This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/pChNr3xOwGeIYeWfyjrB2pRGT1k.roa File: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (raw, json) Hash identifier: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos= Subject key identifier: A4:28:4D:AF:7C:4E:C0:67:88:61:E5:9F:CA:3A:C1:DA:94:46:4F:59 Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019B79ED25C08E2D6F6D20290B63FA5B90E6 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/pChNr3xOwGeIYeWfyjrB2pRGT1k.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43641 IP address blocks: 77.110.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:25:c0:8e:2d:6f:6d:20:29:0b:63:fa:5b:90:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4284daf7c4ec0678861e59fca3ac1da94464f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:d4:f7:e6:da:f9:d8:02:4a:83:a1:9e:89: 09:3b:52:6f:18:58:66:0d:d0:28:ed:bb:bb:10:e7: 98:db:17:99:0f:d9:19:74:4f:0f:f0:30:2a:48:84: be:2a:26:b3:7a:b0:fd:49:ab:9c:63:e5:f6:e4:3b: af:a3:a6:6f:5d:8c:db:67:9a:81:84:8e:04:95:5b: bf:cc:2e:5f:de:27:78:c4:85:9a:d7:6f:e5:62:25: 59:2b:dd:b7:5d:cd:b5:bd:76:c8:7e:7c:f3:52:fc: d5:b5:67:4e:b0:9c:65:2b:e2:b0:37:86:14:2d:51: 6d:56:6a:e6:a9:a4:ec:b1:a3:ed:5b:62:75:09:9f: af:8c:bd:f6:5b:d9:77:6e:a4:72:d3:9d:85:6e:bd: b7:53:8b:72:d7:56:64:44:a1:10:5b:e8:4f:b7:9d: 2e:ec:a4:38:2d:e4:6d:95:65:b0:a4:69:a0:9e:48: d1:d6:43:cf:14:29:e7:91:0f:5d:19:88:c0:2e:9c: b0:0e:55:71:84:fa:38:3f:1b:32:0a:22:ee:d8:66: 58:25:c1:9a:1d:f7:59:da:60:3f:1f:34:1b:20:00: 66:62:25:a2:e6:36:aa:e4:f8:3d:16:d0:4e:3d:80: 99:66:22:9f:96:31:6f:bb:a2:24:3d:72:29:e2:62: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:28:4D:AF:7C:4E:C0:67:88:61:E5:9F:CA:3A:C1:DA:94:46:4F:59 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/pChNr3xOwGeIYeWfyjrB2pRGT1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.110.111.0/24 Signature Algorithm: sha256WithRSAEncryption a1:b1:ec:5f:ef:22:35:b7:b6:bb:86:d3:ba:31:1b:da:05:34: 6f:7a:ba:87:cf:45:9a:20:5f:c2:02:0a:ed:21:cd:8b:cc:34: 5c:02:c6:2f:c0:31:53:5b:73:0d:58:8d:de:d5:90:12:6b:24: a6:a4:24:20:72:6c:7d:fc:b3:73:f4:c3:9f:78:45:ce:8d:fa: 25:72:81:79:49:39:a0:77:7c:e0:a8:91:d5:6b:9b:72:11:78: 0d:fc:df:69:62:b5:03:50:59:be:de:a0:00:34:6f:34:c4:34: 6c:7d:c6:cb:a2:57:44:e8:14:ff:52:59:78:6d:be:7e:4d:f5: 94:64:65:5b:aa:66:a8:4e:45:2c:a4:e1:4a:ee:07:37:1e:9a: c4:ad:77:de:aa:d0:72:bd:32:d3:37:2a:d5:07:14:71:98:f2: 1a:42:bd:b0:23:ba:cc:81:9c:ed:6b:e8:15:a8:f1:88:73:93: d8:62:77:cb:1b:f6:7f:a4:a2:03:79:a8:cc:86:61:77:7e:d6: ec:d1:1a:bc:3c:4e:8f:ab:62:66:56:c1:09:41:59:41:29:bd: be:1c:2b:40:fc:39:cf:05:84:b9:05:b8:82:dc:3f:49:04:7e: a9:75:b4:7b:50:d7:67:26:2a:dd:b1:29:12:00:43:08:e0:70: 05:72:03:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SXAji1vbSApC2P6W5DmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDI4NGRhZjdjNGVjMDY3ODg2MWU1OWZjYTNhYzFkYTk0NDY0ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdvU9+ba+dgCSoOhnokJO1JvGFhm DdAo7bu7EOeY2xeZD9kZdE8P8DAqSIS+KiazerD9SaucY+X25Duvo6ZvXYzbZ5qB hI4ElVu/zC5f3id4xIWa12/lYiVZK923Xc21vXbIfnzzUvzVtWdOsJxlK+KwN4YU LVFtVmrmqaTssaPtW2J1CZ+vjL32W9l3bqRy052Fbr23U4ty11ZkRKEQW+hPt50u 7KQ4LeRtlWWwpGmgnkjR1kPPFCnnkQ9dGYjALpywDlVxhPo4PxsyCiLu2GZYJcGa HfdZ2mA/HzQbIABmYiWi5jaq5Pg9FtBOPYCZZiKfljFvu6IkPXIp4mLqbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKQoTa98TsBniGHln8o6wdqURk9ZMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvcENoTnIzeE93R2VJWWVXZnlqckIycFJHVDFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW5vMA0G CSqGSIb3DQEBCwUAA4IBAQChsexf7yI1t7a7htO6MRvaBTRverqHz0WaIF/CAgrt Ic2LzDRcAsYvwDFTW3MNWI3e1ZASaySmpCQgcmx9/LNz9MOfeEXOjfolcoF5STmg d3zgqJHVa5tyEXgN/N9pYrUDUFm+3qAANG80xDRsfcbLoldE6BT/Ull4bb5+TfWU ZGVbqmaoTkUspOFK7gc3HprErXfeqtByvTLTNyrVBxRxmPIaQr2wI7rMgZzta+gV qPGIc5PYYnfLG/Z/pKIDeajMhmF3ftbs0Rq8PE6Pq2JmVsEJQVlBKb2+HCtA/DnP BYS5BbiC3D9JBH6pdbR7UNdnJirdsSkSAEMI4HAFcgOd -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:48 2026 by rpki-client