This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2EDf3oUkmBT32P1YLDJVnufldMM.roa File: 2EDf3oUkmBT32P1YLDJVnufldMM.roa (raw, json) Hash identifier: ywibPXXjwb6vR42UGoIfCz+GVsVwh4MNl/bfMV8UxOk= Subject key identifier: D8:40:DF:DE:85:24:98:14:F7:D8:FD:58:2C:32:55:9E:E7:E5:74:C3 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38A53BBCFE8034FDB410B7B0641B93 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2EDf3oUkmBT32P1YLDJVnufldMM.roa Signing time: Fri 02 Jan 2026 10:20:00 +0000 ROA not before: Fri 02 Jan 2026 10:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 77.47.143.0/24 maxlen: 24 77.47.156.0/22 maxlen: 24 77.47.212.0/24 maxlen: 24 77.47.240.0/23 maxlen: 24 77.47.243.0/24 maxlen: 24 195.178.140.0/23 maxlen: 24 212.111.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a5:3b:bc:fe:80:34:fd:b4:10:b7:b0:64:1b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d840dfde85249814f7d8fd582c32559ee7e574c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:3c:90:ca:97:76:08:f7:77:b3:7c:ab:64: 09:c5:a5:c0:40:3a:27:5e:3b:37:20:74:5d:c2:22: 01:54:75:47:cb:3c:3b:aa:b9:47:3d:06:46:87:f4: cd:52:49:f3:18:07:d7:ad:e7:e1:84:fc:58:92:b1: 5d:d5:2f:8b:f5:ce:f9:64:ad:32:e7:4e:98:20:a0: 9e:79:75:b0:36:c4:aa:da:53:b4:a1:71:cd:52:2a: ec:63:05:81:6f:b6:75:e9:83:99:55:f6:46:e1:c3: b3:a5:bb:2f:10:80:57:04:f2:97:f2:b4:08:f6:b2: 63:e3:c0:44:67:f0:ea:5d:dc:9a:4d:7e:9f:1b:ed: 3a:f4:ab:a8:ff:3b:4f:5f:2b:b7:cd:97:92:99:6e: 9c:a4:8c:85:cd:17:fa:0f:e7:70:87:cd:fb:62:ff: e3:5d:06:15:e9:8d:1c:e8:4f:03:08:d4:d3:bb:d2: a7:83:d5:db:6a:52:23:a4:c8:29:56:6b:cc:c5:6b: 4a:8a:fe:08:2e:ce:12:cc:82:07:71:38:3b:72:23: 4c:35:24:27:97:92:2e:fb:61:04:cd:a8:29:87:15: 64:02:ff:9b:8b:c2:cf:9a:39:38:00:19:0e:40:14: e6:8a:ae:7c:60:b3:f5:3f:0b:8b:81:28:4d:8d:dc: 08:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:DF:DE:85:24:98:14:F7:D8:FD:58:2C:32:55:9E:E7:E5:74:C3 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/2EDf3oUkmBT32P1YLDJVnufldMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.47.143.0/24 77.47.156.0/22 77.47.212.0/24 77.47.240.0/23 77.47.243.0/24 195.178.140.0/23 212.111.220.0/22 Signature Algorithm: sha256WithRSAEncryption 52:bb:43:e5:3b:e4:38:6e:40:3c:f3:3c:3d:10:d7:f4:66:63: d6:0a:af:11:a1:e7:58:20:79:e3:c8:c6:8e:56:95:9a:2c:8d: ae:78:cf:72:1a:ed:e3:c3:25:98:05:3e:9c:bd:f6:21:b2:85: d8:bd:2c:8a:a8:57:b1:40:f4:db:bb:28:d6:ff:26:ad:ff:1c: df:0d:ed:86:76:8f:28:89:d0:de:d7:13:04:2b:e0:10:6f:92: 02:5b:6e:ba:a8:aa:07:d6:c2:fe:25:2b:19:e1:67:6e:b5:35: cd:8b:e8:b4:1a:06:45:83:43:f4:b3:95:b1:4c:3e:7f:76:c6: 81:91:50:c6:90:99:d1:81:3c:02:39:a2:b7:50:8a:51:4d:69: f5:0c:84:1e:02:79:66:be:8d:11:9f:e0:b4:e9:c8:94:15:f6: 90:9b:ed:18:c0:63:fb:ea:e8:15:ed:16:c3:74:48:a7:c3:47: 13:76:79:54:fe:1f:fd:39:e7:42:5d:61:e5:dd:03:f3:d7:68: 38:16:a1:b5:74:86:7a:6c:e2:3a:6e:69:92:16:62:94:d1:1f: 03:bb:8e:29:85:89:06:2f:23:83:5b:8f:5c:46:2f:61:99:2d: 66:28:56:5a:f2:a2:65:02:9e:8f:9a:c1:38:35:da:85:86:12: 33:3b:d3:67 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt+OKU7vP6ANP20ELewZBuTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODQwZGZkZTg1MjQ5ODE0ZjdkOGZkNTgyYzMyNTU5ZWU3ZTU3NGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIU8kMqXdgj3d7N8q2QJxaXAQDon Xjs3IHRdwiIBVHVHyzw7qrlHPQZGh/TNUknzGAfXrefhhPxYkrFd1S+L9c75ZK0y 506YIKCeeXWwNsSq2lO0oXHNUirsYwWBb7Z16YOZVfZG4cOzpbsvEIBXBPKX8rQI 9rJj48BEZ/DqXdyaTX6fG+069Kuo/ztPXyu3zZeSmW6cpIyFzRf6D+dwh837Yv/j XQYV6Y0c6E8DCNTTu9Kng9XbalIjpMgpVmvMxWtKiv4ILs4SzIIHcTg7ciNMNSQn l5Iu+2EEzagphxVkAv+bi8LPmjk4ABkOQBTmiq58YLP1PwuLgShNjdwIoQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFNhA396FJJgU99j9WCwyVZ7n5XTDMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvMkVEZjNvVWttQlQzMlAxWUxESlZudWZsZE1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQATS+PAwQC TS+cAwQATS/UAwQBTS/wAwQATS/zAwQBw7KMAwQC1G/cMA0GCSqGSIb3DQEBCwUA A4IBAQBSu0PlO+Q4bkA88zw9ENf0ZmPWCq8RoedYIHnjyMaOVpWaLI2ueM9yGu3j wyWYBT6cvfYhsoXYvSyKqFexQPTbuyjW/yat/xzfDe2Gdo8oidDe1xMEK+AQb5IC W266qKoH1sL+JSsZ4WdutTXNi+i0GgZFg0P0s5WxTD5/dsaBkVDGkJnRgTwCOaK3 UIpRTWn1DIQeAnlmvo0Rn+C06ciUFfaQm+0YwGP76ugV7RbDdEinw0cTdnlU/h/9 OedCXWHl3QPz12g4FqG1dIZ6bOI6bmmSFmKU0R8Du44phYkGLyODW49cRi9hmS1m KFZa8qJlAp6PmsE4NdqFhhIzO9Nn -----END CERTIFICATE-----Generated at Sat Jan 10 04:58:12 2026 by rpki-client