This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UExaMrtiypHXaI7UlYaoMZnNASY.roa File: UExaMrtiypHXaI7UlYaoMZnNASY.roa (raw, json) Hash identifier: fqqulZU1okQ3vLKuA+b6xjgn2fNRkwC5BPi5g8SRDJM= Subject key identifier: 50:4C:5A:32:BB:62:CA:91:D7:68:8E:D4:95:86:A8:31:99:CD:01:26 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB75162738DD29801B7B94FFE57252 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UExaMrtiypHXaI7UlYaoMZnNASY.roa Signing time: Fri 02 Jan 2026 08:20:44 +0000 ROA not before: Fri 02 Jan 2026 08:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64429 IP address blocks: 77.72.86.0/24 maxlen: 24 78.24.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:75:16:27:38:dd:29:80:1b:7b:94:ff:e5:72:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=504c5a32bb62ca91d7688ed49586a83199cd0126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dd:c3:16:25:92:b3:d4:9c:dc:16:97:fc:f9: 77:d5:fd:8a:c7:72:85:fb:5a:3f:42:6e:85:b7:a9: a8:af:15:20:c5:c8:c1:56:9a:5e:f8:4f:d5:be:79: 0b:ec:8d:10:33:57:fc:c5:a3:98:6d:71:4c:8c:cf: 1c:7f:23:1b:38:6e:07:bb:59:aa:fb:42:4a:d1:03: e5:de:6f:5e:3b:1f:63:17:e1:ef:6f:68:a8:0c:46: 26:e4:bd:d1:b7:2b:c9:be:18:6d:08:b8:d7:4e:9a: 15:df:dd:f3:dd:bb:3a:65:79:c5:be:b3:56:4d:3c: 87:ed:59:1b:f7:88:b9:4f:f9:dc:37:c8:64:25:be: 97:79:f2:9a:a8:04:bc:ba:37:3f:0f:c8:a8:cc:78: 18:2d:9f:f5:fa:6b:a2:04:60:1a:06:04:83:9c:f3: f7:0e:40:49:ae:01:0a:5a:33:e6:b4:f2:d1:08:7c: 5b:d8:e5:93:08:f2:6c:86:0b:78:ba:a8:dc:cd:ec: 66:ec:57:b0:05:b8:fd:00:c9:ac:43:23:dd:64:8b: 8a:81:b4:fb:df:87:b8:b1:b5:3b:46:6c:63:33:59: db:e1:33:82:75:df:c8:ca:1b:b3:1d:89:f1:27:c1: 84:92:c9:76:81:44:83:fe:d6:06:4b:a0:56:69:82: b0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4C:5A:32:BB:62:CA:91:D7:68:8E:D4:95:86:A8:31:99:CD:01:26 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/UExaMrtiypHXaI7UlYaoMZnNASY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.86.0/24 78.24.200.0/24 Signature Algorithm: sha256WithRSAEncryption 02:f9:30:d6:f6:11:c2:11:63:47:ee:39:57:5c:ed:3d:b1:9b: 88:50:52:45:07:ce:a2:cd:ee:43:09:5f:2a:91:bd:21:40:72: fa:82:c2:18:39:d9:65:1f:d3:2e:7b:2d:c1:ec:b8:ab:ac:24: c8:9d:e4:e8:2e:d3:3e:88:cf:f5:c4:77:d2:e4:fa:81:fd:f2: 18:ae:9a:fd:a4:23:a1:86:a1:94:f5:8f:1f:db:e3:03:1c:69: 23:1e:ba:77:e4:c2:0f:29:bb:20:88:d2:f3:b3:88:ca:04:fe: 6d:08:bc:16:a3:12:23:69:7b:00:79:b8:7e:7a:e2:a9:7b:bd: fc:3d:13:bb:cb:c7:cc:f1:4f:4e:72:17:c7:a0:09:da:11:91: ca:68:1a:43:b8:41:38:ce:1f:10:81:fa:4c:b4:86:48:47:fe: 09:f7:a1:02:17:f1:8d:13:d7:69:67:8d:9d:10:25:d2:2c:4a: 01:57:a4:23:66:74:35:69:b6:88:4b:41:d9:93:a7:a6:dd:09: 04:a8:f7:3d:b2:58:26:c5:b1:d2:cb:83:70:e6:2d:dc:e9:b4: 08:2f:7d:05:4c:14:c1:f1:df:67:36:59:a9:d6:e9:19:cd:90: 69:8b:5c:d0:ae:92:56:d4:d6:04:4a:95:21:b9:e2:57:fb:c1: 20:6e:2f:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y3UWJzjdKYAbe5T/5XJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDRjNWEzMmJiNjJjYTkxZDc2ODhlZDQ5NTg2YTgzMTk5Y2QwMTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt3DFiWSs9Sc3BaX/Pl31f2Kx3KF +1o/Qm6Ft6morxUgxcjBVppe+E/VvnkL7I0QM1f8xaOYbXFMjM8cfyMbOG4Hu1mq +0JK0QPl3m9eOx9jF+Hvb2ioDEYm5L3RtyvJvhhtCLjXTpoV393z3bs6ZXnFvrNW TTyH7Vkb94i5T/ncN8hkJb6XefKaqAS8ujc/D8iozHgYLZ/1+muiBGAaBgSDnPP3 DkBJrgEKWjPmtPLRCHxb2OWTCPJshgt4uqjczexm7FewBbj9AMmsQyPdZIuKgbT7 34e4sbU7RmxjM1nb4TOCdd/IyhuzHYnxJ8GEksl2gUSD/tYGS6BWaYKwYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFBMWjK7YsqR12iO1JWGqDGZzQEmMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvVUV4YU1ydGl5cEhYYUk3VWxZYW9NWm5OQVNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATUhWAwQA ThjIMA0GCSqGSIb3DQEBCwUAA4IBAQAC+TDW9hHCEWNH7jlXXO09sZuIUFJFB86i ze5DCV8qkb0hQHL6gsIYOdllH9Muey3B7LirrCTIneToLtM+iM/1xHfS5PqB/fIY rpr9pCOhhqGU9Y8f2+MDHGkjHrp35MIPKbsgiNLzs4jKBP5tCLwWoxIjaXsAebh+ euKpe738PRO7y8fM8U9OchfHoAnaEZHKaBpDuEE4zh8QgfpMtIZIR/4J96ECF/GN E9dpZ42dECXSLEoBV6QjZnQ1abaIS0HZk6em3QkEqPc9slgmxbHSy4Nw5i3c6bQI L30FTBTB8d9nNlmp1ukZzZBpi1zQrpJW1NYESpUhueJX+8Egbi/3 -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:21 2026 by rpki-client