This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E07Xl9hpivJr5KefERQ8V_qw74o.roa File: E07Xl9hpivJr5KefERQ8V_qw74o.roa (raw, json) Hash identifier: oYS8XLyLUyFZDXH0zNkjSIhm7kx4lZugW+0oCjn7DOs= Subject key identifier: 13:4E:D7:97:D8:69:8A:F2:6B:E4:A7:9F:11:14:3C:57:FA:B0:EF:8A Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AED5E9BF287D42D358F14EA78C131 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E07Xl9hpivJr5KefERQ8V_qw74o.roa Signing time: Thu 01 Jan 2026 16:18:57 +0000 ROA not before: Thu 01 Jan 2026 16:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401479 IP address blocks: 77.93.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ed:5e:9b:f2:87:d4:2d:35:8f:14:ea:78:c1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=134ed797d8698af26be4a79f11143c57fab0ef8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:8a:e7:09:79:f7:4e:80:d8:09:67:46:0e: 32:7e:e7:2c:ea:9a:36:c0:40:7a:78:bd:18:dc:73: 97:63:d9:17:41:39:cd:c9:68:f9:31:12:ca:51:c7: f0:18:f6:d8:71:47:44:b1:57:0d:c7:71:c7:07:28: 0a:c7:de:60:1f:12:ad:5c:4b:71:87:c7:cf:66:53: 8f:e5:be:d6:16:db:ff:88:f5:91:fe:c2:c7:6b:9c: ea:2c:38:7d:04:c0:11:75:a3:3e:86:cc:0d:e7:f8: 8c:b5:e7:65:16:a7:53:2e:dd:31:18:3d:d8:bd:f0: 55:40:32:e8:a2:78:f6:13:3d:eb:56:9d:b9:25:8c: 11:11:36:fa:45:0a:d3:b1:6d:65:d9:4e:7d:f7:25: 5c:a4:d2:9d:6d:64:0c:d6:99:ba:89:1d:38:d9:e2: 14:cd:5b:2c:46:4a:5a:d2:63:61:e0:f1:c1:31:b2: 1e:6e:33:51:6e:02:56:e4:91:ae:e7:00:55:9a:b8: 40:c9:cc:aa:c0:03:0a:d0:fa:2a:52:12:f4:e4:0d: 80:8a:33:a4:17:80:16:0a:17:92:a9:df:3b:38:98: a0:bf:6e:1e:b1:21:9d:0d:66:89:5a:32:99:e5:51: 86:eb:5b:72:a4:f8:c2:c9:73:b9:bc:73:81:d4:64: 24:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4E:D7:97:D8:69:8A:F2:6B:E4:A7:9F:11:14:3C:57:FA:B0:EF:8A X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/E07Xl9hpivJr5KefERQ8V_qw74o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.152.0/22 Signature Algorithm: sha256WithRSAEncryption 85:55:45:ba:77:dc:4b:7d:5c:1c:fa:4d:54:cf:4c:1d:71:0e: 48:c7:1f:dd:70:39:0e:c0:1c:45:71:ed:21:7e:c2:8f:86:37: 94:2b:77:c0:9a:ad:ca:df:9d:0c:9e:0b:97:ce:f8:93:09:5a: 7e:94:f7:77:14:93:33:10:98:48:13:d6:44:bb:47:21:03:69: c3:fd:f1:2a:e8:3e:79:97:32:70:cd:aa:4f:3d:e9:79:76:fd: b1:df:44:5d:48:27:ae:8c:a5:bf:e7:6c:97:3e:9e:d6:cf:5c: 83:ba:a8:94:e3:92:9e:b0:75:30:10:f7:a8:21:04:19:10:52: 4a:04:81:f0:ef:23:41:2e:30:81:ef:9f:ef:ed:12:bf:9c:0f: 12:da:b0:28:41:2b:29:35:18:4b:20:22:1e:4e:38:de:d2:24: 0d:bd:14:7f:d9:b7:e5:c0:fa:40:5f:7d:12:6c:09:86:84:6f: a6:c1:bf:65:8d:95:99:a8:54:07:ef:b7:48:6d:c0:9a:be:ae: 31:9f:ab:5a:df:bd:2d:7e:8f:0a:8f:2c:6a:ef:95:2f:41:4f: 6a:76:f0:1a:89:71:5a:ca:47:b9:52:4e:db:b2:c9:16:d6:24: 41:6d:0e:47:dc:4a:f3:48:7f:0e:aa:7a:2d:71:13:ab:63:2f: d5:a2:f3:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wu1em/KH1C01jxTqeMExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzRlZDc5N2Q4Njk4YWYyNmJlNGE3OWYxMTE0M2M1N2ZhYjBlZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqaK5wl5906A2AlnRg4yfucs6po2 wEB6eL0Y3HOXY9kXQTnNyWj5MRLKUcfwGPbYcUdEsVcNx3HHBygKx95gHxKtXEtx h8fPZlOP5b7WFtv/iPWR/sLHa5zqLDh9BMARdaM+hswN5/iMtedlFqdTLt0xGD3Y vfBVQDLoonj2Ez3rVp25JYwRETb6RQrTsW1l2U599yVcpNKdbWQM1pm6iR042eIU zVssRkpa0mNh4PHBMbIebjNRbgJW5JGu5wBVmrhAycyqwAMK0PoqUhL05A2AijOk F4AWCheSqd87OJigv24esSGdDWaJWjKZ5VGG61typPjCyXO5vHOB1GQkpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBNO15fYaYrya+SnnxEUPFf6sO+KMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvRTA3WGw5aHBpdkpyNUtlZkVSUThWX3F3NzRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTV2YMA0G CSqGSIb3DQEBCwUAA4IBAQCFVUW6d9xLfVwc+k1Uz0wdcQ5Ixx/dcDkOwBxFce0h fsKPhjeUK3fAmq3K350MnguXzviTCVp+lPd3FJMzEJhIE9ZEu0chA2nD/fEq6D55 lzJwzapPPel5dv2x30RdSCeujKW/52yXPp7Wz1yDuqiU45KesHUwEPeoIQQZEFJK BIHw7yNBLjCB75/v7RK/nA8S2rAoQSspNRhLICIeTjje0iQNvRR/2bflwPpAX30S bAmGhG+mwb9ljZWZqFQH77dIbcCavq4xn6ta370tfo8Kjyxq75UvQU9qdvAaiXFa yke5Uk7bsskW1iRBbQ5H3ErzSH8OqnotcROrYy/VovMM -----END CERTIFICATE-----Generated at Sun Jan 11 11:59:50 2026 by rpki-client