This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/L-u4b7SBOUmy4L1RpKR6OIVpinY.roa File: L-u4b7SBOUmy4L1RpKR6OIVpinY.roa (raw, json) Hash identifier: ZrPchIIvIL1iJYx23yfQN0L7YsyqPP5e1zmsSJI+3CQ= Subject key identifier: 2F:EB:B8:6F:B4:81:39:49:B2:E0:BD:51:A4:A4:7A:38:85:69:8A:76 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F6C88E1D4E518C80535D0C2E3724 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/L-u4b7SBOUmy4L1RpKR6OIVpinY.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212228 IP address blocks: 80.77.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f6:c8:8e:1d:4e:51:8c:80:53:5d:0c:2e:37:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2febb86fb4813949b2e0bd51a4a47a3885698a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0a:db:55:20:4e:eb:22:af:ae:08:05:08:df: 6d:e5:c0:69:2d:e9:b9:f2:44:6a:64:9c:22:01:48: cc:d4:f6:06:64:e3:87:af:28:c4:14:63:27:10:e8: f8:d9:58:5b:b5:cb:0b:ae:83:2f:f6:3e:34:73:0a: 62:c2:f7:3d:4e:dc:1a:49:d0:b5:ce:73:1e:56:5d: 5c:c4:71:bd:94:17:8b:07:ce:78:44:5d:cd:44:78: af:b2:b7:36:69:b6:5f:64:eb:c9:ec:6a:ec:6e:4b: 82:d1:d0:ac:94:0e:87:31:ad:51:f0:7c:ae:f0:64: 90:47:d2:d5:88:84:9f:11:c5:95:ef:69:00:d0:a7: 24:c6:4a:b9:94:8d:5b:2b:f6:50:fa:e7:34:43:66: d8:59:c5:24:a6:79:27:e7:3a:a2:ba:a0:01:29:66: 96:4c:d3:51:6b:58:87:95:4d:4d:be:fb:54:33:40: 8e:0e:e8:5e:ef:a3:5b:38:07:8f:f1:84:4c:ff:84: f4:68:6b:05:ca:02:99:19:90:f1:ee:46:43:62:49: 95:69:28:24:12:e7:ea:df:49:63:39:e8:aa:92:b5: f0:5d:72:02:a9:a0:30:13:14:05:50:ee:86:a7:06: 52:32:c6:47:a1:56:0a:ed:2b:46:3a:a0:53:74:c9: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EB:B8:6F:B4:81:39:49:B2:E0:BD:51:A4:A4:7A:38:85:69:8A:76 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/L-u4b7SBOUmy4L1RpKR6OIVpinY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.77.23.0/24 Signature Algorithm: sha256WithRSAEncryption 94:ab:28:71:f4:c2:dd:24:e0:47:1f:aa:a1:f6:c8:78:e6:30: 7e:b0:3d:3b:cd:f6:09:bd:49:52:80:ae:f1:66:0a:53:f5:e9: a8:f0:89:b0:b7:5a:d0:6d:da:f2:aa:58:01:6b:27:55:33:a8: bd:fc:d8:35:ea:ad:4b:8f:14:ee:b0:ce:bf:d2:64:d9:b3:ce: a8:02:24:56:be:e2:37:ce:c4:c5:a9:44:10:31:c6:b8:01:bf: e4:05:da:6b:ca:81:d5:6e:d7:6e:63:30:18:03:39:bb:81:fb: a5:83:a2:37:81:36:87:a7:9a:0e:50:0a:07:5b:6c:1e:a0:a3: 9a:64:82:81:32:c4:f8:79:02:e7:f2:4b:b5:15:37:63:52:ae: e6:00:16:7b:73:7e:81:5f:71:ea:03:bf:66:25:59:b9:ad:44: 69:fc:0b:e8:c7:ea:f8:49:0d:47:98:78:27:e6:fb:5a:94:6a: c4:64:12:25:aa:27:21:2a:6a:0d:0a:2c:88:cc:1f:72:52:ce: f8:e8:60:f8:2a:5f:f7:78:73:6c:7e:99:dd:92:17:1c:9e:be: 76:30:b7:a3:08:7f:4c:23:4c:10:5c:a0:68:24:21:d2:07:44: 74:66:61:a3:16:82:f6:dd:4e:32:ea:7d:3f:de:03:fc:02:ed: 04:d7:ab:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPbIjh1OUYyAU10MLjckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmViYjg2ZmI0ODEzOTQ5YjJlMGJkNTFhNGE0N2EzODg1Njk4YTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QrbVSBO6yKvrggFCN9t5cBpLem5 8kRqZJwiAUjM1PYGZOOHryjEFGMnEOj42VhbtcsLroMv9j40cwpiwvc9TtwaSdC1 znMeVl1cxHG9lBeLB854RF3NRHivsrc2abZfZOvJ7GrsbkuC0dCslA6HMa1R8Hyu 8GSQR9LViISfEcWV72kA0Kckxkq5lI1bK/ZQ+uc0Q2bYWcUkpnkn5zqiuqABKWaW TNNRa1iHlU1NvvtUM0CODuhe76NbOAeP8YRM/4T0aGsFygKZGZDx7kZDYkmVaSgk Eufq30ljOeiqkrXwXXICqaAwExQFUO6GpwZSMsZHoVYK7StGOqBTdMkMVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC/ruG+0gTlJsuC9UaSkejiFaYp2MB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvTC11NGI3U0JPVW15NEwxUnBLUjZPSVZwaW5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUE0XMA0G CSqGSIb3DQEBCwUAA4IBAQCUqyhx9MLdJOBHH6qh9sh45jB+sD07zfYJvUlSgK7x ZgpT9emo8Imwt1rQbdryqlgBaydVM6i9/Ng16q1LjxTusM6/0mTZs86oAiRWvuI3 zsTFqUQQMca4Ab/kBdpryoHVbtduYzAYAzm7gfulg6I3gTaHp5oOUAoHW2weoKOa ZIKBMsT4eQLn8ku1FTdjUq7mABZ7c36BX3HqA79mJVm5rURp/Avox+r4SQ1HmHgn 5vtalGrEZBIlqichKmoNCiyIzB9yUs746GD4Kl/3eHNsfpndkhccnr52MLejCH9M I0wQXKBoJCHSB0R0ZmGjFoL23U4y6n0/3gP8Au0E16s6 -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:46 2026 by rpki-client