This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RlxB1rEWXbyI7qsubv4N4rvzQiQ.roa File: RlxB1rEWXbyI7qsubv4N4rvzQiQ.roa (raw, json) Hash identifier: WBvi2npDVwAFPV0XSrdWsL90un/MxJKqOHocYOzF8SI= Subject key identifier: 46:5C:41:D6:B1:16:5D:BC:88:EE:AB:2E:6E:FE:0D:E2:BB:F3:42:24 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910618E882F49BB615FB5008493C04B Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RlxB1rEWXbyI7qsubv4N4rvzQiQ.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207279 IP address blocks: 77.92.154.0/24 maxlen: 24 78.135.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:61:8e:88:2f:49:bb:61:5f:b5:00:84:93:c0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=465c41d6b1165dbc88eeab2e6efe0de2bbf34224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:44:8e:01:b4:39:a9:12:74:4c:01:ec:f8:e4: 4d:01:33:f6:ff:eb:f5:9c:f3:14:1a:33:36:6a:7c: db:00:b5:0f:8f:d4:ec:37:50:02:0e:ca:9d:21:08: d2:13:d6:9a:80:25:eb:e9:86:eb:97:5e:ee:b0:92: e7:f2:08:1b:db:2a:50:40:01:58:94:f9:a2:5e:86: 9d:b3:31:00:a4:26:a0:5a:ba:34:87:3c:24:69:38: cc:31:67:f4:5c:c9:e8:74:fb:15:bd:b5:c7:0c:b8: 71:03:26:8f:7f:8b:1a:68:c4:50:07:d4:ef:d9:b6: 76:5f:fb:94:10:8e:81:90:3c:7a:be:0c:37:2b:53: a2:50:b6:16:b7:92:17:c4:bd:79:b9:be:07:18:e1: 6f:97:47:23:62:86:62:ce:5f:8f:cf:1f:a7:94:f9: a7:8b:9a:f9:8b:50:13:e3:79:b7:22:aa:92:77:73: ef:34:02:49:a3:c1:5a:13:fc:79:7a:41:e0:41:0d: 48:9f:dd:22:45:28:93:27:7b:46:a1:a0:45:b9:15: fa:f7:65:43:bd:99:b3:5f:be:06:5d:c8:3e:b8:57: b1:49:66:6a:e0:79:29:23:72:ba:34:e0:44:c6:be: be:1f:67:35:5d:92:39:a3:ca:76:47:c5:0a:aa:3d: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5C:41:D6:B1:16:5D:BC:88:EE:AB:2E:6E:FE:0D:E2:BB:F3:42:24 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RlxB1rEWXbyI7qsubv4N4rvzQiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.154.0/24 78.135.87.0/24 Signature Algorithm: sha256WithRSAEncryption 09:fc:7f:de:22:a2:be:ee:bf:06:f8:77:e7:fd:0e:0a:17:3f: a3:d1:5f:9e:a1:10:1f:ae:b5:3a:a1:bb:a7:60:3f:b1:43:43: bd:d2:ea:93:20:cb:9a:94:6f:b1:be:b7:c8:3d:0a:ae:01:d2: a3:31:00:c9:28:33:c7:0c:94:4b:b0:82:72:6c:12:97:99:8c: 35:e5:11:ff:99:95:74:0b:f3:d1:03:0f:41:00:16:6d:3d:81: cb:3b:b9:75:7c:fb:67:cd:58:3b:00:b7:bf:19:a5:2a:73:ce: cb:42:23:d4:b7:3e:fa:da:ec:c0:96:42:d2:4f:6f:01:8e:0a: cb:53:2e:dd:a0:fb:42:a2:70:7d:c2:20:e7:c6:24:16:3d:06: 92:99:48:7f:9e:ee:6a:0d:82:d7:bf:26:4d:1d:46:f7:9b:9d: ee:de:84:61:8d:9b:cd:7f:36:25:c8:5a:95:0d:bd:b4:a0:47: a8:fb:b3:ec:ca:52:f8:1a:4e:f8:55:26:46:54:d4:5c:aa:7c: 85:c4:02:35:14:e7:44:92:f1:f2:c3:ab:4a:d4:3a:39:11:91: 77:0f:52:72:6e:30:b1:bd:9f:16:95:73:66:ee:2f:8b:06:02: e2:58:f7:4c:84:c5:a1:ce:b8:88:04:8a:3f:36:3f:c6:45:1b: f6:82:35:ea -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EGGOiC9Ju2FftQCEk8BLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjVjNDFkNmIxMTY1ZGJjODhlZWFiMmU2ZWZlMGRlMmJiZjM0MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7USOAbQ5qRJ0TAHs+ORNATP2/+v1 nPMUGjM2anzbALUPj9TsN1ACDsqdIQjSE9aagCXr6Ybrl17usJLn8ggb2ypQQAFY lPmiXoadszEApCagWro0hzwkaTjMMWf0XMnodPsVvbXHDLhxAyaPf4saaMRQB9Tv 2bZ2X/uUEI6BkDx6vgw3K1OiULYWt5IXxL15ub4HGOFvl0cjYoZizl+Pzx+nlPmn i5r5i1AT43m3IqqSd3PvNAJJo8FaE/x5ekHgQQ1In90iRSiTJ3tGoaBFuRX692VD vZmzX74GXcg+uFexSWZq4HkpI3K6NOBExr6+H2c1XZI5o8p2R8UKqj0Q2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEZcQdaxFl28iO6rLm7+DeK780IkMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvUmx4QjFyRVdYYnlJN3FzdWJ2NE40cnZ6UWlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVyaAwQA TodXMA0GCSqGSIb3DQEBCwUAA4IBAQAJ/H/eIqK+7r8G+Hfn/Q4KFz+j0V+eoRAf rrU6obunYD+xQ0O90uqTIMualG+xvrfIPQquAdKjMQDJKDPHDJRLsIJybBKXmYw1 5RH/mZV0C/PRAw9BABZtPYHLO7l1fPtnzVg7ALe/GaUqc87LQiPUtz762uzAlkLS T28BjgrLUy7doPtConB9wiDnxiQWPQaSmUh/nu5qDYLXvyZNHUb3m53u3oRhjZvN fzYlyFqVDb20oEeo+7PsylL4Gk74VSZGVNRcqnyFxAI1FOdEkvHyw6tK1Do5EZF3 D1JybjCxvZ8WlXNm7i+LBgLiWPdMhMWhzriIBIo/Nj/GRRv2gjXq -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:24 2026 by rpki-client