This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/s5yjUfaGSDtwnS0HGkvdpxAQlFY.roa File: s5yjUfaGSDtwnS0HGkvdpxAQlFY.roa (raw, json) Hash identifier: 7UcsejFkmQZ6Y2bqiRrjB8dpik6mgi9yyW4Z199vG8E= Subject key identifier: B3:9C:A3:51:F6:86:48:3B:70:9D:2D:07:1A:4B:DD:A7:10:10:94:56 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F150ABA91D4925CFABA167B1DA0F630 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/s5yjUfaGSDtwnS0HGkvdpxAQlFY.roa Signing time: Fri 02 Jan 2026 14:20:43 +0000 ROA not before: Fri 02 Jan 2026 14:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212063 IP address blocks: 87.107.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:0a:ba:91:d4:92:5c:fa:ba:16:7b:1d:a0:f6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b39ca351f686483b709d2d071a4bdda710109456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:e4:97:f1:1a:82:49:db:03:ce:dc:62:c3: 7e:19:1f:20:3e:54:a4:dd:50:c4:d7:a2:7a:07:93: 8c:12:cf:a6:5e:a9:c8:4a:ae:d4:b5:b2:00:88:0c: e3:3f:00:51:eb:02:b1:23:bf:01:de:a3:07:c0:42: 76:25:36:36:c3:c9:bb:04:95:f2:65:67:94:52:b9: 19:cd:6f:98:cb:00:f4:aa:36:99:d0:bc:ac:5c:88: 67:22:42:bb:94:99:32:32:a5:76:f8:55:ca:c6:0a: 9a:d7:48:15:72:73:ef:31:06:72:01:7d:ec:01:5a: fd:1d:11:dd:f0:68:00:64:18:78:79:70:49:1a:41: ea:10:bd:06:6a:d2:9d:1e:f4:43:50:1f:59:8d:a9: 0a:b2:eb:bd:45:7d:23:ee:56:48:dd:51:d8:38:49: 8f:5e:ab:f9:cd:5c:92:f9:a3:25:1d:7f:a8:04:fd: 36:32:7b:31:f6:3e:18:32:fe:8a:f0:ae:d2:1b:91: 76:5f:f8:cf:fd:74:99:66:f2:a8:4e:95:cd:18:a3: f4:42:a6:81:cf:35:9e:e2:70:89:17:53:2d:a0:d1: 57:c4:56:fb:fb:a6:5e:5b:ab:21:82:ad:d2:a0:9a: f7:40:30:64:a7:09:23:85:5f:62:9d:47:4f:44:ee: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9C:A3:51:F6:86:48:3B:70:9D:2D:07:1A:4B:DD:A7:10:10:94:56 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/s5yjUfaGSDtwnS0HGkvdpxAQlFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.107.172.0/24 Signature Algorithm: sha256WithRSAEncryption 39:bc:90:d8:c9:dd:15:91:25:80:d8:8d:0b:fc:f6:00:ed:67: 4f:da:00:fb:6f:64:cd:f0:7b:5b:6d:83:6d:e1:c6:ad:ca:b4: 00:83:09:c2:e7:cd:12:0b:04:3f:8b:85:ae:7a:8c:f2:25:5c: eb:d3:2a:cb:53:48:e9:82:42:c3:98:ee:0e:af:8a:20:3d:76: ac:0b:90:a1:0b:18:b6:d1:e6:f4:26:07:c6:7c:af:da:39:99: 87:33:23:85:b8:57:67:b8:7c:6a:0b:99:96:51:6f:54:aa:78: 27:dd:a1:24:a6:d6:04:bd:9f:7f:28:ed:fb:60:17:08:7c:58: d4:cb:42:4f:be:e5:cd:58:34:8c:e3:88:0b:fb:bd:7d:35:62: 3a:d3:98:a3:4a:6f:e0:b4:77:6c:53:3f:46:ea:67:40:52:a8: 1a:73:3c:72:6a:c5:e9:ed:c1:f2:22:f4:2d:f0:94:c5:76:fc: 84:03:13:52:c0:88:8c:26:2a:c3:17:09:72:d8:f3:35:da:22: 29:8d:bf:72:6d:5a:ff:f6:ff:69:7d:12:a9:71:d0:56:40:09: 33:02:39:19:72:27:c1:6d:0a:19:4a:71:f1:39:ae:52:d5:3b: 7f:3d:cc:b3:6a:73:09:e8:e8:f4:5d:e6:e1:cf:b1:18:83:b6: 7d:c0:72:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQq6kdSSXPq6FnsdoPYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzljYTM1MWY2ODY0ODNiNzA5ZDJkMDcxYTRiZGRhNzEwMTA5NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyjkl/EagknbA87cYsN+GR8gPlSk 3VDE16J6B5OMEs+mXqnISq7UtbIAiAzjPwBR6wKxI78B3qMHwEJ2JTY2w8m7BJXy ZWeUUrkZzW+YywD0qjaZ0LysXIhnIkK7lJkyMqV2+FXKxgqa10gVcnPvMQZyAX3s AVr9HRHd8GgAZBh4eXBJGkHqEL0GatKdHvRDUB9ZjakKsuu9RX0j7lZI3VHYOEmP Xqv5zVyS+aMlHX+oBP02Mnsx9j4YMv6K8K7SG5F2X/jP/XSZZvKoTpXNGKP0QqaB zzWe4nCJF1MtoNFXxFb7+6ZeW6shgq3SoJr3QDBkpwkjhV9inUdPRO7aYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOco1H2hkg7cJ0tBxpL3acQEJRWMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvczV5alVmYUdTRHR3blMwSEdrdmRweEFRbEZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2usMA0G CSqGSIb3DQEBCwUAA4IBAQA5vJDYyd0VkSWA2I0L/PYA7WdP2gD7b2TN8HtbbYNt 4catyrQAgwnC580SCwQ/i4WueozyJVzr0yrLU0jpgkLDmO4Or4ogPXasC5ChCxi2 0eb0JgfGfK/aOZmHMyOFuFdnuHxqC5mWUW9Uqngn3aEkptYEvZ9/KO37YBcIfFjU y0JPvuXNWDSM44gL+719NWI605ijSm/gtHdsUz9G6mdAUqgaczxyasXp7cHyIvQt 8JTFdvyEAxNSwIiMJirDFwly2PM12iIpjb9ybVr/9v9pfRKpcdBWQAkzAjkZcifB bQoZSnHxOa5S1Tt/PcyzanMJ6Oj0Xebhz7EYg7Z9wHKX -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:56 2026 by rpki-client