This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/pwdC62gkqsaOdZsh49oPYeCWr1c.roa File: pwdC62gkqsaOdZsh49oPYeCWr1c.roa (raw, json) Hash identifier: iUcftLIu9lmAMEaNcTSPJO0/lKAr8RF1ZPmfLOFzXsg= Subject key identifier: A7:07:42:EB:68:24:AA:C6:8E:75:9B:21:E3:DA:0F:61:E0:96:AF:57 Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Certificate serial: 019B7A5B6A6065182286883C34DB4DB0550A Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/pwdC62gkqsaOdZsh49oPYeCWr1c.roa Signing time: Thu 01 Jan 2026 16:19:29 +0000 ROA not before: Thu 01 Jan 2026 16:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57626 IP address blocks: 77.87.56.0/21 maxlen: 24 91.123.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6a:60:65:18:22:86:88:3c:34:db:4d:b0:55:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a70742eb6824aac68e759b21e3da0f61e096af57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:12:41:b7:d3:95:17:5d:a3:47:05:1a:48:53: 18:4a:43:35:74:3c:27:16:27:7b:d1:64:76:64:6e: 0a:3b:44:85:02:a7:bc:3b:fe:32:d8:f3:70:16:ea: 3f:5e:29:e5:04:98:1c:cb:cb:fb:57:b2:c3:eb:2e: 46:fc:bf:e1:35:86:0b:15:23:6e:bc:a8:3d:51:99: c1:30:2c:64:5d:e5:8e:9f:24:42:5f:ad:e2:84:5b: 7c:68:5f:fc:de:11:be:da:b1:54:5c:c5:8a:4b:2f: f7:1d:4f:67:54:ad:fa:de:a2:55:d4:9a:29:94:8a: 13:b6:51:39:4b:5b:aa:20:88:65:c5:53:74:f5:b3: 22:f3:de:5a:16:61:35:1a:03:77:b1:a7:3f:f8:ee: ec:3f:36:2a:b8:4b:f4:75:a0:27:a6:17:5e:e0:cd: 69:c5:8c:01:a4:38:96:76:92:74:2c:11:c7:49:11: fd:f8:c6:94:06:d6:c8:90:2a:16:5d:2b:c1:82:10: b2:f8:18:e9:e8:03:9b:84:14:ad:4a:28:f7:44:16: ff:7a:10:44:3b:97:a4:67:65:61:8a:af:c6:b0:c7: 40:20:66:78:c0:4c:41:71:56:2c:8b:70:07:cb:de: a6:28:cd:f8:3d:e8:33:f6:ed:03:0c:55:48:d3:cd: 55:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:07:42:EB:68:24:AA:C6:8E:75:9B:21:E3:DA:0F:61:E0:96:AF:57 X509v3 Authority Key Identifier: keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/pwdC62gkqsaOdZsh49oPYeCWr1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.56.0/21 91.123.240.0/20 Signature Algorithm: sha256WithRSAEncryption 3c:ae:9e:9b:7c:d4:d4:b2:dc:67:f3:c4:51:1c:e5:23:36:76: 18:e8:7b:7f:ad:fc:e5:b1:34:c3:05:71:3c:2c:6e:cb:55:3b: 2c:62:c2:7d:f3:bb:24:08:c8:f4:47:1a:d1:8a:da:10:56:d2: fe:30:07:6b:76:03:04:c4:b8:d7:5e:a4:30:96:20:55:12:19: fe:f2:b0:bc:de:17:e7:bb:d9:d9:67:cf:32:80:79:69:8c:d0: a5:b6:63:b5:39:4c:fa:e9:e6:b0:4e:c6:d2:a8:64:c3:d8:e7: e6:2a:c4:9a:bd:17:f2:22:df:40:04:2b:ae:dc:75:c2:e5:d4: 3f:5b:12:9e:40:44:6e:44:4e:57:93:2a:c5:63:58:62:dc:db: 85:34:b3:80:0e:f5:e7:7f:fe:3f:20:bf:8e:93:1e:05:4e:9d: f2:55:6d:f3:ea:39:4b:85:49:f5:97:03:c6:17:d1:5c:12:58: a9:1f:0d:f7:cb:d9:cb:62:45:81:5e:0b:50:5a:fd:72:04:a3: a5:bb:82:38:ea:56:1f:72:24:b2:42:23:9b:4e:c9:10:bc:94: c5:53:f7:ca:1a:e1:e7:e9:2f:74:15:92:19:c2:57:fc:c9:a4: 15:5b:0b:e0:53:30:a3:6d:8e:a6:87:72:c1:dc:f9:d9:2e:dc: 15:85:df:5b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W2pgZRgihog8NNtNsFUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0 M2UxMGMwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzA3NDJlYjY4MjRhYWM2OGU3NTliMjFlM2RhMGY2MWUwOTZhZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hJBt9OVF12jRwUaSFMYSkM1dDwn Fid70WR2ZG4KO0SFAqe8O/4y2PNwFuo/XinlBJgcy8v7V7LD6y5G/L/hNYYLFSNu vKg9UZnBMCxkXeWOnyRCX63ihFt8aF/83hG+2rFUXMWKSy/3HU9nVK363qJV1Jop lIoTtlE5S1uqIIhlxVN09bMi895aFmE1GgN3sac/+O7sPzYquEv0daAnphde4M1p xYwBpDiWdpJ0LBHHSRH9+MaUBtbIkCoWXSvBghCy+Bjp6AObhBStSij3RBb/ehBE O5ekZ2Vhiq/GsMdAIGZ4wExBcVYsi3AHy96mKM34Pegz9u0DDFVI081VgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKcHQutoJKrGjnWbIePaD2Hglq9XMB8GA1UdIwQY MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt YzkyN2I4YzJjN2M0LzEvcHdkQzYyZ2txc2FPZFpzaDQ5b1BZZUNXcjFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0 LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDTVc4AwQE W3vwMA0GCSqGSIb3DQEBCwUAA4IBAQA8rp6bfNTUstxn88RRHOUjNnYY6Ht/rfzl sTTDBXE8LG7LVTssYsJ987skCMj0RxrRitoQVtL+MAdrdgMExLjXXqQwliBVEhn+ 8rC83hfnu9nZZ88ygHlpjNCltmO1OUz66eawTsbSqGTD2OfmKsSavRfyIt9ABCuu 3HXC5dQ/WxKeQERuRE5XkyrFY1hi3NuFNLOADvXnf/4/IL+Okx4FTp3yVW3z6jlL hUn1lwPGF9FcElipHw33y9nLYkWBXgtQWv1yBKOlu4I46lYfciSyQiObTskQvJTF U/fKGuHn6S90FZIZwlf8yaQVWwvgUzCjbY6mh3LB3PnZLtwVhd9b -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:09 2026 by rpki-client