This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/tLsw2QWW_xQ7Cz00zASgxGHLsoU.roa File: tLsw2QWW_xQ7Cz00zASgxGHLsoU.roa (raw, json) Hash identifier: vD9kNf/vheI2GM5aVVh5mwV/7+iU7IQ4nb0hyznixXs= Subject key identifier: B4:BB:30:D9:05:96:FF:14:3B:0B:3D:34:CC:04:A0:C4:61:CB:B2:85 Certificate issuer: /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8 Certificate serial: 019B7C125C3F7B7A2B631C9AB4395BAEA31D Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/tLsw2QWW_xQ7Cz00zASgxGHLsoU.roa Signing time: Fri 02 Jan 2026 00:18:56 +0000 ROA not before: Fri 02 Jan 2026 00:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.77.72.0/24 maxlen: 24 195.157.4.0/24 maxlen: 24 195.245.201.0/24 maxlen: 24 2001:67c:1088::/48 maxlen: 48 2001:67c:27dc::/48 maxlen: 48 2001:a88:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5c:3f:7b:7a:2b:63:1c:9a:b4:39:5b:ae:a3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8 Validity Not Before: Jan 2 00:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4bb30d90596ff143b0b3d34cc04a0c461cbb285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e8:ce:1d:f9:4b:79:b5:00:71:0a:c4:dd:35: 0e:50:d2:71:9b:b4:74:92:18:4d:66:e0:9f:c2:90: b8:8c:d0:a8:11:27:7e:ff:b1:ea:37:af:a3:7f:b0: bc:bb:7a:41:65:27:ba:a3:6a:01:4a:67:43:f3:d6: 0f:6a:2a:95:0a:66:48:ff:54:3f:a4:66:c1:3f:0a: 8d:cc:f9:3a:5b:fa:8b:69:f1:ab:e0:b7:67:43:4f: b1:23:25:82:28:c9:9e:58:c1:f6:16:f9:38:80:d1: 0a:26:04:b2:4c:3c:b1:af:2b:a8:86:f8:17:06:b6: c9:88:79:83:eb:2a:1a:7b:e7:ea:af:83:a0:59:6b: ab:fd:de:1d:05:3f:27:c0:64:90:34:20:52:90:94: 63:53:c7:a6:cb:1d:da:f0:73:0d:63:ed:09:14:29: 73:21:2f:df:3f:e8:49:f5:2e:26:72:7a:b5:2f:aa: 5b:0f:3d:34:e2:be:39:0c:4b:38:b3:47:d5:b3:31: 08:33:53:b9:89:7e:c2:d1:0a:4b:ce:b4:37:e1:3d: 0e:94:7d:82:41:6e:fc:fc:35:76:1d:9b:f7:4b:23: f2:c6:c5:e7:3b:2d:bf:69:77:3d:00:24:5e:28:04: ac:8d:70:d0:46:64:4f:29:db:8e:0a:8b:6f:e0:ad: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:BB:30:D9:05:96:FF:14:3B:0B:3D:34:CC:04:A0:C4:61:CB:B2:85 X509v3 Authority Key Identifier: keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/tLsw2QWW_xQ7Cz00zASgxGHLsoU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.72.0/24 195.157.4.0/24 195.245.201.0/24 IPv6: 2001:67c:1088::/48 2001:67c:27dc::/48 2001:a88:8::/48 Signature Algorithm: sha256WithRSAEncryption 9a:e5:3a:3c:2d:5c:f0:33:5c:56:c2:cb:c5:4d:e8:54:3b:ef: 