This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/Rj99-jmr9OLsds1gjtYoMoahzWE.roa File: Rj99-jmr9OLsds1gjtYoMoahzWE.roa (raw, json) Hash identifier: BerfWWa8JJTTIBBejFshsYqyyv1vjZIv4evRBKzTHSU= Subject key identifier: 46:3F:7D:FA:39:AB:F4:E2:EC:76:CD:60:8E:D6:28:32:86:A1:CD:61 Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf Certificate serial: 019B7BA4B36CF1CE9981CB42320BD6E8FAE7 Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/Rj99-jmr9OLsds1gjtYoMoahzWE.roa Signing time: Thu 01 Jan 2026 22:19:09 +0000 ROA not before: Thu 01 Jan 2026 22:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201346 IP address blocks: 185.77.132.0/24 maxlen: 24 185.77.133.0/24 maxlen: 24 185.77.134.0/24 maxlen: 24 185.77.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b3:6c:f1:ce:99:81:cb:42:32:0b:d6:e8:fa:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf Validity Not Before: Jan 1 22:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=463f7dfa39abf4e2ec76cd608ed6283286a1cd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:ff:cc:c4:63:87:de:03:1e:30:62:9d:cf: a8:50:a1:96:38:92:0a:aa:75:0b:81:47:d6:e7:24: 2b:b6:a2:a3:5f:51:e2:18:39:68:f1:54:86:ba:e7: 0b:15:49:b3:37:36:9a:7e:bc:2a:6f:5f:fe:8c:64: ba:2f:5f:f6:9c:48:35:5b:87:7c:e7:29:55:1e:18: fe:63:00:48:77:7d:43:20:da:e4:c2:b2:97:c1:9e: df:01:65:2e:e8:21:51:f8:36:a3:45:14:d2:af:ef: 11:cd:81:7c:54:29:17:db:48:66:e2:9e:37:b0:06: 74:55:0e:52:f5:08:61:f2:e4:a3:be:65:f3:93:29: 81:b5:72:58:7b:5b:73:c4:41:17:b9:40:15:ed:65: d7:f9:39:4b:0f:fb:0f:30:98:96:66:17:d5:ed:e8: 19:de:bd:00:17:0f:65:d7:a1:99:6a:20:af:bc:3f: c4:7f:40:82:ad:a2:70:ca:ef:be:09:c4:7a:31:09: 7c:ef:72:9c:8a:b3:ce:85:31:07:20:7e:aa:7c:bb: 73:9b:ab:b8:4c:4f:72:ca:62:9f:1b:0f:e1:45:4a: 5a:f1:ab:ce:47:2a:2a:ff:20:90:5a:f6:cd:9c:ef: c9:ca:e0:f0:d9:84:64:09:89:70:80:66:20:cb:cc: cd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3F:7D:FA:39:AB:F4:E2:EC:76:CD:60:8E:D6:28:32:86:A1:CD:61 X509v3 Authority Key Identifier: keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/Rj99-jmr9OLsds1gjtYoMoahzWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.132.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:d3:4c:9f:62:7e:75:8c:6e:84:b1:1d:6d:bd:f1:e9:e6:77: 94:84:f9:a6:44:8b:02:45:7d:5d:db:54:a8:9f:ed:92:b9:84: 69:4c:9b:00:d1:2a:1b:5a:e7:d0:6a:73:56:cc:ab:84:b1:2a: 13:55:8c:b9:b6:4e:43:85:ba:50:84:6f:02:4b:2a:c5:ee:f5: 2b:3c:be:4a:d8:59:71:cf:a2:16:40:c0:6a:47:b2:cd:88:f5: dc:19:9f:44:b8:6c:fb:ca:65:ff:98:e7:3c:36:a1:09:8d:53: b1:d7:e2:eb:16:c1:6c:53:d6:ff:2d:3f:9c:33:ce:22:24:0f: 20:22:dc:74:43:c3:de:59:4c:d7:04:cd:e8:94:c1:39:a7:ed: 31:ce:74:16:ee:a9:07:d1:b8:ff:3d:d5:45:d6:8a:1e:36:b1: 70:5a:49:a3:8c:cb:75:35:c4:66:38:ec:73:4e:01:49:51:26: 23:74:d2:d5:9e:85:ce:38:c2:9e:bf:66:fd:69:60:d9:02:68: 95:78:6b:a7:07:05:ac:49:c5:23:03:34:b5:f4:7d:43:40:1d: 29:cf:a5:87:fa:26:52:df:4a:1d:8c:9f:b9:69:3a:1d:9c:fa: 53:21:01:c1:bc:13:00:47:81:e8:a1:e7:72:38:4a:dd:c2:e1: 15:b0:79:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pLNs8c6ZgctCMgvW6PrnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDU2NTc5YTUxNzJmY2EwOGUwNDNiMDJiYjk3MmZiNzUw M2FlYWYwHhcNMjYwMTAxMjIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjNmN2RmYTM5YWJmNGUyZWM3NmNkNjA4ZWQ2MjgzMjg2YTFjZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tf/zMRjh94DHjBinc+oUKGWOJIK qnULgUfW5yQrtqKjX1HiGDlo8VSGuucLFUmzNzaafrwqb1/+jGS6L1/2nEg1W4d8 5ylVHhj+YwBId31DINrkwrKXwZ7fAWUu6CFR+DajRRTSr+8RzYF8VCkX20hm4p43 sAZ0VQ5S9Qhh8uSjvmXzkymBtXJYe1tzxEEXuUAV7WXX+TlLD/sPMJiWZhfV7egZ 3r0AFw9l16GZaiCvvD/Ef0CCraJwyu++CcR6MQl873KcirPOhTEHIH6qfLtzm6u4 TE9yymKfGw/hRUpa8avORyoq/yCQWvbNnO/JyuDw2YRkCYlwgGYgy8zNKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEY/ffo5q/Ti7HbNYI7WKDKGoc1hMB8GA1UdIwQY MBaAFEZFZXmlFy/KCOBDsCu5cvt1A66vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYt YTM0Yzg1NWI1YWFiLzEvUmo5OS1qbXI5T0xzZHMxZ2p0WW9Nb2FoeldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYtYTM0Yzg1NWI1YWFi LzEvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuU2EMA0G CSqGSIb3DQEBCwUAA4IBAQBe00yfYn51jG6EsR1tvfHp5neUhPmmRIsCRX1d21So n+2SuYRpTJsA0SobWufQanNWzKuEsSoTVYy5tk5DhbpQhG8CSyrF7vUrPL5K2Flx z6IWQMBqR7LNiPXcGZ9EuGz7ymX/mOc8NqEJjVOx1+LrFsFsU9b/LT+cM84iJA8g Itx0Q8PeWUzXBM3olME5p+0xznQW7qkH0bj/PdVF1ooeNrFwWkmjjMt1NcRmOOxz TgFJUSYjdNLVnoXOOMKev2b9aWDZAmiVeGunBwWsScUjAzS19H1DQB0pz6WH+iZS 30odjJ+5aTodnPpTIQHBvBMAR4HooedyOErdwuEVsHn1 -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:50 2026 by rpki-client