This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/2QUxpcZo42MO8NPw3ViO527hXWk.roa File: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (raw, json) Hash identifier: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18= Subject key identifier: D9:05:31:A5:C6:68:E3:63:0E:F0:D3:F0:DD:58:8E:E7:6E:E1:5D:69 Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1 Certificate serial: 019B7AC933EBBBD9D802AC1385C6EECB7043 Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/2QUxpcZo42MO8NPw3ViO527hXWk.roa Signing time: Thu 01 Jan 2026 18:19:24 +0000 ROA not before: Thu 01 Jan 2026 18:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211827 IP address blocks: 77.94.225.0/24 maxlen: 24 77.94.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:33:eb:bb:d9:d8:02:ac:13:85:c6:ee:cb:70:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d90531a5c668e3630ef0d3f0dd588ee76ee15d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:1f:5e:1d:19:e8:0a:42:d9:6e:42:7d:f5: 22:7f:13:ff:a4:80:0e:fd:9e:5c:1a:8c:5f:28:4c: d1:15:63:1f:e6:03:9c:49:47:02:19:7c:27:40:ba: 2f:ff:52:6a:d5:a2:2a:d6:c6:4f:1a:c9:4f:83:92: 9a:4a:d1:dc:4f:a8:b8:2d:21:e6:5f:2a:ce:f8:be: d9:26:b7:64:9c:23:e9:20:b6:a3:0b:9b:0e:97:74: 8f:b3:16:5c:3f:11:dc:e2:bd:a0:60:0f:8d:ff:33: b3:cc:64:eb:6d:2d:33:f9:d3:ca:c0:a7:cf:c8:00: 56:00:36:e4:83:0e:4b:c1:71:7d:d8:15:1a:c1:7c: 04:24:0b:ce:5f:83:e2:6c:ed:aa:c2:de:10:80:75: 80:a2:d4:be:ba:d5:c3:0e:07:eb:a8:2f:2d:0a:ba: b1:f7:fd:3c:4b:7d:f8:1e:ee:c4:52:8b:9a:8a:29: a8:6e:d7:38:82:93:68:f6:09:b9:b2:c9:55:56:be: 61:fa:6c:40:36:5d:b4:e2:67:e2:04:34:ff:6d:13: 4b:01:61:64:0a:7e:37:c7:d4:b7:2b:4c:b8:8c:e9: 4a:f4:de:4e:1f:d5:b0:38:f8:73:29:a6:53:f4:ff: b1:9a:b2:3d:f2:d1:5e:56:89:fa:7d:1b:07:84:bc: a7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:05:31:A5:C6:68:E3:63:0E:F0:D3:F0:DD:58:8E:E7:6E:E1:5D:69 X509v3 Authority Key Identifier: keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/2QUxpcZo42MO8NPw3ViO527hXWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.94.225.0/24 77.94.230.0/23 Signature Algorithm: sha256WithRSAEncryption 59:02:28:45:8d:1d:d1:0d:ef:6e:cf:08:07:16:c3:ea:e0:c5: fe:9a:0b:1f:da:68:d9:2c:ff:56:35:6b:ab:e3:5f:b7:d5:6e: 9c:69:bb:1d:ca:02:e7:a9:b3:ea:33:68:54:34:43:99:65:98: 61:7a:2b:96:9f:5f:aa:02:e4:89:e2:e9:04:e9:01:32:90:29: 0b:80:c3:26:08:f6:fc:30:c5:0f:ad:b4:f2:a5:e7:c1:c9:82: df:81:7c:e1:a5:98:e4:ec:0d:3a:0d:45:a1:39:f7:91:5c:e5: 14:1c:f7:77:ce:2c:ef:b9:4c:2a:54:89:b4:60:78:c7:83:12: a4:d4:30:ae:6d:63:d1:a0:a4:89:fb:02:f2:27:c3:b1:ce:a7: d5:5c:21:cc:77:05:2d:62:19:44:af:76:b6:6e:e5:ff:81:11: e0:b0:e7:a8:5b:d8:4b:a3:ed:b5:1a:15:7c:1d:3f:dc:13:7b: 7d:07:83:46:fa:a1:20:d7:e0:22:08:1c:dc:91:97:f8:ce:61: fe:6c:db:3f:a2:ad:25:34:c2:89:15:ed:e6:a3:e7:cc:66:d5: 01:b0:ce:bb:8d:75:b6:5a:a9:8b:2b:44:3c:17:01:8e:d5:45: c4:b8:84:0a:98:c2:9d:25:af:44:a6:87:77:a7:2a:67:03:81: 17:77:04:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yTPru9nYAqwThcbuy3BDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZjU0YjE4NzlhMTQ1Mzk3ZmFjMGQzNThlZmFiZDJmNWZk MGFjYTEwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTA1MzFhNWM2NjhlMzYzMGVmMGQzZjBkZDU4OGVlNzZlZTE1ZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEcfXh0Z6ApC2W5CffUifxP/pIAO /Z5cGoxfKEzRFWMf5gOcSUcCGXwnQLov/1Jq1aIq1sZPGslPg5KaStHcT6i4LSHm XyrO+L7ZJrdknCPpILajC5sOl3SPsxZcPxHc4r2gYA+N/zOzzGTrbS0z+dPKwKfP yABWADbkgw5LwXF92BUawXwEJAvOX4PibO2qwt4QgHWAotS+utXDDgfrqC8tCrqx 9/08S334Hu7EUouaiimobtc4gpNo9gm5sslVVr5h+mxANl204mfiBDT/bRNLAWFk Cn43x9S3K0y4jOlK9N5OH9WwOPhzKaZT9P+xmrI98tFeVon6fRsHhLyniQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNkFMaXGaONjDvDT8N1Yjudu4V1pMB8GA1UdIwQY MBaAFP31Sxh5oUU5f6wNNY76vS9f0KyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUt NzExODZlMmI1MTZhLzEvMlFVeHBjWm80Mk1POE5QdzNWaU81MjdoWFdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUtNzExODZlMmI1MTZh LzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATV7hAwQB TV7mMA0GCSqGSIb3DQEBCwUAA4IBAQBZAihFjR3RDe9uzwgHFsPq4MX+mgsf2mjZ LP9WNWur41+31W6cabsdygLnqbPqM2hUNEOZZZhheiuWn1+qAuSJ4ukE6QEykCkL gMMmCPb8MMUPrbTypefByYLfgXzhpZjk7A06DUWhOfeRXOUUHPd3zizvuUwqVIm0 YHjHgxKk1DCubWPRoKSJ+wLyJ8OxzqfVXCHMdwUtYhlEr3a2buX/gRHgsOeoW9hL o+21GhV8HT/cE3t9B4NG+qEg1+AiCBzckZf4zmH+bNs/oq0lNMKJFe3mo+fMZtUB sM67jXW2WqmLK0Q8FwGO1UXEuIQKmMKdJa9Epod3pypnA4EXdwRG -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:25 2026 by rpki-client