This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/_XErDvpFkzUya7trCS2vLYDjQlo.roa File: _XErDvpFkzUya7trCS2vLYDjQlo.roa (raw, json) Hash identifier: Yns1NKHmZhWUbTECwAzkHx9Sc1oUfRWEA2tFejiuDu0= Subject key identifier: FD:71:2B:0E:FA:45:93:35:32:6B:BB:6B:09:2D:AF:2D:80:E3:42:5A Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDCBDD9C3EB3469D368E326C7187ED Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/_XErDvpFkzUya7trCS2vLYDjQlo.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60949 IP address blocks: 77.246.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cb:dd:9c:3e:b3:46:9d:36:8e:32:6c:71:87:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd712b0efa459335326bbb6b092daf2d80e3425a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:2a:e1:d2:96:03:24:0e:58:78:35:af:3b: 93:86:b0:dd:8b:01:61:2c:21:59:10:40:78:eb:62: 11:6d:20:a9:2b:5f:01:3e:7d:69:aa:3c:46:eb:54: 85:76:a7:83:f8:40:07:aa:c4:f6:12:09:a7:23:33: b5:5f:61:57:4c:14:7a:6e:03:ad:2b:65:7e:ff:fe: f2:6e:30:82:23:59:ac:3a:c2:38:e2:88:3e:29:0d: 45:f7:68:80:f1:8a:d8:91:a0:21:91:5a:fc:08:41: 34:9d:b0:77:4a:c6:9b:c2:9d:bd:68:92:c5:32:2e: a7:e4:0d:e8:83:4b:5a:15:5e:87:22:25:68:34:b1: ce:5a:7b:a3:50:e3:38:bc:ce:f2:a0:29:52:8a:c8: cd:23:9a:3b:b7:27:18:e3:41:74:3a:40:9b:43:43: de:1a:03:65:7d:86:d6:47:f7:17:8e:1c:07:b7:24: 6e:05:90:46:4d:ed:40:80:49:41:0f:49:2d:4a:8a: 26:e3:02:37:40:e5:22:62:f7:15:ac:47:43:1b:bf: ff:fd:01:67:ea:04:10:57:e5:3a:80:46:2a:fa:51: 71:3c:c9:ca:c7:e6:54:8b:22:1c:f0:7c:25:3d:d2: 0d:b5:41:e3:c2:66:f4:24:a4:74:2c:73:ef:eb:a1: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:71:2B:0E:FA:45:93:35:32:6B:BB:6B:09:2D:AF:2D:80:E3:42:5A X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/_XErDvpFkzUya7trCS2vLYDjQlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.221.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:69:6e:52:13:33:fd:44:7b:4b:a0:2e:ae:84:60:2a:a6:6d: ae:ff:cb:02:b4:1f:46:30:38:5a:fa:53:21:b1:8c:2c:6f:a7: eb:f4:70:bd:ea:67:50:d0:54:03:0a:98:13:90:22:46:22:1f: 58:8f:35:da:99:3c:b7:d2:b0:6c:08:90:9b:ec:48:16:f4:7d: 63:93:ed:dd:fc:00:5c:2d:c1:06:69:e0:2d:30:a4:f0:91:05: 48:60:bb:32:cd:ca:ae:93:3b:a3:b1:9f:df:4f:48:65:52:35: e6:d5:85:4d:76:8c:6c:9e:58:3e:26:bd:f1:f8:57:79:6e:01: 40:61:e9:b6:1f:3b:33:6c:4a:3b:57:c6:0a:e5:95:71:10:29: 91:26:b5:a0:b9:56:25:75:16:4e:26:50:74:7d:bb:ed:00:c2: b9:a9:53:a0:98:57:ec:b3:9a:4e:d5:5e:1c:75:2a:27:d9:8d: 53:9c:97:8a:2c:20:26:84:a0:ea:54:33:f6:36:f6:3c:86:66: e1:c5:da:c0:2a:a4:ba:3b:0f:9f:41:18:1a:68:ae:36:23:37: df:3e:da:b8:79:51:40:4f:04:bf:80:8b:23:54:53:98:b6:51: e4:0b:ee:7a:d3:d5:29:eb:9f:5f:ff:f0:ee:4c:19:75:db:3d: e6:20:3a:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87cvdnD6zRp02jjJscYftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDcxMmIwZWZhNDU5MzM1MzI2YmJiNmIwOTJkYWYyZDgwZTM0MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG4q4dKWAyQOWHg1rzuThrDdiwFh LCFZEEB462IRbSCpK18BPn1pqjxG61SFdqeD+EAHqsT2EgmnIzO1X2FXTBR6bgOt K2V+//7ybjCCI1msOsI44og+KQ1F92iA8YrYkaAhkVr8CEE0nbB3Ssabwp29aJLF Mi6n5A3og0taFV6HIiVoNLHOWnujUOM4vM7yoClSisjNI5o7tycY40F0OkCbQ0Pe GgNlfYbWR/cXjhwHtyRuBZBGTe1AgElBD0ktSoom4wI3QOUiYvcVrEdDG7///QFn 6gQQV+U6gEYq+lFxPMnKx+ZUiyIc8HwlPdINtUHjwmb0JKR0LHPv66FydQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1xKw76RZM1Mmu7awktry2A40JaMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvX1hFckR2cEZrelV5YTd0ckNTMnZMWURqUWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbdMA0G CSqGSIb3DQEBCwUAA4IBAQBcaW5SEzP9RHtLoC6uhGAqpm2u/8sCtB9GMDha+lMh sYwsb6fr9HC96mdQ0FQDCpgTkCJGIh9YjzXamTy30rBsCJCb7EgW9H1jk+3d/ABc LcEGaeAtMKTwkQVIYLsyzcqukzujsZ/fT0hlUjXm1YVNdoxsnlg+Jr3x+Fd5bgFA Yem2HzszbEo7V8YK5ZVxECmRJrWguVYldRZOJlB0fbvtAMK5qVOgmFfss5pO1V4c dSon2Y1TnJeKLCAmhKDqVDP2NvY8hmbhxdrAKqS6Ow+fQRgaaK42IzffPtq4eVFA TwS/gIsjVFOYtlHkC+5609Up659f//DuTBl12z3mIDpi -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:38 2026 by rpki-client