This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Y-4kab0CMZR3OqGpNF-BBxWVdAY.roa File: Y-4kab0CMZR3OqGpNF-BBxWVdAY.roa (raw, json) Hash identifier: ZsRvF4l1U+eEJbcDcKmrkopUEsjaLpABEzN1i20Hk0Y= Subject key identifier: 63:EE:24:69:BD:02:31:94:77:3A:A1:A9:34:5F:81:07:15:95:74:06 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82BA90D2B92994ACBE8FC3A6015846 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Y-4kab0CMZR3OqGpNF-BBxWVdAY.roa Signing time: Fri 02 Jan 2026 16:20:32 +0000 ROA not before: Fri 02 Jan 2026 16:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35913 IP address blocks: 77.83.241.0/24 maxlen: 24 77.83.243.0/24 maxlen: 24 85.202.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ba:90:d2:b9:29:94:ac:be:8f:c3:a6:01:58:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63ee2469bd023194773aa1a9345f810715957406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:34:a4:c4:15:d6:08:1c:a5:ee:38:1c:a5: 37:f8:47:de:3d:93:96:37:11:a8:c1:9f:bf:99:c0: 52:93:f3:c1:68:ca:f9:71:47:50:aa:40:28:fd:58: 6f:c5:1a:76:05:6b:b1:2d:3d:b6:ce:2d:06:7f:f5: c3:26:cf:c7:dd:c4:a8:30:b6:05:fa:52:8b:0b:08: 8e:e7:31:cc:3f:89:d2:cc:b9:83:4d:bb:fb:9a:53: f3:46:b2:6d:02:46:c6:22:18:30:e7:bf:de:0f:85: 1c:96:e5:f7:10:28:51:fd:8d:39:d7:d0:1e:23:36: b4:a6:b7:db:e5:53:bf:19:34:a3:da:d3:1b:f8:35: 34:e4:d4:70:da:b0:7d:1d:83:54:65:db:56:57:b0: 28:e9:c5:2e:ab:ce:a3:7b:dc:8f:c8:a5:03:b8:a9: cc:d9:72:6e:8b:4b:f8:b8:75:c5:bf:3d:8a:00:7f: 95:71:1c:fe:dc:1d:00:6f:e4:92:7c:3c:eb:f6:67: b3:81:e9:68:5e:9b:d6:30:dc:94:cd:4e:c8:ad:29: 77:02:0d:f8:b1:1a:5d:ae:98:c3:de:78:70:1f:46: 6b:67:ed:d8:01:91:f4:6e:41:f9:a7:a5:9e:e8:5c: 74:a7:6b:75:12:3e:f1:61:23:a3:2d:89:29:69:94: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EE:24:69:BD:02:31:94:77:3A:A1:A9:34:5F:81:07:15:95:74:06 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Y-4kab0CMZR3OqGpNF-BBxWVdAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.241.0/24 77.83.243.0/24 85.202.162.0/24 Signature Algorithm: sha256WithRSAEncryption 44:82:22:3b:4f:28:b4:e5:e1:b7:7e:e8:15:aa:74:7e:10:62: fd:c6:ff:f6:e1:41:ee:44:32:da:8b:c7:50:23:9a:01:cd:d4: eb:4b:d8:27:8f:6e:84:80:75:fe:6a:1a:59:10:66:cd:be:41: ec:fc:0c:cb:50:39:be:e2:56:df:6b:04:48:03:42:02:b2:78: 12:26:24:95:d8:33:f5:2e:ea:17:08:30:90:37:25:dc:19:3c: c3:59:ce:51:4e:45:81:e5:e0:53:31:b3:a0:1e:30:62:5e:81: 64:46:db:49:3d:40:c0:57:91:37:4c:cf:75:ed:15:a5:f1:42: 1c:3a:99:f5:ba:13:af:e7:40:3a:f3:e8:83:aa:6d:93:bf:58: a4:c4:96:e3:f2:a3:6b:01:33:2f:ee:00:34:bf:19:db:01:80: bb:9c:6a:42:e7:54:0b:43:be:b4:ad:26:dd:6f:37:4e:2f:2d: 9c:d2:6c:e2:eb:88:cd:30:16:15:26:09:80:83:67:16:94:5c: d3:42:a8:66:51:93:cf:6a:ff:6e:b9:08:8c:45:6c:51:9d:d5: 6a:dc:44:fe:74:cb:39:34:19:b8:b7:f1:8f:e5:a8:f8:6d:a5: ab:f1:1a:4c:6e:ee:46:40:f2:50:99:0f:08:20:74:ce:15:8b: 16:8c:4b:b0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/grqQ0rkplKy+j8OmAVhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2VlMjQ2OWJkMDIzMTk0NzczYWExYTkzNDVmODEwNzE1OTU3NDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFU0pMQV1ggcpe44HKU3+EfePZOW NxGowZ+/mcBSk/PBaMr5cUdQqkAo/VhvxRp2BWuxLT22zi0Gf/XDJs/H3cSoMLYF +lKLCwiO5zHMP4nSzLmDTbv7mlPzRrJtAkbGIhgw57/eD4UcluX3EChR/Y0519Ae Iza0prfb5VO/GTSj2tMb+DU05NRw2rB9HYNUZdtWV7Ao6cUuq86je9yPyKUDuKnM 2XJui0v4uHXFvz2KAH+VcRz+3B0Ab+SSfDzr9mezgeloXpvWMNyUzU7IrSl3Ag34 sRpdrpjD3nhwH0ZrZ+3YAZH0bkH5p6We6Fx0p2t1Ej7xYSOjLYkpaZTt5QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGPuJGm9AjGUdzqhqTRfgQcVlXQGMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvWS00a2FiMENNWlIzT3FHcE5GLUJCeFdWZEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVPxAwQA TVPzAwQAVcqiMA0GCSqGSIb3DQEBCwUAA4IBAQBEgiI7Tyi05eG3fugVqnR+EGL9 xv/24UHuRDLai8dQI5oBzdTrS9gnj26EgHX+ahpZEGbNvkHs/AzLUDm+4lbfawRI A0ICsngSJiSV2DP1LuoXCDCQNyXcGTzDWc5RTkWB5eBTMbOgHjBiXoFkRttJPUDA V5E3TM917RWl8UIcOpn1uhOv50A68+iDqm2Tv1ikxJbj8qNrATMv7gA0vxnbAYC7 nGpC51QLQ760rSbdbzdOLy2c0mzi64jNMBYVJgmAg2cWlFzTQqhmUZPPav9uuQiM RWxRndVq3ET+dMs5NBm4t/GP5aj4baWr8RpMbu5GQPJQmQ8IIHTOFYsWjEuw -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:20 2026 by rpki-client