This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BOk1_5TD1r7mEldD9yH8U2vrxCk.roa File: BOk1_5TD1r7mEldD9yH8U2vrxCk.roa (raw, json) Hash identifier: PxB30AoPhpGZasUyDo0ffpIF9vSjtTm/o54umD+jFT0= Subject key identifier: 04:E9:35:FF:94:C3:D6:BE:E6:12:57:43:F7:21:FC:53:6B:EB:C4:29 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14AA249215AD9EE478856B3F71B0ED Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BOk1_5TD1r7mEldD9yH8U2vrxCk.roa Signing time: Fri 02 Jan 2026 14:20:19 +0000 ROA not before: Fri 02 Jan 2026 14:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20940 IP address blocks: 77.67.85.0/24 maxlen: 24 77.67.126.0/24 maxlen: 24 2001:668:108::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:aa:24:92:15:ad:9e:e4:78:85:6b:3f:71:b0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04e935ff94c3d6bee6125743f721fc536bebc429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:36:ef:f5:39:e3:e6:b9:81:1c:d2:8a:73:de: 91:aa:0f:56:03:aa:0f:ae:4d:c1:f8:0d:c9:c7:3c: c3:1d:d2:37:1b:d6:5e:4c:a7:94:13:49:cd:79:fc: 89:3a:e2:29:a0:2b:29:2e:f5:63:c5:9f:34:ce:8b: d8:61:86:8d:c5:b3:60:da:23:1a:3a:4c:df:d2:95: 50:02:3f:82:df:29:9a:cb:b6:ec:bb:9a:94:a7:bb: 6e:69:81:96:ce:9b:c2:3b:f7:4c:ca:a1:ca:29:73: c8:b2:b2:11:94:f3:80:c0:a6:59:37:ab:0a:0c:af: 7b:40:73:55:fc:11:80:5c:57:35:00:5e:55:c8:6b: 6e:a9:c5:89:f6:6d:2e:25:86:c3:e5:0c:d9:4a:9c: 22:de:af:82:f2:87:87:bc:69:19:90:cb:ee:15:56: 76:78:70:0a:c1:dc:91:fb:94:d3:9a:64:64:03:6f: 38:2c:20:19:08:79:8d:5e:73:32:b5:2e:95:f1:0b: 1d:c7:27:1a:00:b0:1d:58:4f:b6:c2:7a:3b:db:82: 94:69:4a:4d:20:84:bb:74:41:bb:dd:f5:82:2a:4c: b1:68:9e:e6:e2:e7:89:93:cf:5b:d6:ab:6f:03:71: 02:5a:25:02:25:79:d3:fe:cf:e8:c7:2d:43:f2:e5: 88:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E9:35:FF:94:C3:D6:BE:E6:12:57:43:F7:21:FC:53:6B:EB:C4:29 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BOk1_5TD1r7mEldD9yH8U2vrxCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.67.85.0/24 77.67.126.0/24 IPv6: 2001:668:108::/48 Signature Algorithm: sha256WithRSAEncryption 9c:a0:09:95:5c:d7:12:87:23:ad:95:1e:8d:42:a9:01:97:96: 14:a4:58:f8:3b:75:92:91:a7:90:66:bc:ac:a2:c0:1c:d8:56: ed:fb:61:8e:5c:96:01:73:aa:3d:f7:0c:a1:6e:0a:cf:ff:38: 98:05:0b:1b:b0:26:60:aa:04:86:d3:df:01:ee:4c:f0:13:c7: a4:5b:a6:88:96:33:47:82:ed:64:24:a4:17:09:cf:dd:c6:26: 2e:38:e9:f9:e6:db:90:53:bf:0d:88:03:c7:b2:34:1f:09:a4: 41:c0:c9:7b:58:65:df:3c:2e:de:ad:58:c9:85:bd:3b:34:3c: 77:c1:ea:78:3d:e6:30:e8:3b:cb:91:1d:53:81:75:ec:80:0a: ab:68:45:64:5b:7d:f7:12:cf:14:06:1b:d4:ec:4e:c1:c0:4e: 5c:b6:03:6c:17:3e:d8:62:84:34:08:c0:41:ee:50:16:18:b5: 4a:74:21:92:8a:59:ba:2b:19:1d:93:28:a6:08:d4:f4:76:81: 14:74:07:4c:6f:45:54:68:3c:0e:6a:e6:88:91:5f:50:39:bc: 4d:02:f6:36:74:00:e9:7a:f1:24:b0:35:5d:92:8b:a6:85:e0: a8:f9:46:2e:3c:57:8c:72:62:75:77:3c:58:3d:b7:ab:c6:b7: 88:3e:51:49 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/FKokkhWtnuR4hWs/cbDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGU5MzVmZjk0YzNkNmJlZTYxMjU3NDNmNzIxZmM1MzZiZWJjNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jbv9Tnj5rmBHNKKc96Rqg9WA6oP rk3B+A3JxzzDHdI3G9ZeTKeUE0nNefyJOuIpoCspLvVjxZ80zovYYYaNxbNg2iMa Okzf0pVQAj+C3ymay7bsu5qUp7tuaYGWzpvCO/dMyqHKKXPIsrIRlPOAwKZZN6sK DK97QHNV/BGAXFc1AF5VyGtuqcWJ9m0uJYbD5QzZSpwi3q+C8oeHvGkZkMvuFVZ2 eHAKwdyR+5TTmmRkA284LCAZCHmNXnMytS6V8QsdxycaALAdWE+2wno724KUaUpN IIS7dEG73fWCKkyxaJ7m4ueJk89b1qtvA3ECWiUCJXnT/s/oxy1D8uWIwQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFATpNf+Uw9a+5hJXQ/ch/FNr68QpMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvQk9rMV81VEQxcjdtRWxkRDl5SDhVMnZyeENrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQATUNVAwQA TUN+MA8EAgACMAkDBwAgAQZoAQgwDQYJKoZIhvcNAQELBQADggEBAJygCZVc1xKH I62VHo1CqQGXlhSkWPg7dZKRp5BmvKyiwBzYVu37YY5clgFzqj33DKFuCs//OJgF CxuwJmCqBIbT3wHuTPATx6RbpoiWM0eC7WQkpBcJz93GJi446fnm25BTvw2IA8ey NB8JpEHAyXtYZd88Lt6tWMmFvTs0PHfB6ng95jDoO8uRHVOBdeyACqtoRWRbffcS zxQGG9TsTsHATly2A2wXPthihDQIwEHuUBYYtUp0IZKKWborGR2TKKYI1PR2gRR0 B0xvRVRoPA5q5oiRX1A5vE0C9jZ0AOl68SSwNV2Si6aF4Kj5Ri48V4xyYnV3PFg9 t6vGt4g+UUk= -----END CERTIFICATE-----Generated at Tue Jan 20 08:02:11 2026 by rpki-client