This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/cvR0KFYZbunlt9mAluFg-0NprAE.roa File: cvR0KFYZbunlt9mAluFg-0NprAE.roa (raw, json) Hash identifier: vqXO2BnowG9HC7ndEFRsnPFK2kdAvmdQUm6N8AhZjT0= Subject key identifier: 72:F4:74:28:56:19:6E:E9:E5:B7:D9:80:96:E1:60:FB:43:69:AC:01 Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f Certificate serial: 019B7834995A25CA0DA516B80D39D0F475D1 Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/cvR0KFYZbunlt9mAluFg-0NprAE.roa Signing time: Thu 01 Jan 2026 06:17:51 +0000 ROA not before: Thu 01 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31400 IP address blocks: 77.37.0.0/17 maxlen: 17 2a01:4d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:99:5a:25:ca:0d:a5:16:b8:0d:39:d0:f4:75:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f Validity Not Before: Jan 1 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72f4742856196ee9e5b7d98096e160fb4369ac01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:ed:c1:2c:f3:24:37:d8:72:7e:08:d7:8d: 53:f2:8c:b7:2f:d9:61:29:9a:07:60:7b:8e:30:c2: 24:b5:88:34:6b:1a:83:be:3e:e8:6a:b7:85:f5:f1: 84:95:0e:99:0d:61:0b:fc:51:4c:e7:0f:4b:88:68: 17:8b:11:2a:5d:39:0f:fc:61:a3:43:fa:16:76:18: 1e:07:99:cb:ca:03:ca:24:7e:6e:fb:ab:2e:a7:a4: 36:ea:30:55:81:da:ac:57:fe:9b:8a:2e:58:80:ab: dc:40:ed:d5:ed:b4:c4:46:b4:95:60:9e:13:48:5d: 2b:bc:dd:f4:c4:8f:fc:6b:ce:f8:dc:46:18:ab:3f: b3:a6:23:0b:3e:e0:31:8b:92:25:37:bb:1d:26:ef: d4:1f:d9:e2:21:f9:ef:bc:2a:e0:07:bf:52:4b:0f: c1:23:86:36:f6:32:b0:d1:b7:05:e8:8f:02:fe:d8: c8:8d:f0:30:d2:36:1e:08:7f:34:66:a5:19:21:75: ab:c9:39:5c:5e:55:43:8e:74:70:d0:2a:58:a3:26: 04:59:4b:70:49:8a:ee:ff:b9:d3:2d:12:16:11:ef: 63:61:13:2e:2e:23:b5:2d:96:70:30:2b:31:0b:01: 3f:8a:34:cc:3e:b4:f3:f9:a9:07:5c:f5:ca:a6:7a: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F4:74:28:56:19:6E:E9:E5:B7:D9:80:96:E1:60:FB:43:69:AC:01 X509v3 Authority Key Identifier: keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/cvR0KFYZbunlt9mAluFg-0NprAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.37.0.0/17 IPv6: 2a01:4d0::/32 Signature Algorithm: sha256WithRSAEncryption 31:74:ee:56:85:4b:cf:2e:6d:35:3d:4c:83:25:75:37:46:85: 3d:e4:d3:68:09:ce:3c:36:66:65:90:9d:55:40:5d:1d:90:d1: 36:d1:2d:89:f4:3c:a3:ef:ad:a0:04:c1:7f:69:fd:b4:a0:eb: 94:c0:e3:dc:7d:0b:ba:6d:7b:32:d3:c7:35:05:7e:dc:69:13: 1a:ad:74:4b:3a:e4:fd:94:3c:cb:2a:2b:8a:c9:89:49:26:f9: 94:9b:66:bd:9a:74:ac:dd:a0:48:d5:2b:72:ce:09:29:0d:8e: 7e:40:6c:47:1f:6f:e2:3a:77:31:6c:84:20:a4:28:96:59:e8: d6:bd:3c:8b:4a:47:18:48:d6:45:e7:49:ad:53:27:7c:e1:43: 1e:76:84:bc:1c:06:2c:40:1b:78:51:c4:be:71:21:2e:88:27: 29:bf:dd:d3:71:76:ad:2f:85:4a:08:53:49:12:90:6e:ba:14: 8a:1a:fc:a7:41:05:82:cd:a5:0b:76:6d:e3:26:e0:de:0f:cf: 8c:c3:72:65:07:b4:3b:8f:9f:f0:83:44:57:aa:91:5c:c0:d5: 1c:3e:ff:f2:66:83:c4:e6:07:32:07:42:fc:27:ea:95:f6:b0: 2b:68:79:de:63:84:89:71:69:30:5a:43:81:86:8f:c9:4f:93: bf:28:d1:84 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NJlaJcoNpRa4DTnQ9HXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2 ZGRlNmYwHhcNMjYwMTAxMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmY0NzQyODU2MTk2ZWU5ZTViN2Q5ODA5NmUxNjBmYjQzNjlhYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU7twSzzJDfYcn4I141T8oy3L9lh KZoHYHuOMMIktYg0axqDvj7oareF9fGElQ6ZDWEL/FFM5w9LiGgXixEqXTkP/GGj Q/oWdhgeB5nLygPKJH5u+6sup6Q26jBVgdqsV/6bii5YgKvcQO3V7bTERrSVYJ4T SF0rvN30xI/8a8743EYYqz+zpiMLPuAxi5IlN7sdJu/UH9niIfnvvCrgB79SSw/B I4Y29jKw0bcF6I8C/tjIjfAw0jYeCH80ZqUZIXWryTlcXlVDjnRw0CpYoyYEWUtw SYru/7nTLRIWEe9jYRMuLiO1LZZwMCsxCwE/ijTMPrTz+akHXPXKpnp9/wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHL0dChWGW7p5bfZgJbhYPtDaawBMB8GA1UdIwQY MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt NDQxNDU1OGZkY2JiLzEvY3ZSMEtGWVpidW5sdDltQWx1RmctME5wckFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHTSUAMA0E AgACMAcDBQAqAQTQMA0GCSqGSIb3DQEBCwUAA4IBAQAxdO5WhUvPLm01PUyDJXU3 RoU95NNoCc48NmZlkJ1VQF0dkNE20S2J9Dyj762gBMF/af20oOuUwOPcfQu6bXsy 08c1BX7caRMarXRLOuT9lDzLKiuKyYlJJvmUm2a9mnSs3aBI1StyzgkpDY5+QGxH H2/iOncxbIQgpCiWWejWvTyLSkcYSNZF50mtUyd84UMedoS8HAYsQBt4UcS+cSEu iCcpv93TcXatL4VKCFNJEpBuuhSKGvynQQWCzaULdm3jJuDeD8+Mw3JlB7Q7j5/w g0RXqpFcwNUcPv/yZoPE5gcyB0L8J+qV9rAraHneY4SJcWkwWkOBho/JT5O/KNGE -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:06 2026 by rpki-client