This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/rgE_RHcfNuUFoaKxthVMKKDCw0s.roa File: rgE_RHcfNuUFoaKxthVMKKDCw0s.roa (raw, json) Hash identifier: QD1Kf00J2FokHRU/aR51xu7Mw9Z1FH1udsXrO1N5O+s= Subject key identifier: AE:01:3F:44:77:1F:36:E5:05:A1:A2:B1:B6:15:4C:28:A0:C2:C3:4B Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E49AC76FF77A480C0705D6885FC4 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/rgE_RHcfNuUFoaKxthVMKKDCw0s.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42117 IP address blocks: 77.233.96.0/19 maxlen: 19 95.175.160.0/19 maxlen: 19 159.20.8.0/21 maxlen: 21 2a00:c780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e4:9a:c7:6f:f7:7a:48:0c:07:05:d6:88:5f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae013f44771f36e505a1a2b1b6154c28a0c2c34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:9c:4c:7c:72:67:77:0d:84:c0:d6:29:25: b5:ed:42:2b:94:ad:27:b2:fd:94:10:93:d9:d3:fb: 9f:46:71:a6:c6:8f:4e:b3:98:8d:d6:ac:e8:c6:89: 01:dd:a0:7c:65:ed:1c:c7:6f:2d:fe:fd:a2:c1:a7: 81:ef:fa:0c:25:ff:83:c9:5e:d7:8d:32:ce:a3:c8: a9:f4:2d:bd:7b:96:31:7a:10:dd:8b:88:e7:7f:89: 31:01:4a:b8:1d:fe:53:43:88:7f:45:e7:e2:9c:6c: 22:e8:a2:db:24:f1:f5:34:92:0d:c3:02:0f:97:62: aa:84:c7:94:aa:27:a5:37:e1:31:5e:7c:32:0b:af: f1:3b:05:66:df:4c:1a:38:25:61:ca:a7:b4:84:5b: 0e:71:bc:ba:fe:6d:f2:42:98:4a:d1:38:a0:88:74: da:92:b1:c9:de:6b:2d:66:40:13:14:ce:2e:bd:ae: 39:08:72:7e:01:f9:93:b7:de:1b:dd:a2:18:12:33: e1:8a:d5:1f:69:89:ec:9c:da:ea:3c:d9:b9:9a:9b: 86:6c:23:5b:c8:b2:64:84:ee:63:39:d9:33:23:d3: 3d:ab:7d:6c:a3:bf:bb:76:3d:67:99:54:f2:6b:84: f7:8c:bd:f4:9d:3a:2e:12:5b:92:2a:5b:e4:da:65: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:01:3F:44:77:1F:36:E5:05:A1:A2:B1:B6:15:4C:28:A0:C2:C3:4B X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/rgE_RHcfNuUFoaKxthVMKKDCw0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.233.96.0/19 95.175.160.0/19 159.20.8.0/21 IPv6: 2a00:c780::/32 Signature Algorithm: sha256WithRSAEncryption 37:7c:d7:e7:bc:31:36:a5:d4:7b:82:d5:b2:ca:1c:2e:c3:1f: 89:a4:24:0e:53:33:78:44:2a:f7:01:66:20:05:ac:d8:9b:6a: 74:e7:ef:11:c4:5d:12:bc:db:15:d8:92:95:04:6d:0d:28:8f: 80:35:a1:7a:af:6d:8b:5e:01:c3:80:76:5c:ed:cc:a4:82:88: c8:44:4d:7c:3d:5b:95:20:7c:80:fb:a0:88:d6:25:5f:69:e6: 14:3b:8a:71:73:ee:06:e6:53:da:41:ee:28:a4:af:41:2e:81: c6:33:c5:f2:ba:49:21:2b:27:52:c9:04:49:86:68:78:96:95: fc:54:07:e1:6e:51:e9:cd:78:cf:46:90:be:46:de:15:37:9f: 23:44:eb:58:ac:6c:b5:e3:04:b8:e0:f4:34:76:43:80:a7:29: 8b:be:32:13:2f:2e:25:8f:02:70:8e:9a:ec:d0:28:93:27:85: b7:5c:9b:6b:c7:0e:81:52:45:d0:5e:ba:49:bf:ff:96:33:83: 8b:fa:d0:1e:63:9b:e1:83:b1:4e:e5:67:62:cc:7e:90:55:a2: e0:58:5c:d7:fd:b5:a1:ca:bf:a4:02:9e:cb:18:f8:ef:ed:6e: 70:a9:49:26:aa:6b:fc:4c:78:63:7d:d7:e0:59:2c:af:46:7b: a8:ce:fe:91 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6yOSax2/3ekgMBwXWiF/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTAxM2Y0NDc3MWYzNmU1MDVhMWEyYjFiNjE1NGMyOGEwYzJjMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcWcTHxyZ3cNhMDWKSW17UIrlK0n sv2UEJPZ0/ufRnGmxo9Os5iN1qzoxokB3aB8Ze0cx28t/v2iwaeB7/oMJf+DyV7X jTLOo8ip9C29e5YxehDdi4jnf4kxAUq4Hf5TQ4h/RefinGwi6KLbJPH1NJINwwIP l2KqhMeUqielN+ExXnwyC6/xOwVm30waOCVhyqe0hFsOcby6/m3yQphK0TigiHTa krHJ3mstZkATFM4uva45CHJ+AfmTt94b3aIYEjPhitUfaYnsnNrqPNm5mpuGbCNb yLJkhO5jOdkzI9M9q31so7+7dj1nmVTya4T3jL30nTouEluSKlvk2mVXNwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFK4BP0R3HzblBaGisbYVTCigwsNLMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvcmdFX1JIY2ZOdVVGb2FLeHRoVk1LS0RDdzBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFTelgAwQF X6+gAwQDnxQIMA0EAgACMAcDBQAqAMeAMA0GCSqGSIb3DQEBCwUAA4IBAQA3fNfn vDE2pdR7gtWyyhwuwx+JpCQOUzN4RCr3AWYgBazYm2p05+8RxF0SvNsV2JKVBG0N KI+ANaF6r22LXgHDgHZc7cykgojIRE18PVuVIHyA+6CI1iVfaeYUO4pxc+4G5lPa Qe4opK9BLoHGM8XyukkhKydSyQRJhmh4lpX8VAfhblHpzXjPRpC+Rt4VN58jROtY rGy14wS44PQ0dkOApymLvjITLy4ljwJwjprs0CiTJ4W3XJtrxw6BUkXQXrpJv/+W M4OL+tAeY5vhg7FO5WdizH6QVaLgWFzX/bWhyr+kAp7LGPjv7W5wqUkmqmv8THhj fdfgWSyvRnuozv6R -----END CERTIFICATE-----Generated at Mon Jan 26 22:25:21 2026 by rpki-client