This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/2aVju54fgg9bD1JRsSNN37U-9Hk.roa File: 2aVju54fgg9bD1JRsSNN37U-9Hk.roa (raw, json) Hash identifier: gQ2ZXX3Kuvxj5T+dbec4hU1fv3yACHxOQmVvGeAb560= Subject key identifier: D9:A5:63:BB:9E:1F:82:0F:5B:0F:52:51:B1:23:4D:DF:B5:3E:F4:79 Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a Certificate serial: 019B7835003BF2DAADED7C8054DDA48B4AF9 Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/2aVju54fgg9bD1JRsSNN37U-9Hk.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 81.161.62.0/24 maxlen: 24 91.227.193.0/24 maxlen: 24 194.34.104.0/24 maxlen: 24 2a01:fd40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:00:3b:f2:da:ad:ed:7c:80:54:dd:a4:8b:4a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9a563bb9e1f820f5b0f5251b1234ddfb53ef479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:cd:84:f5:a9:0b:8e:d2:c0:1b:92:a4:04: 87:0b:a9:14:8f:67:5c:1d:ae:50:8a:d1:62:fd:8d: ab:57:8d:9f:0c:07:3c:35:71:72:de:0d:17:9d:47: fa:2d:78:fe:46:fb:8a:a9:96:f6:4c:8d:14:10:fc: 12:9b:10:41:e5:8c:e1:39:fc:ee:64:fc:92:83:25: 7f:0d:b3:a8:d5:36:11:12:99:72:f1:28:6a:38:36: e3:06:86:31:7a:3b:a0:ac:47:9f:52:d7:77:cd:bb: 10:a3:9c:51:83:d5:2b:09:cd:be:68:8a:a3:e0:4e: bd:32:3c:2f:69:ba:46:9e:05:a4:70:6d:89:0c:be: 8d:e7:bc:d8:df:00:de:84:01:d5:61:83:53:95:6b: a3:32:b9:80:63:fc:a3:b2:c4:12:3f:8a:be:2a:24: de:ba:93:cb:d3:f3:01:8f:aa:71:5e:49:83:c6:8f: 90:9c:30:39:5e:f0:d4:98:0b:9a:27:8a:c1:2f:32: 0e:0e:45:00:28:f2:b8:34:1f:8a:5f:0d:53:fe:e2: e9:1a:b5:c3:ff:ff:e7:4b:62:b5:2d:d9:12:ad:64: e8:94:7d:47:89:43:09:5e:69:f7:a2:f9:4c:42:75: c1:32:9e:7b:4d:cc:06:6b:74:89:44:16:5b:85:14: a7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A5:63:BB:9E:1F:82:0F:5B:0F:52:51:B1:23:4D:DF:B5:3E:F4:79 X509v3 Authority Key Identifier: keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/2aVju54fgg9bD1JRsSNN37U-9Hk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.62.0/24 91.227.193.0/24 194.34.104.0/24 IPv6: 2a01:fd40::/32 Signature Algorithm: sha256WithRSAEncryption 7c:d5:98:5b:aa:fc:e3:a8:7c:c2:a9:e5:1c:72:73:dc:17:9f: e9:a0:8f:48:8a:71:d4:95:8e:58:3f:7e:6c:36:bf:ae:24:f4: 7c:f7:7e:0c:40:b2:3c:9a:d9:05:bd:3f:7a:df:48:0f:9a:6b: be:67:26:df:57:30:c2:30:61:3e:50:d1:3c:e5:d5:37:d5:14: 1e:e8:c5:97:75:35:8e:bc:a3:99:98:97:2f:ce:e6:1c:29:af: 59:1c:fd:c6:e0:78:89:d3:dc:06:bb:79:c1:98:ed:b2:bf:a9: e1:21:85:3f:cd:48:5c:b3:ab:5e:22:41:a7:f2:2f:80:d1:db: 38:46:f3:6b:ea:fc:85:4e:fa:d2:a9:1c:74:48:7f:63:6c:43: 52:be:8b:77:9f:99:2c:f8:f2:1b:a1:fa:b9:77:3e:3f:a5:01: 7a:07:4d:4a:52:fe:d7:18:3d:e3:16:36:d1:43:6a:bc:eb:72: c9:8d:94:51:1e:49:59:ad:7e:3d:f1:96:13:ca:d6:1a:77:17: d9:ba:6a:35:02:5d:37:37:5a:e5:5c:20:0f:85:65:b7:1e:50: 58:ef:d9:fc:09:4d:88:01:ab:5f:8f:84:72:e1:31:f9:25:e1: 76:d1:7e:5a:f8:fe:6b:ec:0f:45:d1:c2:83:af:2f:75:44:e1: c1:f3:9a:eb -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NQA78tqt7XyAVN2ki0r5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDFkMTNhMTVhOTg3ZGQ2MDAxOWMwMjY1ZDJlY2VjNDg0 MDk0NGEwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWE1NjNiYjllMWY4MjBmNWIwZjUyNTFiMTIzNGRkZmI1M2VmNDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOzNhPWpC47SwBuSpASHC6kUj2dc Ha5QitFi/Y2rV42fDAc8NXFy3g0XnUf6LXj+RvuKqZb2TI0UEPwSmxBB5YzhOfzu ZPySgyV/DbOo1TYREply8ShqODbjBoYxejugrEefUtd3zbsQo5xRg9UrCc2+aIqj 4E69MjwvabpGngWkcG2JDL6N57zY3wDehAHVYYNTlWujMrmAY/yjssQSP4q+KiTe upPL0/MBj6pxXkmDxo+QnDA5XvDUmAuaJ4rBLzIODkUAKPK4NB+KXw1T/uLpGrXD ///nS2K1LdkSrWTolH1HiUMJXmn3ovlMQnXBMp57TcwGa3SJRBZbhRSnmwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNmlY7ueH4IPWw9SUbEjTd+1PvR5MB8GA1UdIwQY MBaAFHdB0ToVqYfdYAGcAmXS7OxIQJRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTkt MzUyM2UzMDMwYmU0LzEvMmFWanU1NGZnZzliRDFKUnNTTk4zN1UtOUhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTktMzUyM2UzMDMwYmU0 LzEvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAUaE+AwQA W+PBAwQAwiJoMA0EAgACMAcDBQAqAf1AMA0GCSqGSIb3DQEBCwUAA4IBAQB81Zhb qvzjqHzCqeUccnPcF5/poI9IinHUlY5YP35sNr+uJPR8934MQLI8mtkFvT9630gP mmu+ZybfVzDCMGE+UNE85dU31RQe6MWXdTWOvKOZmJcvzuYcKa9ZHP3G4HiJ09wG u3nBmO2yv6nhIYU/zUhcs6teIkGn8i+A0ds4RvNr6vyFTvrSqRx0SH9jbENSvot3 n5ks+PIbofq5dz4/pQF6B01KUv7XGD3jFjbRQ2q863LJjZRRHklZrX498ZYTytYa dxfZumo1Al03N1rlXCAPhWW3HlBY79n8CU2IAatfj4Ry4TH5JeF20X5a+P5r7A9F 0cKDry91ROHB85rr -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:08 2026 by rpki-client