This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/1-FaALXlMsFyTh9BoD33d67aHEeI.roa File: 1-FaALXlMsFyTh9BoD33d67aHEeI.roa (raw, json) Hash identifier: vrnFz1Kmq+5wOQAjBqsePEJkDcr2bnQe4L2j8uEu+qw= Subject key identifier: F8:56:80:2D:79:4C:B0:5C:93:87:D0:68:0F:7D:DD:EB:B6:87:11:E2 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019B7BA32168C80B17064D02C5677DA5D227 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/1-FaALXlMsFyTh9BoD33d67aHEeI.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 77.91.72.0/24 maxlen: 24 77.91.73.0/24 maxlen: 24 77.91.74.0/24 maxlen: 24 77.91.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:21:68:c8:0b:17:06:4d:02:c5:67:7d:a5:d2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f856802d794cb05c9387d0680f7dddebb68711e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:0e:7f:71:01:05:e9:30:5b:6a:06:b3:4f: 6c:08:b6:a1:7d:c2:38:3a:37:68:fa:95:ee:df:65: 31:45:3a:c5:1d:f0:67:ee:32:15:14:88:41:da:93: 3c:ad:c8:c6:15:fb:de:23:17:3e:c9:5e:1e:6f:47: a7:96:9e:ce:ca:74:5f:90:7a:7d:19:67:46:57:f7: a1:bb:1f:b9:e2:1e:5f:b9:ec:53:1c:f7:7c:4a:58: ec:e7:a9:a9:f4:40:db:80:b7:73:85:95:b9:da:3f: 57:79:fd:22:a5:4e:d2:82:53:57:a5:a1:20:c9:24: b9:6e:dc:1d:f5:4d:07:dc:0a:86:31:dc:0d:28:f0: 83:b8:91:8e:f0:79:84:51:3e:a9:84:27:c0:bd:4d: 08:c4:ad:eb:f1:5f:bd:38:b3:83:e3:bc:e2:28:aa: ed:c4:85:2c:48:89:a2:e7:b0:0f:66:0b:aa:43:20: bf:15:03:df:42:7f:30:b4:5a:ed:b5:92:60:40:37: aa:ad:3d:47:fe:d0:01:c0:a6:2e:ea:9b:99:fa:59: 69:8e:bd:ef:cd:77:67:94:14:c2:b5:28:de:02:c6: 8f:2d:55:e2:01:a1:4c:f9:b9:0e:ff:b1:0f:99:1b: ad:ba:b0:f3:44:1c:f4:f7:12:13:57:c9:00:18:58: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:56:80:2D:79:4C:B0:5C:93:87:D0:68:0F:7D:DD:EB:B6:87:11:E2 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/1-FaALXlMsFyTh9BoD33d67aHEeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.72.0/22 Signature Algorithm: sha256WithRSAEncryption 08:c1:a0:c7:25:cc:fd:e0:76:6f:43:69:86:ca:e4:78:47:d7: 92:ca:41:9a:ae:2c:7e:d9:73:0e:4c:f9:26:b4:0e:df:a5:9b: c1:5a:7d:b0:ed:5e:bd:26:d1:36:4c:f9:d6:fa:65:23:0b:36: 6e:46:33:25:34:3d:78:44:3a:b3:2b:4b:8e:63:53:bb:de:7a: d0:07:c2:0b:1c:ae:1d:f5:6a:a9:53:52:c1:3d:fa:8b:bc:84: 8b:14:1f:53:97:3e:d5:61:f9:ab:67:82:fc:af:33:8d:cd:6c: 64:57:7a:11:2a:0a:72:f1:dc:5e:01:de:b5:44:0f:3a:62:aa: 66:3c:3f:95:d1:16:e8:a1:ca:c2:0e:17:28:f5:96:34:03:16: 84:fa:66:a1:a1:1c:9f:a7:98:74:86:99:d4:62:91:59:4d:31: 4e:da:f2:01:32:19:8e:5c:66:34:66:28:20:15:06:42:21:f6: 3e:85:96:88:d3:f6:a1:77:6e:fa:b7:f1:83:be:8d:e3:c2:6f: a3:d3:a4:58:46:5b:07:7e:d7:9a:81:8c:ca:ca:78:59:e8:16: 5c:62:b8:43:63:cc:f3:fc:4d:31:dd:a4:ba:fb:43:c9:53:c3: 3b:08:6b:12:98:10:dd:3f:12:67:36:98:aa:c7:0f:c0:d1:1f: 7d:8b:cb:f4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7oyFoyAsXBk0CxWd9pdInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODU2ODAyZDc5NGNiMDVjOTM4N2QwNjgwZjdkZGRlYmI2ODcxMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2YOf3EBBekwW2oGs09sCLahfcI4 Ojdo+pXu32UxRTrFHfBn7jIVFIhB2pM8rcjGFfveIxc+yV4eb0enlp7OynRfkHp9 GWdGV/ehux+54h5fuexTHPd8Sljs56mp9EDbgLdzhZW52j9Xef0ipU7SglNXpaEg ySS5btwd9U0H3AqGMdwNKPCDuJGO8HmEUT6phCfAvU0IxK3r8V+9OLOD47ziKKrt xIUsSImi57APZguqQyC/FQPfQn8wtFrttZJgQDeqrT1H/tABwKYu6puZ+llpjr3v zXdnlBTCtSjeAsaPLVXiAaFM+bkO/7EPmRuturDzRBz09xITV8kAGFhqPQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhWgC15TLBck4fQaA993eu2hxHiMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvMS1GYUFMWGxNc0Z5VGg5Qm9EMzNkNjdhSEVlSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2YvZDU3YTY0LWJkMzItNGM5MS1iZTA2LWZlZThlYWY3M2Iw ZC8xL2JRaU03eWpnS3ZmUUR5bDRGc1Zmamp4RDFUVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk1bSDAN BgkqhkiG9w0BAQsFAAOCAQEACMGgxyXM/eB2b0NphsrkeEfXkspBmq4sftlzDkz5 JrQO36WbwVp9sO1evSbRNkz51vplIws2bkYzJTQ9eEQ6sytLjmNTu9560AfCCxyu HfVqqVNSwT36i7yEixQfU5c+1WH5q2eC/K8zjc1sZFd6ESoKcvHcXgHetUQPOmKq Zjw/ldEW6KHKwg4XKPWWNAMWhPpmoaEcn6eYdIaZ1GKRWU0xTtryATIZjlxmNGYo IBUGQiH2PoWWiNP2oXdu+rfxg76N48Jvo9OkWEZbB37XmoGMysp4WegWXGK4Q2PM 8/xNMd2kuvtDyVPDOwhrEpgQ3T8SZzaYqscPwNEffYvL9A== -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:15 2026 by rpki-client