This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/C77YJP8fJa8-Zz4rlDlE0c9emSo.roa File: C77YJP8fJa8-Zz4rlDlE0c9emSo.roa (raw, json) Hash identifier: DN6PsoZ+s4zlPu3wgZ94PNHVaR06pVMEb9575uK0WK4= Subject key identifier: 0B:BE:D8:24:FF:1F:25:AF:3E:67:3E:2B:94:39:44:D1:CF:5E:99:2A Certificate issuer: /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886 Certificate serial: 019B76EB366BD35D311140C242392744135D Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/C77YJP8fJa8-Zz4rlDlE0c9emSo.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15663 IP address blocks: 185.203.76.0/22 maxlen: 22 185.203.79.0/24 maxlen: 24 212.39.0.0/19 maxlen: 24 212.39.0.0/20 maxlen: 20 212.39.16.0/20 maxlen: 20 2a00:aa00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:36:6b:d3:5d:31:11:40:c2:42:39:27:44:13:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886 Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bbed824ff1f25af3e673e2b943944d1cf5e992a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:b6:18:f2:c1:38:65:e7:f9:c3:5b:c3:9d: 75:96:ca:19:be:9b:8f:03:5d:cd:f3:13:33:aa:e9: dd:c3:54:11:81:b0:13:a9:e9:cc:74:c1:e2:b5:0c: e3:e8:6b:d0:2e:0f:d3:70:11:9f:f5:b6:fc:5d:ef: 71:84:ed:9a:71:fe:af:68:0f:1e:29:a5:55:fc:ce: 36:ef:fb:04:ea:a7:58:72:d3:b5:e3:0f:d4:75:5f: 76:de:e2:48:fb:25:7c:09:8a:f7:ea:ae:cc:62:72: ee:80:df:46:25:25:11:a3:7a:18:6a:29:8c:15:e6: 99:31:32:af:d5:2a:99:72:aa:2a:d2:99:7a:33:18: f4:07:7a:d4:6d:bb:26:66:a4:41:4c:31:a1:39:bb: 18:10:73:98:6c:32:c5:54:83:0a:c8:c7:6b:cd:d6: 19:cb:09:d2:fb:af:2e:8b:b1:f4:d5:ad:88:28:74: 33:b3:a3:a8:e0:76:de:81:ca:e0:90:9e:62:cf:80: 33:68:28:a0:e9:42:20:b2:c0:cf:5b:f0:61:78:0b: 42:f5:03:f2:d0:43:b0:ea:9f:f1:b7:d0:bf:92:09: 84:74:37:03:dc:3f:33:9e:79:c0:de:08:7d:fe:8e: ce:8c:e8:d5:ea:f0:8a:45:a3:93:fc:71:4d:8d:0a: 48:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BE:D8:24:FF:1F:25:AF:3E:67:3E:2B:94:39:44:D1:CF:5E:99:2A X509v3 Authority Key Identifier: keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/C77YJP8fJa8-Zz4rlDlE0c9emSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.76.0/22 212.39.0.0/19 IPv6: 2a00:aa00::/32 Signature Algorithm: sha256WithRSAEncryption 16:a4:22:e4:6e:4d:a3:c8:4b:84:d4:79:19:42:1a:39:b1:ae: 74:19:fc:c4:0b:82:08:c8:66:14:2a:a5:4e:8e:c0:c6:8f:be: 82:2c:52:3c:f0:c8:2b:17:de:c8:19:cf:bd:42:14:7a:cc:12: 80:9a:2b:b6:30:58:86:67:3a:5a:77:a0:90:e5:32:26:01:d2: 28:29:52:10:66:2d:32:91:b3:b4:d1:23:ad:dd:50:4c:f5:7b: 44:4c:1b:2b:b0:e8:04:7a:f4:17:0c:ba:86:e5:c7:3c:59:3a: c8:2d:e9:9a:af:7e:40:df:ef:ab:aa:14:23:a2:67:a3:71:67: 74:94:9b:8b:eb:dd:d7:f2:bb:19:8f:2d:2b:47:9a:a2:d9:7b: 55:fc:cc:73:b4:51:43:e9:ac:f2:3e:35:8e:47:be:95:32:48: a1:d3:cb:1c:0e:36:2b:31:ae:2e:f5:7a:25:b1:86:0a:fe:a5: ec:f5:7b:fc:c9:eb:42:4d:88:a0:f7:0c:08:42:5c:16:84:5b: 1d:75:4f:f9:89:85:36:4f:9f:ed:bb:17:19:5a:7c:e3:65:e5: f8:1f:db:2e:e5:d9:c2:a4:54:05:e1:cc:b1:f8:a3:65:3d:dd: 3a:d2:aa:f3:8d:7a:bf:ac:2f:1d:b7:d3:37:e4:56:ff:5b:87: 97:3a:80:03 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26zZr010xEUDCQjknRBNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZWI0NDI0YWJkODZkNmVmNDhkYjllNzY0NmY1MzljNmQx MGM4ODYwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmJlZDgyNGZmMWYyNWFmM2U2NzNlMmI5NDM5NDRkMWNmNWU5OTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+q2GPLBOGXn+cNbw511lsoZvpuP A13N8xMzqundw1QRgbATqenMdMHitQzj6GvQLg/TcBGf9bb8Xe9xhO2acf6vaA8e KaVV/M427/sE6qdYctO14w/UdV923uJI+yV8CYr36q7MYnLugN9GJSURo3oYaimM FeaZMTKv1SqZcqoq0pl6Mxj0B3rUbbsmZqRBTDGhObsYEHOYbDLFVIMKyMdrzdYZ ywnS+68ui7H01a2IKHQzs6Oo4HbegcrgkJ5iz4AzaCig6UIgssDPW/BheAtC9QPy 0EOw6p/xt9C/kgmEdDcD3D8znnnA3gh9/o7OjOjV6vCKRaOT/HFNjQpIuwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAu+2CT/HyWvPmc+K5Q5RNHPXpkqMB8GA1UdIwQY MBaAFO3rRCSr2G1u9I2552RvU5xtEMiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi81MWIzMWEtN2U1MC00YTFlLTlmNjkt MTZkM2EwZWE0OWFlLzEvQzc3WUpQOGZKYTgtWno0cmxEbEUwYzllbVNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi81MWIzMWEtN2U1MC00YTFlLTlmNjktMTZkM2EwZWE0OWFl LzEvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuctMAwQF 1CcAMA0EAgACMAcDBQAqAKoAMA0GCSqGSIb3DQEBCwUAA4IBAQAWpCLkbk2jyEuE 1HkZQho5sa50GfzEC4IIyGYUKqVOjsDGj76CLFI88MgrF97IGc+9QhR6zBKAmiu2 MFiGZzpad6CQ5TImAdIoKVIQZi0ykbO00SOt3VBM9XtETBsrsOgEevQXDLqG5cc8 WTrILemar35A3++rqhQjomejcWd0lJuL693X8rsZjy0rR5qi2XtV/MxztFFD6azy PjWOR76VMkih08scDjYrMa4u9XolsYYK/qXs9Xv8yetCTYig9wwIQlwWhFsddU/5 iYU2T5/tuxcZWnzjZeX4H9su5dnCpFQF4cyx+KNlPd060qrzjXq/rC8dt9M35Fb/ W4eXOoAD -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:26 2026 by rpki-client