This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/0XVL1DRx75lawy_xFW5mJsQGHSU.roa File: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (raw, json) Hash identifier: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM= Subject key identifier: D1:75:4B:D4:34:71:EF:99:5A:C3:2F:F1:15:6E:66:26:C4:06:1D:25 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 019B7EA69BC510BF51B76D1B90C7E4583EA6 Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/0XVL1DRx75lawy_xFW5mJsQGHSU.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207967 IP address blocks: 77.73.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9b:c5:10:bf:51:b7:6d:1b:90:c7:e4:58:3e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1754bd43471ef995ac32ff1156e6626c4061d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:af:6a:14:ce:1b:dc:c7:cb:93:f3:20:f6: 4b:f0:7c:00:6d:5d:d0:e2:51:8e:8b:65:4b:71:2a: 8f:fc:1c:cd:fc:57:23:2a:73:a7:c3:81:d7:b2:bb: 5c:b9:bc:d0:f4:c7:ae:5c:a0:a7:c2:eb:15:58:11: 3b:39:fc:52:3b:a9:7b:03:5e:ea:e2:57:d4:68:b4: cb:5e:db:17:2f:ac:2d:77:f7:82:f4:6d:98:33:68: bf:cf:a2:0a:b7:10:9e:8e:59:fc:3b:e0:2a:42:36: 41:d4:c0:fb:da:30:33:3c:af:23:df:c6:c7:63:d0: 59:a8:00:ff:09:9a:cc:e6:4b:b1:2f:b6:6b:11:46: 73:25:5b:97:35:82:df:5d:da:b4:90:8a:6e:4d:3a: ae:70:ed:8d:da:6d:e3:02:de:00:9d:c4:87:65:c8: b7:04:5f:3d:03:e4:ef:4b:80:41:ac:fa:4a:28:b9: 60:60:fd:ec:01:8a:fd:4b:87:77:7d:3c:13:f1:8f: 74:00:ef:2d:9c:95:6e:14:71:d5:18:a6:2c:23:c2: cd:57:ff:b1:b8:f9:ed:a9:84:b5:ed:16:ae:46:c0: 24:90:74:b1:bf:8e:ae:6c:b1:d6:75:37:b6:95:51: c0:39:c6:3e:cb:69:c3:69:06:d6:20:51:e6:e7:f5: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:75:4B:D4:34:71:EF:99:5A:C3:2F:F1:15:6E:66:26:C4:06:1D:25 X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/0XVL1DRx75lawy_xFW5mJsQGHSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.128.0/24 Signature Algorithm: sha256WithRSAEncryption 64:63:02:f7:08:4e:42:fe:97:5c:2c:7f:54:5e:6e:83:f6:00: 70:ba:05:1e:26:dd:22:86:99:de:78:45:25:55:55:59:1c:39: 60:ab:d8:77:52:56:db:ef:e9:7a:cc:38:e0:6c:fc:42:0a:7a: e6:69:26:43:07:13:da:e5:bb:83:26:23:61:83:f5:55:12:c4: b1:a8:b5:f1:b1:ef:78:f5:e5:a4:a3:bc:b6:cb:52:b7:c4:94: 9b:eb:a2:46:6c:67:56:e6:48:1f:29:f6:01:65:c5:86:61:13: 36:0d:68:44:90:d3:ef:3b:bd:35:79:39:38:74:8a:35:b6:e2: 82:1b:14:2a:5f:7e:82:c5:ec:c6:3f:8f:fc:23:66:f0:fd:a1: f8:de:55:2e:92:cd:dd:71:d4:bc:c7:d2:ff:bc:18:fe:5e:d8: ca:6e:f5:cc:52:77:78:9b:d0:47:fd:29:f6:e7:1c:d6:8c:96: e9:fe:d0:d8:84:b3:a2:b9:1f:b1:e0:78:2a:6e:e5:d3:62:c8: 21:5b:fe:d3:76:9f:5a:8a:40:66:19:10:f5:74:59:19:5f:16: bf:73:73:e6:ad:0d:be:2b:80:74:04:49:7a:bb:d0:54:0e:34: 24:ae:af:6e:8b:0e:7b:fb:e9:76:19:b4:14:e9:9d:7a:26:31: 65:32:a3:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppvFEL9Rt20bkMfkWD6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTc1NGJkNDM0NzFlZjk5NWFjMzJmZjExNTZlNjYyNmM0MDYxZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7mvahTOG9zHy5PzIPZL8HwAbV3Q 4lGOi2VLcSqP/BzN/FcjKnOnw4HXsrtcubzQ9MeuXKCnwusVWBE7OfxSO6l7A17q 4lfUaLTLXtsXL6wtd/eC9G2YM2i/z6IKtxCejln8O+AqQjZB1MD72jAzPK8j38bH Y9BZqAD/CZrM5kuxL7ZrEUZzJVuXNYLfXdq0kIpuTTqucO2N2m3jAt4AncSHZci3 BF89A+TvS4BBrPpKKLlgYP3sAYr9S4d3fTwT8Y90AO8tnJVuFHHVGKYsI8LNV/+x uPntqYS17RauRsAkkHSxv46ubLHWdTe2lVHAOcY+y2nDaQbWIFHm5/WSAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNF1S9Q0ce+ZWsMv8RVuZibEBh0lMB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvMFhWTDFEUng3NWxhd3lfeEZXNW1Kc1FHSFNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUmAMA0G CSqGSIb3DQEBCwUAA4IBAQBkYwL3CE5C/pdcLH9UXm6D9gBwugUeJt0ihpneeEUl VVVZHDlgq9h3Ulbb7+l6zDjgbPxCCnrmaSZDBxPa5buDJiNhg/VVEsSxqLXxse94 9eWko7y2y1K3xJSb66JGbGdW5kgfKfYBZcWGYRM2DWhEkNPvO701eTk4dIo1tuKC GxQqX36CxezGP4/8I2bw/aH43lUuks3dcdS8x9L/vBj+XtjKbvXMUnd4m9BH/Sn2 5xzWjJbp/tDYhLOiuR+x4HgqbuXTYsghW/7Tdp9aikBmGRD1dFkZXxa/c3PmrQ2+ K4B0BEl6u9BUDjQkrq9uiw57++l2GbQU6Z16JjFlMqN0 -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:30 2026 by rpki-client