This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/1C87-YoMU3E-DWxYQ0HoaaKkai4.roa File: 1C87-YoMU3E-DWxYQ0HoaaKkai4.roa (raw, json) Hash identifier: D7kY1Dcux9TiG7PKR2Pb7es9yDu4CucVa5I7EWiBNZU= Subject key identifier: D4:2F:3B:F9:8A:0C:53:71:3E:0D:6C:58:43:41:E8:69:A2:A4:6A:2E Certificate issuer: /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a Certificate serial: 019B78A34AD6FCFC2054EB4C743AA104DF64 Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/1C87-YoMU3E-DWxYQ0HoaaKkai4.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213363 IP address blocks: 77.83.120.0/22 maxlen: 22 77.83.120.0/24 maxlen: 24 77.83.121.0/24 maxlen: 24 77.83.122.0/24 maxlen: 24 77.83.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4a:d6:fc:fc:20:54:eb:4c:74:3a:a1:04:df:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d42f3bf98a0c53713e0d6c584341e869a2a46a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a1:d8:e7:38:ed:14:7d:1f:90:8c:53:c5:80: e1:c3:af:0a:60:8d:17:b9:36:48:28:ce:e2:89:e9: ae:ce:df:9f:57:3f:e3:7f:e8:7b:10:7a:53:a5:6a: 2d:c3:c6:1d:27:1f:2e:5f:6c:6f:af:06:c9:e3:dd: 9b:a6:40:b2:5c:4d:43:e6:14:d6:66:d2:b6:a0:c8: 45:f4:44:1a:a1:aa:64:5a:3c:bf:0b:6c:e3:f8:47: d4:fc:67:e9:64:b4:bb:7f:53:c1:c9:99:b5:ef:a8: 40:c2:31:f4:51:3f:5c:ca:82:47:04:e6:7b:6a:00: a5:53:f5:fb:00:e4:98:30:75:f6:27:63:01:74:88: d2:6c:07:86:08:fc:09:4d:9d:cf:33:46:25:01:5b: ad:6b:df:86:3b:0d:03:8d:64:c0:06:6e:a5:3f:f5: 6e:5e:36:57:b6:34:74:1c:94:e1:f0:9f:69:e7:d4: f9:79:89:80:0c:37:60:10:90:5f:3b:17:2d:d8:0e: b8:a9:c1:b9:bd:a1:f0:4b:40:59:2f:b6:27:5c:fb: c0:5d:57:13:b3:37:ad:c4:5a:55:75:44:d9:52:93: 03:3d:2b:eb:79:2e:0e:c3:c0:3d:a8:2e:7f:87:35: 74:49:ce:64:b2:24:cb:f5:4b:a0:d2:90:b5:bf:ab: 6a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2F:3B:F9:8A:0C:53:71:3E:0D:6C:58:43:41:E8:69:A2:A4:6A:2E X509v3 Authority Key Identifier: keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/1C87-YoMU3E-DWxYQ0HoaaKkai4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.120.0/22 Signature Algorithm: sha256WithRSAEncryption 39:d4:20:ca:54:40:44:56:95:a4:5e:69:44:65:aa:18:0e:bf: b8:88:66:ea:bf:b9:70:cc:80:cc:97:98:87:82:99:7f:2b:52: 8c:08:59:2f:a3:9f:ea:b1:3b:a4:cd:e2:a2:d9:a2:d3:ab:c7: 00:63:2c:bc:84:0d:49:0a:d7:87:c3:e2:3c:e1:6a:7c:99:33: 11:d4:43:f3:13:13:80:71:d0:5e:78:82:34:5d:b5:74:f3:1e: d2:6d:08:0a:bb:cb:75:6e:df:a0:92:d2:0e:c2:b5:a8:77:5d: ef:25:2a:12:14:ec:c6:f1:75:b5:b5:91:e5:e2:7e:c5:2c:e5: 3f:8f:41:a4:d6:59:9a:64:0c:3d:7b:50:d2:52:b7:1d:d6:31: b7:72:30:0c:c1:77:36:a9:ae:2a:18:07:55:35:3d:79:e5:76: 34:ed:c6:f5:4f:e5:ab:bd:a9:c7:ce:3f:cb:6a:9b:eb:f4:b4: 38:3f:f7:b9:69:a4:7c:7e:9d:90:45:67:25:d4:39:be:39:a9: 49:bc:9b:8e:6a:59:c2:cf:1d:e6:fd:65:32:4b:fa:16:e3:27: d6:1c:0a:67:c3:7a:80:5e:00:5e:75:29:99:35:b2:22:3b:39: 13:da:c8:2c:1d:7d:93:44:b5:aa:9e:c3:7b:d1:99:39:83:7f: cf:78:d0:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0rW/PwgVOtMdDqhBN9kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxYjJjZjc0OWFmNjk2NzA3OGMwNGJkMGM3MGI1MTQxZjRl NWE2MGEwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDJmM2JmOThhMGM1MzcxM2UwZDZjNTg0MzQxZTg2OWEyYTQ2YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaHY5zjtFH0fkIxTxYDhw68KYI0X uTZIKM7iiemuzt+fVz/jf+h7EHpTpWotw8YdJx8uX2xvrwbJ492bpkCyXE1D5hTW ZtK2oMhF9EQaoapkWjy/C2zj+EfU/GfpZLS7f1PByZm176hAwjH0UT9cyoJHBOZ7 agClU/X7AOSYMHX2J2MBdIjSbAeGCPwJTZ3PM0YlAVuta9+GOw0DjWTABm6lP/Vu XjZXtjR0HJTh8J9p59T5eYmADDdgEJBfOxct2A64qcG5vaHwS0BZL7YnXPvAXVcT szetxFpVdUTZUpMDPSvreS4Ow8A9qC5/hzV0Sc5ksiTL9Uug0pC1v6tqxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNQvO/mKDFNxPg1sWENB6GmipGouMB8GA1UdIwQY MBaAFFGyz3Sa9pZweMBL0McLUUH05aYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYt Y2QxNGZlMmQ5NTcxLzEvMUM4Ny1Zb01VM0UtRFd4WVEwSG9hYUtrYWk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYtY2QxNGZlMmQ5NTcx LzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTVN4MA0G CSqGSIb3DQEBCwUAA4IBAQA51CDKVEBEVpWkXmlEZaoYDr+4iGbqv7lwzIDMl5iH gpl/K1KMCFkvo5/qsTukzeKi2aLTq8cAYyy8hA1JCteHw+I84Wp8mTMR1EPzExOA cdBeeII0XbV08x7SbQgKu8t1bt+gktIOwrWod13vJSoSFOzG8XW1tZHl4n7FLOU/ j0Gk1lmaZAw9e1DSUrcd1jG3cjAMwXc2qa4qGAdVNT155XY07cb1T+WrvanHzj/L apvr9LQ4P/e5aaR8fp2QRWcl1Dm+OalJvJuOalnCzx3m/WUyS/oW4yfWHApnw3qA XgBedSmZNbIiOzkT2sgsHX2TRLWqnsN70Zk5g3/PeNC8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:09 2026 by rpki-client