This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/n1TUpOBbWs8P-p3uo2v0c218ADs.roa File: n1TUpOBbWs8P-p3uo2v0c218ADs.roa (raw, json) Hash identifier: SUFlbKo/kCzbejF1uxyv3RXb38CJtDMd7OmQ3FS30IQ= Subject key identifier: 9F:54:D4:A4:E0:5B:5A:CF:0F:FA:9D:EE:A3:6B:F4:73:6D:7C:00:3B Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C117ECCC793D24C440745427E50FD95 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/n1TUpOBbWs8P-p3uo2v0c218ADs.roa Signing time: Fri 02 Jan 2026 00:17:59 +0000 ROA not before: Fri 02 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56835 IP address blocks: 77.83.188.0/23 maxlen: 23 77.83.190.0/23 maxlen: 23 185.143.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:7e:cc:c7:93:d2:4c:44:07:45:42:7e:50:fd:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f54d4a4e05b5acf0ffa9deea36bf4736d7c003b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f6:cd:f9:7e:ac:d4:86:6b:2e:cd:a0:93:9c: 55:24:cf:dc:63:0d:ab:ef:4a:3a:cb:d5:3d:e6:30: b2:6f:2c:e2:22:bc:ba:f9:32:a8:82:d9:3f:95:d5: bf:20:e7:43:94:e0:ab:fd:40:99:44:eb:6d:bb:59: dd:64:21:ea:d8:50:e4:d4:fb:4f:f4:8a:88:88:87: c5:6e:bb:9d:7c:96:6a:41:53:ed:ab:43:7f:96:41: 77:e4:d2:38:84:15:a4:a6:5c:9c:65:25:56:4c:06: cc:14:dc:b7:df:71:76:6d:8e:83:4c:e4:36:f2:b2: dc:7d:0f:c2:8f:da:ab:94:9c:7c:9d:0a:40:56:84: 07:3c:b7:68:cf:28:56:03:2a:3a:49:2e:77:d4:57: 52:29:1a:27:42:f7:9b:0a:f1:34:2a:4a:b8:51:c9: 42:fa:aa:60:1d:14:fd:1f:f8:90:72:be:f7:6f:10: b9:91:dd:61:1b:1e:31:01:2a:ca:84:34:93:df:99: fb:32:d6:5c:ce:a3:73:17:bf:73:19:d5:c7:0c:34: 5e:cf:3a:dd:de:a4:0f:a5:6b:ba:5d:f4:85:9b:66: e2:49:71:50:34:31:ce:e9:12:03:76:d0:9d:e1:fd: 6a:ab:8e:24:fa:73:a5:d1:40:73:db:13:39:89:07: 83:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:54:D4:A4:E0:5B:5A:CF:0F:FA:9D:EE:A3:6B:F4:73:6D:7C:00:3B X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/n1TUpOBbWs8P-p3uo2v0c218ADs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.188.0/22 185.143.146.0/23 Signature Algorithm: sha256WithRSAEncryption 21:4f:10:0e:14:69:92:96:7c:d7:a0:8a:e4:72:ad:0e:8f:4f: 45:94:c8:f8:8a:12:c7:08:28:8a:a1:72:34:f7:1d:93:84:1a: 89:98:a3:e0:f4:cd:85:0c:e8:e8:aa:9e:a3:62:aa:a4:38:9b: 5f:08:cb:d3:f5:a4:97:4b:cb:b3:6f:28:93:b8:c4:36:db:f0: b1:0d:0e:24:7a:1c:a5:c9:1d:63:d7:14:e2:8c:d5:03:f1:2a: 5c:80:51:95:b4:1e:84:96:ce:d6:c5:92:5d:00:40:64:b9:cf: d2:6b:5b:36:55:45:2f:a7:42:16:98:86:c9:14:98:49:ba:8d: 4c:31:5e:b8:b6:f4:10:c8:42:e7:de:98:03:bb:1f:6f:77:22: 0f:96:fb:ec:c9:7b:ca:16:c6:10:ae:c5:ac:2c:33:70:86:73: 3e:09:be:43:2d:e6:a8:c2:aa:9b:ab:5c:f1:54:d1:dc:29:6d: 3a:f5:25:82:f4:60:a6:7c:c8:3e:5b:14:7c:ac:b9:d1:a8:60: 8e:5c:7c:18:b2:42:76:9a:a7:b9:4f:a5:97:9c:33:b2:66:67: 86:f9:43:fd:00:d0:a7:b1:7d:41:a4:2b:4a:b7:d1:72:74:5b: e0:8c:71:6f:4c:31:a9:f2:58:8b:23:a7:19:a5:3f:15:3b:76: be:d8:7e:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EX7Mx5PSTEQHRUJ+UP2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjU0ZDRhNGUwNWI1YWNmMGZmYTlkZWVhMzZiZjQ3MzZkN2MwMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/bN+X6s1IZrLs2gk5xVJM/cYw2r 70o6y9U95jCybyziIry6+TKogtk/ldW/IOdDlOCr/UCZROttu1ndZCHq2FDk1PtP 9IqIiIfFbrudfJZqQVPtq0N/lkF35NI4hBWkplycZSVWTAbMFNy333F2bY6DTOQ2 8rLcfQ/Cj9qrlJx8nQpAVoQHPLdozyhWAyo6SS531FdSKRonQvebCvE0Kkq4UclC +qpgHRT9H/iQcr73bxC5kd1hGx4xASrKhDST35n7MtZczqNzF79zGdXHDDRezzrd 3qQPpWu6XfSFm2biSXFQNDHO6RIDdtCd4f1qq44k+nOl0UBz2xM5iQeDNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ9U1KTgW1rPD/qd7qNr9HNtfAA7MB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvbjFUVXBPQmJXczhQLXAzdW8ydjBjMjE4QURzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTVO8AwQB uY+SMA0GCSqGSIb3DQEBCwUAA4IBAQAhTxAOFGmSlnzXoIrkcq0Oj09FlMj4ihLH CCiKoXI09x2ThBqJmKPg9M2FDOjoqp6jYqqkOJtfCMvT9aSXS8uzbyiTuMQ22/Cx DQ4kehylyR1j1xTijNUD8SpcgFGVtB6Els7WxZJdAEBkuc/Sa1s2VUUvp0IWmIbJ FJhJuo1MMV64tvQQyELn3pgDux9vdyIPlvvsyXvKFsYQrsWsLDNwhnM+Cb5DLeao wqqbq1zxVNHcKW069SWC9GCmfMg+WxR8rLnRqGCOXHwYskJ2mqe5T6WXnDOyZmeG +UP9ANCnsX1BpCtKt9FydFvgjHFvTDGp8liLI6cZpT8VO3a+2H5J -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:31 2026 by rpki-client