This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/VmIcZRCirpwpk3EW3jn_rDgxBbc.roa File: VmIcZRCirpwpk3EW3jn_rDgxBbc.roa (raw, json) Hash identifier: GaVqilTYmg+leas5Zf/2DamTASeEyu9nsNNYOHaVeqo= Subject key identifier: 56:62:1C:65:10:A2:AE:9C:29:93:71:16:DE:39:FF:AC:38:31:05:B7 Certificate issuer: /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61 Certificate serial: 019B7834B7B927422919989CBB56C51EF974 Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/VmIcZRCirpwpk3EW3jn_rDgxBbc.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210727 IP address blocks: 46.253.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b7:b9:27:42:29:19:98:9c:bb:56:c5:1e:f9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61 Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=56621c6510a2ae9c29937116de39ffac383105b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:27:d1:d4:c8:df:df:2e:be:db:68:96:6d:c3: d3:93:17:ee:dd:d9:d4:9c:2b:ba:c8:87:d6:41:b3: 17:a2:ce:60:e1:1d:a9:bf:78:7c:97:e1:ab:63:ef: b6:c6:03:16:76:6a:c4:53:e7:29:fc:5d:f0:78:72: 62:bf:a1:e4:53:50:c5:57:01:c8:71:be:84:8e:60: 00:c9:cd:93:fd:ab:08:6d:37:3a:04:57:4f:ff:62: 59:3c:97:11:d8:03:bd:0b:d9:9c:7b:d6:cb:2c:f3: 32:f0:32:0d:48:ff:d0:d7:50:e1:c5:27:26:6e:82: 88:24:92:e0:c7:a3:00:47:07:ba:12:5d:e1:da:2f: cb:2b:ad:65:58:b7:e8:58:cd:22:25:b2:ac:b0:45: 25:f9:67:7e:04:eb:73:24:e0:9e:45:d1:61:97:c4: 71:c2:9e:20:41:d4:1c:0e:67:1b:29:39:93:c4:e4: 55:db:79:a0:a7:e0:f9:a5:b0:96:68:f2:3b:45:69: af:0e:1a:55:32:bd:e2:90:22:ea:f7:6f:39:25:a3: 44:a5:36:33:a0:fd:9c:f1:65:c0:f2:3a:cb:36:0b: 41:b7:f4:66:42:0a:e2:bc:ef:d2:b9:c1:5c:29:1f: 33:bc:d5:2f:c1:9b:f2:22:1f:82:31:98:a7:0a:1f: 7b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:62:1C:65:10:A2:AE:9C:29:93:71:16:DE:39:FF:AC:38:31:05:B7 X509v3 Authority Key Identifier: keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/VmIcZRCirpwpk3EW3jn_rDgxBbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.129.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:5f:08:50:91:e9:f8:92:4b:e9:13:d8:e2:33:e9:2a:d1:d3: 97:c8:b7:2a:90:a3:00:1a:35:c4:1a:a9:d9:c9:65:64:65:8b: ad:39:1b:61:08:f5:c5:41:5b:ba:02:c1:48:0c:1e:e7:d1:3d: 3d:a6:0e:35:96:76:de:de:ba:d7:cb:f0:a7:45:10:80:3c:e6: b7:f2:41:30:37:f0:30:74:b4:0d:d2:07:d9:c8:2e:3b:d1:ca: 8c:0d:88:69:ad:be:56:bb:3d:dd:1b:2a:d2:99:f6:df:56:69: 24:55:4a:e8:d0:ef:1c:6a:2f:74:62:a1:6d:d5:97:75:8f:9d: e2:9e:80:0f:05:55:c7:02:11:06:4e:19:d5:ee:71:7c:40:18: 41:b3:5b:f4:61:b4:9a:7d:9d:e2:ce:20:34:07:9f:bf:0c:ea: c2:dd:31:70:c8:c9:2b:0f:89:a6:d6:b3:5f:af:61:89:c7:55: 32:33:80:ce:90:48:ef:7f:c3:cd:ab:bd:13:81:f3:ef:c0:1f: 82:a9:37:78:71:a9:fe:ed:01:ed:74:e4:60:3c:92:ce:51:de: ae:f6:ef:5e:b2:47:a6:35:92:b4:fe:dc:8d:a3:e2:2c:71:7b: 77:b9:23:0e:eb:8c:28:28:57:14:89:4f:a2:5e:46:d9:5b:68: b1:6b:4f:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLe5J0IpGZicu1bFHvl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmM1MzRiYTQ0ZTlkM2NiYTJmMjQ0NmQ0YTNkZDZlZWE5 YjhmNjEwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjYyMWM2NTEwYTJhZTljMjk5MzcxMTZkZTM5ZmZhYzM4MzEwNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCfR1Mjf3y6+22iWbcPTkxfu3dnU nCu6yIfWQbMXos5g4R2pv3h8l+GrY++2xgMWdmrEU+cp/F3weHJiv6HkU1DFVwHI cb6EjmAAyc2T/asIbTc6BFdP/2JZPJcR2AO9C9mce9bLLPMy8DINSP/Q11DhxScm boKIJJLgx6MARwe6El3h2i/LK61lWLfoWM0iJbKssEUl+Wd+BOtzJOCeRdFhl8Rx wp4gQdQcDmcbKTmTxORV23mgp+D5pbCWaPI7RWmvDhpVMr3ikCLq9285JaNEpTYz oP2c8WXA8jrLNgtBt/RmQgrivO/SucFcKR8zvNUvwZvyIh+CMZinCh97OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFZiHGUQoq6cKZNxFt45/6w4MQW3MB8GA1UdIwQY MBaAFHe8U0ukTp08ui8kRtSj3W7qm49hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODIt OWIyNTdmNGZlYThkLzEvVm1JY1pSQ2lycHdwazNFVzNqbl9yRGd4QmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8yZmRkNTYtYmEyYy00NmZiLTk4ODItOWIyNTdmNGZlYThk LzEvZDd4VFM2Uk9uVHk2THlSRzFLUGRidXFiajJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv2BMA0G CSqGSIb3DQEBCwUAA4IBAQANXwhQken4kkvpE9jiM+kq0dOXyLcqkKMAGjXEGqnZ yWVkZYutORthCPXFQVu6AsFIDB7n0T09pg41lnbe3rrXy/CnRRCAPOa38kEwN/Aw dLQN0gfZyC470cqMDYhprb5Wuz3dGyrSmfbfVmkkVUro0O8cai90YqFt1Zd1j53i noAPBVXHAhEGThnV7nF8QBhBs1v0YbSafZ3iziA0B5+/DOrC3TFwyMkrD4mm1rNf r2GJx1UyM4DOkEjvf8PNq70TgfPvwB+CqTd4can+7QHtdORgPJLOUd6u9u9eskem NZK0/tyNo+IscXt3uSMO64woKFcUiU+iXkbZW2ixa09q -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:00 2026 by rpki-client