This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7jf8I0eBdO6b1-zkApo8w-11x1A.roa File: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (raw, json) Hash identifier: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798= Subject key identifier: EE:37:FC:23:47:81:74:EE:9B:D7:EC:E4:02:9A:3C:C3:ED:75:C7:50 Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019B7C80730765A96FF6ABBEF48604DF7D5F Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7jf8I0eBdO6b1-zkApo8w-11x1A.roa Signing time: Fri 02 Jan 2026 02:19:11 +0000 ROA not before: Fri 02 Jan 2026 02:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 77.74.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:73:07:65:a9:6f:f6:ab:be:f4:86:04:df:7d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jan 2 02:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee37fc23478174ee9bd7ece4029a3cc3ed75c750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:55:8a:b2:c5:73:48:2f:5b:c6:4c:4e:a5:d1: be:75:b7:4e:9f:ee:1a:f7:8d:c9:bf:09:94:30:f8: fa:1a:9d:2f:e4:8d:fd:41:e8:cb:e6:29:5f:86:5d: 1a:c7:ef:3a:b1:26:d0:43:3d:68:ea:75:9c:31:dc: 5d:8a:ca:48:92:6b:e9:ba:28:57:b2:44:20:fe:27: 01:3b:a8:b4:93:35:2c:be:6f:82:20:55:48:cd:61: 77:a7:a6:83:56:f9:a6:b5:79:3c:97:f3:d5:7d:66: 0a:39:74:4c:e2:d5:43:b0:d7:4e:fb:59:2e:2d:e0: 1d:77:3e:89:cc:e0:37:b1:ab:79:a9:4d:d5:9f:fd: 20:d0:06:26:2a:fb:cf:37:e4:c0:a4:54:61:c4:b2: 18:f5:e2:1d:fc:25:6d:6b:04:2f:12:7a:3c:ac:5c: 16:88:41:a7:83:52:88:97:1e:1a:f5:fa:75:2e:f8: af:64:1f:22:13:ea:5d:00:f8:b3:0b:bd:c9:14:24: 7f:1a:03:50:f1:8c:01:2d:27:c0:cf:26:eb:10:16: 8f:bb:ca:24:53:fa:32:9b:f8:b8:3b:f0:8f:d1:97: 5e:05:53:61:40:81:db:e5:71:80:20:64:40:b5:86: 08:49:6e:c0:57:fa:9a:1e:41:ac:f2:22:4c:fa:77: 35:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:37:FC:23:47:81:74:EE:9B:D7:EC:E4:02:9A:3C:C3:ED:75:C7:50 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7jf8I0eBdO6b1-zkApo8w-11x1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.74.225.0/24 Signature Algorithm: sha256WithRSAEncryption 46:94:fd:d3:ef:84:af:c7:64:95:fd:0b:f2:15:18:e6:87:ca: 83:32:a3:1a:83:18:8b:c0:8b:ce:3e:4f:a4:9c:19:c8:54:21: 81:c6:06:b3:1e:22:54:98:34:b0:c5:dc:e6:54:0a:09:31:2d: 0a:26:1d:5b:b2:26:e7:6b:9f:ec:31:47:91:0f:d0:aa:c0:d9: 5e:02:1d:3f:4c:60:5f:8e:2a:08:47:36:9b:dc:2e:b2:71:55: f7:c2:2b:1a:ed:0a:75:80:4b:c2:95:ba:0a:06:b7:e6:8d:ec: f2:72:28:97:99:38:0f:3c:08:91:c7:d9:97:f1:6e:e1:0e:0e: 32:53:ce:8c:05:39:4f:63:a5:89:dc:c6:0d:f1:b2:2b:bc:fc: 44:40:6d:b1:f2:f3:62:1d:2c:ec:c5:a3:70:9f:cb:b8:6b:dd: 7b:34:8a:29:51:7a:8e:83:f9:ba:6c:73:d8:26:0b:6f:69:86: e5:d8:8a:76:0e:c0:82:13:d0:f8:70:dd:63:d3:f6:58:85:0d: ec:58:9a:95:63:48:fb:b5:00:7d:32:3a:cb:e8:6a:57:b6:c5: f1:a8:7e:80:65:78:74:df:50:3f:d9:3d:a7:0b:90:20:0b:62: 45:a7:cd:dd:10:f5:ea:29:c2:b7:c8:14:c3:d6:4c:52:5a:9a: 19:05:28:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHMHZalv9qu+9IYE331fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwMTAyMDIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTM3ZmMyMzQ3ODE3NGVlOWJkN2VjZTQwMjlhM2NjM2VkNzVjNzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslWKssVzSC9bxkxOpdG+dbdOn+4a 943JvwmUMPj6Gp0v5I39QejL5ilfhl0ax+86sSbQQz1o6nWcMdxdispIkmvpuihX skQg/icBO6i0kzUsvm+CIFVIzWF3p6aDVvmmtXk8l/PVfWYKOXRM4tVDsNdO+1ku LeAddz6JzOA3sat5qU3Vn/0g0AYmKvvPN+TApFRhxLIY9eId/CVtawQvEno8rFwW iEGng1KIlx4a9fp1LvivZB8iE+pdAPizC73JFCR/GgNQ8YwBLSfAzybrEBaPu8ok U/oym/i4O/CP0ZdeBVNhQIHb5XGAIGRAtYYISW7AV/qaHkGs8iJM+nc1CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO43/CNHgXTum9fs5AKaPMPtdcdQMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvN2pmOEkwZUJkTzZiMS16a0Fwbzh3LTExeDFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUrhMA0G CSqGSIb3DQEBCwUAA4IBAQBGlP3T74Svx2SV/QvyFRjmh8qDMqMagxiLwIvOPk+k nBnIVCGBxgazHiJUmDSwxdzmVAoJMS0KJh1bsibna5/sMUeRD9CqwNleAh0/TGBf jioIRzab3C6ycVX3wisa7Qp1gEvClboKBrfmjezyciiXmTgPPAiRx9mX8W7hDg4y U86MBTlPY6WJ3MYN8bIrvPxEQG2x8vNiHSzsxaNwn8u4a917NIopUXqOg/m6bHPY JgtvaYbl2Ip2DsCCE9D4cN1j0/ZYhQ3sWJqVY0j7tQB9MjrL6GpXtsXxqH6AZXh0 31A/2T2nC5AgC2JFp83dEPXqKcK3yBTD1kxSWpoZBSj9 -----END CERTIFICATE-----Generated at Wed Jan 21 19:03:10 2026 by rpki-client