This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/pp7zPOmyknFg8d0Gr5g-I2wOEDQ.roa File: pp7zPOmyknFg8d0Gr5g-I2wOEDQ.roa (raw, json) Hash identifier: 2LjSnEN+hHc9XuvzHuSzawxoX9WgA8pySl8rAgAIPKk= Subject key identifier: A6:9E:F3:3C:E9:B2:92:71:60:F1:DD:06:AF:98:3E:23:6C:0E:10:34 Certificate issuer: /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8 Certificate serial: 019B7C125C9DB47F56B46AAED4CA6351DE25 Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/pp7zPOmyknFg8d0Gr5g-I2wOEDQ.roa Signing time: Fri 02 Jan 2026 00:18:56 +0000 ROA not before: Fri 02 Jan 2026 00:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24976 IP address blocks: 185.39.232.0/23 maxlen: 23 194.88.132.0/24 maxlen: 24 194.88.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5c:9d:b4:7f:56:b4:6a:ae:d4:ca:63:51:de:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8 Validity Not Before: Jan 2 00:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a69ef33ce9b2927160f1dd06af983e236c0e1034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:64:8a:da:a6:15:3a:ee:ba:c7:6b:cb:47:57: 84:69:ee:0d:9a:a0:d7:b5:59:f9:3f:bc:54:09:b7: bd:af:e0:5f:89:d6:5b:bd:49:c8:0c:b8:7f:fb:25: 39:ed:7f:94:0c:3e:b5:25:69:9f:10:58:e8:29:dd: 22:c1:0e:34:39:43:d1:31:7d:37:6f:c1:86:eb:df: 13:28:ee:03:7b:95:90:bf:3a:77:de:aa:31:49:66: 03:7b:7e:02:81:8d:b7:da:4e:c2:3f:90:b3:5a:e7: dd:09:91:b0:f5:a7:12:c1:f0:40:a0:b6:fc:54:9c: 09:0f:90:8b:c0:80:0e:68:84:3e:94:fc:88:61:ab: 02:03:d1:38:1e:f2:3d:62:16:77:01:c6:07:ba:1b: b2:b7:20:fa:1e:73:b6:ed:16:33:f8:9c:8c:8c:1d: 24:de:e6:b3:3e:db:86:18:03:f7:06:7e:d1:51:f7: 61:47:91:93:09:cc:18:59:24:93:dc:a0:45:8e:4b: 15:bd:62:7e:ed:57:0c:6f:99:68:50:48:1d:39:ad: 2e:a1:99:48:bc:11:d8:c3:82:b6:9f:43:dd:1d:f8: 5a:2f:fa:48:a9:32:78:ee:dc:0d:16:03:7b:fb:67: 97:16:4f:b4:dd:f8:04:ea:34:47:e3:05:99:11:d3: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9E:F3:3C:E9:B2:92:71:60:F1:DD:06:AF:98:3E:23:6C:0E:10:34 X509v3 Authority Key Identifier: keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/pp7zPOmyknFg8d0Gr5g-I2wOEDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.232.0/23 194.88.132.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:86:e1:a0:52:5e:be:af:aa:ae:d4:55:12:b5:43:41:84:af: ca:71:d4:52:98:cf:0f:3b:12:f8:30:3b:4b:5d:91:ef:38:ac: 91:0e:12:c6:a3:fa:b2:bb:7f:ba:12:09:a5:18:15:96:05:82: 3d:d0:bd:67:63:07:ca:4f:cf:38:80:cf:0e:00:ff:96:0b:eb: 7e:88:3b:cc:24:63:25:42:c2:31:1d:49:57:54:d5:45:ee:dc: ab:b7:d6:cc:61:d4:aa:f9:d7:b4:84:dc:26:bc:0f:5c:ec:2d: 54:8a:b6:13:64:ed:20:e0:e2:7f:47:cd:69:a9:de:bc:38:ef: 1d:4c:8a:47:6f:56:ce:31:05:22:db:b5:c9:ad:9c:0b:eb:9e: ae:54:31:d3:83:df:fc:6b:4b:1f:4d:8a:a7:3f:33:24:96:cd: 4f:29:a9:5e:fd:39:a3:c6:09:53:57:fe:e9:ae:ea:f6:30:d4: 52:da:bf:1d:4e:7d:60:21:cf:3c:da:0d:cd:34:20:fb:7e:ff: a1:3a:3b:a6:e6:37:61:3b:7c:2d:6c:e4:d4:3e:34:46:33:0f: e9:24:9c:3f:4c:d2:63:a2:ac:8f:c5:0a:13:83:b8:8f:69:14: 27:96:62:37:78:c6:a9:fa:17:f6:40:64:09:2d:62:fd:52:5b: f7:f8:4e:8d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ElydtH9WtGqu1MpjUd4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjhjZjQ1NGIwOTYyZDE2YTQ4NTU4MDhmZDNhYmMxNTg1 MmJiZDgwHhcNMjYwMTAyMDAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjllZjMzY2U5YjI5MjcxNjBmMWRkMDZhZjk4M2UyMzZjMGUxMDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GSK2qYVOu66x2vLR1eEae4NmqDX tVn5P7xUCbe9r+BfidZbvUnIDLh/+yU57X+UDD61JWmfEFjoKd0iwQ40OUPRMX03 b8GG698TKO4De5WQvzp33qoxSWYDe34CgY232k7CP5CzWufdCZGw9acSwfBAoLb8 VJwJD5CLwIAOaIQ+lPyIYasCA9E4HvI9YhZ3AcYHuhuytyD6HnO27RYz+JyMjB0k 3uazPtuGGAP3Bn7RUfdhR5GTCcwYWSST3KBFjksVvWJ+7VcMb5loUEgdOa0uoZlI vBHYw4K2n0PdHfhaL/pIqTJ47twNFgN7+2eXFk+03fgE6jRH4wWZEdNVBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKae8zzpspJxYPHdBq+YPiNsDhA0MB8GA1UdIwQY MBaAFHe4z0VLCWLRakhVgI/Tq8FYUrvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTcxY2EtNGIxYi00MTg3LWJhNDYt YTRmYzllMjQ1OGVjLzEvcHA3elBPbXlrbkZnOGQwR3I1Zy1JMndPRURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMTcxY2EtNGIxYi00MTg3LWJhNDYtYTRmYzllMjQ1OGVj LzEvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuSfoAwQB wliEMA0GCSqGSIb3DQEBCwUAA4IBAQCfhuGgUl6+r6qu1FUStUNBhK/KcdRSmM8P OxL4MDtLXZHvOKyRDhLGo/qyu3+6EgmlGBWWBYI90L1nYwfKT884gM8OAP+WC+t+ iDvMJGMlQsIxHUlXVNVF7tyrt9bMYdSq+de0hNwmvA9c7C1UirYTZO0g4OJ/R81p qd68OO8dTIpHb1bOMQUi27XJrZwL656uVDHTg9/8a0sfTYqnPzMkls1PKale/Tmj xglTV/7prur2MNRS2r8dTn1gIc882g3NNCD7fv+hOjum5jdhO3wtbOTUPjRGMw/p JJw/TNJjoqyPxQoTg7iPaRQnlmI3eMap+hf2QGQJLWL9Ulv3+E6N -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:38 2026 by rpki-client