This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/tRowsns90J8SVu4Vuk4KwWdxtlI.roa File: tRowsns90J8SVu4Vuk4KwWdxtlI.roa (raw, json) Hash identifier: 8fa16LnJWtPW8DQIUED5RuRMWErqx7miQXyVpxamI30= Subject key identifier: B5:1A:30:B2:7B:3D:D0:9F:12:56:EE:15:BA:4E:0A:C1:67:71:B6:52 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA31E9975663878DFF480A622263C1A Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/tRowsns90J8SVu4Vuk4KwWdxtlI.roa Signing time: Thu 01 Jan 2026 22:17:26 +0000 ROA not before: Thu 01 Jan 2026 22:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 77.83.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1e:99:75:66:38:78:df:f4:80:a6:22:26:3c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b51a30b27b3dd09f1256ee15ba4e0ac16771b652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:dc:a1:ec:39:df:e2:03:b6:c4:64:32:45: a4:ca:00:c1:20:e4:78:77:55:86:c3:6c:ae:83:3e: e8:7f:2f:2a:0f:4d:a2:30:7a:eb:5d:7f:6f:17:8e: fe:c4:56:ca:d9:18:d3:ac:81:44:92:c3:ed:1e:88: 01:b8:d0:8d:39:3b:ca:21:d1:b6:78:aa:84:09:83: 3c:17:18:fa:63:99:41:b7:fc:0d:03:78:34:85:d3: 03:78:65:27:32:87:af:d6:0d:1f:9f:d1:9d:c1:4a: 1f:f6:d3:99:68:8d:f2:e2:68:98:c1:da:93:bb:39: 99:aa:99:d9:9a:01:a0:ec:3a:90:3d:f0:58:de:69: 27:11:8b:6a:d7:4d:a3:42:68:d7:d1:a3:1c:5f:63: 76:54:17:91:5c:ab:95:93:e1:47:e1:59:6a:0f:01: 4d:21:e5:d3:3e:8a:93:3f:1e:94:e2:20:f0:52:22: 8c:ad:bc:ec:31:7b:ed:f0:5b:c7:0e:8e:de:69:75: a0:1a:b4:f3:04:bc:e5:a6:18:db:68:3b:03:88:68: 2a:b5:65:3a:ee:9b:a4:9d:3d:ec:f8:63:29:fe:15: 3a:b2:e0:86:85:f8:53:a5:b2:00:7b:c0:6e:3c:ee: dd:f7:08:8d:f1:87:bf:7f:b1:76:a5:7c:e9:e9:a3: 66:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1A:30:B2:7B:3D:D0:9F:12:56:EE:15:BA:4E:0A:C1:67:71:B6:52 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/tRowsns90J8SVu4Vuk4KwWdxtlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.133.0/24 Signature Algorithm: sha256WithRSAEncryption 50:7c:27:30:49:9a:1e:8d:8f:ed:69:51:82:d6:5c:16:46:55: b6:4e:b1:ff:b9:0a:fa:89:99:3c:51:1f:11:d4:f6:2a:dd:46: 55:a6:0d:dc:12:2b:ad:f5:f8:c9:04:bd:dc:54:7d:1c:a9:94: 4d:31:fb:d9:da:e6:cc:67:7c:7f:3c:7d:b9:57:e4:56:50:fb: a7:8c:d1:65:d3:c0:20:d6:b1:9f:55:06:60:7a:16:66:ac:7d: 07:20:74:27:fe:76:e5:39:31:36:da:05:52:d8:c2:8d:95:cd: 27:91:49:31:05:6c:5f:50:d3:a6:8a:5d:95:cf:2d:ad:8b:39: 3c:3b:de:94:df:60:b5:9b:84:ec:02:6a:84:c6:a4:20:70:63: 9a:d4:1e:62:20:ff:4e:3a:53:45:5b:8d:f6:05:af:97:44:cc: d8:de:83:a6:e6:ee:4d:6b:51:10:15:57:96:ae:da:e7:1f:08: 18:19:31:1f:3a:e5:3d:27:81:a1:00:c7:e4:a2:38:56:ef:16: 03:86:b8:33:84:ce:77:18:f0:dd:6c:b5:f7:1f:92:35:56:14: 83:30:fb:40:c8:a7:c7:36:08:98:74:cc:5b:64:a0:b2:57:0d: c3:78:81:7d:06:eb:1b:4f:b4:5b:36:2d:5e:b6:aa:23:41:6c: 8b:6c:f8:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ox6ZdWY4eN/0gKYiJjwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTFhMzBiMjdiM2RkMDlmMTI1NmVlMTViYTRlMGFjMTY3NzFiNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHLcoew53+IDtsRkMkWkygDBIOR4 d1WGw2yugz7ofy8qD02iMHrrXX9vF47+xFbK2RjTrIFEksPtHogBuNCNOTvKIdG2 eKqECYM8Fxj6Y5lBt/wNA3g0hdMDeGUnMoev1g0fn9GdwUof9tOZaI3y4miYwdqT uzmZqpnZmgGg7DqQPfBY3mknEYtq102jQmjX0aMcX2N2VBeRXKuVk+FH4VlqDwFN IeXTPoqTPx6U4iDwUiKMrbzsMXvt8FvHDo7eaXWgGrTzBLzlphjbaDsDiGgqtWU6 7puknT3s+GMp/hU6suCGhfhTpbIAe8BuPO7d9wiN8Ye/f7F2pXzp6aNmxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLUaMLJ7PdCfElbuFbpOCsFncbZSMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvdFJvd3NuczkwSjhTVnU0VnVrNEt3V2R4dGxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVOFMA0G CSqGSIb3DQEBCwUAA4IBAQBQfCcwSZoejY/taVGC1lwWRlW2TrH/uQr6iZk8UR8R 1PYq3UZVpg3cEiut9fjJBL3cVH0cqZRNMfvZ2ubMZ3x/PH25V+RWUPunjNFl08Ag 1rGfVQZgehZmrH0HIHQn/nblOTE22gVS2MKNlc0nkUkxBWxfUNOmil2Vzy2tizk8 O96U32C1m4TsAmqExqQgcGOa1B5iIP9OOlNFW432Ba+XRMzY3oOm5u5Na1EQFVeW rtrnHwgYGTEfOuU9J4GhAMfkojhW7xYDhrgzhM53GPDdbLX3H5I1VhSDMPtAyKfH NgiYdMxbZKCyVw3DeIF9BusbT7RbNi1etqojQWyLbPgV -----END CERTIFICATE-----Generated at Thu Jan 8 08:55:18 2026 by rpki-client