This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/d3LLrnyzc3kTdxqhtsRs6n4x2Hw.roa File: d3LLrnyzc3kTdxqhtsRs6n4x2Hw.roa (raw, json) Hash identifier: o/Zw8TJR2zh3mjJErGKkYa89KXSO9Ary8cFUvzEN6JY= Subject key identifier: 77:72:CB:AE:7C:B3:73:79:13:77:1A:A1:B6:C4:6C:EA:7E:31:D8:7C Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14F6727AAEEC9C7A23D354045701AD Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/d3LLrnyzc3kTdxqhtsRs6n4x2Hw.roa Signing time: Fri 02 Jan 2026 14:20:38 +0000 ROA not before: Fri 02 Jan 2026 14:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6736 IP address blocks: 81.12.12.0/24 maxlen: 24 87.107.116.0/24 maxlen: 24 87.107.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f6:72:7a:ae:ec:9c:7a:23:d3:54:04:57:01:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7772cbae7cb3737913771aa1b6c46cea7e31d87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:b5:c5:b7:10:48:74:16:38:03:50:e0:4c: e1:11:31:01:bc:98:c2:b6:3e:b7:65:a2:04:45:71: fe:5c:86:dc:fa:13:94:08:e2:c3:4e:a3:78:1c:b2: 93:8c:4c:52:59:7b:af:ab:f4:67:42:c6:8f:df:3f: ca:89:58:b7:57:2b:21:30:14:af:63:62:ba:52:ba: 61:e9:58:32:fa:ed:0f:bf:10:c9:b9:59:ef:42:0f: d7:20:74:ee:11:ba:f8:c0:c2:db:ba:9a:4b:d8:e8: a1:05:d9:e8:7b:7a:0f:05:77:cc:e3:b7:b8:af:11: 9b:99:bb:24:84:e9:42:b4:a9:a1:53:44:04:46:cd: d2:b6:fa:26:f8:6e:c6:17:9b:b3:06:7b:96:97:cd: b1:59:cc:0f:49:3f:7e:18:2a:00:b6:0d:50:a6:31: 3d:53:43:72:70:47:0b:18:dd:86:20:f0:68:f0:6f: 5f:39:2b:70:bf:e0:73:b8:8c:be:b0:55:9c:26:3e: 92:58:ea:82:ff:5f:ad:a5:67:3b:cc:00:52:a2:4b: 20:ae:f9:57:eb:88:9c:51:aa:47:98:92:6b:99:62: 4b:8d:34:0a:e2:24:9b:39:51:44:92:2c:6b:97:19: cc:9d:b5:4d:b0:52:4b:45:be:a1:30:a8:66:66:5c: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:72:CB:AE:7C:B3:73:79:13:77:1A:A1:B6:C4:6C:EA:7E:31:D8:7C X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/d3LLrnyzc3kTdxqhtsRs6n4x2Hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.12.12.0/24 87.107.116.0/23 Signature Algorithm: sha256WithRSAEncryption 11:2c:5a:e4:89:43:c6:d8:2d:2d:63:01:e2:4e:2c:55:eb:9a: 0a:26:32:77:ac:66:f0:32:30:e8:61:1f:32:45:28:df:ab:09: b2:9b:9a:6e:e5:17:8c:3e:a9:d3:d5:42:49:61:ff:86:2e:89: 40:cd:8d:22:d8:9f:c9:81:79:57:e0:63:28:be:20:93:d0:21: 49:0a:79:54:cc:aa:a2:ef:89:c4:d5:b8:45:8c:50:6b:d1:a8: 80:bb:b9:06:87:95:50:af:0e:5e:6e:1b:2d:e5:cf:0c:d3:46: df:14:cc:d5:fa:69:9b:ce:33:91:5b:09:92:be:58:6a:d6:ee: e5:87:0e:ad:a5:76:72:38:cc:3f:b7:7c:02:6e:40:99:d0:eb: b4:6e:95:d4:a5:d2:1c:14:73:36:b0:e2:e5:84:2b:b6:37:d9: 5b:89:7b:6e:2b:9d:df:c6:34:92:b2:16:b9:81:65:f3:7a:5f: 17:03:37:c7:af:6e:d0:e4:7e:a8:1d:3b:57:de:7f:67:95:61: b2:12:1f:85:eb:03:dd:ed:52:55:37:98:9b:cf:fa:fe:81:45: 96:08:3a:d3:9b:1b:d5:5a:36:82:97:83:ba:f7:98:87:92:74: f0:04:a4:b1:70:da:ac:f0:21:db:37:f3:ea:08:94:5c:4d:37: 73:fa:bd:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FPZyeq7snHoj01QEVwGtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzcyY2JhZTdjYjM3Mzc5MTM3NzFhYTFiNmM0NmNlYTdlMzFkODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ+1xbcQSHQWOANQ4EzhETEBvJjC tj63ZaIERXH+XIbc+hOUCOLDTqN4HLKTjExSWXuvq/RnQsaP3z/KiVi3VyshMBSv Y2K6Urph6Vgy+u0PvxDJuVnvQg/XIHTuEbr4wMLbuppL2OihBdnoe3oPBXfM47e4 rxGbmbskhOlCtKmhU0QERs3Stvom+G7GF5uzBnuWl82xWcwPST9+GCoAtg1QpjE9 U0NycEcLGN2GIPBo8G9fOStwv+BzuIy+sFWcJj6SWOqC/1+tpWc7zABSoksgrvlX 64icUapHmJJrmWJLjTQK4iSbOVFEkixrlxnMnbVNsFJLRb6hMKhmZlwR0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHdyy658s3N5E3caobbEbOp+Mdh8MB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvZDNMTHJueXpjM2tUZHhxaHRzUnM2bjR4Mkh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQwMAwQB V2t0MA0GCSqGSIb3DQEBCwUAA4IBAQARLFrkiUPG2C0tYwHiTixV65oKJjJ3rGbw MjDoYR8yRSjfqwmym5pu5ReMPqnT1UJJYf+GLolAzY0i2J/JgXlX4GMoviCT0CFJ CnlUzKqi74nE1bhFjFBr0aiAu7kGh5VQrw5ebhst5c8M00bfFMzV+mmbzjORWwmS vlhq1u7lhw6tpXZyOMw/t3wCbkCZ0Ou0bpXUpdIcFHM2sOLlhCu2N9lbiXtuK53f xjSSsha5gWXzel8XAzfHr27Q5H6oHTtX3n9nlWGyEh+F6wPd7VJVN5ibz/r+gUWW CDrTmxvVWjaCl4O695iHknTwBKSxcNqs8CHbN/PqCJRcTTdz+r1J -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:56 2026 by rpki-client