This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/b-FVgyj2WxJKvDOTs1CHimHwx64.roa File: b-FVgyj2WxJKvDOTs1CHimHwx64.roa (raw, json) Hash identifier: g6LGlCtZqdZpFtvcghFvuv8LtWYwAAGTzOHdhuBat+k= Subject key identifier: 6F:E1:55:83:28:F6:5B:12:4A:BC:33:93:B3:50:87:8A:61:F0:C7:AE Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A22D2394F347983549A602B4C3B9 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/b-FVgyj2WxJKvDOTs1CHimHwx64.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 996 IP address blocks: 77.47.180.0/22 maxlen: 24 212.111.211.0/24 maxlen: 24 212.111.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a2:2d:23:94:f3:47:98:35:49:a6:02:b4:c3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fe1558328f65b124abc3393b350878a61f0c7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:30:74:59:94:63:54:c4:1c:ac:57:76:0c: 21:b6:b0:77:38:bc:8b:76:8d:65:6d:0c:b7:67:57: d6:34:4d:9c:03:0f:ca:1e:5a:60:aa:2c:e9:b2:94: 28:38:7c:34:86:19:72:9e:0b:f5:aa:e0:5a:eb:3a: f3:c1:79:a1:a9:34:e2:a5:4d:35:2d:59:f9:3d:c3: 7a:cb:03:70:9c:46:05:14:a7:9c:86:b5:b4:6c:28: d9:ef:d0:fb:9a:db:8f:f4:40:03:b4:16:91:ac:c2: a2:ac:ef:ff:97:1c:71:53:df:59:bf:cf:a6:5a:3f: 25:97:d1:bf:e0:e3:fe:b6:b2:0e:48:c3:96:88:7b: 02:f1:a3:e2:c1:9e:64:d2:6a:2c:8f:5b:c0:a2:ae: 0f:ae:ea:17:21:44:05:ac:d6:9c:67:94:60:a9:ba: 61:2a:a9:a8:62:68:e5:b9:35:af:27:cf:98:cf:22: 84:95:27:f3:06:45:ef:98:6d:89:b7:61:e7:0d:70: c6:ec:4e:be:d5:4a:a3:2f:68:c2:f1:a3:1d:4f:c7: 03:a6:1d:77:a2:7e:58:ea:bc:44:0a:b7:05:9b:a6: 1e:d1:68:dc:9d:6e:8a:80:8c:19:b1:cc:df:1d:49: 73:d9:f3:20:dd:c0:70:c7:4f:26:a4:fe:83:d6:5b: d7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E1:55:83:28:F6:5B:12:4A:BC:33:93:B3:50:87:8A:61:F0:C7:AE X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/b-FVgyj2WxJKvDOTs1CHimHwx64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.180.0/22 212.111.211.0/24 212.111.218.0/23 Signature Algorithm: sha256WithRSAEncryption 29:ec:3a:5c:49:70:f5:d6:c0:78:25:4b:e8:b4:d9:45:bb:f2: 5b:92:f1:d8:b9:db:bf:3b:12:48:a0:a7:83:48:2b:05:4a:03: 38:fe:50:9c:96:ce:51:6c:11:bd:b2:36:86:1f:67:74:17:b2: 61:bd:1a:a9:03:e9:de:ef:6e:16:a6:7b:c4:6c:0d:9b:81:3b: d0:3c:d4:0c:1b:2d:f4:a3:e6:56:47:66:73:fc:eb:1f:47:47: bc:f6:7c:27:18:f4:eb:9f:db:70:35:1d:e0:4d:4b:57:0c:87: b8:ac:c7:67:d1:b5:9a:bf:3a:ab:da:82:19:04:d7:6e:f5:6a: 03:38:8d:1f:30:47:ad:89:67:a1:42:1a:f8:9e:14:68:87:6b: ff:44:bc:38:65:40:ab:f5:d4:65:ca:a5:55:86:91:be:a4:7d: d5:ba:a8:88:12:d3:67:28:0a:05:78:12:50:58:5d:65:60:67: d0:c5:db:0e:4f:15:df:7d:ef:39:20:24:44:6e:a4:94:cd:77: 82:a8:55:06:ad:1f:b3:9f:6f:98:58:d5:b2:71:c8:c9:81:62: 6c:7d:f6:a3:38:46:65:61:be:b6:29:d4:c2:b9:fb:bb:55:d9: 9c:48:9e:52:a2:9f:c4:24:85:b5:a1:26:66:27:64:ec:94:62: 41:0d:de:f9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OKItI5TzR5g1SaYCtMO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmUxNTU4MzI4ZjY1YjEyNGFiYzMzOTNiMzUwODc4YTYxZjBjN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YEwdFmUY1TEHKxXdgwhtrB3OLyL do1lbQy3Z1fWNE2cAw/KHlpgqizpspQoOHw0hhlyngv1quBa6zrzwXmhqTTipU01 LVn5PcN6ywNwnEYFFKechrW0bCjZ79D7mtuP9EADtBaRrMKirO//lxxxU99Zv8+m Wj8ll9G/4OP+trIOSMOWiHsC8aPiwZ5k0mosj1vAoq4PruoXIUQFrNacZ5Rgqbph KqmoYmjluTWvJ8+YzyKElSfzBkXvmG2Jt2HnDXDG7E6+1UqjL2jC8aMdT8cDph13 on5Y6rxECrcFm6Ye0WjcnW6KgIwZsczfHUlz2fMg3cBwx08mpP6D1lvX3QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG/hVYMo9lsSSrwzk7NQh4ph8MeuMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvYi1GVmd5ajJXeEpLdkRPVHMxQ0hpbUh3eDY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCTS+0AwQA 1G/TAwQB1G/aMA0GCSqGSIb3DQEBCwUAA4IBAQAp7DpcSXD11sB4JUvotNlFu/Jb kvHYudu/OxJIoKeDSCsFSgM4/lCcls5RbBG9sjaGH2d0F7JhvRqpA+ne724WpnvE bA2bgTvQPNQMGy30o+ZWR2Zz/OsfR0e89nwnGPTrn9twNR3gTUtXDIe4rMdn0bWa vzqr2oIZBNdu9WoDOI0fMEetiWehQhr4nhRoh2v/RLw4ZUCr9dRlyqVVhpG+pH3V uqiIEtNnKAoFeBJQWF1lYGfQxdsOTxXffe85ICREbqSUzXeCqFUGrR+zn2+YWNWy ccjJgWJsffajOEZlYb62KdTCufu7VdmcSJ5Sop/EJIW1oSZmJ2TslGJBDd75 -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:54 2026 by rpki-client