This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/FxY1RAn7Uc02QNfQHdB91asNvfo.roa File: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (raw, json) Hash identifier: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk= Subject key identifier: 17:16:35:44:09:FB:51:CD:36:40:D7:D0:1D:D0:7D:D5:AB:0D:BD:FA Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Certificate serial: 019B7BA3443B31D86CCEB6DCAD02A7E5BFFD Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/FxY1RAn7Uc02QNfQHdB91asNvfo.roa Signing time: Thu 01 Jan 2026 22:17:36 +0000 ROA not before: Thu 01 Jan 2026 22:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 37.77.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:44:3b:31:d8:6c:ce:b6:dc:ad:02:a7:e5:bf:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Validity Not Before: Jan 1 22:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1716354409fb51cd3640d7d01dd07dd5ab0dbdfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:8a:eb:0d:d7:ab:59:bb:7a:5b:96:b6:ed: 26:61:e5:7e:a6:3e:e6:79:4e:ed:8c:20:90:5c:e5: 14:1e:4e:e2:1f:59:a0:0c:3a:c4:2f:6b:91:c5:05: 44:70:4a:c5:03:cf:10:5e:d7:f8:d2:d6:5a:a5:ba: 7c:00:d0:44:b2:c0:12:db:85:20:25:7c:a4:f7:3e: 48:a1:e1:ee:a3:67:b6:fd:7a:56:66:b0:a2:06:fd: e6:26:23:67:44:71:e5:3b:4d:93:9f:26:1c:1d:ef: 89:c7:e7:4c:43:14:b4:c2:1e:e0:a9:88:76:09:8f: 53:74:6e:d8:d8:e1:8a:9f:b6:a4:9c:7f:25:36:3a: 35:34:38:82:45:0d:03:0f:b4:64:e4:bf:89:38:e6: fd:c9:7c:0e:ba:3c:06:88:06:45:64:ff:6c:6a:6f: 0c:6e:78:a7:97:a3:52:79:e9:30:a6:cd:8a:fe:6d: 8e:8e:ff:b0:3d:20:fb:75:2f:83:80:b6:81:99:69: 03:f8:b6:1d:5a:25:64:90:c5:10:af:12:49:a6:9e: d2:4e:a5:e3:2e:ae:b5:09:5e:0b:de:b3:ac:c1:b6: cf:aa:d9:e8:a7:f2:ca:65:ad:ac:27:07:eb:55:91: 48:68:79:02:f8:0c:3f:d2:c1:7a:a1:70:c3:87:80: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:16:35:44:09:FB:51:CD:36:40:D7:D0:1D:D0:7D:D5:AB:0D:BD:FA X509v3 Authority Key Identifier: keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/FxY1RAn7Uc02QNfQHdB91asNvfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.201.0/24 Signature Algorithm: sha256WithRSAEncryption 70:fa:ee:c2:af:02:10:3a:e4:69:d9:d4:85:90:e4:66:cf:bd: 19:09:84:ab:76:5b:ed:8f:b0:11:ee:62:9e:61:db:aa:00:bc: 82:95:ab:e9:4e:27:a9:e0:4e:da:db:1e:fe:42:0d:a3:e7:14: e2:ae:34:38:72:b1:08:16:37:f7:ee:47:1f:a6:33:8b:22:3d: 32:c8:a6:d5:3c:05:a1:e5:68:7c:b4:07:df:14:13:4f:9e:6a: c2:73:0e:60:ff:8e:d8:d9:3d:55:11:00:19:f5:57:8a:9e:08: f4:44:62:d2:8b:9b:0d:00:9d:a1:00:ef:67:9e:39:59:f1:97: d7:cb:ce:f8:e6:27:1f:7c:57:3e:7c:74:de:94:90:e8:23:78: e5:e9:25:07:9d:ae:a7:77:59:11:ee:cb:b7:2a:3e:3f:09:92: c6:32:4d:fd:0e:44:8c:8f:6f:26:fb:40:03:e3:a3:61:c6:6a: 71:73:0e:d9:27:c1:fe:ec:9e:85:29:2a:44:cd:1b:df:ac:78: d6:ce:28:6e:45:60:04:e8:7c:8b:ef:40:bd:fb:c3:04:aa:45: d1:b1:71:57:04:12:99:d4:06:2f:a9:47:c0:8e:d9:bb:e5:0d: 72:41:8e:da:45:d8:c7:96:1e:ee:0c:b9:9e:5b:98:6b:25:19: 95:a8:59:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o0Q7MdhszrbcrQKn5b/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz NzBhMTkwHhcNMjYwMTAxMjIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzE2MzU0NDA5ZmI1MWNkMzY0MGQ3ZDAxZGQwN2RkNWFiMGRiZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNiK6w3Xq1m7eluWtu0mYeV+pj7m eU7tjCCQXOUUHk7iH1mgDDrEL2uRxQVEcErFA88QXtf40tZapbp8ANBEssAS24Ug JXyk9z5IoeHuo2e2/XpWZrCiBv3mJiNnRHHlO02TnyYcHe+Jx+dMQxS0wh7gqYh2 CY9TdG7Y2OGKn7aknH8lNjo1NDiCRQ0DD7Rk5L+JOOb9yXwOujwGiAZFZP9sam8M bninl6NSeekwps2K/m2Ojv+wPSD7dS+DgLaBmWkD+LYdWiVkkMUQrxJJpp7STqXj Lq61CV4L3rOswbbPqtnop/LKZa2sJwfrVZFIaHkC+Aw/0sF6oXDDh4CwmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBcWNUQJ+1HNNkDX0B3QfdWrDb36MB8GA1UdIwQY MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt YzQ2NWQ4OTAyYzFiLzEvRnhZMVJBbjdVYzAyUU5mUUhkQjkxYXNOdmZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJU3JMA0G CSqGSIb3DQEBCwUAA4IBAQBw+u7CrwIQOuRp2dSFkORmz70ZCYSrdlvtj7AR7mKe YduqALyClavpTiep4E7a2x7+Qg2j5xTirjQ4crEIFjf37kcfpjOLIj0yyKbVPAWh 5Wh8tAffFBNPnmrCcw5g/47Y2T1VEQAZ9VeKngj0RGLSi5sNAJ2hAO9nnjlZ8ZfX y8745icffFc+fHTelJDoI3jl6SUHna6nd1kR7su3Kj4/CZLGMk39DkSMj28m+0AD 46Nhxmpxcw7ZJ8H+7J6FKSpEzRvfrHjWzihuRWAE6HyL70C9+8MEqkXRsXFXBBKZ 1AYvqUfAjtm75Q1yQY7aRdjHlh7uDLmeW5hrJRmVqFmv -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:58 2026 by rpki-client