This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/d9SyIZ2aVy7phMIb31xHWwWVe2w.roa File: d9SyIZ2aVy7phMIb31xHWwWVe2w.roa (raw, json) Hash identifier: tEF84IYlQH25wPxrJgHgyLIyQseAqt0YqLc9QETsEP8= Subject key identifier: 77:D4:B2:21:9D:9A:57:2E:E9:84:C2:1B:DF:5C:47:5B:05:95:7B:6C Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019AE3B0D7C5D0F56AADD965E22CF3029C58 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/d9SyIZ2aVy7phMIb31xHWwWVe2w.roa Signing time: Wed 03 Dec 2025 10:10:08 +0000 ROA not before: Wed 03 Dec 2025 10:10:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3319 IP address blocks: 77.47.142.0/24 maxlen: 24 77.47.210.0/24 maxlen: 24 77.47.211.0/24 maxlen: 24 185.143.57.0/24 maxlen: 24 195.178.132.0/24 maxlen: 24 195.178.133.0/24 maxlen: 24 195.178.134.0/24 maxlen: 24 195.178.135.0/24 maxlen: 24 195.178.144.0/23 maxlen: 23 195.178.147.0/24 maxlen: 24 212.111.207.0/24 maxlen: 24 212.111.216.0/24 maxlen: 24 212.111.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:b0:d7:c5:d0:f5:6a:ad:d9:65:e2:2c:f3:02:9c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Dec 3 10:10:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=77d4b2219d9a572ee984c21bdf5c475b05957b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:63:6b:59:38:83:01:6d:e5:e4:2e:e8:46: a1:2f:8b:90:43:cf:e5:03:f8:c3:2a:e3:de:29:96: 7f:cc:04:b1:ea:f4:1b:80:af:fd:d9:d9:c1:94:19: 03:e1:b9:a6:fa:10:52:f6:13:ec:14:55:dd:4b:73: de:e8:2a:e2:db:f8:a8:3b:6a:52:31:34:88:cc:98: fe:2d:e8:e7:1b:7d:48:16:69:d2:5a:a2:11:94:6c: fd:eb:a3:88:25:04:c8:2b:e8:40:c6:c6:83:58:cf: 2c:02:02:81:0d:ef:f7:a2:be:30:9a:58:51:36:33: 57:44:e6:2a:df:eb:dc:04:ea:b9:ab:14:eb:39:9a: 90:2b:3e:aa:7e:b6:61:fa:c4:ba:1f:41:9b:ab:75: 61:95:b6:9d:18:9d:f6:49:d2:23:1e:74:fa:85:aa: 8a:97:d0:e2:24:e8:f9:ec:24:88:ff:ad:5a:71:47: 32:b3:37:13:23:c7:65:0f:2a:a8:59:85:d2:c9:58: 20:d7:61:0d:b7:a8:0d:a1:8a:8e:37:fc:3f:03:f2: 81:a3:37:c9:8a:88:8a:c7:ba:be:ff:c7:5c:e6:77: 1f:24:3e:21:21:aa:e5:98:67:02:13:f1:00:a8:c0: 0f:93:89:6e:7e:f3:e8:48:3a:11:e2:2c:8b:2a:14: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D4:B2:21:9D:9A:57:2E:E9:84:C2:1B:DF:5C:47:5B:05:95:7B:6C X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/d9SyIZ2aVy7phMIb31xHWwWVe2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.142.0/24 77.47.210.0/23 185.143.57.0/24 195.178.132.0/22 195.178.144.0/23 195.178.147.0/24 212.111.207.0/24 212.111.216.0/23 Signature Algorithm: sha256WithRSAEncryption cd:3e:41:bf:71:87:55:72:a4:31:73:41:5c:52:1f:dd:18:dc: 29:f7:91:b8:87:7b:5a:c5:f3:30:88:9f:6a:e7:54:43:c2:f7: 68:22:56:29:9d:f9:22:89:70:f6:87:de:e6:42:4e:c4:de:e6: 1a:29:5d:4b:07:38:bd:e0:38:01:ef:23:c5:05:06:1d:e6:24: 54:3b:9b:76:12:30:ed:dc:31:f2:d9:87:96:3e:fd:4b:6b:14: 0c:cf:44:18:f2:ec:ba:16:cc:94:e0:8d:25:ea:60:f6:f9:c3: da:10:25:ef:c2:19:87:c8:25:18:d0:a1:15:52:7d:bf:92:02: d5:46:b9:13:0e:4e:53:d1:34:76:9d:60:a8:9e:4e:d3:8c:29: c7:9a:08:21:f4:54:bc:0d:1a:5e:6d:30:c0:44:9a:cb:d3:ed: 05:d1:79:24:db:35:94:1b:c4:4f:e7:0d:44:b6:ca:99:e8:5d: 4b:3b:b1:c5:f7:53:34:fb:8b:ce:43:68:a5:c3:61:66:3b:27: 74:10:41:2a:c0:52:e9:85:f7:f9:ef:79:a4:fc:57:18:02:2f: dc:73:ee:38:d3:62:5e:f2:89:eb:b3:65:a4:3e:ab:e1:22:d4: b1:00:4e:01:8e:12:09:28:2a:6a:c9:9c:94:84:18:ae:26:f0: f9:43:1c:1b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZrjsNfF0PVqrdll4izzApxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMjAzMTAxMDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2Q0YjIyMTlkOWE1NzJlZTk4NGMyMWJkZjVjNDc1YjA1OTU3YjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqtja1k4gwFt5eQu6EahL4uQQ8/l A/jDKuPeKZZ/zASx6vQbgK/92dnBlBkD4bmm+hBS9hPsFFXdS3Pe6Cri2/ioO2pS MTSIzJj+LejnG31IFmnSWqIRlGz966OIJQTIK+hAxsaDWM8sAgKBDe/3or4wmlhR NjNXROYq3+vcBOq5qxTrOZqQKz6qfrZh+sS6H0Gbq3VhlbadGJ32SdIjHnT6haqK l9DiJOj57CSI/61acUcyszcTI8dlDyqoWYXSyVgg12ENt6gNoYqON/w/A/KBozfJ ioiKx7q+/8dc5ncfJD4hIarlmGcCE/EAqMAPk4lufvPoSDoR4iyLKhQfFwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFHfUsiGdmlcu6YTCG99cR1sFlXtsMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvZDlTeUlaMmFWeTdwaE1JYjMxeEhXd1dWZTJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQATS+OAwQB TS/SAwQAuY85AwQCw7KEAwQBw7KQAwQAw7KTAwQA1G/PAwQB1G/YMA0GCSqGSIb3 DQEBCwUAA4IBAQDNPkG/cYdVcqQxc0FcUh/dGNwp95G4h3taxfMwiJ9q51RDwvdo IlYpnfkiiXD2h97mQk7E3uYaKV1LBzi94DgB7yPFBQYd5iRUO5t2EjDt3DHy2YeW Pv1LaxQMz0QY8uy6FsyU4I0l6mD2+cPaECXvwhmHyCUY0KEVUn2/kgLVRrkTDk5T 0TR2nWConk7TjCnHmggh9FS8DRpebTDARJrL0+0F0Xkk2zWUG8RP5w1EtsqZ6F1L O7HF91M0+4vOQ2ilw2FmOyd0EEEqwFLphff573mk/FcYAi/cc+4402Je8onrs2Wk PqvhItSxAE4BjhIJKCpqyZyUhBiuJvD5Qxwb -----END CERTIFICATE-----Generated at Sun Dec 7 14:28:03 2025 by rpki-client