This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/0zoyQvyQtAcxybJRfWh9GMhsuXU.roa File: 0zoyQvyQtAcxybJRfWh9GMhsuXU.roa (raw, json) Hash identifier: Nl+JhoxK6phZV0HP8vdC24526xfGx+8fsR9nnmIrPEk= Subject key identifier: D3:3A:32:42:FC:90:B4:07:31:C9:B2:51:7D:68:7D:18:C8:6C:B9:75 Certificate issuer: /CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9 Certificate serial: 019B7910B0730CF3D9D0E79A2F7642A30A96 Authority key identifier: 21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/0zoyQvyQtAcxybJRfWh9GMhsuXU.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202080 IP address blocks: 77.247.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b0:73:0c:f3:d9:d0:e7:9a:2f:76:42:a3:0a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d33a3242fc90b40731c9b2517d687d18c86cb975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a0:60:5d:84:56:ba:16:bf:d2:28:4f:95:5b: 9d:bd:df:d8:4d:49:ff:3d:b0:20:3f:a3:fb:95:33: 6d:fe:d4:b9:d8:42:d1:c8:7f:5c:42:45:fb:60:67: 4f:f4:0b:80:86:6a:a4:d1:49:0e:e8:0f:c4:49:ed: e3:7c:c2:04:bf:7b:8f:da:a4:60:41:14:2a:06:a8: 29:3e:9c:42:5d:d7:fa:5e:58:59:e0:4e:6f:2b:4b: 95:32:2f:92:47:58:43:62:82:b2:e8:07:30:0a:e1: 2b:43:2b:57:e7:19:33:88:02:f7:a2:8b:f6:1c:83: 04:05:79:e7:cb:0c:78:a3:ea:4c:03:78:03:c6:e5: 36:35:84:4c:db:ab:51:58:e3:ee:74:2f:c1:ae:12: 9b:a4:06:c6:d7:b0:ae:d4:9d:e7:78:f8:6b:66:65: da:16:38:f2:ed:c6:f0:3f:e9:f6:86:8a:ca:67:57: 19:cc:5d:3d:ee:a0:2c:c0:52:7c:52:66:48:1c:4f: ea:bb:75:bb:73:da:f2:16:5c:f7:fe:0f:74:f4:3d: 7a:79:b3:2f:dd:ae:0d:27:4a:24:47:77:a9:44:18: 1d:48:96:5b:97:33:ad:cf:22:fa:ed:bb:b3:94:1b: fb:2f:fc:05:10:82:27:82:99:38:19:b7:03:49:79: 60:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3A:32:42:FC:90:B4:07:31:C9:B2:51:7D:68:7D:18:C8:6C:B9:75 X509v3 Authority Key Identifier: keyid:21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/0zoyQvyQtAcxybJRfWh9GMhsuXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.195.0/24 Signature Algorithm: sha256WithRSAEncryption 54:e1:ba:cf:ac:dd:d3:51:e7:61:57:d6:ed:c7:4f:4a:5c:88: 56:21:2f:01:69:a0:8f:45:8b:7f:af:fc:fe:4a:c0:9f:cf:1e: 0d:c0:05:26:26:b5:75:8e:22:9a:79:69:2e:c8:c5:bf:e6:db: d3:b8:f5:43:8c:d2:c0:8c:1e:b8:92:a4:1d:f3:51:59:19:fa: 42:13:25:68:db:95:ea:a5:d9:be:fa:a5:9f:5c:80:7d:08:35: bd:e1:52:4a:76:a7:e0:05:66:f1:14:f1:0f:aa:34:d0:1f:ad: ae:4b:9e:30:90:a1:0a:e2:8b:c2:b5:d9:5a:3d:bc:56:d9:d3: c6:90:ff:b0:a9:a7:ce:9a:4c:5e:c9:8c:ac:c9:d2:49:c7:c4: 0e:6b:45:29:f1:6f:26:20:1f:9f:78:8b:76:b2:55:ad:80:b2: dc:75:6a:45:48:f8:67:53:03:5c:b6:8e:b6:0c:8c:fc:98:b8: 0a:9d:bc:1d:89:b2:21:39:97:7f:fb:d1:67:ad:15:fc:83:5b: 9d:65:c0:64:43:8d:4e:95:6d:1b:f8:0b:f0:16:c6:67:ab:d3: 20:ce:e9:a2:79:38:f4:ee:4d:73:7a:ed:dc:67:8d:97:e9:7f: ab:40:e2:79:26:5c:5b:cf:4f:ec:f8:2d:14:39:5a:30:f1:73: e8:5b:9c:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELBzDPPZ0OeaL3ZCowqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTMwZTlkMDllMmZmOGMzODQxMzYxNTU4OWE1ZjIwNmU3 ZjNlYTkwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzNhMzI0MmZjOTBiNDA3MzFjOWIyNTE3ZDY4N2QxOGM4NmNiOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96BgXYRWuha/0ihPlVudvd/YTUn/ PbAgP6P7lTNt/tS52ELRyH9cQkX7YGdP9AuAhmqk0UkO6A/ESe3jfMIEv3uP2qRg QRQqBqgpPpxCXdf6XlhZ4E5vK0uVMi+SR1hDYoKy6AcwCuErQytX5xkziAL3oov2 HIMEBXnnywx4o+pMA3gDxuU2NYRM26tRWOPudC/BrhKbpAbG17Cu1J3nePhrZmXa Fjjy7cbwP+n2horKZ1cZzF097qAswFJ8UmZIHE/qu3W7c9ryFlz3/g909D16ebMv 3a4NJ0okR3epRBgdSJZblzOtzyL67buzlBv7L/wFEIIngpk4GbcDSXlgaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNM6MkL8kLQHMcmyUX1ofRjIbLl1MB8GA1UdIwQY MBaAFCFTDp0J4v+MOEE2FViaXyBufz6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZNT25RbmlfNHc0UVRZVldKcGZJRzVfUHFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mMmRhZDMtYTZlNi00Yjc3LTgzNDIt NjI0ZjRjMTQxZjJjLzEvMHpveVF2eVF0QWN4eWJKUmZXaDlHTWhzdVhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mMmRhZDMtYTZlNi00Yjc3LTgzNDItNjI0ZjRjMTQxZjJj LzEvSVZNT25RbmlfNHc0UVRZVldKcGZJRzVfUHFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATffDMA0G CSqGSIb3DQEBCwUAA4IBAQBU4brPrN3TUedhV9btx09KXIhWIS8BaaCPRYt/r/z+ SsCfzx4NwAUmJrV1jiKaeWkuyMW/5tvTuPVDjNLAjB64kqQd81FZGfpCEyVo25Xq pdm++qWfXIB9CDW94VJKdqfgBWbxFPEPqjTQH62uS54wkKEK4ovCtdlaPbxW2dPG kP+wqafOmkxeyYysydJJx8QOa0Up8W8mIB+feIt2slWtgLLcdWpFSPhnUwNcto62 DIz8mLgKnbwdibIhOZd/+9FnrRX8g1udZcBkQ41OlW0b+AvwFsZnq9MgzumieTj0 7k1zeu3cZ42X6X+rQOJ5Jlxbz0/s+C0UOVow8XPoW5wb -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:21 2026 by rpki-client