This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/rIDOAUoKFwKwGINXnPmMsHQWi5c.roa File: rIDOAUoKFwKwGINXnPmMsHQWi5c.roa (raw, json) Hash identifier: NW5RLPV2D9akEYqeNDha9BvwB/AzK2kgHaHsg+BPsU4= Subject key identifier: AC:80:CE:01:4A:0A:17:02:B0:18:83:57:9C:F9:8C:B0:74:16:8B:97 Certificate issuer: /CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66 Certificate serial: 019BFF289DEED66768A47380CEB43A8C8E1D Authority key identifier: E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/rIDOAUoKFwKwGINXnPmMsHQWi5c.roa Signing time: Tue 27 Jan 2026 11:13:30 +0000 ROA not before: Tue 27 Jan 2026 11:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44912 IP address blocks: 77.73.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.mft rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:28:9d:ee:d6:67:68:a4:73:80:ce:b4:3a:8c:8e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8bd26dce48161c7fbf9ff67b907f1e605c25a66 Validity Not Before: Jan 27 11:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac80ce014a0a1702b01883579cf98cb074168b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:57:c6:3b:0a:00:09:97:bb:bb:58:b2:78: d9:37:47:77:5a:f1:20:15:34:aa:7f:ee:21:23:b8: 5c:74:ce:40:30:98:ac:8b:48:39:81:a1:2f:ba:f1: 42:aa:d6:76:72:f7:72:c7:13:42:07:d9:88:bf:73: f0:a2:c6:73:c7:24:b9:e8:55:e9:56:2f:e9:2a:f4: 41:91:d6:06:22:48:23:70:61:65:5d:55:83:4d:e9: 9a:c9:0d:71:e1:70:05:43:f8:91:78:3d:4a:fe:af: 05:e0:c2:28:24:b4:fc:d8:57:8b:e3:4d:68:30:d6: 65:c7:fb:b0:bd:ea:0a:60:28:1b:b0:29:59:f9:40: ce:bc:8a:52:c4:23:16:f8:bf:37:75:e0:fa:73:59: b0:e3:a1:9c:3a:54:58:4b:4d:d8:b9:3d:dd:ba:96: 75:64:06:ed:95:48:80:98:6b:5b:c3:2b:16:21:11: ed:90:25:56:00:00:4c:04:53:96:eb:60:47:5b:6a: a3:ce:cd:25:a2:89:f0:b9:af:84:a7:f8:a8:4f:52: 59:54:d5:7c:82:81:09:52:33:c3:23:f4:ee:87:81: 1b:d9:3f:91:53:f1:83:8d:8d:13:e3:31:d7:03:fb: e5:25:88:b3:54:39:92:de:80:09:99:d1:dd:32:f3: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:80:CE:01:4A:0A:17:02:B0:18:83:57:9C:F9:8C:B0:74:16:8B:97 X509v3 Authority Key Identifier: keyid:E8:BD:26:DC:E4:81:61:C7:FB:F9:FF:67:B9:07:F1:E6:05:C2:5A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0m3OSBYcf7-f9nuQfx5gXCWmY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/rIDOAUoKFwKwGINXnPmMsHQWi5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bd9ca8-179b-4322-a094-50dd3a58154b/1/6L0m3OSBYcf7-f9nuQfx5gXCWmY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.114.0/24 