This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/oR5Wj0GKTXMBG21ienfrWq8vGSM.roa File: oR5Wj0GKTXMBG21ienfrWq8vGSM.roa (raw, json) Hash identifier: WRzwTNKdQL5QAbJ2ozPhC4DWD0wEitc9Oj75KHVMQ+4= Subject key identifier: A1:1E:56:8F:41:8A:4D:73:01:1B:6D:62:7A:77:EB:5A:AF:2F:19:23 Certificate issuer: /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14 Certificate serial: 019B7FF29D20255DF2920621F8F94E54A53B Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/oR5Wj0GKTXMBG21ienfrWq8vGSM.roa Signing time: Fri 02 Jan 2026 18:22:44 +0000 ROA not before: Fri 02 Jan 2026 18:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216125 IP address blocks: 77.237.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:9d:20:25:5d:f2:92:06:21:f8:f9:4e:54:a5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14 Validity Not Before: Jan 2 18:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a11e568f418a4d73011b6d627a77eb5aaf2f1923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:9b:7b:24:86:0a:a3:f9:ff:f6:da:20:70: 30:8c:b6:3e:f7:e5:39:24:16:69:e0:76:e1:8e:f5: 82:38:29:b1:4d:19:3c:e9:7e:0a:83:b1:1d:15:7a: 2b:f4:cc:92:d7:bb:dc:79:72:b7:4d:ad:86:73:be: 9f:f9:92:45:dc:7b:5b:9c:6c:a4:30:53:b0:44:64: 95:92:bc:5f:5d:68:67:10:c6:81:c8:7a:4c:11:4e: 68:df:3f:86:dc:2e:4a:41:de:63:1d:86:48:84:33: a4:07:6a:23:cb:d0:7d:46:a5:d1:bb:3a:be:85:23: e6:40:b6:a5:f8:01:2f:95:c7:66:34:fa:2a:76:d2: 2d:60:1e:b4:18:aa:96:2b:a4:c7:2b:73:48:63:e2: 9a:52:fd:fa:98:9f:d9:72:ca:eb:00:3e:fc:35:46: 43:4e:f8:b3:d8:e8:51:71:2f:1e:44:e1:cb:af:eb: 07:41:79:0d:e9:eb:4a:cf:94:9a:49:57:1c:f6:fa: b7:f6:cc:f6:fc:8a:1d:51:e9:64:b4:ad:aa:df:39: 9e:1f:73:6b:a3:73:7a:02:1e:19:83:18:67:b8:22: cd:e6:49:06:eb:3c:18:7d:7c:90:18:cd:ce:3b:49: 19:d2:73:25:e6:3f:33:d0:fe:1d:25:7b:7b:53:80: 1e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1E:56:8F:41:8A:4D:73:01:1B:6D:62:7A:77:EB:5A:AF:2F:19:23 X509v3 Authority Key Identifier: keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/oR5Wj0GKTXMBG21ienfrWq8vGSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.237.64.0/24 Signature Algorithm: sha256WithRSAEncryption 59:86:a7:90:66:20:83:2a:bd:31:5f:e0:e4:28:8c:03:d6:29: 95:6f:01:1f:e8:22:c6:3a:12:c3:f5:01:a7:05:c4:d9:b0:aa: 60:9c:23:cc:6a:b2:40:38:6e:4b:3b:92:b0:a8:23:f8:57:4b: 07:8e:c3:82:d4:8e:25:07:fe:cc:f7:fe:e4:e9:5d:58:59:65: 0f:ab:c1:12:6d:37:b4:32:d4:37:dc:4d:72:46:7a:18:9d:e6: 95:fa:4a:c8:b7:03:0f:d8:74:c6:ab:eb:3c:9b:bd:2c:1a:bd: 83:33:f2:ed:a6:4a:30:8f:e2:3e:d8:d4:e5:ce:ad:37:e5:d4: 02:ea:62:7d:6d:e0:3d:05:46:ee:c0:f2:36:1f:6b:6c:a2:bd: ac:e9:e1:35:5e:14:9f:18:c9:eb:0e:df:48:5e:79:b0:de:cb: de:07:2e:e5:b1:e4:bd:e3:00:f7:b7:3c:b7:3a:87:50:bb:77: 37:7b:df:cc:7e:e8:a4:cb:07:89:21:fe:c6:93:24:aa:63:3e: 72:41:0b:0e:2b:48:1f:f0:67:7b:57:9f:07:69:e1:31:46:39: 8d:4e:90:da:5f:00:76:9d:c6:8c:6a:b9:3b:32:2d:17:80:8d: 5f:af:b1:0d:cc:d9:c9:7f:52:85:94:dd:d7:ba:a0:fc:49:2b: 9a:f5:ef:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8p0gJV3ykgYh+PlOVKU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YWZkY2Q1ZTk3YWMxYzEwMjQ3OWM5NTRkNWY5MjJiMTI2 Y2JjMTQwHhcNMjYwMTAyMTgyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTFlNTY4ZjQxOGE0ZDczMDExYjZkNjI3YTc3ZWI1YWFmMmYxOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxCbeySGCqP5//baIHAwjLY+9+U5 JBZp4HbhjvWCOCmxTRk86X4Kg7EdFXor9MyS17vceXK3Ta2Gc76f+ZJF3HtbnGyk MFOwRGSVkrxfXWhnEMaByHpMEU5o3z+G3C5KQd5jHYZIhDOkB2ojy9B9RqXRuzq+ hSPmQLal+AEvlcdmNPoqdtItYB60GKqWK6THK3NIY+KaUv36mJ/ZcsrrAD78NUZD Tviz2OhRcS8eROHLr+sHQXkN6etKz5SaSVcc9vq39sz2/IodUelktK2q3zmeH3Nr o3N6Ah4ZgxhnuCLN5kkG6zwYfXyQGM3OO0kZ0nMl5j8z0P4dJXt7U4Ae6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKEeVo9Bik1zARttYnp361qvLxkjMB8GA1UdIwQY MBaAFAev3NXpesHBAkeclU1fkisSbLwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEt ZmY2ODUxNzc3MGU0LzEvb1I1V2owR0tUWE1CRzIxaWVuZnJXcTh2R1NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEtZmY2ODUxNzc3MGU0 LzEvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATe1AMA0G CSqGSIb3DQEBCwUAA4IBAQBZhqeQZiCDKr0xX+DkKIwD1imVbwEf6CLGOhLD9QGn BcTZsKpgnCPMarJAOG5LO5KwqCP4V0sHjsOC1I4lB/7M9/7k6V1YWWUPq8ESbTe0 MtQ33E1yRnoYneaV+krItwMP2HTGq+s8m70sGr2DM/Ltpkowj+I+2NTlzq035dQC 6mJ9beA9BUbuwPI2H2tsor2s6eE1XhSfGMnrDt9IXnmw3sveBy7lseS94wD3tzy3 OodQu3c3e9/MfuikyweJIf7GkySqYz5yQQsOK0gf8Gd7V58HaeExRjmNTpDaXwB2 ncaMark7Mi0XgI1fr7ENzNnJf1KFlN3XuqD8SSua9e8K -----END CERTIFICATE-----Generated at Mon Jan 12 03:12:43 2026 by rpki-client