This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/e9OVXRSbzNQf13RbQTlh13igYgM.roa File: e9OVXRSbzNQf13RbQTlh13igYgM.roa (raw, json) Hash identifier: r2tePYmkh+jGXI1UJWjqWc2c/q/1ZOM+w32r5mXWyNE= Subject key identifier: 7B:D3:95:5D:14:9B:CC:D4:1F:D7:74:5B:41:39:61:D7:78:A0:62:03 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 019B7EA69AB3FDE136A32469DA6078A538F0 Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/e9OVXRSbzNQf13RbQTlh13igYgM.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50386 IP address blocks: 77.73.130.0/24 maxlen: 24 77.73.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9a:b3:fd:e1:36:a3:24:69:da:60:78:a5:38:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bd3955d149bccd41fd7745b413961d778a06203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:91:e9:f0:b8:2a:d2:ff:1c:e9:a7:5a:bf:76: 1e:24:7a:d6:5e:73:20:ea:04:70:53:74:ff:ea:72: f8:86:00:79:71:27:35:6e:b5:a8:1b:4f:6f:f0:1f: 9b:ab:3d:a2:03:ff:51:1a:d9:b8:1a:e8:69:31:d8: e5:92:6a:fc:c0:09:00:79:3c:61:b4:ea:64:1c:f1: fc:1b:0a:67:ed:cf:0f:4b:e6:67:a6:b6:79:0b:25: 9a:d7:19:22:00:e9:6d:6a:16:76:e4:b3:3d:77:51: 49:f7:c1:65:e6:9e:aa:9d:8e:a4:a4:08:a6:f8:af: c3:e6:e7:10:ec:37:04:ea:c1:24:ea:e0:3a:c6:a5: 4b:b3:26:6f:90:18:d6:ed:32:6d:18:c6:83:2d:3a: 58:e8:32:38:e9:5f:e6:66:9e:64:ad:b3:ed:4d:7e: 43:9f:71:69:75:4a:a8:bf:47:eb:b6:fe:90:71:12: 04:01:b1:72:79:26:a2:36:c2:ec:b8:23:cc:d0:e0: 31:42:59:2d:cd:48:a3:a0:6f:3a:fd:58:00:9c:99: c2:6a:b5:e5:12:ab:f1:81:7b:68:a9:ed:b1:7f:bc: 3a:02:5e:7a:c7:6e:fa:28:a8:ef:24:cf:4e:e4:4c: d1:9f:c3:84:e8:97:72:52:3c:27:e1:d4:a6:1f:c9: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D3:95:5D:14:9B:CC:D4:1F:D7:74:5B:41:39:61:D7:78:A0:62:03 X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/e9OVXRSbzNQf13RbQTlh13igYgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.130.0/24 77.73.135.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:5a:58:1d:46:4e:e9:5b:e4:c8:af:ae:aa:78:f4:d7:a5:1c: 13:8b:2d:47:fd:d7:22:8e:c9:59:f2:f0:ca:20:b6:b3:4f:8d: 6a:30:ed:72:e0:62:33:ff:99:8a:14:37:0f:d2:2f:44:2c:ae: be:39:87:77:c3:43:b8:97:d2:a3:db:ae:ef:fe:06:e5:ea:7d: 48:f8:cc:28:59:00:c9:5d:41:ca:ae:7f:49:f4:ba:f2:cc:ca: 9a:6e:ac:2f:72:82:93:1a:f2:59:d0:da:06:45:01:f6:26:33: 25:51:a1:e9:e7:24:04:f4:51:d7:3c:25:2f:18:ab:2f:a5:a6: 7e:cd:2c:8e:ed:bf:fc:6f:ab:90:90:0c:99:b6:69:43:02:8b: ba:b4:9c:3b:2c:f0:3a:55:bc:34:a6:95:ab:33:88:a1:db:49: 5c:f3:4d:4f:09:01:05:94:04:ab:55:e4:2f:dc:0a:75:de:44: ad:a6:18:db:60:34:51:12:3f:49:6e:84:d7:c9:c2:f7:1e:6f: 54:08:84:68:fa:ce:3e:4b:8b:af:6f:26:cc:13:23:5d:24:03: 20:4e:9e:04:8c:20:58:1d:05:a5:b6:56:5a:b7:d5:2f:2d:21: a7:e5:aa:12:f3:1d:fe:a4:27:af:ee:6e:0f:43:ec:b8:42:99: b8:9a:69:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ppqz/eE2oyRp2mB4pTjwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmQzOTU1ZDE0OWJjY2Q0MWZkNzc0NWI0MTM5NjFkNzc4YTA2MjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpHp8Lgq0v8c6adav3YeJHrWXnMg 6gRwU3T/6nL4hgB5cSc1brWoG09v8B+bqz2iA/9RGtm4GuhpMdjlkmr8wAkAeTxh tOpkHPH8Gwpn7c8PS+ZnprZ5CyWa1xkiAOltahZ25LM9d1FJ98Fl5p6qnY6kpAim +K/D5ucQ7DcE6sEk6uA6xqVLsyZvkBjW7TJtGMaDLTpY6DI46V/mZp5krbPtTX5D n3FpdUqov0frtv6QcRIEAbFyeSaiNsLsuCPM0OAxQlktzUijoG86/VgAnJnCarXl EqvxgXtoqe2xf7w6Al56x276KKjvJM9O5EzRn8OE6JdyUjwn4dSmH8nw/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHvTlV0Um8zUH9d0W0E5Ydd4oGIDMB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvZTlPVlhSU2J6TlFmMTNSYlFUbGgxM2lnWWdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUmCAwQA TUmHMA0GCSqGSIb3DQEBCwUAA4IBAQA7WlgdRk7pW+TIr66qePTXpRwTiy1H/dci jslZ8vDKILazT41qMO1y4GIz/5mKFDcP0i9ELK6+OYd3w0O4l9Kj267v/gbl6n1I +MwoWQDJXUHKrn9J9LryzMqabqwvcoKTGvJZ0NoGRQH2JjMlUaHp5yQE9FHXPCUv GKsvpaZ+zSyO7b/8b6uQkAyZtmlDAou6tJw7LPA6Vbw0ppWrM4ih20lc801PCQEF lASrVeQv3Ap13kStphjbYDRREj9JboTXycL3Hm9UCIRo+s4+S4uvbybMEyNdJAMg Tp4EjCBYHQWltlZat9UvLSGn5aoS8x3+pCev7m4PQ+y4Qpm4mmmn -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:52 2026 by rpki-client