This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/JdvrcoE9zh9DtjU5-xbVFH-VvDA.roa File: JdvrcoE9zh9DtjU5-xbVFH-VvDA.roa (raw, json) Hash identifier: 3jAnXeJ9BBJ28SdlPUy/mU91gOnFLPiC/VnWiJcQ3Ig= Subject key identifier: 25:DB:EB:72:81:3D:CE:1F:43:B6:35:39:FB:16:D5:14:7F:95:BC:30 Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d Certificate serial: 019B79EC8B4B417E25273E006AE4F23A6A1D Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/JdvrcoE9zh9DtjU5-xbVFH-VvDA.roa Signing time: Thu 01 Jan 2026 14:18:23 +0000 ROA not before: Thu 01 Jan 2026 14:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200801 IP address blocks: 77.72.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8b:4b:41:7e:25:27:3e:00:6a:e4:f2:3a:6a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25dbeb72813dce1f43b63539fb16d5147f95bc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4d:13:74:2c:65:33:08:2c:c3:53:5c:ab:b7: 7c:c6:b6:57:4a:45:e3:60:f7:da:b8:7f:62:18:36: 22:5d:c7:6d:13:0f:95:6c:99:bd:90:3f:81:87:f3: 03:a8:c8:c0:37:10:2b:9c:18:13:95:58:08:f1:15: 81:69:f8:4d:5b:8f:b1:73:1e:cf:f7:87:bf:71:71: 8e:c8:78:94:c9:9e:8c:fe:88:4c:db:ea:ac:ed:83: 03:c8:d8:0f:f5:3d:a8:d4:ac:34:59:5e:a5:88:38: 5c:8b:0f:cd:a8:ae:94:ae:a5:25:28:74:a8:28:95: bf:9c:53:59:87:22:18:6e:90:17:41:0a:fc:2e:2c: 01:f3:e0:3b:11:51:c7:ed:97:84:af:02:54:93:cb: 79:38:08:09:81:11:a3:e5:36:c6:4b:52:6c:b2:74: 0e:dc:4f:65:13:04:43:1c:6f:56:ce:52:cb:e5:c2: 96:71:ce:5e:d8:32:9d:d6:55:b9:4c:2d:2d:5e:db: 59:7a:30:c5:bf:5d:1a:2b:38:49:ab:2e:8c:ea:30: bb:7d:e7:72:c0:f5:53:3a:e1:9d:35:c5:24:a3:1f: de:62:22:5c:b7:86:08:bf:71:e8:15:b9:06:32:71: c6:d4:4c:18:21:ed:40:2e:f7:4d:56:f0:9b:fd:e9: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DB:EB:72:81:3D:CE:1F:43:B6:35:39:FB:16:D5:14:7F:95:BC:30 X509v3 Authority Key Identifier: keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/JdvrcoE9zh9DtjU5-xbVFH-VvDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.223.0/24 Signature Algorithm: sha256WithRSAEncryption 35:16:18:9a:8c:b5:80:f4:cb:e8:0d:11:13:58:c8:58:cd:83: dd:99:cf:88:7a:e5:ae:1f:c4:ae:d0:96:98:cb:d4:ed:12:4e: dd:e6:75:ba:fd:97:cc:b4:9e:c0:b6:80:38:07:69:a1:af:c5: e6:5c:92:21:df:d2:f0:18:c1:fa:b3:f4:0a:75:4a:cf:95:23: cd:ee:40:58:20:b0:eb:32:53:61:4b:27:cf:a1:b4:c0:1b:1d: a9:9e:5f:e6:1e:0d:99:f7:51:19:8b:1c:18:b1:9a:6e:53:df: 03:f0:49:bb:ac:3b:01:37:10:f5:4f:d9:9c:55:db:5d:eb:d7: f5:35:a6:61:7c:b6:3d:18:28:0f:fd:3a:f3:0a:56:22:dd:2c: aa:8b:30:03:43:98:78:c6:92:05:f2:fe:4f:58:03:49:64:a7: 34:cd:c8:ce:4e:d4:2f:a3:04:4b:6a:6e:f1:03:db:2a:97:ee: 05:44:1e:d4:89:87:82:47:b4:04:94:2f:69:ee:11:1d:fe:21: 4a:f0:d3:ad:c8:99:49:b3:3c:27:aa:78:28:d9:09:94:c8:7f: 8f:b5:75:ad:cb:12:38:79:e1:83:0f:37:93:ff:aa:3a:23:6b: 05:a3:39:9a:83:26:2e:95:16:d6:51:21:22:fd:08:9f:95:b4: 2a:0f:76:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57ItLQX4lJz4AauTyOmodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDgwMWRlOWZlOGE2NjgwNzU4ODE3ODIzYWUzNmJhMDY1 YzYxMGQwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWRiZWI3MjgxM2RjZTFmNDNiNjM1MzlmYjE2ZDUxNDdmOTViYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU0TdCxlMwgsw1Ncq7d8xrZXSkXj YPfauH9iGDYiXcdtEw+VbJm9kD+Bh/MDqMjANxArnBgTlVgI8RWBafhNW4+xcx7P 94e/cXGOyHiUyZ6M/ohM2+qs7YMDyNgP9T2o1Kw0WV6liDhciw/NqK6UrqUlKHSo KJW/nFNZhyIYbpAXQQr8LiwB8+A7EVHH7ZeErwJUk8t5OAgJgRGj5TbGS1JssnQO 3E9lEwRDHG9WzlLL5cKWcc5e2DKd1lW5TC0tXttZejDFv10aKzhJqy6M6jC7fedy wPVTOuGdNcUkox/eYiJct4YIv3HoFbkGMnHG1EwYIe1ALvdNVvCb/ekY4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXb63KBPc4fQ7Y1OfsW1RR/lbwwMB8GA1UdIwQY MBaAFBjYAd6f6KZoB1iBeCOuNroGXGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTkt NjU1MDNhOTMwNmEwLzEvSmR2cmNvRTl6aDlEdGpVNS14YlZGSC1WdkRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTktNjU1MDNhOTMwNmEw LzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUjfMA0G CSqGSIb3DQEBCwUAA4IBAQA1FhiajLWA9MvoDRETWMhYzYPdmc+IeuWuH8Su0JaY y9TtEk7d5nW6/ZfMtJ7AtoA4B2mhr8XmXJIh39LwGMH6s/QKdUrPlSPN7kBYILDr MlNhSyfPobTAGx2pnl/mHg2Z91EZixwYsZpuU98D8Em7rDsBNxD1T9mcVdtd69f1 NaZhfLY9GCgP/TrzClYi3SyqizADQ5h4xpIF8v5PWANJZKc0zcjOTtQvowRLam7x A9sql+4FRB7UiYeCR7QElC9p7hEd/iFK8NOtyJlJszwnqngo2QmUyH+PtXWtyxI4 eeGDDzeT/6o6I2sFozmagyYulRbWUSEi/QiflbQqD3bw -----END CERTIFICATE-----Generated at Mon Jan 26 11:41:14 2026 by rpki-client