This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/C7UtJA_eIY3iBHKFgnh8NFNVHtM.roa File: C7UtJA_eIY3iBHKFgnh8NFNVHtM.roa (raw, json) Hash identifier: TWITgo4iMFNiT8cn2op6hTWDZnonz5/60Ka/vfO3muQ= Subject key identifier: 0B:B5:2D:24:0F:DE:21:8D:E2:04:72:85:82:78:7C:34:53:55:1E:D3 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019AC5F4D67E84551DE6FFFF381B33B9C0EF Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/C7UtJA_eIY3iBHKFgnh8NFNVHtM.roa Signing time: Thu 27 Nov 2025 15:35:48 +0000 ROA not before: Thu 27 Nov 2025 15:35:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55154 IP address blocks: 77.47.152.0/22 maxlen: 24 77.47.242.0/24 maxlen: 24 195.178.149.0/24 maxlen: 24 195.178.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:f4:d6:7e:84:55:1d:e6:ff:ff:38:1b:33:b9:c0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Nov 27 15:35:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0bb52d240fde218de204728582787c3453551ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:56:0b:36:89:00:aa:85:fc:43:81:c1:7b: 37:98:36:3f:91:1b:b6:f6:e4:d5:ea:f7:6d:a2:e9: 8d:3e:5d:b5:af:13:12:d0:57:7b:ac:b9:49:78:29: d5:a8:66:ab:87:e1:5a:27:06:26:68:fa:ab:10:60: cc:e8:d5:9e:67:9a:d0:c2:5d:09:ea:cf:0b:e7:7c: a2:89:45:1e:30:e2:86:92:05:4d:1f:6c:16:f7:32: df:d6:4c:31:bc:45:3b:d3:f6:59:7f:ca:70:83:0c: 0c:b2:dd:07:3b:5b:f1:35:f1:9f:3c:aa:a4:1a:e9: aa:e4:5a:63:6c:65:91:2b:f8:bf:6d:bb:18:fd:d9: f0:7e:d6:4b:c6:f8:92:3a:a7:f0:00:9d:04:f3:6f: 4c:a8:6a:77:5a:c2:05:f9:6c:2a:b5:a6:62:7a:fa: fe:d4:dc:58:47:9a:c7:0f:af:81:da:b4:04:6b:c1: f2:7b:e2:78:ea:8f:46:ad:cc:36:a2:16:e2:18:ce: 0d:f9:18:da:0d:8b:b1:fd:64:51:a1:a5:98:49:2d: a7:af:aa:a1:bd:ff:a8:43:dc:b8:43:be:20:12:9f: d7:79:71:71:1d:d4:22:9a:ce:3d:20:03:df:58:cd: a8:bc:38:33:06:69:d0:1d:b3:d6:7e:93:56:72:a8: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B5:2D:24:0F:DE:21:8D:E2:04:72:85:82:78:7C:34:53:55:1E:D3 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/C7UtJA_eIY3iBHKFgnh8NFNVHtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.152.0/22 77.47.242.0/24 195.178.149.0/24 195.178.156.0/24 Signature Algorithm: sha256WithRSAEncryption 76:76:17:54:c2:c5:77:c2:d7:7b:49:0b:29:10:ca:d0:47:0a: ba:6e:8c:67:99:a3:d4:14:58:83:6b:1f:a5:b1:4d:3e:10:25: b3:0d:46:70:d6:dc:85:6e:32:88:24:4d:a6:13:7d:12:00:fc: cd:c1:04:2a:04:f2:1e:fd:8c:e3:b8:0c:e0:d9:90:e3:e8:1a: 49:da:43:17:41:9a:58:ce:e7:d1:5a:5f:06:ff:c3:81:e9:8e: ab:c4:26:1c:8b:c4:c6:f9:7e:05:c4:ff:a2:88:c2:9c:75:cb: 3a:70:09:c0:b0:1e:c2:64:57:37:8b:2f:4d:72:9c:24:00:3f: 6d:40:c1:20:3b:2f:6c:63:83:04:d1:de:1f:4d:fb:0f:09:a9: 74:10:6b:20:4a:b9:a1:1e:77:48:39:4a:79:bb:25:14:52:67: 80:b3:3a:c2:1a:ec:1b:51:94:51:4a:57:cb:a4:68:d1:7a:65: 37:d5:6b:f4:21:49:f0:33:5b:e3:96:13:4e:4e:51:a2:0d:93: e7:77:c3:cf:73:6f:dc:0a:4b:8a:87:99:53:ce:8e:60:c9:43: 39:8e:96:67:2e:53:5e:d2:36:72:45:99:fe:12:db:c4:a1:05: 2d:2a:16:06:98:62:e1:38:45:39:d0:00:25:a3:87:07:f7:ca: e6:39:9c:7f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrF9NZ+hFUd5v//OBszucDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMTI3MTUzNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmI1MmQyNDBmZGUyMThkZTIwNDcyODU4Mjc4N2MzNDUzNTUxZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4hWCzaJAKqF/EOBwXs3mDY/kRu2 9uTV6vdtoumNPl21rxMS0Fd7rLlJeCnVqGarh+FaJwYmaPqrEGDM6NWeZ5rQwl0J 6s8L53yiiUUeMOKGkgVNH2wW9zLf1kwxvEU70/ZZf8pwgwwMst0HO1vxNfGfPKqk Gumq5FpjbGWRK/i/bbsY/dnwftZLxviSOqfwAJ0E829MqGp3WsIF+WwqtaZievr+ 1NxYR5rHD6+B2rQEa8Hye+J46o9Grcw2ohbiGM4N+RjaDYux/WRRoaWYSS2nr6qh vf+oQ9y4Q74gEp/XeXFxHdQims49IAPfWM2ovDgzBmnQHbPWfpNWcqilWwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAu1LSQP3iGN4gRyhYJ4fDRTVR7TMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvQzdVdEpBX2VJWTNpQkhLRmduaDhORk5WSHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCTS+YAwQA TS/yAwQAw7KVAwQAw7KcMA0GCSqGSIb3DQEBCwUAA4IBAQB2dhdUwsV3wtd7SQsp EMrQRwq6boxnmaPUFFiDax+lsU0+ECWzDUZw1tyFbjKIJE2mE30SAPzNwQQqBPIe /YzjuAzg2ZDj6BpJ2kMXQZpYzufRWl8G/8OB6Y6rxCYci8TG+X4FxP+iiMKcdcs6 cAnAsB7CZFc3iy9NcpwkAD9tQMEgOy9sY4ME0d4fTfsPCal0EGsgSrmhHndIOUp5 uyUUUmeAszrCGuwbUZRRSlfLpGjRemU31Wv0IUnwM1vjlhNOTlGiDZPnd8PPc2/c CkuKh5lTzo5gyUM5jpZnLlNe0jZyRZn+EtvEoQUtKhYGmGLhOEU50AAlo4cH98rm OZx/ -----END CERTIFICATE-----Generated at Sun Nov 30 04:36:35 2025 by rpki-client