This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/CIJFxac5vdItrVRYlUcRRLbMyNY.roa File: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (raw, json) Hash identifier: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc= Subject key identifier: 08:82:45:C5:A7:39:BD:D2:2D:AD:54:58:95:47:11:44:B6:CC:C8:D6 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C8056CB6143259C65B82D812ACE3A32 Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/CIJFxac5vdItrVRYlUcRRLbMyNY.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206814 IP address blocks: 77.111.124.0/24 maxlen: 24 77.111.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:56:cb:61:43:25:9c:65:b8:2d:81:2a:ce:3a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=088245c5a739bdd22dad545895471144b6ccc8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:26:09:77:9f:7a:04:8c:43:20:02:07:0b: 13:25:27:af:e3:20:bb:96:2b:46:4e:0f:79:ff:70: 88:b2:60:31:ac:ec:ea:b1:45:a9:01:82:84:94:30: e2:5e:94:4d:89:f9:1f:40:23:99:d5:8c:9c:73:43: fb:98:92:49:29:c7:3f:48:9b:d7:a0:e5:48:1e:97: 85:7d:a1:5f:63:8a:2e:e5:e9:79:da:ed:de:f2:5c: c9:e9:05:41:b6:c8:26:8f:55:95:a5:cd:34:53:cb: f1:df:e4:d1:0f:e9:96:56:43:30:c0:35:a9:d9:77: 20:05:97:5c:a5:4d:fd:e7:54:3d:ae:00:da:e3:a2: 24:0b:2b:7a:69:56:fb:7a:cb:34:24:15:30:8b:13: 42:7f:48:3b:32:57:75:79:69:21:4c:47:9d:93:58: 0b:7d:79:71:fe:13:d3:7c:b1:5b:96:78:47:db:ac: 7c:7f:59:b1:bd:5f:1b:e5:b4:4b:1c:e0:98:52:79: a9:f4:0b:de:61:d2:32:e9:06:56:a4:df:05:e6:1a: d5:bb:a1:ea:81:bf:2e:16:79:bf:fe:78:ff:da:c7: 8b:c5:2c:6c:3c:f5:3e:78:68:bf:62:e2:0f:dc:8b: 91:1e:44:7e:03:6b:96:38:3d:92:da:f7:91:dd:7b: 23:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:82:45:C5:A7:39:BD:D2:2D:AD:54:58:95:47:11:44:B6:CC:C8:D6 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/CIJFxac5vdItrVRYlUcRRLbMyNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.124.0/23 Signature Algorithm: sha256WithRSAEncryption 69:57:f7:11:f4:9a:81:aa:6b:b6:4b:19:07:30:d7:7b:15:a5: 24:d7:6d:03:4c:a6:c7:21:f1:ff:a3:5c:a7:dc:cf:3f:9b:b6: 92:61:30:45:d7:00:90:28:eb:57:f7:03:f0:93:06:85:06:dc: f5:12:91:8f:c0:fc:59:3c:be:c5:ee:b4:7c:fb:72:a8:41:0f: bc:01:58:15:22:b4:c7:43:ca:92:ba:e7:fb:18:49:fc:88:66: f7:1e:9e:95:04:d8:48:1a:8c:05:10:a4:6c:4e:19:b0:a6:d9: 0e:2e:ae:22:85:17:f6:77:23:6d:c1:0e:1e:27:81:73:e2:4e: bd:c8:92:8b:b6:27:ce:29:f3:38:24:15:da:82:32:7e:df:b7: 81:df:04:a9:74:08:09:ff:76:fc:33:52:4a:36:c9:4c:24:1a: 59:0f:b7:cd:80:61:97:6f:31:92:2a:17:d9:c1:3e:e3:91:71: c0:53:49:12:48:da:85:30:e5:b2:b2:46:d2:03:25:f2:f0:a4: c4:2f:80:56:e5:10:ad:aa:33:47:2a:39:af:3a:0d:2c:77:dd: 87:76:67:6d:ab:59:6c:93:3a:ac:da:84:11:87:a4:ea:cd:16: b4:68:77:cd:cd:90:f8:ca:cf:4e:16:26:5f:79:39:66:2c:15: e0:01:19:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFbLYUMlnGW4LYEqzjoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODgyNDVjNWE3MzliZGQyMmRhZDU0NTg5NTQ3MTE0NGI2Y2NjOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpImCXefegSMQyACBwsTJSev4yC7 litGTg95/3CIsmAxrOzqsUWpAYKElDDiXpRNifkfQCOZ1Yycc0P7mJJJKcc/SJvX oOVIHpeFfaFfY4ou5el52u3e8lzJ6QVBtsgmj1WVpc00U8vx3+TRD+mWVkMwwDWp 2XcgBZdcpU3951Q9rgDa46IkCyt6aVb7ess0JBUwixNCf0g7Mld1eWkhTEedk1gL fXlx/hPTfLFblnhH26x8f1mxvV8b5bRLHOCYUnmp9AveYdIy6QZWpN8F5hrVu6Hq gb8uFnm//nj/2seLxSxsPPU+eGi/YuIP3IuRHkR+A2uWOD2S2veR3XsjPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiCRcWnOb3SLa1UWJVHEUS2zMjWMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvQ0lKRnhhYzV2ZEl0clZSWWxVY1JSTGJNeU5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTW98MA0G CSqGSIb3DQEBCwUAA4IBAQBpV/cR9JqBqmu2SxkHMNd7FaUk120DTKbHIfH/o1yn 3M8/m7aSYTBF1wCQKOtX9wPwkwaFBtz1EpGPwPxZPL7F7rR8+3KoQQ+8AVgVIrTH Q8qSuuf7GEn8iGb3Hp6VBNhIGowFEKRsThmwptkOLq4ihRf2dyNtwQ4eJ4Fz4k69 yJKLtifOKfM4JBXagjJ+37eB3wSpdAgJ/3b8M1JKNslMJBpZD7fNgGGXbzGSKhfZ wT7jkXHAU0kSSNqFMOWyskbSAyXy8KTEL4BW5RCtqjNHKjmvOg0sd92Hdmdtq1ls kzqs2oQRh6TqzRa0aHfNzZD4ys9OFiZfeTlmLBXgARmA -----END CERTIFICATE-----Generated at Wed Jan 21 08:19:11 2026 by rpki-client