This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/P_sY_DTCv1Io83bexzwolbWVhG0.roa File: P_sY_DTCv1Io83bexzwolbWVhG0.roa (raw, json) Hash identifier: +CAC6PIgcMMFmmqnaKSrVcGgLoSieAQ3jT8XfXqP3tY= Subject key identifier: 3F:FB:18:FC:34:C2:BF:52:28:F3:76:DE:C7:3C:28:95:B5:95:84:6D Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38AC552CEA2713E2285DAB38A5A55E Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/P_sY_DTCv1Io83bexzwolbWVhG0.roa Signing time: Fri 02 Jan 2026 10:20:01 +0000 ROA not before: Fri 02 Jan 2026 10:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55154 IP address blocks: 77.47.152.0/22 maxlen: 24 77.47.242.0/24 maxlen: 24 195.178.149.0/24 maxlen: 24 195.178.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ac:55:2c:ea:27:13:e2:28:5d:ab:38:a5:a5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ffb18fc34c2bf5228f376dec73c2895b595846d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:d1:40:82:6d:df:97:47:c4:d8:14:96:fd: 66:81:3d:6b:11:b9:6e:6f:e3:f3:a3:47:f6:a4:08: 6c:4d:d0:67:18:1f:98:ae:cc:30:90:5c:67:6b:6a: 36:85:78:56:a8:c6:9f:63:53:5a:35:fd:37:ae:68: 87:77:d4:c2:1c:61:cb:0d:f9:e3:60:c7:23:6f:91: 65:bb:ce:e7:3b:3c:63:90:b0:99:6b:1f:b4:56:44: 1e:ad:f5:20:40:33:23:2c:2a:e2:86:b3:c1:ed:b0: a1:8f:19:87:a9:18:59:a4:cb:6f:7f:a2:59:ee:a3: b1:8d:77:8b:38:ed:3d:fa:4a:98:59:3c:de:82:37: cf:37:d9:c7:48:9d:38:e2:41:3e:27:4d:a6:6a:7d: eb:9a:86:82:19:1e:32:04:bc:58:b8:bd:0d:71:77: 51:c2:04:12:10:04:38:eb:93:18:88:b8:81:c8:f1: 6c:78:8c:14:17:d5:50:c8:99:cb:0b:1f:1d:3e:ec: ac:41:0e:4d:d7:d1:68:9c:9b:35:23:4f:65:0e:1e: 89:39:ef:c4:16:4e:0a:18:4d:10:2c:a7:d5:9e:3f: 26:1c:bf:80:38:25:ee:1f:ea:0d:c5:44:29:d0:85: b0:f9:cc:4e:0f:2c:59:b8:2a:d3:4a:50:36:29:98: 97:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FB:18:FC:34:C2:BF:52:28:F3:76:DE:C7:3C:28:95:B5:95:84:6D X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/P_sY_DTCv1Io83bexzwolbWVhG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.152.0/22 77.47.242.0/24 195.178.149.0/24 195.178.156.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:b7:7e:bc:4d:fd:60:8b:5d:9f:ea:14:cc:43:4a:b8:bf:b3: de:bc:52:43:32:4a:07:fb:97:36:25:d8:ce:91:49:07:0b:4d: 39:3f:41:82:58:4f:1c:6c:aa:c1:2e:a6:e3:b8:75:02:c1:03: ba:3b:86:12:b8:e4:9e:68:53:60:28:4f:7a:97:cd:39:a2:26: 51:ff:e2:b8:a6:60:b6:ea:34:90:b9:e8:e1:54:03:38:b9:40: 12:79:4e:b7:bc:e0:53:27:95:10:e7:62:3f:11:cc:16:ad:bf: 20:e2:70:2a:59:78:d2:b7:21:4c:73:5c:8b:a3:c1:e8:80:8b: 8d:9d:e6:4e:8a:d2:33:0e:4e:a9:6f:68:86:09:c2:6c:0d:6a: 78:fe:99:e4:04:95:4c:ad:70:38:08:a5:3d:d4:86:4f:3d:55: aa:0f:38:82:17:34:5c:d8:78:ba:30:c4:71:49:e6:81:c1:bf: b3:0b:2d:69:ed:1d:bc:5d:25:ea:a8:ac:88:33:a9:b9:4a:25: 64:85:45:22:25:b2:45:ea:f7:42:8d:94:f2:c1:3a:8b:a4:5f: 04:07:47:22:d0:80:0b:ac:28:94:48:9f:a4:b6:cf:23:60:7c: f0:4e:c0:1b:ed:3d:66:e2:55:45:7a:42:71:af:40:0e:c0:b5: 53:79:73:d6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OKxVLOonE+IoXas4paVeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmZiMThmYzM0YzJiZjUyMjhmMzc2ZGVjNzNjMjg5NWI1OTU4NDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfrRQIJt35dHxNgUlv1mgT1rEblu b+Pzo0f2pAhsTdBnGB+YrswwkFxna2o2hXhWqMafY1NaNf03rmiHd9TCHGHLDfnj YMcjb5Flu87nOzxjkLCZax+0VkQerfUgQDMjLCrihrPB7bChjxmHqRhZpMtvf6JZ 7qOxjXeLOO09+kqYWTzegjfPN9nHSJ044kE+J02man3rmoaCGR4yBLxYuL0NcXdR wgQSEAQ465MYiLiByPFseIwUF9VQyJnLCx8dPuysQQ5N19FonJs1I09lDh6JOe/E Fk4KGE0QLKfVnj8mHL+AOCXuH+oNxUQp0IWw+cxODyxZuCrTSlA2KZiX0QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFD/7GPw0wr9SKPN23sc8KJW1lYRtMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvUF9zWV9EVEN2MUlvODNiZXh6d29sYldWaEcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCTS+YAwQA TS/yAwQAw7KVAwQAw7KcMA0GCSqGSIb3DQEBCwUAA4IBAQBMt368Tf1gi12f6hTM Q0q4v7PevFJDMkoH+5c2JdjOkUkHC005P0GCWE8cbKrBLqbjuHUCwQO6O4YSuOSe aFNgKE96l805oiZR/+K4pmC26jSQuejhVAM4uUASeU63vOBTJ5UQ52I/EcwWrb8g 4nAqWXjStyFMc1yLo8HogIuNneZOitIzDk6pb2iGCcJsDWp4/pnkBJVMrXA4CKU9 1IZPPVWqDziCFzRc2Hi6MMRxSeaBwb+zCy1p7R28XSXqqKyIM6m5SiVkhUUiJbJF 6vdCjZTywTqLpF8EB0ci0IALrCiUSJ+kts8jYHzwTsAb7T1m4lVFekJxr0AOwLVT eXPW -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:12 2026 by rpki-client