This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/s87JXAJZovXeQZZ0akQUapnLHmM.roa File: s87JXAJZovXeQZZ0akQUapnLHmM.roa (raw, json) Hash identifier: gTFiiwgYY7vg2dsLhGhJsbrqfNb7OLS/na2G473SUqw= Subject key identifier: B3:CE:C9:5C:02:59:A2:F5:DE:41:96:74:6A:44:14:6A:99:CB:1E:63 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A715C2F58AE84A612783CFE8BA44 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/s87JXAJZovXeQZZ0akQUapnLHmM.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25500 IP address blocks: 77.47.128.0/17 maxlen: 17 77.47.128.0/21 maxlen: 21 77.47.128.0/24 maxlen: 24 77.47.136.0/22 maxlen: 22 77.47.140.0/23 maxlen: 23 77.47.160.0/20 maxlen: 20 77.47.176.0/23 maxlen: 23 77.47.184.0/21 maxlen: 21 77.47.192.0/20 maxlen: 20 77.47.194.0/24 maxlen: 24 77.47.208.0/23 maxlen: 23 77.47.214.0/23 maxlen: 23 77.47.216.0/21 maxlen: 21 77.47.224.0/20 maxlen: 20 2a02:db0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a7:15:c2:f5:8a:e8:4a:61:27:83:cf:e8:ba:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3cec95c0259a2f5de4196746a44146a99cb1e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:24:1e:2f:d2:bb:70:b4:dc:57:ab:25:53:c7: 43:09:6a:98:df:97:b8:c4:87:85:8d:1c:95:03:27: de:f7:ef:57:de:4f:d4:35:a1:00:7a:a9:40:10:7d: 4e:9c:68:de:ba:8b:91:49:4d:91:ed:3f:e6:13:0f: 3d:30:80:fb:3f:4b:1a:de:43:4c:95:40:11:17:09: a6:60:66:f6:9c:c6:c6:a8:85:73:e2:ca:87:32:57: f0:3a:a8:05:40:62:0a:a0:4a:6f:64:c7:4e:f1:ed: 80:d5:13:50:cd:13:2f:08:ec:13:8b:8e:b5:9c:f2: 51:e9:7b:cd:36:0a:8c:e0:d2:a0:41:e7:af:b0:df: a6:53:a4:9d:88:53:ea:f9:f9:09:39:13:a1:0b:20: 12:98:1f:72:d6:3e:cf:b4:97:21:86:6c:8e:8e:c2: 54:71:a1:63:62:79:08:a0:0e:52:d4:7d:85:25:c4: 08:1f:f9:09:be:7a:c2:49:2d:89:e8:83:61:42:08: dd:2f:15:1b:22:81:6b:93:fb:75:6a:09:05:c9:f1: 67:78:e6:5d:9a:47:d4:db:aa:b1:69:55:8e:10:99: b2:c8:df:37:5f:50:14:3d:ba:73:1e:de:88:14:38: 90:da:4d:64:7d:c8:da:9a:46:a9:f0:8b:90:f1:5a: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CE:C9:5C:02:59:A2:F5:DE:41:96:74:6A:44:14:6A:99:CB:1E:63 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/s87JXAJZovXeQZZ0akQUapnLHmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.128.0/17 IPv6: 2a02:db0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:71:78:3f:96:33:d1:c7:35:c2:af:93:10:6c:18:6f:8e:44: c7:96:c0:b1:23:f3:7d:4a:2f:e1:13:8e:d7:63:15:12:22:ef: c1:69:96:f1:c8:52:6a:71:5f:7b:fc:14:b6:e3:e2:d3:a3:26: 1d:8d:7f:89:9f:b8:69:83:f1:02:3e:d0:15:bd:25:61:9d:d5: 5c:a4:78:04:dc:42:8f:64:73:0e:af:d3:4d:a3:2a:43:31:03: 11:c4:ac:8e:7f:a2:ad:a0:2e:78:10:10:ff:23:02:08:54:fd: 35:89:8e:a6:37:d1:95:20:5a:ab:19:e4:f9:a1:97:76:69:48: df:80:91:24:e5:b9:f9:10:94:4a:ac:02:f9:b3:b5:08:6b:64: a2:96:15:2f:fc:44:ef:1b:e1:94:ac:de:1a:3d:86:91:76:5b: 04:16:6c:9e:47:0f:46:62:1b:c2:40:c6:21:95:f7:fd:f3:da: 89:92:c9:c0:b2:75:d3:77:60:cf:f6:71:e9:e9:d6:18:28:04: a1:24:72:57:21:45:a2:54:0f:b1:4f:6f:f5:dd:70:8f:c7:fb: 78:8d:25:89:59:30:3b:d4:94:05:40:22:a2:d9:fe:ec:37:42: 6f:75:bd:94:07:51:de:2e:f7:05:36:c7:24:37:24:28:00:93: 76:fa:e8:22 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OKcVwvWK6EphJ4PP6LpEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2NlYzk1YzAyNTlhMmY1ZGU0MTk2NzQ2YTQ0MTQ2YTk5Y2IxZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSQeL9K7cLTcV6slU8dDCWqY35e4 xIeFjRyVAyfe9+9X3k/UNaEAeqlAEH1OnGjeuouRSU2R7T/mEw89MID7P0sa3kNM lUARFwmmYGb2nMbGqIVz4sqHMlfwOqgFQGIKoEpvZMdO8e2A1RNQzRMvCOwTi461 nPJR6XvNNgqM4NKgQeevsN+mU6SdiFPq+fkJOROhCyASmB9y1j7PtJchhmyOjsJU caFjYnkIoA5S1H2FJcQIH/kJvnrCSS2J6INhQgjdLxUbIoFrk/t1agkFyfFneOZd mkfU26qxaVWOEJmyyN83X1AUPbpzHt6IFDiQ2k1kfcjamkap8IuQ8Vqf2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLPOyVwCWaL13kGWdGpEFGqZyx5jMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvczg3SlhBSlpvdlhlUVpaMGFrUVVhcG5MSG1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHTS+AMA0E AgACMAcDBQAqAg2wMA0GCSqGSIb3DQEBCwUAA4IBAQB7cXg/ljPRxzXCr5MQbBhv jkTHlsCxI/N9Si/hE47XYxUSIu/BaZbxyFJqcV97/BS24+LToyYdjX+Jn7hpg/EC PtAVvSVhndVcpHgE3EKPZHMOr9NNoypDMQMRxKyOf6KtoC54EBD/IwIIVP01iY6m N9GVIFqrGeT5oZd2aUjfgJEk5bn5EJRKrAL5s7UIa2SilhUv/ETvG+GUrN4aPYaR dlsEFmyeRw9GYhvCQMYhlff989qJksnAsnXTd2DP9nHp6dYYKAShJHJXIUWiVA+x T2/13XCPx/t4jSWJWTA71JQFQCKi2f7sN0Jvdb2UB1HeLvcFNsckNyQoAJN2+ugi -----END CERTIFICATE-----Generated at Sat Jan 10 04:59:34 2026 by rpki-client