This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/P4VkZniabsXu9hktkMw5Rd09dnk.roa File: P4VkZniabsXu9hktkMw5Rd09dnk.roa (raw, json) Hash identifier: +FF/Pni07tJQAzAxFJf4U5q4pGsraFiqwIiXTi9fUSo= Subject key identifier: 3F:85:64:66:78:9A:6E:C5:EE:F6:19:2D:90:CC:39:45:DD:3D:76:79 Certificate issuer: /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae Certificate serial: 019B7C7F909EA0FD3627FCEA115F78B03FEA Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/P4VkZniabsXu9hktkMw5Rd09dnk.roa Signing time: Fri 02 Jan 2026 02:18:13 +0000 ROA not before: Fri 02 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202391 IP address blocks: 77.95.219.0/24 maxlen: 24 2a13:f1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:90:9e:a0:fd:36:27:fc:ea:11:5f:78:b0:3f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae Validity Not Before: Jan 2 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f856466789a6ec5eef6192d90cc3945dd3d7679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d7:da:2f:19:b7:61:d2:71:de:b6:f9:e4:a9: 5c:02:2e:e7:bd:2d:40:3b:09:18:0f:8c:53:90:ef: 3c:ad:89:47:a3:92:ba:bc:66:74:c5:7a:00:9c:d7: a2:84:11:29:47:d1:d4:1b:7f:0f:b9:34:c6:f4:49: 40:44:ac:c1:c2:e7:7a:86:a5:2b:e6:4a:ec:90:df: c8:e6:b0:e3:a0:8b:2a:3b:a9:be:81:b4:78:e1:29: 5a:04:49:bc:bf:fb:f2:81:9b:ee:3c:c3:8e:dd:33: 96:06:a6:79:b7:eb:8c:6d:68:1e:1d:70:5f:4b:10: 12:70:7d:7b:d1:c4:96:62:06:72:58:c7:fd:e1:29: cd:23:25:59:14:49:d0:d4:12:ac:6a:89:dd:73:b9: fa:9d:1f:7d:e2:fa:35:6f:33:ce:8f:9b:81:aa:71: e0:c6:1f:93:f5:d7:d7:33:8a:9a:c9:25:1b:33:c9: 8a:e1:a9:a5:50:1a:d3:0e:ce:fe:07:4a:f4:52:ff: ca:a5:93:3f:95:69:39:83:b4:56:76:b3:ea:4b:13: 72:dc:c7:8e:24:80:e6:9d:dc:1c:42:b6:63:24:85: f3:d6:14:e5:3e:ec:00:7a:b9:cb:39:3a:48:6b:b3: bc:22:ec:38:d8:1a:cf:86:2b:a5:d8:0d:27:64:6f: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:85:64:66:78:9A:6E:C5:EE:F6:19:2D:90:CC:39:45:DD:3D:76:79 X509v3 Authority Key Identifier: keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/P4VkZniabsXu9hktkMw5Rd09dnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.219.0/24 IPv6: 2a13:f1c0::/29 Signature Algorithm: sha256WithRSAEncryption 79:52:2c:e9:19:1f:ec:49:42:fa:62:43:50:f9:41:d6:84:f1: 1a:8e:da:1d:65:d6:2e:60:39:e3:3b:0c:e9:0b:e7:b6:96:d5: c3:38:4d:04:fb:05:7b:14:1d:1a:03:bc:db:23:6e:8b:08:cc: ab:62:8c:b0:e4:c5:8f:ed:81:65:8a:20:23:5a:25:f8:f1:0a: 46:b3:d6:06:fb:00:ec:46:31:06:08:4c:00:bf:a9:fc:09:ee: 2a:2d:13:a2:d3:16:dc:4b:1a:2f:b4:bf:11:e1:b4:35:d2:8b: 58:16:ef:e1:b5:03:2d:f5:1c:21:a8:16:c8:17:ed:b6:f5:52: a3:97:b4:9e:d0:eb:74:8e:19:39:40:e4:dd:bd:47:6c:ea:70: e1:2c:7d:23:2e:c9:29:10:3b:b1:77:34:c0:26:77:3c:e0:b2: 7e:9c:e5:2a:81:6b:3b:86:74:83:5e:61:db:7c:89:f9:04:bd: 74:e5:f8:7a:0f:95:4b:85:3b:90:55:aa:54:48:77:99:8b:3f: 30:df:5f:01:21:73:4f:61:3e:6a:96:2b:19:0d:40:0f:cc:7c: f2:b3:d0:b9:0a:2b:95:35:38:b3:87:86:e7:d5:13:f5:0e:d8: 4b:73:39:84:fb:41:82:16:dc:10:e7:6d:e2:6f:0c:17:0e:16: 15:1e:0a:08 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f5CeoP02J/zqEV94sD/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZjhjNDcxZTgzYjE0ZmM2YzZjYzdjZmM5NmMxYWMzZTMw ODdlYWUwHhcNMjYwMTAyMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjg1NjQ2Njc4OWE2ZWM1ZWVmNjE5MmQ5MGNjMzk0NWRkM2Q3Njc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodfaLxm3YdJx3rb55KlcAi7nvS1A OwkYD4xTkO88rYlHo5K6vGZ0xXoAnNeihBEpR9HUG38PuTTG9ElARKzBwud6hqUr 5krskN/I5rDjoIsqO6m+gbR44SlaBEm8v/vygZvuPMOO3TOWBqZ5t+uMbWgeHXBf SxAScH170cSWYgZyWMf94SnNIyVZFEnQ1BKsaondc7n6nR994vo1bzPOj5uBqnHg xh+T9dfXM4qaySUbM8mK4amlUBrTDs7+B0r0Uv/KpZM/lWk5g7RWdrPqSxNy3MeO JIDmndwcQrZjJIXz1hTlPuwAernLOTpIa7O8Iuw42BrPhiul2A0nZG86ZwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD+FZGZ4mm7F7vYZLZDMOUXdPXZ5MB8GA1UdIwQY MBaAFI74xHHoOxT8bGzHz8lsGsPjCH6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZjJhZDgtNmE0OC00MjNjLWJlNDEt MTM4YTcxMTdkZTM2LzEvUDRWa1puaWFic1h1OWhrdGtNdzVSZDA5ZG5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84ZjJhZDgtNmE0OC00MjNjLWJlNDEtMTM4YTcxMTdkZTM2 LzEvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQATV/bMA0E AgACMAcDBQMqE/HAMA0GCSqGSIb3DQEBCwUAA4IBAQB5UizpGR/sSUL6YkNQ+UHW hPEajtodZdYuYDnjOwzpC+e2ltXDOE0E+wV7FB0aA7zbI26LCMyrYoyw5MWP7YFl iiAjWiX48QpGs9YG+wDsRjEGCEwAv6n8Ce4qLROi0xbcSxovtL8R4bQ10otYFu/h tQMt9RwhqBbIF+229VKjl7Se0Ot0jhk5QOTdvUds6nDhLH0jLskpEDuxdzTAJnc8 4LJ+nOUqgWs7hnSDXmHbfIn5BL105fh6D5VLhTuQVapUSHeZiz8w318BIXNPYT5q lisZDUAPzHzys9C5CiuVNTizh4bn1RP1DthLczmE+0GCFtwQ523ibwwXDhYVHgoI -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:56 2026 by rpki-client