This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa File: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (raw, json) Hash identifier: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14= Subject key identifier: BE:1C:2A:BA:81:15:AD:FC:7D:64:53:C7:3A:5B:CA:A5:9D:5E:32:04 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 019B7EA69DC2DFA43A3F99DAE36CE2F2F374 Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa Signing time: Fri 02 Jan 2026 12:20:07 +0000 ROA not before: Fri 02 Jan 2026 12:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 77.73.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9d:c2:df:a4:3a:3f:99:da:e3:6c:e2:f2:f3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Jan 2 12:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be1c2aba8115adfc7d6453c73a5bcaa59d5e3204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:c0:df:f7:10:21:95:4a:42:e8:ae:a0:e9: 4f:86:67:47:74:89:7d:17:40:ce:5a:b8:7a:ea:e9: f0:2d:ff:b2:08:43:85:b9:ae:51:53:93:a3:c0:93: de:2c:58:e7:ed:cc:2b:6d:ea:03:df:29:7b:db:68: f4:89:6e:4d:14:90:82:1a:fb:5e:4b:3c:aa:45:e9: 06:42:a3:a6:79:d9:96:80:4c:5f:64:a0:7e:a1:e7: a2:a3:fd:12:0f:1f:7a:08:18:92:2d:5a:a3:2c:76: df:43:80:d8:65:21:7f:51:83:92:bb:04:28:95:a6: 8b:35:fd:c8:2d:0a:e9:33:7d:15:2b:b4:b1:cb:8e: e9:8e:14:84:21:55:16:f1:00:73:6f:91:82:c7:5e: f1:29:fd:e0:b8:9a:0c:89:72:23:f3:81:75:22:2f: aa:88:1b:8d:67:3d:7e:8a:79:12:8b:ca:48:41:28: e9:63:3c:78:bb:0c:75:3f:38:bf:f1:9b:4f:22:1d: 94:90:fa:d0:53:7b:fb:6e:8a:f1:45:86:f1:38:86: df:09:1e:ae:d6:61:b1:c7:2a:c5:3d:32:3c:1f:ce: e1:ad:ad:3e:d2:12:bf:c9:4e:f7:b3:8c:31:ac:4a: b5:15:1d:4d:24:f7:8b:03:fe:e2:b2:6b:18:b2:d9: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1C:2A:BA:81:15:AD:FC:7D:64:53:C7:3A:5B:CA:A5:9D:5E:32:04 X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.133.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:ee:e7:81:cc:d6:39:fe:fc:19:3d:58:32:ab:1d:37:e9:5c: 88:fa:9e:44:45:48:51:94:da:fe:fe:7e:4a:4d:a3:e2:21:9e: 6c:31:32:58:bc:cd:bb:78:d8:3e:d4:22:2d:b8:dd:69:69:fa: 7d:bf:34:8b:6f:1f:5c:0f:ed:63:fa:c0:a9:71:2b:07:47:28: 4f:ac:47:0a:46:32:db:ac:2c:ac:93:59:2e:d9:5a:aa:98:f4: 23:e0:a8:4c:68:44:0b:d3:81:c8:ed:20:0b:30:71:95:dd:45: cf:6f:47:4e:a8:d8:8c:1d:db:67:09:7f:dd:e3:a9:d5:d6:5a: 71:26:1e:1d:fa:33:46:a1:94:78:2e:a7:92:7d:1f:4c:02:77: f4:22:8e:4a:5a:41:c6:ef:d1:71:23:43:e6:25:37:4c:04:97: de:eb:42:05:d8:c1:8e:9f:ee:78:77:5b:8b:b7:f6:54:98:90: da:76:a0:8d:92:d9:06:00:c8:0c:5b:69:5b:ed:99:45:05:fa: 09:28:36:27:9b:31:2c:52:09:db:55:87:13:46:a0:45:ba:fd: c4:b2:0c:7f:f2:22:34:9b:e8:eb:58:50:d9:56:8b:20:83:76: f1:12:ad:bc:0f:7c:a5:bd:1e:ed:95:3e:d5:49:a3:4e:ee:2f: a4:9a:b2:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pp3C36Q6P5na42zi8vN0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjYwMTAyMTIyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTFjMmFiYTgxMTVhZGZjN2Q2NDUzYzczYTViY2FhNTlkNWUzMjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SbA3/cQIZVKQuiuoOlPhmdHdIl9 F0DOWrh66unwLf+yCEOFua5RU5OjwJPeLFjn7cwrbeoD3yl722j0iW5NFJCCGvte SzyqRekGQqOmedmWgExfZKB+oeeio/0SDx96CBiSLVqjLHbfQ4DYZSF/UYOSuwQo laaLNf3ILQrpM30VK7Sxy47pjhSEIVUW8QBzb5GCx17xKf3guJoMiXIj84F1Ii+q iBuNZz1+inkSi8pIQSjpYzx4uwx1Pzi/8ZtPIh2UkPrQU3v7borxRYbxOIbfCR6u 1mGxxyrFPTI8H87hra0+0hK/yU73s4wxrEq1FR1NJPeLA/7ismsYstn2lQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL4cKrqBFa38fWRTxzpbyqWdXjIEMB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvdmh3cXVvRVZyZng5WkZQSE9sdktwWjFlTWdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUmFMA0G CSqGSIb3DQEBCwUAA4IBAQCP7ueBzNY5/vwZPVgyqx036VyI+p5ERUhRlNr+/n5K TaPiIZ5sMTJYvM27eNg+1CItuN1pafp9vzSLbx9cD+1j+sCpcSsHRyhPrEcKRjLb rCysk1ku2VqqmPQj4KhMaEQL04HI7SALMHGV3UXPb0dOqNiMHdtnCX/d46nV1lpx Jh4d+jNGoZR4LqeSfR9MAnf0Io5KWkHG79FxI0PmJTdMBJfe60IF2MGOn+54d1uL t/ZUmJDadqCNktkGAMgMW2lb7ZlFBfoJKDYnmzEsUgnbVYcTRqBFuv3Esgx/8iI0 m+jrWFDZVosgg3bxEq28D3ylvR7tlT7VSaNO7i+kmrIb -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:51 2026 by rpki-client