This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/myXtLmtqP7PXx3mua6yxU_rT3zk.roa File: myXtLmtqP7PXx3mua6yxU_rT3zk.roa (raw, json) Hash identifier: SRqtsFHmh8Vf+tkBSPcu8O23M7vxYT4+38iqUOmhk9U= Subject key identifier: 9B:25:ED:2E:6B:6A:3F:B3:D7:C7:79:AE:6B:AC:B1:53:FA:D3:DF:39 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B126A35F2A7CCE9804F60A3DD00D4 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/myXtLmtqP7PXx3mua6yxU_rT3zk.roa Signing time: Fri 02 Jan 2026 06:17:59 +0000 ROA not before: Fri 02 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57912 IP address blocks: 77.76.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:12:6a:35:f2:a7:cc:e9:80:4f:60:a3:dd:00:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b25ed2e6b6a3fb3d7c779ae6bacb153fad3df39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:34:cd:52:16:d4:e8:a0:38:a9:af:0e:e2:8f: 11:c5:49:b7:d0:14:3f:3e:e0:0d:04:c8:18:b8:35: fe:bf:47:93:5b:b9:c1:07:f2:03:60:b3:1b:35:c5: 90:9d:7c:05:9e:dd:00:6f:5e:b7:e9:dc:8a:5a:97: 70:d2:87:54:3e:a1:43:73:27:95:db:a5:b9:af:0d: f8:b6:a2:3d:ed:32:97:36:e7:3c:a3:5f:19:cb:70: 1e:c5:e3:75:b4:68:8f:84:40:d1:0d:72:96:eb:1f: 2c:4a:09:52:e2:29:63:92:46:e5:14:85:50:5e:01: f6:64:8d:e5:72:91:4c:a1:4e:4c:c3:38:04:b1:c6: ed:b0:a0:38:02:98:b0:35:86:43:54:28:53:f0:9f: 9c:6f:46:4e:4b:a6:f9:ed:ad:16:a3:5c:69:a8:11: 28:3d:5b:e1:fa:56:e2:ff:69:54:f5:c1:2b:6e:38: 27:a3:ba:03:7e:8e:42:8f:82:b0:f4:01:cc:fb:18: bc:66:db:db:f7:71:ac:8c:02:fa:b5:d6:07:a1:9b: 26:0f:33:e4:9d:2e:22:39:83:ce:72:5c:ef:1e:02: 0d:4d:8b:4e:39:66:9c:bf:99:7d:72:59:15:f0:ee: 2c:6a:a6:72:a0:b4:0a:b2:37:58:63:1e:52:a5:d0: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:25:ED:2E:6B:6A:3F:B3:D7:C7:79:AE:6B:AC:B1:53:FA:D3:DF:39 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/myXtLmtqP7PXx3mua6yxU_rT3zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.12.0/24 Signature Algorithm: sha256WithRSAEncryption ad:41:86:eb:ec:3d:7a:19:ec:5e:be:c9:41:4d:53:ff:df:e8: 2a:42:eb:88:d5:41:85:71:2b:4a:97:99:36:f0:83:26:07:8e: 33:bd:47:2e:e1:10:e6:b9:7b:7f:77:17:b5:ca:49:cd:52:7d: 8f:55:15:60:e2:e1:ee:f1:55:90:be:85:e1:0a:e6:91:b6:23: 5b:80:f4:01:a6:67:4b:ff:f1:b9:41:77:72:82:86:2a:85:99: 3d:33:a0:d5:70:8b:9b:0a:de:30:df:5a:d5:c0:52:a8:b9:e7: 5f:5c:16:a7:97:d1:b6:2c:8d:4c:30:e8:30:da:53:27:b5:c5: 96:cb:d6:8c:fc:9c:53:7c:ed:21:9b:da:a6:3b:e6:b6:73:29: 2d:cb:4f:0d:bf:cf:f0:18:39:08:38:2a:5b:9a:ed:b5:79:35: 45:0c:31:43:62:96:06:61:a4:9f:2e:44:5b:51:2e:08:21:90: 11:24:97:f3:ff:58:22:73:6c:4f:b6:f4:84:5c:21:35:2a:cc: 06:1f:c6:2e:52:9e:8c:fc:74:c9:f0:01:c6:3b:d4:ac:24:d6: 27:44:0b:e7:5a:88:85:70:b8:d0:3d:61:d7:a7:6d:48:6e:29: bb:e8:6b:8b:8f:3e:0e:3f:42:b5:4b:88:f8:aa:f8:19:2d:e7: 2b:cf:a1:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WxJqNfKnzOmAT2Cj3QDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjI1ZWQyZTZiNmEzZmIzZDdjNzc5YWU2YmFjYjE1M2ZhZDNkZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DTNUhbU6KA4qa8O4o8RxUm30BQ/ PuANBMgYuDX+v0eTW7nBB/IDYLMbNcWQnXwFnt0Ab1636dyKWpdw0odUPqFDcyeV 26W5rw34tqI97TKXNuc8o18Zy3AexeN1tGiPhEDRDXKW6x8sSglS4iljkkblFIVQ XgH2ZI3lcpFMoU5MwzgEscbtsKA4ApiwNYZDVChT8J+cb0ZOS6b57a0Wo1xpqBEo PVvh+lbi/2lU9cErbjgno7oDfo5Cj4Kw9AHM+xi8Ztvb93GsjAL6tdYHoZsmDzPk nS4iOYPOclzvHgINTYtOOWacv5l9clkV8O4saqZyoLQKsjdYYx5SpdDSJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJsl7S5raj+z18d5rmussVP60985MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvbXlYdExtdHFQN1BYeDNtdWE2eXhVX3JUM3prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUwMMA0G CSqGSIb3DQEBCwUAA4IBAQCtQYbr7D16GexevslBTVP/3+gqQuuI1UGFcStKl5k2 8IMmB44zvUcu4RDmuXt/dxe1yknNUn2PVRVg4uHu8VWQvoXhCuaRtiNbgPQBpmdL //G5QXdygoYqhZk9M6DVcIubCt4w31rVwFKouedfXBanl9G2LI1MMOgw2lMntcWW y9aM/JxTfO0hm9qmO+a2cykty08Nv8/wGDkIOCpbmu21eTVFDDFDYpYGYaSfLkRb US4IIZARJJfz/1gic2xPtvSEXCE1KswGH8YuUp6M/HTJ8AHGO9SsJNYnRAvnWoiF cLjQPWHXp21Ibim76GuLjz4OP0K1S4j4qvgZLecrz6Fz -----END CERTIFICATE-----Generated at Fri Jan 23 18:51:27 2026 by rpki-client