4aNOkf3F3G5j6ID+PXgsf19ul cDxciUEeoCEqqP8OKazNRMtDAVN1CmWLfYABYGScu513zONBLKbF5n7nX3/Z2aY/ Y7pxfqUhXnkU/v15Z4hN+5u2KZPmlirkoGkJgbDPLNmEn1d+Oo1yqc5PENASXCew xMEPWpAQA/wVz9C1qvQZQWlMEoz0wUzPycXgHxzSbvb06hlKnGSFWHpkLMCLwLjH 8VKMdGLB -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:33 2026 by rpki-client