This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/dxXzSfG6tk-xq80nFlAI2V6Jabk.roa File: dxXzSfG6tk-xq80nFlAI2V6Jabk.roa (raw, json) Hash identifier: 7x8bVi5e937j8BHSzgO3xnPhQaxhg84Gj8bsT5Yzlz8= Subject key identifier: 77:15:F3:49:F1:BA:B6:4F:B1:AB:CD:27:16:50:08:D9:5E:89:69:B9 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 019B7EA69BFD3D1724E9F961E55E7E47CD0C Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/dxXzSfG6tk-xq80nFlAI2V6Jabk.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 77.73.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9b:fd:3d:17:24:e9:f9:61:e5:5e:7e:47:cd:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7715f349f1bab64fb1abcd27165008d95e8969b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e3:82:52:94:b3:f4:97:45:32:84:d3:16:de: 68:ae:b0:89:24:40:a3:a1:aa:a0:11:dc:68:7c:71: 11:97:39:5d:c6:65:64:4b:35:51:5e:9c:81:cd:a9: 7d:07:e0:14:b2:fa:33:a1:41:34:12:62:6c:e9:d6: 18:ce:4a:38:07:ce:da:18:f0:b6:bd:f7:66:9a:0b: bd:13:43:aa:97:42:ee:fc:c0:26:01:60:52:74:9e: 4e:08:d0:8e:dc:bf:9f:c8:c4:f9:ce:ed:e2:65:7f: 6d:50:9a:c1:39:29:3c:e5:91:29:3b:3d:47:9a:55: 9e:8b:fe:77:67:6a:38:e1:2d:dd:a4:f7:d2:6e:7b: 05:ee:fb:2a:9d:8b:68:eb:45:3b:f5:e9:50:2b:52: 79:15:0e:8a:a1:46:de:c5:f7:b4:1d:bb:31:cd:80: 57:d3:9f:2a:e6:55:66:cf:93:ef:7f:d6:b4:9e:a5: b1:ac:78:44:bd:ac:8d:7c:ed:b2:51:07:6b:2a:5f: c2:76:a4:3e:5c:fb:ad:7b:8e:15:68:be:e5:eb:e5: 36:1a:ef:c0:26:6f:f8:05:ab:b4:f6:7f:f3:af:e0: d4:a4:b5:83:38:c7:94:98:03:d5:49:58:98:16:8a: 5d:c0:ae:f2:9b:7c:08:a4:95:95:08:af:d0:5c:cc: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:15:F3:49:F1:BA:B6:4F:B1:AB:CD:27:16:50:08:D9:5E:89:69:B9 X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/dxXzSfG6tk-xq80nFlAI2V6Jabk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.131.0/24 Signature Algorithm: sha256WithRSAEncryption 94:36:af:d8:cf:6a:17:88:c6:d3:9a:ff:09:20:3f:1c:b6:45: 5f:12:22:1b:93:43:76:bc:b2:a6:28:1a:cb:e0:2a:64:3e:08: 76:dd:ed:b0:1a:72:ca:24:aa:a4:2f:3f:1b:3b:a9:19:1b:2d: 53:a0:d6:bd:00:a6:5a:98:80:71:62:04:57:af:e9:71:94:62: 30:ab:3b:bc:42:4e:60:cf:a3:2b:e6:06:23:8b:b6:69:65:62: ad:af:6c:69:7b:30:ba:b5:76:d9:2c:d8:ce:64:2e:08:27:25: dd:f2:f3:3c:b3:38:11:b2:d2:db:49:4a:1f:44:3b:1a:87:e7: b5:8f:46:82:ce:ff:29:e6:4a:5d:7e:09:9c:50:6c:a9:72:f1: 90:bc:c2:64:42:a4:fe:49:c0:0d:43:e7:d0:f4:d5:fd:b5:52: 94:ad:8a:a6:10:2c:6b:ad:c9:ac:3d:97:28:9d:ee:9d:dd:3b: cd:73:57:d7:59:0c:ae:13:3b:6d:af:a4:b1:7a:bc:2c:c2:db: 70:53:c4:18:3c:7c:28:7f:41:b6:d3:a5:84:40:79:8d:6a:96: 20:c8:28:2a:3a:84:44:82:6d:00:d0:0c:30:10:59:5e:9d:ba: cd:1b:0e:29:04:99:b0:f7:10:d5:f9:93:65:c1:53:08:50:8e: a4:e4:71:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppv9PRck6flh5V5+R80MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzE1ZjM0OWYxYmFiNjRmYjFhYmNkMjcxNjUwMDhkOTVlODk2OWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeOCUpSz9JdFMoTTFt5orrCJJECj oaqgEdxofHERlzldxmVkSzVRXpyBzal9B+AUsvozoUE0EmJs6dYYzko4B87aGPC2 vfdmmgu9E0Oql0Lu/MAmAWBSdJ5OCNCO3L+fyMT5zu3iZX9tUJrBOSk85ZEpOz1H mlWei/53Z2o44S3dpPfSbnsF7vsqnYto60U79elQK1J5FQ6KoUbexfe0HbsxzYBX 058q5lVmz5Pvf9a0nqWxrHhEvayNfO2yUQdrKl/CdqQ+XPute44VaL7l6+U2Gu/A Jm/4Bau09n/zr+DUpLWDOMeUmAPVSViYFopdwK7ym3wIpJWVCK/QXMw/KQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHcV80nxurZPsavNJxZQCNleiWm5MB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvZHhYelNmRzZ0ay14cTgwbkZsQUkyVjZKYWJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUmDMA0G CSqGSIb3DQEBCwUAA4IBAQCUNq/Yz2oXiMbTmv8JID8ctkVfEiIbk0N2vLKmKBrL 4CpkPgh23e2wGnLKJKqkLz8bO6kZGy1ToNa9AKZamIBxYgRXr+lxlGIwqzu8Qk5g z6Mr5gYji7ZpZWKtr2xpezC6tXbZLNjOZC4IJyXd8vM8szgRstLbSUofRDsah+e1 j0aCzv8p5kpdfgmcUGypcvGQvMJkQqT+ScANQ+fQ9NX9tVKUrYqmECxrrcmsPZco ne6d3TvNc1fXWQyuEzttr6SxerwswttwU8QYPHwof0G206WEQHmNapYgyCgqOoRE gm0A0AwwEFlenbrNGw4pBJmw9xDV+ZNlwVMIUI6k5HHD -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:43 2026 by rpki-client