This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/nIm8PpBVGgztWV3R6eaqer3EUVM.roa File: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (raw, json) Hash identifier: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs= Subject key identifier: 9C:89:BC:3E:90:55:1A:0C:ED:59:5D:D1:E9:E6:AA:7A:BD:C4:51:53 Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C8056478B771BC5610C8A29C7984DBC Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/nIm8PpBVGgztWV3R6eaqer3EUVM.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201450 IP address blocks: 77.111.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:56:47:8b:77:1b:c5:61:0c:8a:29:c7:98:4d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c89bc3e90551a0ced595dd1e9e6aa7abdc45153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:9b:de:77:50:c1:5a:4c:e7:73:c1:d4:dc: 99:60:2c:1d:7d:02:13:01:7f:0c:e7:48:aa:52:60: c4:30:20:e0:9b:32:16:9b:e8:25:ea:88:13:df:cb: 60:49:69:9f:10:cc:af:ff:e2:d4:2b:43:38:6c:e3: 1f:7d:98:e9:8f:03:a4:18:10:ae:72:92:6f:15:c5: 3d:56:6e:28:cf:dd:3c:dc:44:ef:af:64:00:9c:18: 89:f8:13:36:85:19:e4:44:68:ce:ac:3c:38:8d:95: 64:ac:c6:03:df:b8:e9:8a:cb:2f:0d:cf:56:19:88: 41:bc:93:3c:2c:f1:b3:59:d7:6f:76:f9:df:91:03: 72:12:22:a3:ff:5a:d9:98:04:1a:66:ff:3e:1b:1f: 01:b3:9c:c2:ff:90:24:47:b8:2f:e7:d1:5f:74:24: 17:80:59:22:c1:30:cd:62:7b:43:f3:ae:a5:bf:31: 3b:ae:48:f9:3b:7a:7c:af:c3:fe:f7:4d:e8:bc:6d: bd:f0:c3:d6:e0:ff:68:90:8b:44:dc:bf:94:ca:df: 76:45:3e:61:80:2a:e1:21:42:9b:9c:84:59:e8:b7: ed:6b:0a:9e:b0:d0:a2:05:d7:56:a4:1e:fd:46:63: 4b:bc:d6:ce:04:14:88:f9:14:36:b6:85:b9:e3:9d: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:89:BC:3E:90:55:1A:0C:ED:59:5D:D1:E9:E6:AA:7A:BD:C4:51:53 X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/nIm8PpBVGgztWV3R6eaqer3EUVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.126.0/24 Signature Algorithm: sha256WithRSAEncryption c2:89:5c:60:2e:00:56:22:d8:95:c1:ff:da:27:1f:08:16:35: e7:79:95:57:1e:70:f8:73:e8:75:36:59:78:d4:08:9a:3f:a5: f4:dd:68:77:7a:e4:95:aa:77:76:c1:93:60:c0:1f:d7:96:73: 21:33:3d:fb:3f:1f:9c:c8:6c:5e:72:69:97:0f:99:25:14:e3: 37:66:b1:d5:76:75:26:73:a9:86:7d:da:68:5b:51:3f:db:dc: 58:fe:15:35:db:ec:a3:92:ff:32:f2:2c:fe:f7:a3:22:a8:20: ae:e5:7d:8e:bb:91:01:0e:55:39:d4:ce:eb:19:f8:30:29:34: 52:e9:e8:5b:03:6d:72:b1:27:19:bf:6a:d8:ce:01:25:3d:2f: fa:1c:9b:d3:3b:28:d1:8c:56:2e:fd:35:ea:04:7a:82:c3:d7: 38:00:48:00:16:72:4a:f9:ac:73:0f:d1:61:d7:85:8a:77:c6: 0a:dd:c8:e5:5b:59:36:0b:76:0f:cd:74:a8:c1:87:54:ee:d5: 0e:4b:b9:d6:55:61:18:7d:8c:60:5e:70:d0:a6:eb:ce:b1:d0: 16:59:dd:9e:f0:a2:ab:17:00:33:3a:18:0b:a0:b0:bc:c5:31: 4f:e0:2d:15:0e:71:0f:22:f7:ba:25:7a:cf:ec:db:0b:5f:21: 49:8c:a1:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gFZHi3cbxWEMiinHmE28MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yzg5YmMzZTkwNTUxYTBjZWQ1OTVkZDFlOWU2YWE3YWJkYzQ1MTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte6b3ndQwVpM53PB1NyZYCwdfQIT AX8M50iqUmDEMCDgmzIWm+gl6ogT38tgSWmfEMyv/+LUK0M4bOMffZjpjwOkGBCu cpJvFcU9Vm4oz9083ETvr2QAnBiJ+BM2hRnkRGjOrDw4jZVkrMYD37jpissvDc9W GYhBvJM8LPGzWddvdvnfkQNyEiKj/1rZmAQaZv8+Gx8Bs5zC/5AkR7gv59FfdCQX gFkiwTDNYntD866lvzE7rkj5O3p8r8P+903ovG298MPW4P9okItE3L+Uyt92RT5h gCrhIUKbnIRZ6LftawqesNCiBddWpB79RmNLvNbOBBSI+RQ2toW54512ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJyJvD6QVRoM7Vld0enmqnq9xFFTMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvbkltOFBwQlZHZ3p0V1YzUjZlYXFlcjNFVVZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW9+MA0G CSqGSIb3DQEBCwUAA4IBAQDCiVxgLgBWItiVwf/aJx8IFjXneZVXHnD4c+h1Nll4 1AiaP6X03Wh3euSVqnd2wZNgwB/XlnMhMz37Px+cyGxecmmXD5klFOM3ZrHVdnUm c6mGfdpoW1E/29xY/hU12+yjkv8y8iz+96MiqCCu5X2Ou5EBDlU51M7rGfgwKTRS 6ehbA21ysScZv2rYzgElPS/6HJvTOyjRjFYu/TXqBHqCw9c4AEgAFnJK+axzD9Fh 14WKd8YK3cjlW1k2C3YPzXSowYdU7tUOS7nWVWEYfYxgXnDQpuvOsdAWWd2e8KKr FwAzOhgLoLC8xTFP4C0VDnEPIve6JXrP7NsLXyFJjKFa -----END CERTIFICATE-----Generated at Wed Jan 21 08:18:42 2026 by rpki-client