Signature Algorithm: sha256WithRSAEncryption 01:01:c9:bf:84:1b:e3:8d:fe:b8:0a:4e:a8:72:ae:ce:23:7d: 4e:22:ec:bd:47:79:a5:a3:8e:55:5b:4f:46:e4:17:c4:3f:c8: 35:ed:a5:1b:0f:85:98:51:51:ce:b8:a2:7b:f7:f4:bb:7b:b1: dc:a5:ac:83:b0:24:83:51:93:40:c6:28:34:27:ab:00:4c:08: 59:29:6a:b0:71:72:01:a4:2b:aa:43:4b:8d:2b:c1:79:6e:9b: cd:93:ec:61:6a:5b:d6:90:e9:32:b9:24:bf:b9:04:d5:c9:6b: da:5f:2f:56:72:ec:c6:c3:76:5c:b3:11:a2:15:0c:2e:e1:07: 2c:11:02:88:d0:ff:09:27:b7:c9:ec:bd:a4:63:81:52:54:d2: 0b:05:3e:3a:a9:d0:61:d9:99:ba:47:92:21:5e:9f:fc:a8:2d: 47:ed:3f:58:b9:4a:32:f3:24:2e:f8:6d:dd:04:99:03:80:3f: 02:b1:56:44:5e:5e:1a:95:0c:57:cd:ab:4f:4f:26:69:f3:8c: ff:5d:91:75:a7:96:4e:1d:3d:f0:22:d7:1d:7e:4b:05:f4:7c: 2a:b0:93:f0:40:3a:cb:ac:3a:9b:11:c1:f4:4f:29:49:f6:57: 22:3e:75:31:b0:fc:cb:d1:6d:53:d1:2a:65:4e:c9:b2:96:d2: 75:8d:1e:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv/KJ3u1mdopHOAzrQ6jI4dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YmQyNmRjZTQ4MTYxYzdmYmY5ZmY2N2I5MDdmMWU2MDVj MjVhNjYwHhcNMjYwMTI3MTExMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzgwY2UwMTRhMGExNzAyYjAxODgzNTc5Y2Y5OGNiMDc0MTY4Yjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ1XxjsKAAmXu7tYsnjZN0d3WvEg FTSqf+4hI7hcdM5AMJisi0g5gaEvuvFCqtZ2cvdyxxNCB9mIv3PwosZzxyS56FXp Vi/pKvRBkdYGIkgjcGFlXVWDTemayQ1x4XAFQ/iReD1K/q8F4MIoJLT82FeL401o MNZlx/uwveoKYCgbsClZ+UDOvIpSxCMW+L83deD6c1mw46GcOlRYS03YuT3dupZ1 ZAbtlUiAmGtbwysWIRHtkCVWAABMBFOW62BHW2qjzs0loonwua+Ep/ioT1JZVNV8 goEJUjPDI/Tuh4Eb2T+RU/GDjY0T4zHXA/vlJYizVDmS3oAJmdHdMvM16QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKyAzgFKChcCsBiDV5z5jLB0FouXMB8GA1UdIwQY MBaAFOi9JtzkgWHH+/n/Z7kH8eYFwlpmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQt NTBkZDNhNTgxNTRiLzEvcklET0FVb0tGd0t3R0lOWG5QbU1zSFFXaTVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iZDljYTgtMTc5Yi00MzIyLWEwOTQtNTBkZDNhNTgxNTRi LzEvNkwwbTNPU0JZY2Y3LWY5bnVRZng1Z1hDV21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUlyMA0G CSqGSIb3DQEBCwUAA4IBAQABAcm/hBvjjf64Ck6ocq7OI31OIuy9R3mlo45VW09G 5BfEP8g17aUbD4WYUVHOuKJ79/S7e7HcpayDsCSDUZNAxig0J6sATAhZKWqwcXIB pCuqQ0uNK8F5bpvNk+xhalvWkOkyuSS/uQTVyWvaXy9WcuzGw3ZcsxGiFQwu4Qcs EQKI0P8JJ7fJ7L2kY4FSVNILBT46qdBh2Zm6R5IhXp/8qC1H7T9YuUoy8yQu+G3d BJkDgD8CsVZEXl4alQxXzatPTyZp84z/XZF1p5ZOHT3wItcdfksF9HwqsJPwQDrL rDqbEcH0TylJ9lciPnUxsPzL0W1T0SplTsmyltJ1jR7a -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:10 2026 by rpki-client