This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/x7z-ysQrqrlmh-6azxQlDFRLWOg.roa File: x7z-ysQrqrlmh-6azxQlDFRLWOg.roa (raw, json) Hash identifier: d9bh3aMeZoe5mLDSNkDPB2TdMDnFvgBW7tcxJb25w1E= Subject key identifier: C7:BC:FE:CA:C4:2B:AA:B9:66:87:EE:9A:CF:14:25:0C:54:4B:58:E8 Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Certificate serial: 019B7D5C2B7D87E1BE889F8AE048C99667E7 Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/x7z-ysQrqrlmh-6azxQlDFRLWOg.roa Signing time: Fri 02 Jan 2026 06:19:10 +0000 ROA not before: Fri 02 Jan 2026 06:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199422 IP address blocks: 77.95.64.0/22 maxlen: 22 77.95.64.0/23 maxlen: 23 77.95.66.0/23 maxlen: 23 185.92.20.0/24 maxlen: 24 2a03:9180::/32 maxlen: 32 2a03:9180::/33 maxlen: 33 2a03:9180:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:2b:7d:87:e1:be:88:9f:8a:e0:48:c9:96:67:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9 Validity Not Before: Jan 2 06:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7bcfecac42baab96687ee9acf14250c544b58e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:85:c1:b8:d2:6b:64:ff:30:ae:6a:88:42: f3:ae:6e:68:3f:f4:e4:bd:9e:e1:7b:f5:9a:a6:be: 60:82:63:c8:6b:1a:b1:60:9d:72:96:85:c2:49:83: e8:57:03:ef:9a:62:bb:3b:ad:c9:fa:5a:b6:2e:3d: f7:08:8d:d8:88:e2:e0:86:cf:32:7d:ce:9b:cc:7f: 10:c4:48:ed:65:6b:75:c0:81:c6:81:1b:55:06:bc: a1:83:f9:6c:fb:ef:52:e0:fc:9d:4d:64:33:82:2b: 60:ac:8e:86:53:fe:a4:55:2c:2d:bc:6e:c2:a6:99: de:81:ee:99:44:30:d7:0b:6f:64:e1:63:27:7f:76: f1:a3:a4:43:b3:e9:79:86:f7:09:26:03:ae:95:a2: 0e:fa:f0:55:5e:97:11:48:a5:58:79:e6:27:36:34: 4a:c1:4e:56:02:9f:81:14:3b:74:42:d6:a8:e8:7b: 8a:16:9c:72:d6:86:9f:15:f4:d7:c0:19:dc:be:15: 44:ce:d0:37:8a:9b:0f:20:6d:75:31:c7:7c:37:29: d0:f4:de:a3:82:0c:3f:6c:74:69:df:91:68:48:e0: 47:a9:7a:df:aa:9c:ea:68:1a:f4:ae:59:d5:80:ec: 48:c1:d2:95:0a:53:40:06:88:92:79:9c:a2:8c:4b: b3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BC:FE:CA:C4:2B:AA:B9:66:87:EE:9A:CF:14:25:0C:54:4B:58:E8 X509v3 Authority Key Identifier: keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/x7z-ysQrqrlmh-6azxQlDFRLWOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.64.0/22 185.92.20.0/24 IPv6: 2a03:9180::/32 Signature Algorithm: sha256WithRSAEncryption d6:a2:04:81:02:7d:15:c8:aa:9b:9e:9e:c8:45:ff:62:93:90: 6d:ea:3b:42:c6:e2:62:f0:99:a2:96:fc:6f:3a:96:69:49:29: f4:a6:6c:dc:e6:b9:4a:43:82:6b:78:8f:dd:69:d6:4a:68:99: bf:ef:f3:ea:87:99:b0:de:a5:a1:91:79:38:47:df:b8:a1:a4: ab:04:35:af:9b:a4:0d:35:45:51:f4:91:94:c5:0d:f4:9d:6e: 0f:8e:ca:9d:cc:ea:af:45:67:be:3d:74:5e:1f:6c:72:75:69: 74:45:2e:01:c4:76:44:16:0a:2c:86:75:1c:76:a6:42:16:30: d2:73:96:7a:a1:a7:e1:fe:7c:a5:18:45:ce:f7:fc:9d:b2:ff: 1b:f6:05:b4:2c:a5:53:ca:6a:c9:34:d5:76:79:5a:e5:9d:21: 80:b8:40:07:68:af:be:9c:b5:d7:86:e6:f2:85:75:f8:e8:4b: ea:7d:63:0c:fc:6a:6d:b7:28:d6:4f:07:30:f9:f8:6f:22:bb: ad:ef:d2:84:27:02:05:03:99:32:e0:73:2c:b2:5c:a4:76:ee: 3a:fe:fb:8c:98:7d:46:35:9e:f0:dd:c6:2f:28:0d:5e:c3:50: 91:cf:f1:8b:08:17:e1:f8:d1:b2:31:4b:7a:40:eb:63:76:7f: 4f:52:dd:79 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XCt9h+G+iJ+K4EjJlmfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl MjFiYjkwHhcNMjYwMTAyMDYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2JjZmVjYWM0MmJhYWI5NjY4N2VlOWFjZjE0MjUwYzU0NGI1OGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvyFwbjSa2T/MK5qiELzrm5oP/Tk vZ7he/Wapr5ggmPIaxqxYJ1yloXCSYPoVwPvmmK7O63J+lq2Lj33CI3YiOLghs8y fc6bzH8QxEjtZWt1wIHGgRtVBryhg/ls++9S4PydTWQzgitgrI6GU/6kVSwtvG7C ppnege6ZRDDXC29k4WMnf3bxo6RDs+l5hvcJJgOulaIO+vBVXpcRSKVYeeYnNjRK wU5WAp+BFDt0Qtao6HuKFpxy1oafFfTXwBncvhVEztA3ipsPIG11Mcd8NynQ9N6j ggw/bHRp35FoSOBHqXrfqpzqaBr0rlnVgOxIwdKVClNABoiSeZyijEuz6QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMe8/srEK6q5Zofums8UJQxUS1joMB8GA1UdIwQY MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt ODUwZjM0OTA2MjI5LzEveDd6LXlzUXJxcmxtaC02YXp4UWxERlJMV09nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5 LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCTV9AAwQA uVwUMA0EAgACMAcDBQAqA5GAMA0GCSqGSIb3DQEBCwUAA4IBAQDWogSBAn0VyKqb np7IRf9ik5Bt6jtCxuJi8JmilvxvOpZpSSn0pmzc5rlKQ4JreI/dadZKaJm/7/Pq h5mw3qWhkXk4R9+4oaSrBDWvm6QNNUVR9JGUxQ30nW4PjsqdzOqvRWe+PXReH2xy dWl0RS4BxHZEFgoshnUcdqZCFjDSc5Z6oafh/nylGEXO9/ydsv8b9gW0LKVTymrJ NNV2eVrlnSGAuEAHaK++nLXXhubyhXX46EvqfWMM/GpttyjWTwcw+fhvIrut79KE JwIFA5ky4HMsslykdu46/vuMmH1GNZ7w3cYvKA1ew1CRz/GLCBfh+NGyMUt6QOtj dn9PUt15 -----END CERTIFICATE-----Generated at Sat Jan 10 14:12:47 2026 by rpki-client