This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-Xp-Ct4LcEU2Hu36KlWjLdypPWk.roa File: 1-Xp-Ct4LcEU2Hu36KlWjLdypPWk.roa (raw, json) Hash identifier: i+lVFTq9CtNBtX8TnMF/0PgBY8AGAPMeR0fInmwGYLM= Subject key identifier: F9:7A:7E:0A:DE:0B:70:45:36:1E:ED:FA:2A:55:A3:2D:DC:A9:3D:69 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B193567632BE45E2B51E05B7B6926 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-Xp-Ct4LcEU2Hu36KlWjLdypPWk.roa Signing time: Fri 02 Jan 2026 06:18:00 +0000 ROA not before: Fri 02 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200628 IP address blocks: 77.76.2.0/24 maxlen: 24 78.142.25.0/24 maxlen: 24 78.142.61.0/24 maxlen: 24 82.118.225.0/24 maxlen: 24 83.222.184.0/24 maxlen: 24 91.148.166.0/24 maxlen: 24 91.191.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:19:35:67:63:2b:e4:5e:2b:51:e0:5b:7b:69:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f97a7e0ade0b7045361eedfa2a55a32ddca93d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:36:19:1e:a8:f6:a1:37:15:60:8c:da:27: e3:30:e9:4d:1a:59:bc:a7:2e:72:7d:a4:29:d0:50: 02:2c:48:df:ec:9e:c4:3f:0b:50:45:77:92:9b:aa: 5c:2b:d2:36:4a:79:51:93:5c:a8:f8:99:f8:b2:4c: 82:94:ad:14:57:6f:80:00:15:2f:fd:1e:ff:02:a6: 12:c6:7b:91:bf:17:62:fa:e8:90:a4:0b:f0:0e:68: 75:a8:8b:af:c5:ac:19:db:ae:67:81:e5:8e:99:71: 0f:d4:64:17:30:59:a9:26:34:79:eb:df:66:c7:cf: 28:c2:c8:eb:17:b2:1f:8e:07:3b:5a:de:be:9a:b8: c8:60:e3:d9:e5:8e:c3:57:e6:dd:09:8c:8e:6d:24: 30:e9:7d:ef:00:a7:a6:4c:73:df:37:36:fd:2f:88: 1f:46:c7:59:c3:f2:ee:94:74:a5:26:67:2c:62:b6: c6:24:15:2f:1f:5a:c1:56:d2:4e:04:62:19:b2:53: 96:65:2f:1b:e6:57:9e:12:86:c3:34:02:aa:6a:12: 98:f9:3c:82:c3:f2:7f:55:84:cb:f0:42:19:32:01: d8:b0:49:6b:79:30:8e:f9:83:c5:30:85:55:e2:c0: 99:6b:6b:2f:1d:17:1f:2b:f2:11:3c:7c:5e:b2:4d: 65:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7A:7E:0A:DE:0B:70:45:36:1E:ED:FA:2A:55:A3:2D:DC:A9:3D:69 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-Xp-Ct4LcEU2Hu36KlWjLdypPWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.2.0/24 78.142.25.0/24 78.142.61.0/24 82.118.225.0/24 83.222.184.0/24 91.148.166.0/24 91.191.215.0/24 Signature Algorithm: sha256WithRSAEncryption be:28:a4:9e:46:ae:4a:e1:d3:83:89:8c:0e:f6:b5:0c:87:b1: 41:2c:5a:55:e1:b0:56:08:14:40:cd:3b:0e:88:58:18:c6:7b: 67:04:f2:e8:eb:fd:d2:21:dd:22:fc:11:e0:5c:fa:b7:74:92: 71:ef:43:bf:f6:03:e8:c2:a9:73:06:9f:9a:11:2b:02:34:5b: 5d:62:c5:3a:43:c6:58:62:7b:76:0a:cf:e6:6b:88:ca:f1:9b: 96:bb:77:dc:06:c9:58:3f:eb:ea:c7:6a:e5:4d:5e:34:9e:64: 37:36:35:a1:48:e8:1c:d3:e8:20:05:64:1b:3d:96:80:f6:ad: f4:1b:44:2c:9d:4a:e9:cc:96:fe:e9:e2:08:08:96:8f:e2:4d: 9b:e1:0a:1e:79:8f:ef:b1:99:b2:3a:ad:ba:d6:0f:65:7f:5f: 71:cd:89:71:ce:68:ac:17:58:81:74:38:a7:5d:ba:0e:e4:22: 9d:ab:ac:b2:06:94:9f:cc:1b:59:97:07:02:96:b3:8b:d9:14: b0:e1:0b:e1:fd:f8:f3:52:1e:e8:09:12:a8:ef:82:a8:29:be: 7e:d8:1c:22:64:41:23:5d:25:70:c8:c2:0c:b0:7e:ab:40:dc: b1:64:e2:da:7c:75:72:90:95:6a:1c:54:10:bc:46:38:30:2c: 12:c8:49:e1 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt9Wxk1Z2Mr5F4rUeBbe2kmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTdhN2UwYWRlMGI3MDQ1MzYxZWVkZmEyYTU1YTMyZGRjYTkzZDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNE2GR6o9qE3FWCM2ifjMOlNGlm8 py5yfaQp0FACLEjf7J7EPwtQRXeSm6pcK9I2SnlRk1yo+Jn4skyClK0UV2+AABUv /R7/AqYSxnuRvxdi+uiQpAvwDmh1qIuvxawZ265ngeWOmXEP1GQXMFmpJjR5699m x88owsjrF7Ifjgc7Wt6+mrjIYOPZ5Y7DV+bdCYyObSQw6X3vAKemTHPfNzb9L4gf RsdZw/LulHSlJmcsYrbGJBUvH1rBVtJOBGIZslOWZS8b5leeEobDNAKqahKY+TyC w/J/VYTL8EIZMgHYsElreTCO+YPFMIVV4sCZa2svHRcfK/IRPHxesk1lbQIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFPl6fgreC3BFNh7t+ipVoy3cqT1pMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvMS1YcC1DdDRMY0VVMkh1MzZLbFdqTGR5cFBXay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDMvY2NkZDhiLTc3MjAtNGRlMC04YzQzLWRhY2I1ZjM1NmVh My8xL3cxNnNaT3BJQXVhQ1JvYjN3TklCOHNoY3Nxby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAE1MAgME AE6OGQMEAE6OPQMEAFJ24QMEAFPeuAMEAFuUpgMEAFu/1zANBgkqhkiG9w0BAQsF AAOCAQEAviiknkauSuHTg4mMDva1DIexQSxaVeGwVggUQM07DohYGMZ7ZwTy6Ov9 0iHdIvwR4Fz6t3SSce9Dv/YD6MKpcwafmhErAjRbXWLFOkPGWGJ7dgrP5muIyvGb lrt33AbJWD/r6sdq5U1eNJ5kNzY1oUjoHNPoIAVkGz2WgPat9BtELJ1K6cyW/uni CAiWj+JNm+EKHnmP77GZsjqtutYPZX9fcc2Jcc5orBdYgXQ4p126DuQinaussgaU n8wbWZcHApazi9kUsOEL4f3481Ie6AkSqO+CqCm+ftgcImRBI10lcMjCDLB+q0Dc sWTi2nx1cpCVahxUELxGODAsEshJ4Q== -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:14 2026 by rpki-client