This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/77Y5E686i9gw3lj914itA30LDnw.roa
File: 77Y5E686i9gw3lj914itA30LDnw.roa (raw, json)
Hash identifier: PodjUAHJDlU87BEH7Bm7zpiutkF1T1rsqojtZDohyRA=
Subject key identifier: EF:B6:39:13:AF:3A:8B:D8:30:DE:58:FD:D7:88:AD:03:7D:0B:0E:7C
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019B7DCB59F1926C76C78EE09B374202402E
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/77Y5E686i9gw3lj914itA30LDnw.roa
Signing time: Fri 02 Jan 2026 08:20:37 +0000
ROA not before: Fri 02 Jan 2026 08:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:8cc0::/29 maxlen: 29
2a0d:ad40::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:9040::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b4c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e2c0::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:e8c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:640::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2800::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8780::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:a500::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:cf80::/29 maxlen: 29
2a12:d080::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:59:f1:92:6c:76:c7:8e:e0:9b:37:42:02:40:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 2 08:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efb63913af3a8bd830de58fdd788ad037d0b0e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:e9:3e:a6:ed:31:08:d0:63:71:0a:55:59:
aa:21:f9:d6:6a:eb:81:ed:65:4d:1e:1d:7a:21:20:
0d:dc:d5:d1:66:c4:fe:87:8c:c2:7d:17:b0:56:c1:
15:1e:7e:f8:8e:cf:1a:a0:a4:b5:20:f5:77:e7:6e:
07:1a:ed:de:27:5a:7e:ba:52:59:9a:48:74:e2:a4:
62:b8:4e:e8:8c:d4:60:60:ef:d5:88:7d:62:52:a5:
00:f5:1c:32:4c:f2:3c:c9:50:ab:55:09:36:90:cc:
28:f7:fd:36:29:f5:97:da:3d:c3:f7:e8:47:8f:4a:
fa:7e:8d:56:72:24:e4:a0:84:09:0e:58:58:24:c9:
36:cd:71:4d:98:a2:c5:cb:93:11:3e:84:e4:5f:23:
e7:3d:7c:47:f2:28:17:64:b0:c7:4f:be:4b:ed:b2:
ca:3f:55:2b:96:ec:77:17:57:bd:18:36:23:73:22:
d5:01:34:99:3d:1a:7c:f0:ec:da:1a:7c:af:94:bb:
7a:a8:3b:7a:07:b2:d1:f2:1e:41:07:1c:e0:23:4c:
d7:ed:6d:31:fb:1d:4b:42:00:12:18:0e:fb:a3:d4:
1f:9c:d1:e1:4e:08:7a:94:16:bf:2e:80:e4:33:ee:
90:f0:64:0e:3d:15:7e:07:a2:02:a5:58:7e:f2:f9:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B6:39:13:AF:3A:8B:D8:30:DE:58:FD:D7:88:AD:03:7D:0B:0E:7C
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/77Y5E686i9gw3lj914itA30LDnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8cc0::/29
2a0d:ad40::/29
2a0d:b840::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:e180::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:2d00::/29
2a11:4540::/29
2a11:4f00::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:9040::/29
2a11:9580::/29
2a11:9640::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:b0c0::/29
2a11:b4c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e2c0::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:e8c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a11:ff40::/29
2a12:580::/29
2a12:640::/29
2a12:900::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2800::/29
2a12:2b80::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8780::/29
2a12:8a00::/29
2a12:9200::/29
2a12:a500::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:cf80::/29
2a12:d080::/29
2a12:d200::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
63:1e:fb:39:81:76:ed:bc:dc:82:7a:d0:6c:42:7f:88:9d:2c:
34:51:e5:53:73:a9:ea:26:e4:c5:1a:78:0c:75:73:bb:a6:65:
47:71:ed:c4:4e:72:43:40:f4:2f:a1:21:44:18:a7:ab:a5:eb:
5e:88:54:29:1b:67:b0:a9:54:dd:6d:db:d8:bf:1e:1a:7a:ff:
41:a6:a4:01:e6:53:93:24:33:13:e9:fb:f7:3d:d9:43:7d:17:
14:ef:70:69:09:25:66:78:4e:12:6f:df:86:37:4b:7b:a5:90:
5e:5c:24:dd:4b:01:29:20:9b:b9:c5:5a:14:ce:52:3e:c8:91:
51:89:56:71:1f:93:aa:d7:86:e4:25:74:23:dc:89:cb:99:6b:
ef:a2:3e:3f:e1:dc:13:3e:27:6e:0c:85:20:c1:9e:69:e6:44:
0b:c6:bc:ed:48:45:c8:f6:95:f4:54:d7:c0:28:26:8a:81:c5:
06:5f:e5:88:bd:25:d1:2d:f0:9d:a2:c6:f1:f2:93:3e:c4:76:
dd:25:d1:95:f9:fe:78:ba:e5:ff:83:2e:c3:d0:47:3e:fe:57:
5a:18:e2:3b:c7:cd:db:65:bd:ca:fc:43:b3:05:a9:5c:c2:32:
3f:41:a4:8e:22:e8:8b:06:39:6b:08:d3:39:f0:66:88:a4:40:
f6:79:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:08 2026 by rpki-client