This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VxN6JcI_Al-4lvATIRpsV8BDi8o.roa File: VxN6JcI_Al-4lvATIRpsV8BDi8o.roa (raw, json) Hash identifier: DRF2TKeetuuj0lnAt0xVtWt2l+8JadQL6Cr7oW/zWzc= Subject key identifier: 57:13:7A:25:C2:3F:02:5F:B8:96:F0:13:21:1A:6C:57:C0:43:8B:CA Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDC438F64E0EDBAE230C81AA810B15 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VxN6JcI_Al-4lvATIRpsV8BDi8o.roa Signing time: Fri 02 Jan 2026 04:18:35 +0000 ROA not before: Fri 02 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 77.246.220.0/24 maxlen: 24 88.80.137.0/24 maxlen: 24 185.58.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c4:38:f6:4e:0e:db:ae:23:0c:81:aa:81:0b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57137a25c23f025fb896f013211a6c57c0438bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:5f:dd:30:f7:bc:68:28:32:aa:3e:fc:46: bf:58:e2:44:cb:7c:93:2c:6e:34:ea:4b:bd:79:da: b3:42:d4:a7:f8:f9:56:e7:55:ca:c6:65:81:87:d3: 95:c5:73:f3:b8:e3:db:f5:4a:b5:29:2d:ac:61:2d: 54:7e:ec:57:49:c3:99:c3:f1:4e:57:eb:65:73:79: be:b5:41:73:12:da:30:a5:c7:2e:43:ca:3f:7f:53: 9c:e1:4a:a4:f3:91:2d:52:f8:37:0a:2a:b4:02:15: b4:bb:cf:35:18:4e:0a:1a:97:63:7d:14:92:87:c3: 2b:f0:a9:d7:e4:fc:c3:02:7d:58:01:1c:02:71:43: 7c:74:59:9e:f8:f7:e9:0c:bb:fa:27:19:a5:e8:61: c5:e6:4b:e4:58:55:10:4e:a9:0d:03:34:83:a1:a0: 4d:f7:58:16:d5:dd:36:d6:80:80:6c:0e:b4:2c:7b: fc:42:af:0b:6d:cb:51:1b:e5:67:47:6b:8f:03:1c: 3e:f7:13:fa:b7:23:cd:f3:57:55:28:40:d9:7a:5f: 13:56:7a:a6:98:7d:c0:51:6a:70:18:c5:a1:a7:5f: 23:1a:ac:e3:43:77:9d:cf:73:1a:40:65:cf:8d:d4: 9c:27:54:68:3e:60:c9:25:44:02:95:b0:78:e1:94: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:13:7A:25:C2:3F:02:5F:B8:96:F0:13:21:1A:6C:57:C0:43:8B:CA X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/VxN6JcI_Al-4lvATIRpsV8BDi8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.220.0/24 88.80.137.0/24 185.58.23.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:6b:5b:e2:03:59:88:8d:f6:7f:a0:b1:88:cf:43:44:89:d9: 68:cc:29:8a:e4:84:9e:88:f2:a5:f0:04:55:1f:e9:9c:6e:6f: 98:5b:f1:4f:ce:96:da:45:c7:bf:bd:d9:f1:35:93:5d:d3:5e: 5c:12:f4:44:56:06:7b:cd:44:c7:af:97:a2:0e:e7:00:07:6e: 2b:ab:d1:0c:cd:a1:53:27:b8:5f:bb:42:0b:3c:1e:fa:26:36: 03:71:a1:c9:79:5b:9d:53:61:f0:c2:e7:76:dc:fa:58:34:9e: 99:7e:a0:55:07:88:2b:49:44:d4:3a:2f:e3:4f:82:2a:93:24: 14:c6:a4:a2:df:11:a9:47:77:7e:e6:5f:63:97:c6:60:a2:18: 6e:fb:bf:7b:8d:97:cf:bc:51:79:85:fa:37:19:fe:0f:d1:fc: 87:85:f7:70:52:12:e3:6a:2f:6d:bd:95:7e:f9:30:44:a7:1a: 50:bd:16:3e:32:a3:25:f4:87:94:f0:9f:d0:aa:e1:41:d6:9c: 30:c0:d0:67:a2:e9:03:8f:4e:d7:9a:a7:15:3b:ad:db:8b:cc: 8c:af:af:fc:ad:d6:41:64:c3:5b:4d:4c:b9:4b:f4:2c:4f:c0: cd:25:0f:51:b9:6b:cc:2e:b9:b8:d7:10:8f:ad:4b:03:74:15: 76:f9:99:42 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87cQ49k4O264jDIGqgQsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzEzN2EyNWMyM2YwMjVmYjg5NmYwMTMyMTFhNmM1N2MwNDM4YmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIdf3TD3vGgoMqo+/Ea/WOJEy3yT LG406ku9edqzQtSn+PlW51XKxmWBh9OVxXPzuOPb9Uq1KS2sYS1UfuxXScOZw/FO V+tlc3m+tUFzEtowpccuQ8o/f1Oc4Uqk85EtUvg3Ciq0AhW0u881GE4KGpdjfRSS h8Mr8KnX5PzDAn1YARwCcUN8dFme+PfpDLv6Jxml6GHF5kvkWFUQTqkNAzSDoaBN 91gW1d021oCAbA60LHv8Qq8LbctRG+VnR2uPAxw+9xP6tyPN81dVKEDZel8TVnqm mH3AUWpwGMWhp18jGqzjQ3edz3MaQGXPjdScJ1RoPmDJJUQClbB44ZSJIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFcTeiXCPwJfuJbwEyEabFfAQ4vKMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvVnhONkpjSV9BbC00bHZBVElScHNWOEJEaThvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATfbcAwQA WFCJAwQAuToXMA0GCSqGSIb3DQEBCwUAA4IBAQCda1viA1mIjfZ/oLGIz0NEidlo zCmK5ISeiPKl8ARVH+mcbm+YW/FPzpbaRce/vdnxNZNd015cEvREVgZ7zUTHr5ei DucAB24rq9EMzaFTJ7hfu0ILPB76JjYDcaHJeVudU2Hwwud23PpYNJ6ZfqBVB4gr SUTUOi/jT4IqkyQUxqSi3xGpR3d+5l9jl8Zgohhu+797jZfPvFF5hfo3Gf4P0fyH hfdwUhLjai9tvZV++TBEpxpQvRY+MqMl9IeU8J/QquFB1pwwwNBnoukDj07XmqcV O63bi8yMr6/8rdZBZMNbTUy5S/QsT8DNJQ9RuWvMLrm41xCPrUsDdBV2+ZlC -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:56 2026 by rpki-client