This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/mvSatyfuo61e-RTaG2TAjXDZEec.roa File: mvSatyfuo61e-RTaG2TAjXDZEec.roa (raw, json) Hash identifier: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs= Subject key identifier: 9A:F4:9A:B7:27:EE:A3:AD:5E:F9:14:DA:1B:64:C0:8D:70:D9:11:E7 Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Certificate serial: 019B7BA343F055A09DFAFC88645B015F54FF Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/mvSatyfuo61e-RTaG2TAjXDZEec.roa Signing time: Thu 01 Jan 2026 22:17:35 +0000 ROA not before: Thu 01 Jan 2026 22:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 37.77.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:43:f0:55:a0:9d:fa:fc:88:64:5b:01:5f:54:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19 Validity Not Before: Jan 1 22:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9af49ab727eea3ad5ef914da1b64c08d70d911e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5a:8b:c9:3f:bd:4b:9f:0c:48:54:a8:68:cd: aa:e7:8d:91:1c:04:85:5a:b1:ab:8a:20:84:f6:64: fb:53:72:55:05:7c:f4:61:4a:47:0d:27:62:84:a4: 7b:1b:b9:4d:ca:12:7d:38:66:b3:37:e8:21:87:a6: 05:1a:4d:24:ca:93:c8:8b:d3:f0:87:be:33:99:5e: 0f:5a:3e:1c:7c:dd:45:8d:9c:19:c0:84:ae:53:db: 1e:23:03:b9:d2:01:54:b3:82:bc:ec:8a:79:a7:38: 26:a0:bf:84:fb:41:56:c8:b8:91:1b:93:0d:cf:a7: 47:1f:7e:2c:6f:d0:ec:cd:69:20:c8:e0:5b:70:77: ee:cd:ff:1a:ae:e1:ec:f8:5d:63:89:2f:5e:97:37: d8:14:7f:19:dc:fb:39:ca:70:84:05:67:bb:44:46: bf:9d:ec:20:4a:13:bf:ae:53:1c:cb:38:2f:88:ea: a8:e6:59:7a:0d:e9:20:8d:a1:e3:f4:3f:b5:a2:21: df:82:42:dc:3c:73:53:96:72:d3:08:91:3c:43:0b: 75:ab:6c:1e:25:44:95:4c:0a:02:da:49:b9:fe:fd: 62:1c:b0:6e:3f:5c:3e:76:a2:21:80:20:06:da:26: d0:73:f5:5d:e2:5d:3e:b3:b3:b7:f9:b1:d4:fc:3b: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F4:9A:B7:27:EE:A3:AD:5E:F9:14:DA:1B:64:C0:8D:70:D9:11:E7 X509v3 Authority Key Identifier: keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/mvSatyfuo61e-RTaG2TAjXDZEec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.201.0/24 Signature Algorithm: sha256WithRSAEncryption 19:23:fc:c6:89:eb:19:57:72:e1:ba:4f:99:fd:77:f8:4a:37: 74:0b:13:0a:c8:12:fe:40:4e:c4:28:71:1e:e2:ae:c5:4c:2c: 4a:9b:04:80:85:6d:a8:00:24:d9:da:38:87:f3:4e:eb:77:60: 5e:f9:c4:b3:08:51:97:51:b3:50:21:2d:a8:62:a0:fd:c6:b3: 67:d2:7b:aa:a3:be:aa:e4:4c:a7:ed:0d:a3:b2:b8:65:02:12: 42:06:12:27:bf:d9:c3:01:1b:75:9d:89:d4:fa:96:d9:db:c0: 82:a7:49:8f:68:67:aa:16:7a:e4:b3:b2:2a:17:98:28:b1:06: 25:97:81:55:38:bc:a4:86:af:4f:f6:ef:a7:c2:03:b5:37:f6: bf:24:75:5e:9c:37:e4:41:50:43:42:2b:ad:f1:0c:19:be:b8: 19:3f:fa:4f:bb:d0:7a:fd:9b:2e:43:0b:83:53:11:e2:05:61: 07:ce:94:67:5a:3f:62:00:ed:61:e6:c2:63:ba:e6:55:a6:d5: 17:94:66:29:24:34:17:ce:b2:41:e4:d7:92:67:9a:4d:95:5a: 50:4a:87:a6:1b:77:24:74:8e:70:41:8a:d2:fa:41:98:bd:03: 18:ce:36:c2:67:cf:46:d4:55:60:33:37:27:56:ad:e8:16:ea: 6e:da:4b:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o0PwVaCd+vyIZFsBX1T/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE3Mjg3MmViN2JlZjA5NjVkZjEzYjBmYzVkNjVlNzUz NzBhMTkwHhcNMjYwMTAxMjIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YWY0OWFiNzI3ZWVhM2FkNWVmOTE0ZGExYjY0YzA4ZDcwZDkxMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FqLyT+9S58MSFSoaM2q542RHASF WrGriiCE9mT7U3JVBXz0YUpHDSdihKR7G7lNyhJ9OGazN+ghh6YFGk0kypPIi9Pw h74zmV4PWj4cfN1FjZwZwISuU9seIwO50gFUs4K87Ip5pzgmoL+E+0FWyLiRG5MN z6dHH34sb9DszWkgyOBbcHfuzf8aruHs+F1jiS9elzfYFH8Z3Ps5ynCEBWe7REa/ newgShO/rlMcyzgviOqo5ll6DekgjaHj9D+1oiHfgkLcPHNTlnLTCJE8Qwt1q2we JUSVTAoC2km5/v1iHLBuP1w+dqIhgCAG2ibQc/Vd4l0+s7O3+bHU/DsxKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJr0mrcn7qOtXvkU2htkwI1w2RHnMB8GA1UdIwQY MBaAFMXhcocut77wll3xOw/F1l51NwoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGIt YzQ2NWQ4OTAyYzFiLzEvbXZTYXR5ZnVvNjFlLVJUYUcyVEFqWERaRWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS83ZjBkM2MtYmJkOS00ZmVlLWI2MGItYzQ2NWQ4OTAyYzFi LzEveGVGeWh5NjN2dkNXWGZFN0Q4WFdYblUzQ2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJU3JMA0G CSqGSIb3DQEBCwUAA4IBAQAZI/zGiesZV3Lhuk+Z/Xf4Sjd0CxMKyBL+QE7EKHEe 4q7FTCxKmwSAhW2oACTZ2jiH807rd2Be+cSzCFGXUbNQIS2oYqD9xrNn0nuqo76q 5Eyn7Q2jsrhlAhJCBhInv9nDARt1nYnU+pbZ28CCp0mPaGeqFnrks7IqF5gosQYl l4FVOLykhq9P9u+nwgO1N/a/JHVenDfkQVBDQiut8QwZvrgZP/pPu9B6/ZsuQwuD UxHiBWEHzpRnWj9iAO1h5sJjuuZVptUXlGYpJDQXzrJB5NeSZ5pNlVpQSoemG3ck dI5wQYrS+kGYvQMYzjbCZ89G1FVgMzcnVq3oFupu2kuY -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:30 2026 by rpki-client