This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/PWv6yFyiEMB4Oa2Tl2AohiTN1ck.roa File: PWv6yFyiEMB4Oa2Tl2AohiTN1ck.roa (raw, json) Hash identifier: GD/HWU3t0dVz2XNxiVj2DMFTslgyISmS+UP1+CaEce4= Subject key identifier: 3D:6B:FA:C8:5C:A2:10:C0:78:39:AD:93:97:60:28:86:24:CD:D5:C9 Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9 Certificate serial: 019B7DCADADEC82D65E6083125193E11CCB3 Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/PWv6yFyiEMB4Oa2Tl2AohiTN1ck.roa Signing time: Fri 02 Jan 2026 08:20:04 +0000 ROA not before: Fri 02 Jan 2026 08:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43905 IP address blocks: 80.77.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:da:de:c8:2d:65:e6:08:31:25:19:3e:11:cc:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9 Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d6bfac85ca210c07839ad939760288624cdd5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:f8:b6:04:7e:a6:0b:8a:0b:d9:ea:7a:aa: eb:39:fd:43:32:30:50:db:ee:01:30:0b:d9:9e:2a: 1d:a7:4f:0a:3b:38:50:c3:cd:06:11:b4:4a:30:0b: f4:94:33:42:97:57:64:68:31:fd:c9:12:fd:77:1d: 83:5e:2e:b5:74:c7:39:9b:b8:37:d4:8f:76:cd:8e: 8b:45:45:ae:fb:eb:ce:aa:3f:e1:6d:55:ab:b1:1d: 22:44:c3:64:4e:ed:5a:b0:91:f0:03:9d:79:02:b3: 3e:6c:be:f6:62:c5:70:a8:62:f2:ff:13:a2:e8:b8: 81:c0:c3:8e:7c:f1:3f:55:6f:57:cd:0b:26:31:b9: d0:76:b2:8b:82:e7:df:2f:d2:fb:ad:f9:b8:b1:10: 46:8e:09:52:55:34:d9:4f:ad:63:7f:5d:c7:68:fd: 3b:63:3e:3c:b6:53:e7:32:79:3b:e2:14:b8:19:61: dd:14:e7:7b:b8:8b:32:0e:35:f2:5a:63:7b:e6:fd: 10:ef:fc:a5:2f:67:f0:bf:a9:cf:63:e6:86:12:61: dc:68:2f:57:b0:47:9e:f4:04:17:67:15:df:65:92: 59:d1:71:41:17:09:40:ca:72:a7:4c:e5:56:7b:c4: 73:3c:74:ae:b1:fe:ff:eb:fc:db:4d:ec:07:e3:eb: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6B:FA:C8:5C:A2:10:C0:78:39:AD:93:97:60:28:86:24:CD:D5:C9 X509v3 Authority Key Identifier: keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/PWv6yFyiEMB4Oa2Tl2AohiTN1ck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.77.184.0/24 Signature Algorithm: sha256WithRSAEncryption 65:3d:3b:fb:ab:49:89:06:77:80:2d:3c:0a:dc:6d:bb:04:ea: d8:72:93:cd:55:65:5c:aa:16:6a:e4:2c:83:08:1d:fc:0d:11: c2:7f:87:29:7b:98:24:58:d0:3b:06:de:5e:bc:11:03:45:1d: b2:ab:68:22:d8:67:a3:20:61:44:43:55:af:d3:01:07:d5:cd: a0:07:f3:69:9b:a0:dd:4c:22:0a:e5:7d:7e:5d:e2:17:cd:7b: ae:a3:dd:cf:8f:ae:f2:d0:b5:09:95:37:09:5c:34:53:30:30: b5:55:33:98:49:68:04:a2:7b:f5:38:2f:b9:cd:ec:cd:07:7e: bf:05:6c:5c:c6:6b:47:9b:8a:23:87:4e:4b:b5:16:f8:c7:a8: 35:f2:5b:76:5f:5b:15:de:2f:29:20:e4:88:60:8a:00:8d:1f: f6:6d:1d:dd:13:02:85:f7:87:1f:6c:c3:a0:d2:93:06:60:e2: f6:26:e8:6a:4c:b7:f9:76:bd:6c:bc:7e:87:7a:9a:5e:da:ed: ab:4b:d3:bb:10:e4:52:6b:d7:7d:1a:0c:6a:81:57:0c:f1:ca: 7c:a3:33:1c:cb:64:af:77:ae:1a:28:3a:f8:9b:5f:be:35:f6: 0a:77:ba:a6:4d:b3:3d:40:f2:87:14:a3:da:c5:a1:36:4a:af: 7c:0c:35:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ytreyC1l5ggxJRk+EcyzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3M2U4MzE0NmE0Mzg2OWY2NTc0NTFlNzZkMGEzMDVmMTVh N2FlZTkwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDZiZmFjODVjYTIxMGMwNzgzOWFkOTM5NzYwMjg4NjI0Y2RkNWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMj4tgR+pguKC9nqeqrrOf1DMjBQ 2+4BMAvZniodp08KOzhQw80GEbRKMAv0lDNCl1dkaDH9yRL9dx2DXi61dMc5m7g3 1I92zY6LRUWu++vOqj/hbVWrsR0iRMNkTu1asJHwA515ArM+bL72YsVwqGLy/xOi 6LiBwMOOfPE/VW9XzQsmMbnQdrKLguffL9L7rfm4sRBGjglSVTTZT61jf13HaP07 Yz48tlPnMnk74hS4GWHdFOd7uIsyDjXyWmN75v0Q7/ylL2fwv6nPY+aGEmHcaC9X sEee9AQXZxXfZZJZ0XFBFwlAynKnTOVWe8RzPHSusf7/6/zbTewH4+ts/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD1r+shcohDAeDmtk5dgKIYkzdXJMB8GA1UdIwQY MBaAFNc+gxRqQ4afZXRR520KMF8Vp67pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDkt ZDNiMjdhMDIyNWIwLzEvUFd2NnlGeWlFTUI0T2EyVGwyQW9oaVROMWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDktZDNiMjdhMDIyNWIw LzEvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUE24MA0G CSqGSIb3DQEBCwUAA4IBAQBlPTv7q0mJBneALTwK3G27BOrYcpPNVWVcqhZq5CyD CB38DRHCf4cpe5gkWNA7Bt5evBEDRR2yq2gi2GejIGFEQ1Wv0wEH1c2gB/Npm6Dd TCIK5X1+XeIXzXuuo93Pj67y0LUJlTcJXDRTMDC1VTOYSWgEonv1OC+5zezNB36/ BWxcxmtHm4ojh05LtRb4x6g18lt2X1sV3i8pIOSIYIoAjR/2bR3dEwKF94cfbMOg 0pMGYOL2JuhqTLf5dr1svH6Heppe2u2rS9O7EORSa9d9GgxqgVcM8cp8ozMcy2Sv d64aKDr4m1++NfYKd7qmTbM9QPKHFKPaxaE2Sq98DDWN -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:04 2026 by rpki-client