This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/zJoT4iPL7bGeeqxblvQwWjwRGtE.roa File: zJoT4iPL7bGeeqxblvQwWjwRGtE.roa (raw, json) Hash identifier: 52rRN9qQv8q8ND4jnZa+4/MKa8fwhT42vyeHiOKQTko= Subject key identifier: CC:9A:13:E2:23:CB:ED:B1:9E:7A:AC:5B:96:F4:30:5A:3C:11:1A:D1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019C1ACF7A6CA03535A637ECAA28CFCDE620 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/zJoT4iPL7bGeeqxblvQwWjwRGtE.roa Signing time: Sun 01 Feb 2026 20:05:30 +0000 ROA not before: Sun 01 Feb 2026 20:05:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197889 IP address blocks: 77.221.32.0/20 maxlen: 20 77.221.32.0/22 maxlen: 22 77.221.32.0/23 maxlen: 23 77.221.32.0/24 maxlen: 24 77.221.33.0/24 maxlen: 24 77.221.34.0/23 maxlen: 23 77.221.34.0/24 maxlen: 24 77.221.35.0/24 maxlen: 24 77.221.43.0/24 maxlen: 24 77.221.44.0/23 maxlen: 23 77.221.46.0/23 maxlen: 23 77.221.49.0/24 maxlen: 24 77.221.52.0/23 maxlen: 23 77.221.54.0/23 maxlen: 24 77.221.56.0/23 maxlen: 23 77.221.58.0/23 maxlen: 23 77.221.61.0/24 maxlen: 24 77.221.62.0/24 maxlen: 24 2a10:4940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1a:cf:7a:6c:a0:35:35:a6:37:ec:aa:28:cf:cd:e6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Feb 1 20:05:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc9a13e223cbedb19e7aac5b96f4305a3c111ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:44:05:c2:55:73:47:68:31:db:17:ed:a2: 06:7a:5f:47:7c:1f:82:af:fa:88:56:dc:b1:77:28: 38:3d:1e:16:be:9f:35:e1:6b:c0:ce:20:3b:65:4a: 58:db:46:2f:75:94:3d:fd:41:18:a1:17:63:84:99: 58:e5:ca:59:b4:ae:26:2f:92:43:ae:ed:d1:fe:27: 3d:de:34:70:6d:09:b5:04:99:c8:81:50:26:27:71: b7:2c:38:50:ce:f6:2d:9c:2c:ae:3f:ea:d5:7f:75: 81:7a:27:01:14:be:46:a3:bf:30:53:79:8d:75:23: 06:17:de:cd:f0:9f:ec:5b:cc:86:a5:06:d8:aa:36: 18:e4:9c:93:e6:1e:97:4e:a3:b0:a9:55:82:66:8e: 20:5a:3c:06:68:0a:b7:3e:96:90:18:50:69:a1:eb: 65:0c:3d:c5:a9:d7:1a:c7:65:b1:66:d9:b9:e0:2f: a8:ff:8e:da:4e:89:85:45:ae:af:ec:e3:58:56:04: 40:76:fb:22:85:9d:1e:36:bf:d7:68:1f:6c:40:30: 24:5e:ff:6a:13:5e:67:91:9f:34:3b:3f:46:e4:86: b0:00:66:b6:8f:de:cf:74:88:56:c1:85:c3:b6:3d: b4:bf:bc:53:34:a1:55:ff:80:ed:4a:f8:c0:ba:83: 80:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9A:13:E2:23:CB:ED:B1:9E:7A:AC:5B:96:F4:30:5A:3C:11:1A:D1 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/zJoT4iPL7bGeeqxblvQwWjwRGtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.32.0/20 