This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/thQeBvJ49lds_EA91PLLCSwLWIw.roa File: thQeBvJ49lds_EA91PLLCSwLWIw.roa (raw, json) Hash identifier: kGYpWoGUWthYejf7i/yF1EVl5j1QxZxFpEKnwmEBGZE= Subject key identifier: B6:14:1E:06:F2:78:F6:57:6C:FC:40:3D:D4:F2:CB:09:2C:0B:58:8C Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA31D6462630244BC21D01FC0731137 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/thQeBvJ49lds_EA91PLLCSwLWIw.roa Signing time: Thu 01 Jan 2026 22:17:26 +0000 ROA not before: Thu 01 Jan 2026 22:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 77.83.132.0/24 maxlen: 24 77.83.134.0/23 maxlen: 24 89.222.80.0/23 maxlen: 24 89.222.82.0/23 maxlen: 24 89.222.84.0/23 maxlen: 24 89.222.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:1d:64:62:63:02:44:bc:21:d0:1f:c0:73:11:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6141e06f278f6576cfc403dd4f2cb092c0b588c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:bd:67:81:fb:46:78:fd:a8:6a:fe:72:dd:9b: be:0d:5c:23:17:b9:5c:8d:88:b1:59:51:7c:5b:a6: 42:2b:be:89:9e:9e:bb:2a:06:5e:62:55:e5:3e:2b: 18:6a:26:9e:e6:50:16:2f:e1:e5:0c:cf:50:17:6b: 9d:39:e2:f0:d0:35:2c:b7:1f:b2:f1:12:48:74:58: e0:9a:0a:ab:76:a8:a2:4b:a1:ae:ca:67:dd:6c:52: c1:f5:1c:01:b7:6a:80:b3:cf:b1:6a:f6:67:bc:28: d6:ab:86:b3:55:6a:ca:68:65:3c:3f:f5:ef:f5:69: 85:27:aa:26:e6:f7:c2:9a:a4:05:22:6d:e4:0c:9b: 6a:47:4d:ab:e5:f9:9f:44:5c:2a:20:dd:61:e7:16: cb:84:03:0d:ac:d4:8f:7a:7a:a1:7c:d4:97:86:f7: 20:88:0a:e8:21:20:5f:df:8a:21:b4:11:39:ce:57: 10:53:79:a5:4e:44:22:b2:49:bd:6f:16:11:d4:82: 2f:cb:b3:28:f4:c0:25:fd:04:df:54:89:6d:bf:50: be:7a:6a:72:38:98:7d:4c:fc:41:72:36:a3:ee:92: c8:8c:b0:46:cb:af:c2:f3:b5:a1:ce:8c:aa:e8:ff: 47:fd:ee:fe:3b:5e:94:98:d0:a2:f6:16:ac:75:c2: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:14:1E:06:F2:78:F6:57:6C:FC:40:3D:D4:F2:CB:09:2C:0B:58:8C X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/thQeBvJ49lds_EA91PLLCSwLWIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.132.0/24 77.83.134.0/23 89.222.80.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:49:b6:70:22:a4:e1:61:2a:79:75:62:ec:94:2e:43:b8:4a: bb:b5:04:42:db:49:80:07:57:6e:83:89:09:85:71:25:63:28: 64:39:0f:f5:e8:96:97:1b:30:9c:02:b4:16:d4:c7:3c:f2:28: a5:52:72:5d:43:b5:61:72:68:cc:15:e2:2b:15:99:a7:f2:e0: a5:92:bb:9c:de:59:24:ba:de:03:78:f8:01:fb:2a:d8:46:49: e7:b7:9e:63:8b:4f:7d:c9:a3:c1:f4:d7:3d:00:68:7f:dc:b9: 1e:12:41:71:2d:e6:45:50:ff:55:10:4f:d7:10:3c:c9:a0:14: f7:b4:49:92:94:cb:fc:06:de:e1:89:4b:bf:d1:73:aa:63:8a: 86:75:e0:58:1f:db:dc:4b:ff:30:31:22:d7:ef:12:ba:4b:d7: 69:4e:2c:2f:66:c4:e5:56:22:c1:40:80:3d:63:99:94:f5:cd: 38:00:e5:ab:55:01:d4:b7:23:cc:8d:bb:f7:21:f6:c3:c3:cf: fd:7a:65:c1:18:9e:1e:61:04:f5:96:14:3c:e9:6c:6f:7f:65: 95:a6:e1:3d:2c:c5:f5:62:ee:38:31:94:97:35:9e:7d:20:00: 9c:52:61:9d:bb:72:a8:ae:e4:10:b5:de:c6:05:63:eb:57:b7: 47:b6:82:cf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7ox1kYmMCRLwh0B/AcxE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjE0MWUwNmYyNzhmNjU3NmNmYzQwM2RkNGYyY2IwOTJjMGI1ODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA971ngftGeP2oav5y3Zu+DVwjF7lc jYixWVF8W6ZCK76Jnp67KgZeYlXlPisYaiae5lAWL+HlDM9QF2udOeLw0DUstx+y 8RJIdFjgmgqrdqiiS6GuymfdbFLB9RwBt2qAs8+xavZnvCjWq4azVWrKaGU8P/Xv 9WmFJ6om5vfCmqQFIm3kDJtqR02r5fmfRFwqIN1h5xbLhAMNrNSPenqhfNSXhvcg iAroISBf34ohtBE5zlcQU3mlTkQiskm9bxYR1IIvy7Mo9MAl/QTfVIltv1C+empy OJh9TPxBcjaj7pLIjLBGy6/C87Whzoyq6P9H/e7+O16UmNCi9hasdcJEFQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLYUHgbyePZXbPxAPdTyywksC1iMMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvdGhRZUJ2SjQ5bGRzX0VBOTFQTExDU3dMV0l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVOEAwQB TVOGAwQDWd5QMA0GCSqGSIb3DQEBCwUAA4IBAQAtSbZwIqThYSp5dWLslC5DuEq7 tQRC20mAB1dug4kJhXElYyhkOQ/16JaXGzCcArQW1Mc88iilUnJdQ7VhcmjMFeIr FZmn8uClkruc3lkkut4DePgB+yrYRknnt55ji099yaPB9Nc9AGh/3LkeEkFxLeZF UP9VEE/XEDzJoBT3tEmSlMv8Bt7hiUu/0XOqY4qGdeBYH9vcS/8wMSLX7xK6S9dp TiwvZsTlViLBQIA9Y5mU9c04AOWrVQHUtyPMjbv3IfbDw8/9emXBGJ4eYQT1lhQ8 6Wxvf2WVpuE9LMX1Yu44MZSXNZ59IACcUmGdu3KoruQQtd7GBWPrV7dHtoLP -----END CERTIFICATE-----Generated at Fri Jan 9 21:27:00 2026 by rpki-client