This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/bSrLj4dk7vC2yPiiS4puv6QDMCg.roa File: bSrLj4dk7vC2yPiiS4puv6QDMCg.roa (raw, json) Hash identifier: b2kWSMTdmZr8cROp9MUUr9c5xUNnNn9tLEdsg0Fja3c= Subject key identifier: 6D:2A:CB:8F:87:64:EE:F0:B6:C8:F8:A2:4B:8A:6E:BF:A4:03:30:28 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019B7D5B706EA6B53EF11158804733F9C1A3 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/bSrLj4dk7vC2yPiiS4puv6QDMCg.roa Signing time: Fri 02 Jan 2026 06:18:23 +0000 ROA not before: Fri 02 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 77.105.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:70:6e:a6:b5:3e:f1:11:58:80:47:33:f9:c1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Jan 2 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d2acb8f8764eef0b6c8f8a24b8a6ebfa4033028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:70:9b:2e:94:09:4f:cb:55:63:c9:aa:b0:38: 9c:93:64:17:da:54:ca:9c:ab:26:77:2a:8a:e4:5d: dc:10:ca:3a:b3:bf:33:55:89:e8:d6:32:e8:c0:4c: c9:db:fb:95:40:5f:a0:3e:e4:24:b0:b6:d5:78:43: b2:ca:d2:ec:2e:6b:59:e1:3b:fe:7d:ca:a6:76:4e: 96:e6:a9:8c:da:c9:66:f4:71:6d:6e:c4:50:ed:a6: 39:87:11:34:8b:67:76:10:d8:4d:3d:ae:45:75:ee: dd:f0:20:94:e6:c0:78:44:4c:cc:a1:6a:a5:02:00: c9:21:0d:b3:40:bd:85:34:56:c7:18:9d:76:f9:9b: 03:8c:ea:28:99:b1:75:b6:cf:20:87:0b:66:45:aa: a3:dd:d5:2b:59:33:58:e4:07:21:b4:27:44:19:fa: b0:7f:c7:50:73:9f:ca:a6:34:f3:4e:3c:c2:68:56: bd:b3:bf:14:e8:2f:ef:34:b7:d9:18:b2:39:c2:84: cc:e0:5c:b1:03:8d:4d:ae:0c:3c:bd:bc:5b:0e:7c: 35:b6:64:5e:8d:b9:4f:92:68:c8:2c:b2:c9:2c:b0: cf:11:d9:39:74:c2:17:5f:2b:d8:91:6a:af:26:ab: c8:91:41:ff:f5:a1:00:73:a7:15:2a:c8:3c:28:8e: 08:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2A:CB:8F:87:64:EE:F0:B6:C8:F8:A2:4B:8A:6E:BF:A4:03:30:28 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/bSrLj4dk7vC2yPiiS4puv6QDMCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.162.0/24 Signature Algorithm: sha256WithRSAEncryption 24:4f:81:51:92:18:0c:28:48:ad:bb:f9:17:b0:2a:d5:e0:c9: 72:a3:19:2a:25:11:ee:f5:1c:cf:89:b9:c9:d7:44:bf:d7:12: b1:2e:4c:11:a0:a6:62:5d:c4:33:c2:fb:4f:6a:22:6f:24:6e: 6d:2d:bc:d7:e8:9c:81:bd:f9:a7:d6:a0:e3:18:0d:53:40:24: fd:d5:42:6d:de:ec:73:6f:00:43:f8:c8:20:a7:2b:c1:76:65: 4c:78:e3:e3:e1:d3:29:09:a2:aa:ae:be:60:d3:be:b1:b1:b8: c7:b0:f4:d7:8d:da:c5:15:70:99:9b:bb:cb:b5:ea:7e:20:d1: 43:e3:9a:55:2c:0e:0a:31:93:ad:03:b9:be:36:a1:f1:1c:1f: 46:08:ca:73:9e:63:bf:97:4c:1f:f9:ca:b1:ba:e1:c0:c6:cb: 6b:87:26:99:c8:ce:ed:3c:e4:02:0c:67:fa:42:f1:cc:96:ce: 4e:65:cb:7d:e8:2e:a8:d7:f5:2c:8c:c1:82:a1:88:87:c1:ad: fb:e0:5b:7c:d8:8c:b3:bb:d7:5d:b2:c5:c0:73:05:1f:2e:6d: 11:b5:c0:2e:f5:db:ad:59:11:ed:27:b9:2e:77:57:f7:cb:ab: 66:ce:f5:03:07:86:ef:11:69:3d:97:a2:16:a1:e4:40:65:bd: d0:2f:a7:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W3BuprU+8RFYgEcz+cGjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwMTAyMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDJhY2I4Zjg3NjRlZWYwYjZjOGY4YTI0YjhhNmViZmE0MDMzMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHCbLpQJT8tVY8mqsDick2QX2lTK nKsmdyqK5F3cEMo6s78zVYno1jLowEzJ2/uVQF+gPuQksLbVeEOyytLsLmtZ4Tv+ fcqmdk6W5qmM2slm9HFtbsRQ7aY5hxE0i2d2ENhNPa5Fde7d8CCU5sB4REzMoWql AgDJIQ2zQL2FNFbHGJ12+ZsDjOoombF1ts8ghwtmRaqj3dUrWTNY5AchtCdEGfqw f8dQc5/KpjTzTjzCaFa9s78U6C/vNLfZGLI5woTM4FyxA41Nrgw8vbxbDnw1tmRe jblPkmjILLLJLLDPEdk5dMIXXyvYkWqvJqvIkUH/9aEAc6cVKsg8KI4I8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG0qy4+HZO7wtsj4okuKbr+kAzAoMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvYlNyTGo0ZGs3dkMyeVBpaVM0cHV2NlFETUNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWmiMA0G CSqGSIb3DQEBCwUAA4IBAQAkT4FRkhgMKEitu/kXsCrV4MlyoxkqJRHu9RzPibnJ 10S/1xKxLkwRoKZiXcQzwvtPaiJvJG5tLbzX6JyBvfmn1qDjGA1TQCT91UJt3uxz bwBD+MggpyvBdmVMeOPj4dMpCaKqrr5g076xsbjHsPTXjdrFFXCZm7vLtep+INFD 45pVLA4KMZOtA7m+NqHxHB9GCMpznmO/l0wf+cqxuuHAxstrhyaZyM7tPOQCDGf6 QvHMls5OZct96C6o1/UsjMGCoYiHwa374Ft82Iyzu9ddssXAcwUfLm0RtcAu9dut WRHtJ7kud1f3y6tmzvUDB4bvEWk9l6IWoeRAZb3QL6dW -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:48 2026 by rpki-client