This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/grJ9EqNLqk_bD_Laqgpm9f9Ro9k.roa File: grJ9EqNLqk_bD_Laqgpm9f9Ro9k.roa (raw, json) Hash identifier: xyE/NpDyYVcmoAY0T1X5Ke+ynTjOQBvPePI7t1fDBgE= Subject key identifier: 82:B2:7D:12:A3:4B:AA:4F:DB:0F:F2:DA:AA:0A:66:F5:FF:51:A3:D9 Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019A986A58CBB24875DDCF69FCCF2D18AA27 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/grJ9EqNLqk_bD_Laqgpm9f9Ro9k.roa Signing time: Tue 18 Nov 2025 19:21:37 +0000 ROA not before: Tue 18 Nov 2025 19:21:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 77.246.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:6a:58:cb:b2:48:75:dd:cf:69:fc:cf:2d:18:aa:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Nov 18 19:21:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=82b27d12a34baa4fdb0ff2daaa0a66f5ff51a3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:46:11:a1:f1:75:6d:7e:be:2e:89:44:23: 13:cb:fd:00:71:d5:27:ba:46:f9:e5:53:ff:5c:bc: 09:d4:fd:c0:55:17:e6:71:cc:d7:0f:66:05:ac:0e: b0:5d:5d:2b:74:1c:4d:bf:95:f7:94:92:d9:4e:f0: b1:b9:76:b6:c0:d8:bb:96:3c:03:e5:9d:ea:8e:d3: 94:ef:4f:6d:de:05:d3:1f:b0:45:f2:75:6b:b8:d5: 3b:53:e3:ad:4e:6d:b5:00:d4:04:ff:50:6e:ba:b1: bf:03:86:b9:d1:9f:3c:f6:30:8b:b5:41:04:5a:81: d6:2d:9f:d3:89:0d:e4:07:43:fc:8d:e3:25:1b:77: d6:9f:bc:f0:3d:f2:28:ba:48:0e:dc:8c:8d:38:4d: 9a:ee:69:bd:b1:4c:e2:1b:9c:d0:7c:1b:4b:1c:73: 16:28:2d:f2:83:87:01:20:a5:a5:ef:bf:d4:ec:ae: 6a:b3:8f:a5:12:2d:d7:bb:e9:b4:12:1a:bf:90:f1: 4e:ec:82:3d:6c:c4:13:f7:25:8a:73:a9:78:fa:8c: 1b:60:26:23:6b:f2:c3:de:c1:85:a0:9b:e7:09:84: 79:72:b3:7d:7c:a3:ef:ff:07:33:41:01:42:b8:a7: 5a:65:a9:5e:da:f0:7c:55:b9:e2:06:b3:04:cd:b1: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B2:7D:12:A3:4B:AA:4F:DB:0F:F2:DA:AA:0A:66:F5:FF:51:A3:D9 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/grJ9EqNLqk_bD_Laqgpm9f9Ro9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.223.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:2f:9f:dd:02:e0:cc:c4:74:8c:9a:fc:13:d1:78:4c:18:bf: d5:cf:69:ce:ef:43:0e:b9:a0:e2:ee:cb:16:f5:50:5a:6e:be: 03:3d:c1:48:72:32:1c:f4:a0:70:53:a6:37:1d:c0:98:6d:49: 47:37:94:82:be:4f:ad:78:f1:0b:ea:56:ab:92:fc:02:df:4c: 79:e3:b8:af:a8:7b:eb:74:ff:db:ad:e8:38:8c:19:b6:aa:01: 5d:50:78:e6:11:8c:c6:d7:b0:e2:b3:64:5e:05:d2:74:14:ff: 8e:a9:50:f9:53:72:4b:d9:48:40:44:50:a7:32:77:46:85:c6: 00:4e:18:cf:3b:7f:59:0f:46:be:a8:e0:0f:b1:79:d3:ba:31: 99:0f:e4:d9:a7:63:64:3a:a0:c9:fb:24:fb:db:d3:36:d6:91: 51:78:8f:51:d1:30:fd:91:56:45:02:10:3d:66:c8:b7:80:e5: 27:c1:8f:f5:9b:84:a6:1d:11:9c:3b:3b:a2:d7:b5:b4:dc:0c: 86:dc:2c:9f:50:9a:30:38:53:0d:eb:ab:29:4a:9d:1c:ea:f8: 8c:3d:66:c0:8b:60:be:f7:25:50:10:41:74:13:04:f9:0a:c6: 98:60:f0:19:9f:d8:6d:12:a9:6b:f4:e3:1c:30:7e:96:9e:36: aa:17:2c:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqYaljLskh13c9p/M8tGKonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjUxMTE4MTkyMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmIyN2QxMmEzNGJhYTRmZGIwZmYyZGFhYTBhNjZmNWZmNTFhM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6pGEaHxdW1+vi6JRCMTy/0AcdUn ukb55VP/XLwJ1P3AVRfmcczXD2YFrA6wXV0rdBxNv5X3lJLZTvCxuXa2wNi7ljwD 5Z3qjtOU709t3gXTH7BF8nVruNU7U+OtTm21ANQE/1BuurG/A4a50Z889jCLtUEE WoHWLZ/TiQ3kB0P8jeMlG3fWn7zwPfIoukgO3IyNOE2a7mm9sUziG5zQfBtLHHMW KC3yg4cBIKWl77/U7K5qs4+lEi3Xu+m0Ehq/kPFO7II9bMQT9yWKc6l4+owbYCYj a/LD3sGFoJvnCYR5crN9fKPv/wczQQFCuKdaZale2vB8VbniBrMEzbED2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIKyfRKjS6pP2w/y2qoKZvX/UaPZMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvZ3JKOUVxTkxxa19iRF9MYXFncG05ZjlSbzlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbfMA0G CSqGSIb3DQEBCwUAA4IBAQCbL5/dAuDMxHSMmvwT0XhMGL/Vz2nO70MOuaDi7ssW 9VBabr4DPcFIcjIc9KBwU6Y3HcCYbUlHN5SCvk+tePEL6larkvwC30x547ivqHvr dP/breg4jBm2qgFdUHjmEYzG17Dis2ReBdJ0FP+OqVD5U3JL2UhARFCnMndGhcYA ThjPO39ZD0a+qOAPsXnTujGZD+TZp2NkOqDJ+yT729M21pFReI9R0TD9kVZFAhA9 Zsi3gOUnwY/1m4SmHRGcOzui17W03AyG3CyfUJowOFMN66spSp0c6viMPWbAi2C+ 9yVQEEF0EwT5CsaYYPAZn9htEqlr9OMcMH6WnjaqFyyt -----END CERTIFICATE-----Generated at Fri Dec 5 05:14:50 2025 by rpki-client