44:a2:5b:2c:5a:b6:7f:c8:c0:b6:cc:5b:87:f9:33:c3:a4:5e: a6:0b:2c:e3:ef:d0:dd:cd:28:cb:13:39:d7:f0:79:f0:f6:9e: ac:fc:d9:f8:23:4e:97:7f:3e:08:de:88:bd:e7:62:83:ff:ae: 81:69:5e:46:a6:07:27:cd:74:48:28:0f:05:9e:11:8f:3b:b5: b1:b1:18:c3:32:6b:d5:5b:97:0d:dc:bb:8c:62:aa:b3:ad:78: 9e:fa:d2:23:a2:4a:0a:9d:84:14:96:dc:32:02:5f:18:dd:21: 21:b7:0d:96:ea:5b:63:52:71:e5:62:f7:ea:3e:c5:61:3f:5d: af:48:fc:2c:80:1e:51:21:8c:75:74:66:dd:46:3b:54:9c:7e: 93:01:93:69:ba:e1:bf:74:92:ab:49:a9:5b:2b:6d:c5:92:8b: ed:47:43:9a:99:f8:15:fe:b2:cb:be:d9:46:38:67:36:d6:a6: 79:0a:2d:08:28:02:98:cd:81:0b:69:5e:46:64:a2:cc:1b:84: 92:83:74:21:58:fa:e5:a2:6d:c9:e1:8e:99:62:f8:c0:ef:38: 69:bc:53:d7:02:2f:2d:51:d4:a4:84:55:6a:c4:f0:b4:14:a6: f9:1e:0c:37 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt8Elw/e3orYxyatDlbrqMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjhjZjQ1NGIwOTYyZDE2YTQ4NTU4MDhmZDNhYmMxNTg1 MmJiZDgwHhcNMjYwMTAyMDAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGJiMzBkOTA1OTZmZjE0M2IwYjNkMzRjYzA0YTBjNDYxY2JiMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOjOHflLebUAcQrE3TUOUNJxm7R0 khhNZuCfwpC4jNCoESd+/7HqN6+jf7C8u3pBZSe6o2oBSmdD89YPaiqVCmZI/1Q/ pGbBPwqNzPk6W/qLafGr4LdnQ0+xIyWCKMmeWMH2Fvk4gNEKJgSyTDyxryuohvgX BrbJiHmD6yoae+fqr4OgWWur/d4dBT8nwGSQNCBSkJRjU8emyx3a8HMNY+0JFClz IS/fP+hJ9S4mcnq1L6pbDz004r45DEs4s0fVszEIM1O5iX7C0QpLzrQ34T0OlH2C QW78/DV2HZv3SyPyxsXnOy2/aXc9ACReKASsjXDQRmRPKduOCotv4K3roQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFLS7MNkFlv8UOws9NMwEoMRhy7KFMB8GA1UdIwQY MBaAFHe4z0VLCWLRakhVgI/Tq8FYUrvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTcxY2EtNGIxYi00MTg3LWJhNDYt YTRmYzllMjQ1OGVjLzEvdExzdzJRV1dfeFE3Q3owMHpBU2d4R0hMc29VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMTcxY2EtNGIxYi00MTg3LWJhNDYtYTRmYzllMjQ1OGVj LzEvZDdqUFJVc0pZdEZxU0ZXQWo5T3J3VmhTdTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAYBAIAATASAwQAuU1IAwQA w50EAwQAw/XJMCEEAgACMBsDBwAgAQZ8EIgDBwAgAQZ8J9wDBwAgAQqIAAgwDQYJ KoZIhvcNAQELBQADggEBAJrlOjwtXPAzXFbCy8VN6FQ770SiWyxatn/IwLbMW4f5 M8OkXqYLLOPv0N3NKMsTOdfwefD2nqz82fgjTpd/PgjeiL3nYoP/roFpXkamByfN dEgoDwWeEY87tbGxGMMya9Vblw3cu4xiqrOteJ760iOiSgqdhBSW3DICXxjdISG3 DZbqW2NSceVi9+o+xWE/Xa9I/CyAHlEhjHV0Zt1GO1ScfpMBk2m64b90kqtJqVsr bcWSi+1HQ5qZ+BX+ssu+2UY4ZzbWpnkKLQgoApjNgQtpXkZkoswbhJKDdCFY+uWi bcnhjpli+MDvOGm8U9cCLy1R1KSEVWrE8LQUpvkeDDc= -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:59 2026 by rpki-client