This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/sX1Br24qCtbNCJL4I_c1pDchwkc.roa File: sX1Br24qCtbNCJL4I_c1pDchwkc.roa (raw, json) Hash identifier: VEqEzFdjyTuor8EJZXXTMl1wEKD0Q9Jesc0bkdw7VYg= Subject key identifier: B1:7D:41:AF:6E:2A:0A:D6:CD:08:92:F8:23:F7:35:A4:37:21:C2:47 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019B79110079948C90718CF8FADEB79433AA Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/sX1Br24qCtbNCJL4I_c1pDchwkc.roa Signing time: Thu 01 Jan 2026 10:18:35 +0000 ROA not before: Thu 01 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39679 IP address blocks: 77.221.49.0/24 maxlen: 24 77.221.54.0/23 maxlen: 23 77.221.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:00:79:94:8c:90:71:8c:f8:fa:de:b7:94:33:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b17d41af6e2a0ad6cd0892f823f735a43721c247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:17:ac:b4:d1:64:03:c2:7f:2f:9a:7b:a5:8b: 37:26:e3:5a:db:d5:1d:16:ca:e2:cc:a4:07:86:84: b0:e6:31:f9:4c:fe:6c:bf:b6:40:21:ef:f7:db:ae: 83:7d:be:2d:e3:00:09:a2:4b:9d:3f:99:75:94:af: 33:96:66:56:f4:e9:18:6d:77:2d:32:9c:64:67:bf: 5e:37:d8:4d:47:d0:80:6c:00:bc:69:29:4c:6d:32: 6f:ec:57:40:eb:60:ff:b2:da:e7:ff:a6:85:dd:8a: 04:75:46:49:31:4b:4a:58:52:2d:e9:21:d4:07:ed: 6d:0f:40:dd:9f:2b:92:89:57:26:7f:56:70:31:b7: 94:17:b0:d9:95:48:d5:f4:92:7c:cf:d2:72:59:a0: 8a:ee:ef:a6:7d:d0:a5:32:8b:13:ad:6b:c3:25:31: fb:17:8e:d4:69:d0:1e:b6:9c:77:f0:2c:63:eb:d5: 80:1c:34:9a:45:08:ae:d2:75:c1:41:73:b9:5e:af: 80:1a:25:74:d2:b2:a2:f7:34:bd:89:c8:28:27:cd: e8:5f:9e:09:42:73:07:ae:ac:98:b1:ad:f7:2f:24: 76:3d:5a:bd:36:02:b0:c7:66:29:64:bc:12:6d:6f: 7b:44:c5:61:d7:1e:33:dd:8b:07:4b:a8:87:d4:d1: a5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:7D:41:AF:6E:2A:0A:D6:CD:08:92:F8:23:F7:35:A4:37:21:C2:47 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/sX1Br24qCtbNCJL4I_c1pDchwkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.49.0/24 77.221.54.0-77.221.57.255 Signature Algorithm: sha256WithRSAEncryption 7d:32:73:06:af:e2:25:ae:1d:63:41:dd:8a:32:de:b0:45:26: 1b:2d:53:f8:db:60:fd:56:42:0f:0b:61:ee:e5:3c:dd:93:b8: 43:c1:69:22:2d:4d:24:9c:7b:9e:82:f8:6c:47:08:89:f7:bf: 1a:71:36:9a:2e:b0:1b:5d:ea:93:48:79:6a:ae:82:77:b8:d8: 00:42:97:b9:03:7c:eb:e1:c1:28:d1:5f:f3:3d:37:a1:c9:a9: 1c:45:e7:c3:d6:4a:b5:66:09:14:61:1f:e5:27:0f:0e:a2:50: 46:9c:b2:ae:0d:99:e7:62:70:04:01:51:d5:0b:28:62:ae:46: 0e:bb:a8:22:2f:89:a3:35:ac:63:33:81:9e:02:77:5c:8b:f8: 9c:be:bd:fd:eb:38:de:80:fe:3f:9a:b3:88:1f:09:53:cc:c5: a7:89:2d:78:f3:bf:64:70:b4:c6:ac:dd:98:de:e0:b7:cf:7f: 8d:f4:e3:97:53:77:b2:a7:12:b4:b8:6c:0b:25:3a:79:1f:b4: 82:59:5d:27:68:ee:bc:84:f0:ca:8b:19:2b:e4:c8:6a:bf:14: 6e:e7:72:c7:d8:ee:bb:c2:1a:7d:ba:d6:c7:bf:7f:b6:69:0b: 85:6b:01:fc:ba:bb:93:59:d2:54:80:b0:12:0b:91:0f:3e:e0: 83:62:91:0a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5EQB5lIyQcYz4+t63lDOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTdkNDFhZjZlMmEwYWQ2Y2QwODkyZjgyM2Y3MzVhNDM3MjFjMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xestNFkA8J/L5p7pYs3JuNa29Ud FsrizKQHhoSw5jH5TP5sv7ZAIe/3266Dfb4t4wAJokudP5l1lK8zlmZW9OkYbXct MpxkZ79eN9hNR9CAbAC8aSlMbTJv7FdA62D/strn/6aF3YoEdUZJMUtKWFIt6SHU B+1tD0DdnyuSiVcmf1ZwMbeUF7DZlUjV9JJ8z9JyWaCK7u+mfdClMosTrWvDJTH7 F47UadAetpx38Cxj69WAHDSaRQiu0nXBQXO5Xq+AGiV00rKi9zS9icgoJ83oX54J QnMHrqyYsa33LyR2PVq9NgKwx2YpZLwSbW97RMVh1x4z3YsHS6iH1NGlxQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLF9Qa9uKgrWzQiS+CP3NaQ3IcJHMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvc1gxQnIyNHFDdGJOQ0pMNElfYzFwRGNod2tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQATd0xMAwD BAFN3TYDBAFN3TgwDQYJKoZIhvcNAQELBQADggEBAH0ycwav4iWuHWNB3Yoy3rBF JhstU/jbYP1WQg8LYe7lPN2TuEPBaSItTSSce56C+GxHCIn3vxpxNpousBtd6pNI eWqugne42ABCl7kDfOvhwSjRX/M9N6HJqRxF58PWSrVmCRRhH+UnDw6iUEacsq4N medicAQBUdULKGKuRg67qCIviaM1rGMzgZ4Cd1yL+Jy+vf3rON6A/j+as4gfCVPM xaeJLXjzv2RwtMas3Zje4LfPf43045dTd7KnErS4bAslOnkftIJZXSdo7ryE8MqL GSvkyGq/FG7ncsfY7rvCGn261se/f7ZpC4VrAfy6u5NZ0lSAsBILkQ8+4INikQo= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:58 2026 by rpki-client