This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/lbA6fkEyToINYPSmlJ-B17hV6T8.roa File: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (raw, json) Hash identifier: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U= Subject key identifier: 95:B0:3A:7E:41:32:4E:82:0D:60:F4:A6:94:9F:81:D7:B8:55:E9:3F Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Certificate serial: 019B77C697D6FA7D2E93ED493AC9F86B29E2 Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/lbA6fkEyToINYPSmlJ-B17hV6T8.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 77.232.128.0/22 maxlen: 22 77.232.128.0/24 maxlen: 24 77.232.129.0/24 maxlen: 24 77.232.130.0/24 maxlen: 24 77.232.131.0/24 maxlen: 24 77.232.132.0/22 maxlen: 22 77.232.132.0/24 maxlen: 24 77.232.133.0/24 maxlen: 24 77.232.134.0/24 maxlen: 24 77.232.135.0/24 maxlen: 24 77.232.136.0/22 maxlen: 22 77.232.136.0/24 maxlen: 24 77.232.137.0/24 maxlen: 24 77.232.138.0/24 maxlen: 24 77.232.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:97:d6:fa:7d:2e:93:ed:49:3a:c9:f8:6b:29:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95b03a7e41324e820d60f4a6949f81d7b855e93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a8:54:cd:e7:b7:72:c8:5d:56:e6:72:3d:4e: c3:5c:7f:f1:81:1a:27:5f:7e:d8:f7:96:05:24:6e: 83:0d:51:57:84:cf:e2:5f:12:97:38:3f:57:be:6a: 1a:63:dc:9e:27:ad:66:c0:fd:e4:33:ce:a1:af:68: d1:1e:dc:1f:f7:a7:2f:ad:21:b1:12:b6:10:2e:bd: ab:ff:da:cf:9f:ac:f0:86:bc:c7:0e:b8:8c:3b:cc: d6:1c:c6:2e:8d:6d:b8:f9:79:2e:81:80:d2:4d:1b: 01:d4:3c:55:75:32:fe:2d:dd:47:12:c9:50:05:3b: 94:d5:a6:0f:63:90:54:56:18:fc:a8:13:5b:c5:52: 95:0d:b8:76:79:02:12:bb:5d:da:c8:9e:92:f3:ed: a5:1c:2e:29:fb:9e:4d:ad:c7:42:15:d7:22:eb:72: 3f:1a:41:da:0e:77:b5:3b:31:4e:fe:3f:64:9b:19: b4:cd:be:6c:54:61:0f:9a:10:84:5b:19:25:e7:cb: 05:21:17:a4:8d:92:a5:1d:36:25:b4:09:6d:be:00: 3b:6e:28:2f:37:d6:e7:59:27:aa:6c:85:d9:49:b5: e5:23:01:f6:a4:3e:46:2f:cb:7c:7d:b9:f1:d9:20: 67:57:45:eb:8b:4c:c2:c1:59:45:5d:24:59:9f:2b: 4b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B0:3A:7E:41:32:4E:82:0D:60:F4:A6:94:9F:81:D7:B8:55:E9:3F X509v3 Authority Key Identifier: keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/lbA6fkEyToINYPSmlJ-B17hV6T8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.232.128.0-77.232.139.255 Signature Algorithm: sha256WithRSAEncryption 5a:d3:43:d9:cb:49:2c:a0:5d:ec:3c:5e:2d:47:7a:69:a1:8b: 80:62:89:8c:d8:a9:ac:62:30:d3:9f:94:8f:8c:7a:26:a7:39: 6e:ce:69:52:32:ea:84:a8:c1:33:3c:2a:ae:c1:3c:91:b5:d3: b6:6a:8f:43:cb:09:c7:aa:39:1a:7c:ef:4a:62:af:90:9d:12: 2b:63:8b:95:a9:f4:ef:6c:3b:fd:bb:47:fd:2a:92:6b:32:8a: e9:c1:02:10:63:f9:b8:7a:e5:b6:fd:df:33:a2:f0:30:e5:db: 37:b2:09:ac:c8:e8:4e:3d:4e:bb:58:98:2f:3e:29:9d:2c:63: 2a:b8:30:f5:9e:d1:3e:32:12:9d:22:10:13:06:aa:cc:3a:27: 59:17:dd:1e:59:7b:6e:bb:c5:a6:0a:00:60:40:27:ba:d2:57: 82:d0:9a:32:9c:64:14:1f:21:f1:34:aa:bb:98:5d:dc:6c:29: e0:ee:d4:c7:e9:f8:6d:94:34:fd:cd:49:b8:35:75:2f:64:35: 60:96:08:c2:d3:94:25:a7:48:16:9c:f5:6b:92:8c:08:49:fd: 72:a4:7e:3a:3d:4f:23:1c:f5:b3:82:be:34:2e:02:27:a9:57: 56:98:ba:1b:39:dd:68:3b:18:50:02:c8:38:08:fc:32:7a:db: 08:51:ac:9b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpfW+n0uk+1JOsn4ayniMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDRlNjQxZTU1YTQ4YWVlMDE0MWUyYzBkMjYyMjcxMDJj YWE2ZDQwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWIwM2E3ZTQxMzI0ZTgyMGQ2MGY0YTY5NDlmODFkN2I4NTVlOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKhUzee3cshdVuZyPU7DXH/xgRon X37Y95YFJG6DDVFXhM/iXxKXOD9XvmoaY9yeJ61mwP3kM86hr2jRHtwf96cvrSGx ErYQLr2r/9rPn6zwhrzHDriMO8zWHMYujW24+XkugYDSTRsB1DxVdTL+Ld1HEslQ BTuU1aYPY5BUVhj8qBNbxVKVDbh2eQISu13ayJ6S8+2lHC4p+55NrcdCFdci63I/ GkHaDne1OzFO/j9kmxm0zb5sVGEPmhCEWxkl58sFIRekjZKlHTYltAltvgA7bigv N9bnWSeqbIXZSbXlIwH2pD5GL8t8fbnx2SBnV0Xri0zCwVlFXSRZnytL2wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJWwOn5BMk6CDWD0ppSfgde4Vek/MB8GA1UdIwQY MBaAFNUE5kHlWkiu4BQeLA0mInECyqbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEt NmJmZmNiN2MwZjBhLzEvbGJBNmZrRXlUb0lOWVBTbWxKLUIxN2hWNlQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEtNmJmZmNiN2MwZjBh LzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAdN6IAD BAJN6IgwDQYJKoZIhvcNAQELBQADggEBAFrTQ9nLSSygXew8Xi1Hemmhi4BiiYzY qaxiMNOflI+MeianOW7OaVIy6oSowTM8Kq7BPJG107Zqj0PLCceqORp870pir5Cd Eitji5Wp9O9sO/27R/0qkmsyiunBAhBj+bh65bb93zOi8DDl2zeyCazI6E49TrtY mC8+KZ0sYyq4MPWe0T4yEp0iEBMGqsw6J1kX3R5Ze267xaYKAGBAJ7rSV4LQmjKc ZBQfIfE0qruYXdxsKeDu1Mfp+G2UNP3NSbg1dS9kNWCWCMLTlCWnSBac9WuSjAhJ /XKkfjo9TyMc9bOCvjQuAiepV1aYuhs53Wg7GFACyDgI/DJ62whRrJs= -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:34 2026 by rpki-client