This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa File: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (raw, json) Hash identifier: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ= Subject key identifier: AF:EA:CF:BE:DE:11:8D:2E:CF:E7:87:FC:2B:AA:91:7F:04:8E:C6:F4 Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019B76EB326BBE1EA2F44AB5BC1552937D30 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa Signing time: Thu 01 Jan 2026 00:18:03 +0000 ROA not before: Thu 01 Jan 2026 00:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42751 IP address blocks: 77.222.32.0/21 maxlen: 21 77.222.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:32:6b:be:1e:a2:f4:4a:b5:bc:15:52:93:7d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Jan 1 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afeacfbede118d2ecfe787fc2baa917f048ec6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:26:08:89:cb:4f:b3:8f:e6:1d:59:1e:fe:df: 1a:4c:02:75:dd:21:16:4c:5a:7a:c2:29:9c:bc:9b: 3e:85:4c:d1:98:8a:ca:4c:71:c9:c1:01:a7:0c:95: 04:00:0a:19:3f:4e:3a:16:6b:7d:e9:82:39:80:76: 28:90:5f:47:bc:5e:0f:5b:16:21:21:89:b8:22:8a: 86:10:b1:a0:27:a3:e8:2d:2b:55:bf:80:74:6f:24: 42:2f:39:cd:c7:9b:4a:25:87:eb:78:8f:f2:81:f0: 49:15:b4:dc:02:f9:e5:21:92:fd:83:79:ee:c6:7d: 56:92:aa:cc:5a:a3:4a:83:8c:75:c4:28:83:6b:ed: 16:35:b2:4c:73:b3:8e:68:0b:d8:3a:7c:d0:37:23: d1:6c:c9:e6:31:6a:84:4c:41:39:78:3e:52:f0:15: 37:a3:2f:8f:01:5e:dd:27:63:41:83:c4:ca:f5:97: f5:7a:a4:94:7a:2a:bb:74:f0:bc:63:52:64:ce:b9: c7:1a:b4:d7:29:db:85:02:b6:28:72:95:93:52:f6: b8:d3:a1:fe:66:c2:d4:91:38:cc:0d:81:ea:9a:13: 44:97:20:61:98:d3:b8:cd:53:dc:83:1a:fc:2a:77: 81:1c:b1:d8:e2:19:5d:ec:fd:5a:26:60:ec:ef:73: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EA:CF:BE:DE:11:8D:2E:CF:E7:87:FC:2B:AA:91:7F:04:8E:C6:F4 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.222.32.0/21 Signature Algorithm: sha256WithRSAEncryption 13:c3:10:22:44:af:da:5e:af:85:bf:36:47:bd:0d:9e:21:16: 4f:47:65:8a:b9:8c:8a:6d:b9:4a:30:fd:6d:c4:06:69:32:9e: 75:53:c3:7f:48:a6:e3:9b:54:08:f1:94:b1:09:fa:02:b2:7b: 6f:6a:92:19:e4:43:f1:b2:ea:a4:50:b6:5c:78:7f:14:8c:c9: da:ff:de:17:23:23:35:cf:c2:f0:ad:de:1b:6a:27:8b:ba:01: d3:bd:41:67:94:a8:b1:50:83:e2:25:fc:9d:10:e0:9e:7c:06: 80:a5:b8:c6:41:48:b7:6c:cf:fd:49:3e:72:fa:0d:24:c8:a3: 94:7f:65:54:a0:38:b4:55:b8:78:74:23:8c:cd:54:ed:f5:5e: 37:18:ba:16:cb:9d:de:f6:87:b6:fa:c0:bb:7c:34:c2:08:fb: 30:95:48:19:09:8c:b3:63:43:f4:00:08:d9:b5:22:7f:9a:63: 09:36:10:86:27:d5:6d:03:6e:fa:69:55:cb:64:f4:80:33:5d: a0:6c:51:30:90:ae:e0:b3:a8:a6:ca:48:12:f3:7f:e1:b2:2a: 8d:70:f1:0c:eb:9d:23:78:62:38:a8:c7:52:b3:b4:07:b8:c2: 3d:8a:be:e8:ca:d7:58:44:6e:11:a3:91:49:0f:61:65:d0:7a: 0d:37:74:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zJrvh6i9Eq1vBVSk30wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwMTAxMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmVhY2ZiZWRlMTE4ZDJlY2ZlNzg3ZmMyYmFhOTE3ZjA0OGVjNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyYIictPs4/mHVke/t8aTAJ13SEW TFp6wimcvJs+hUzRmIrKTHHJwQGnDJUEAAoZP046Fmt96YI5gHYokF9HvF4PWxYh IYm4IoqGELGgJ6PoLStVv4B0byRCLznNx5tKJYfreI/ygfBJFbTcAvnlIZL9g3nu xn1WkqrMWqNKg4x1xCiDa+0WNbJMc7OOaAvYOnzQNyPRbMnmMWqETEE5eD5S8BU3 oy+PAV7dJ2NBg8TK9Zf1eqSUeiq7dPC8Y1JkzrnHGrTXKduFArYocpWTUva406H+ ZsLUkTjMDYHqmhNElyBhmNO4zVPcgxr8KneBHLHY4hld7P1aJmDs73OGwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/qz77eEY0uz+eH/CuqkX8Ejsb0MB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvci1yUHZ0NFJqUzdQNTRmOEs2cVJmd1NPeHZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTd4gMA0G CSqGSIb3DQEBCwUAA4IBAQATwxAiRK/aXq+FvzZHvQ2eIRZPR2WKuYyKbblKMP1t xAZpMp51U8N/SKbjm1QI8ZSxCfoCsntvapIZ5EPxsuqkULZceH8UjMna/94XIyM1 z8Lwrd4baieLugHTvUFnlKixUIPiJfydEOCefAaApbjGQUi3bM/9ST5y+g0kyKOU f2VUoDi0Vbh4dCOMzVTt9V43GLoWy53e9oe2+sC7fDTCCPswlUgZCYyzY0P0AAjZ tSJ/mmMJNhCGJ9VtA276aVXLZPSAM12gbFEwkK7gs6imykgS83/hsiqNcPEM650j eGI4qMdSs7QHuMI9ir7oytdYRG4Ro5FJD2Fl0HoNN3SY -----END CERTIFICATE-----Generated at Tue Jan 27 19:16:11 2026 by rpki-client