This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/mA9FUKokuAkOmYEaamoVS8xVt0w.roa File: mA9FUKokuAkOmYEaamoVS8xVt0w.roa (raw, json) Hash identifier: nA/5ji3rFPg/Zw9NbZiQ3tqwgYm9mdtfFHRh8QaVWDw= Subject key identifier: 98:0F:45:50:AA:24:B8:09:0E:99:81:1A:6A:6A:15:4B:CC:55:B7:4C Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A87978291A48954C5C9B89DF8222 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/mA9FUKokuAkOmYEaamoVS8xVt0w.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30900 IP address blocks: 77.47.213.0/24 maxlen: 24 195.178.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a8:79:78:29:1a:48:95:4c:5c:9b:89:df:82:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=980f4550aa24b8090e99811a6a6a154bcc55b74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:32:f2:d3:72:46:3a:5a:87:1a:a7:41:fb: eb:6e:ac:87:d4:6b:2d:3b:1a:ac:1e:32:3d:d2:38: a4:4b:98:bc:e2:cf:ca:84:0d:61:93:1c:63:ed:79: b4:45:5f:23:ee:49:f9:a1:22:26:23:81:87:e3:e9: c5:49:97:65:42:6f:37:52:18:b4:63:55:b8:09:05: ba:2e:95:a3:22:86:08:86:78:49:19:22:d7:f2:fb: 8c:a9:64:65:f2:de:ed:99:69:b9:12:0b:28:6b:d3: 5b:61:18:97:be:56:ee:dd:a8:f2:e0:5a:00:a2:2a: 84:bd:8c:70:0c:5b:86:3e:84:bc:32:b6:26:16:65: bc:f2:f0:3f:27:b9:de:56:43:47:69:4c:cb:9d:20: 14:0e:85:5e:b8:a7:e8:24:2d:b7:af:53:ae:87:74: cd:b9:0d:c2:ce:c1:31:81:ad:82:0f:98:95:dc:cb: f8:fc:56:ef:de:6f:45:05:0f:fe:a7:82:5c:72:eb: be:37:d4:1a:3a:53:29:74:f6:93:af:cf:e7:3f:57: 18:a0:2f:e5:33:8a:1e:8a:e5:80:08:91:51:be:6c: 12:8e:49:37:1f:0b:02:a5:0f:c6:dc:75:d4:f6:8a: b8:22:cb:8b:df:ef:33:f6:a8:2d:2b:4a:43:38:1b: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0F:45:50:AA:24:B8:09:0E:99:81:1A:6A:6A:15:4B:CC:55:B7:4C X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/mA9FUKokuAkOmYEaamoVS8xVt0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.213.0/24 195.178.151.0/24 Signature Algorithm: sha256WithRSAEncryption c3:76:5b:2b:64:06:3a:4d:71:a1:78:86:6e:b4:e2:e0:2c:00: 0e:15:c0:b4:36:4e:b5:7c:8e:fc:44:2f:01:58:53:a5:fb:43: b9:36:c8:ec:66:fb:ae:f1:80:f8:6f:13:b3:56:e7:b5:da:17: 94:2e:3f:67:b1:bb:ab:03:78:d8:ad:b8:6e:90:d9:df:5c:a3: 08:bd:fc:b0:bf:8f:6b:65:62:30:74:5b:55:54:9c:8f:d7:ca: 91:18:7b:a1:57:e7:30:35:20:b7:5e:07:75:9d:3f:a2:39:74: 49:0f:59:67:1d:ee:ad:a8:3c:7d:51:2a:08:b7:7a:9c:5e:f4: b9:aa:dc:93:f5:51:37:a0:38:49:c2:a4:42:fd:59:c4:e9:d9: c6:56:78:34:ab:6b:fe:73:3d:04:9a:86:76:92:8e:40:26:06: b3:6c:46:e0:74:bb:c7:79:eb:fe:ee:36:0d:49:fb:97:3e:a8: ab:10:0a:24:fd:f0:8a:aa:58:a2:05:b0:ac:16:bd:0b:51:d7: 9e:6a:37:53:54:a0:98:4d:ea:06:2b:b9:bf:39:51:54:bd:04: c2:ad:1a:2f:84:eb:e0:20:eb:3b:3a:ab:2d:1a:27:fd:ae:ed: db:21:56:8e:87:67:bc:48:89:d4:41:e7:57:7b:59:34:10:42: 8f:c9:09:3c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OKh5eCkaSJVMXJuJ34IiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODBmNDU1MGFhMjRiODA5MGU5OTgxMWE2YTZhMTU0YmNjNTViNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00Ay8tNyRjpahxqnQfvrbqyH1Gst OxqsHjI90jikS5i84s/KhA1hkxxj7Xm0RV8j7kn5oSImI4GH4+nFSZdlQm83Uhi0 Y1W4CQW6LpWjIoYIhnhJGSLX8vuMqWRl8t7tmWm5Egsoa9NbYRiXvlbu3ajy4FoA oiqEvYxwDFuGPoS8MrYmFmW88vA/J7neVkNHaUzLnSAUDoVeuKfoJC23r1Ouh3TN uQ3CzsExga2CD5iV3Mv4/Fbv3m9FBQ/+p4Jccuu+N9QaOlMpdPaTr8/nP1cYoC/l M4oeiuWACJFRvmwSjkk3HwsCpQ/G3HXU9oq4IsuL3+8z9qgtK0pDOBumFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJgPRVCqJLgJDpmBGmpqFUvMVbdMMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvbUE5RlVLb2t1QWtPbVlFYWFtb1ZTOHhWdDB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATS/VAwQA w7KXMA0GCSqGSIb3DQEBCwUAA4IBAQDDdlsrZAY6TXGheIZutOLgLAAOFcC0Nk61 fI78RC8BWFOl+0O5NsjsZvuu8YD4bxOzVue12heULj9nsburA3jYrbhukNnfXKMI vfywv49rZWIwdFtVVJyP18qRGHuhV+cwNSC3Xgd1nT+iOXRJD1lnHe6tqDx9USoI t3qcXvS5qtyT9VE3oDhJwqRC/VnE6dnGVng0q2v+cz0EmoZ2ko5AJgazbEbgdLvH eev+7jYNSfuXPqirEAok/fCKqliiBbCsFr0LUdeeajdTVKCYTeoGK7m/OVFUvQTC rRovhOvgIOs7OqstGif9ru3bIVaOh2e8SInUQedXe1k0EEKPyQk8 -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:53 2026 by rpki-client