77.221.49.0/24 77.221.52.0-77.221.59.255 77.221.61.0-77.221.62.255 IPv6: 2a10:4940::/32 Signature Algorithm: sha256WithRSAEncryption 6a:17:6f:85:d0:b9:c4:3b:4f:a5:8d:b1:8c:b6:89:da:8f:1a: f7:36:cd:59:56:8f:18:6c:d2:ed:88:c4:7b:f4:02:65:17:c0: 19:ff:cb:a9:4b:bd:f5:ca:2b:e4:3c:69:fb:63:b1:5f:9b:09: d1:91:18:bb:f2:6a:c6:83:9f:1e:03:0e:87:f3:b5:b4:d3:09: 94:20:df:fc:e6:3e:89:34:32:7e:f9:35:85:7a:67:eb:5a:6e: 69:bd:d4:07:45:27:d8:5d:ee:cc:b9:4a:ec:9b:f7:a6:70:ba: 8d:ce:47:f0:dc:ac:d4:f3:1f:b6:bf:89:bb:bf:0b:0f:3c:c5: 8d:40:c8:4f:92:6f:cb:55:3e:e7:76:28:ea:d5:a9:9e:ad:f4: d6:8e:04:bb:4a:31:0b:32:18:88:e7:94:85:e1:7d:08:14:24: e8:98:ae:67:83:f9:19:a6:7e:d1:35:1d:98:d3:65:5e:ed:4f: 63:b3:c0:2d:ae:e5:98:ad:03:60:39:ca:5c:43:c0:19:97:7c: c2:51:13:f1:48:ab:2b:e2:f3:b1:cd:17:b8:56:a0:28:38:c0: e9:bb:25:b7:09:0f:3d:09:23:66:39:a7:f7:5e:df:8e:8d:0b: 1c:b9:9c:17:d4:b6:45:14:63:7b:97:4a:8d:ec:00:e3:25:6d: de:bf:d5:c8 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZwaz3psoDU1pjfsqijPzeYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwMjAxMjAwNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzlhMTNlMjIzY2JlZGIxOWU3YWFjNWI5NmY0MzA1YTNjMTExYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAxEBcJVc0doMdsX7aIGel9HfB+C r/qIVtyxdyg4PR4Wvp814WvAziA7ZUpY20YvdZQ9/UEYoRdjhJlY5cpZtK4mL5JD ru3R/ic93jRwbQm1BJnIgVAmJ3G3LDhQzvYtnCyuP+rVf3WBeicBFL5Go78wU3mN dSMGF97N8J/sW8yGpQbYqjYY5JyT5h6XTqOwqVWCZo4gWjwGaAq3PpaQGFBpoetl DD3Fqdcax2WxZtm54C+o/47aTomFRa6v7ONYVgRAdvsihZ0eNr/XaB9sQDAkXv9q E15nkZ80Oz9G5IawAGa2j97PdIhWwYXDtj20v7xTNKFV/4DtSvjAuoOAIQIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFMyaE+Ijy+2xnnqsW5b0MFo8ERrRMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvekpvVDRpUEw3YkdlZXF4Ymx2UXdXandSR3RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoAwQETd0gAwQA Td0xMAwDBAJN3TQDBAJN3TgwDAMEAE3dPQMEAE3dPjANBAIAAjAHAwUAKhBJQDAN BgkqhkiG9w0BAQsFAAOCAQEAahdvhdC5xDtPpY2xjLaJ2o8a9zbNWVaPGGzS7YjE e/QCZRfAGf/LqUu99cor5Dxp+2OxX5sJ0ZEYu/JqxoOfHgMOh/O1tNMJlCDf/OY+ iTQyfvk1hXpn61puab3UB0Un2F3uzLlK7Jv3pnC6jc5H8Nys1PMftr+Ju78LDzzF jUDIT5Jvy1U+53Yo6tWpnq301o4Eu0oxCzIYiOeUheF9CBQk6JiuZ4P5GaZ+0TUd mNNlXu1PY7PALa7lmK0DYDnKXEPAGZd8wlET8UirK+Lzsc0XuFagKDjA6bsltwkP PQkjZjmn917fjo0LHLmcF9S2RRRje5dKjewA4yVt3r/VyA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:20 2026 by rpki-client