This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/77NxWrnmqimKFMCuf2girgSv7YY.roa File: 77NxWrnmqimKFMCuf2girgSv7YY.roa (raw, json) Hash identifier: yvL8A+trO3nIzWdqFnzJlWa2S2CDPylqKXuoFVyMQzo= Subject key identifier: EF:B3:71:5A:B9:E6:AA:29:8A:14:C0:AE:7F:68:22:AE:04:AF:ED:86 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6B04DBCEAFC299CFC90E2B6A93921 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/77NxWrnmqimKFMCuf2girgSv7YY.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206424 IP address blocks: 46.8.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b0:4d:bc:ea:fc:29:9c:fc:90:e2:b6:a9:39:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efb3715ab9e6aa298a14c0ae7f6822ae04afed86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:64:30:c5:33:90:71:42:8f:bb:30:1f:90:de: 94:fd:01:72:1f:2f:6f:7b:ed:b9:6a:7b:7a:18:d2: cc:e8:88:86:15:ae:63:0f:8e:99:a7:91:9e:7e:7b: a8:a5:5d:56:5d:a1:87:95:72:06:0d:9e:5d:f4:42: af:14:cb:9f:64:7b:ad:e1:0a:3a:51:73:e4:3c:e7: 1b:e3:14:c1:10:85:a0:0f:71:fb:f6:a1:9e:e3:51: d6:03:c0:7c:4a:bf:0c:7a:93:12:f3:87:23:5d:17: ea:c1:31:46:aa:4b:71:d6:7a:bb:3b:9b:ff:f4:eb: 28:a9:2b:d5:92:6d:97:a3:f8:ca:17:de:c3:15:59: fb:6f:34:f1:ee:48:49:dc:4a:af:e2:99:02:d9:4c: fa:56:48:52:99:53:1f:58:da:43:11:c2:17:bb:86: ea:9e:ca:08:79:82:28:23:e4:d1:bd:28:86:5f:20: b0:07:71:25:d0:bd:b9:00:49:f1:87:00:00:19:8e: 4f:3e:f4:09:0e:a9:fe:c0:c1:eb:c7:6b:ff:b1:1c: 8b:03:3d:92:08:61:d3:96:66:8c:ff:7c:c3:69:d7: 79:bc:27:96:8d:db:ef:3c:d9:4c:2b:90:10:30:05: c3:30:ac:b2:70:01:4a:0c:90:53:6d:51:0f:af:18: 0b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B3:71:5A:B9:E6:AA:29:8A:14:C0:AE:7F:68:22:AE:04:AF:ED:86 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/77NxWrnmqimKFMCuf2girgSv7YY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.27.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:24:ef:11:ee:9e:f3:09:63:ff:d6:8a:8b:01:e6:e1:40:34: e9:62:87:01:7b:7e:fd:8d:dc:6a:7e:a5:82:5c:dd:c4:59:0e: 90:6c:c4:f5:87:1a:54:4c:6c:82:fb:66:5f:22:e8:f0:b2:85: 58:c8:88:d4:74:cc:9c:e5:5f:eb:be:2b:91:a3:74:0b:2c:51: 5e:b0:b5:5c:62:4a:83:2f:0c:31:b7:8b:cd:fc:f2:23:c8:f1: 94:01:44:4e:e2:51:00:68:61:74:97:4a:6f:68:17:b6:45:42: b3:f7:17:99:52:f2:ad:1f:c7:1d:33:eb:c9:3d:e6:0a:9e:bd: a0:51:13:be:ee:2e:c7:0f:39:c2:cc:81:80:b9:4d:ff:57:8a: 28:ad:28:e7:69:7b:a9:75:7c:64:a1:e9:80:5b:17:78:13:b6: 52:f6:eb:13:45:b5:b0:69:91:b3:69:f8:a7:bf:f2:88:9d:f3: e1:9e:11:6a:70:a4:77:b0:ae:92:1a:58:13:58:cd:36:6a:ba: 3e:dd:bb:2e:ba:e5:eb:49:57:40:9b:df:79:6a:8f:21:23:4a: d6:88:14:60:63:11:7e:fa:4b:bc:37:07:ee:59:95:25:a9:82: dc:c3:3f:97:a6:97:f0:42:a7:d3:4a:55:70:35:1c:86:2c:55: 5e:74:bb:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrBNvOr8KZz8kOK2qTkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmIzNzE1YWI5ZTZhYTI5OGExNGMwYWU3ZjY4MjJhZTA0YWZlZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mQwxTOQcUKPuzAfkN6U/QFyHy9v e+25ant6GNLM6IiGFa5jD46Zp5GefnuopV1WXaGHlXIGDZ5d9EKvFMufZHut4Qo6 UXPkPOcb4xTBEIWgD3H79qGe41HWA8B8Sr8MepMS84cjXRfqwTFGqktx1nq7O5v/ 9OsoqSvVkm2Xo/jKF97DFVn7bzTx7khJ3Eqv4pkC2Uz6VkhSmVMfWNpDEcIXu4bq nsoIeYIoI+TRvSiGXyCwB3El0L25AEnxhwAAGY5PPvQJDqn+wMHrx2v/sRyLAz2S CGHTlmaM/3zDadd5vCeWjdvvPNlMK5AQMAXDMKyycAFKDJBTbVEPrxgL5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO+zcVq55qopihTArn9oIq4Er+2GMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvNzdOeFdybm1xaW1LRk1DdWYyZ2lyZ1N2N1lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALggbMA0G CSqGSIb3DQEBCwUAA4IBAQB6JO8R7p7zCWP/1oqLAebhQDTpYocBe379jdxqfqWC XN3EWQ6QbMT1hxpUTGyC+2ZfIujwsoVYyIjUdMyc5V/rviuRo3QLLFFesLVcYkqD Lwwxt4vN/PIjyPGUAURO4lEAaGF0l0pvaBe2RUKz9xeZUvKtH8cdM+vJPeYKnr2g URO+7i7HDznCzIGAuU3/V4oorSjnaXupdXxkoemAWxd4E7ZS9usTRbWwaZGzafin v/KInfPhnhFqcKR3sK6SGlgTWM02aro+3bsuuuXrSVdAm995ao8hI0rWiBRgYxF+ +ku8NwfuWZUlqYLcwz+XppfwQqfTSlVwNRyGLFVedLtP -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:42 2026 by rpki-client