This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/1_nGVkzyveL8HLZ_ny0-9H38b-Q.roa File: 1_nGVkzyveL8HLZ_ny0-9H38b-Q.roa (raw, json) Hash identifier: m7KPmdw0ypm5cCsSjSVvSiDVgOTaFEIiCIFtIRscgBM= Subject key identifier: D7:F9:C6:56:4C:F2:BD:E2:FC:1C:B6:7F:9F:2D:3E:F4:7D:FC:6F:E4 Certificate issuer: /CN=8f2ae45c509041a796a968953581f51d45bfce55 Certificate serial: 019B7EA656CB000C84D4D43AD7E72DC3CECE Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/1_nGVkzyveL8HLZ_ny0-9H38b-Q.roa Signing time: Fri 02 Jan 2026 12:19:49 +0000 ROA not before: Fri 02 Jan 2026 12:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 77.75.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:56:cb:00:0c:84:d4:d4:3a:d7:e7:2d:c3:ce:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55 Validity Not Before: Jan 2 12:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7f9c6564cf2bde2fc1cb67f9f2d3ef47dfc6fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:77:1e:1b:40:35:85:98:45:6f:5e:b7:99:8e: f5:58:46:c7:c5:35:42:bb:d6:cb:e1:7f:26:1d:7a: d7:e2:45:08:02:bb:3d:7c:05:be:bf:e5:d5:2a:b5: c9:9b:d2:1e:90:1b:1e:3a:50:79:fe:a6:cc:ab:23: d6:48:8f:9d:67:6c:68:1a:a0:92:18:9d:77:f3:aa: 5d:76:65:97:7b:a3:7b:b2:4c:bf:39:d2:10:cb:ad: 60:88:23:23:99:16:ef:e8:35:85:1f:5c:93:5c:14: 80:ea:64:10:a9:75:10:52:7e:67:21:f8:9d:25:8c: 95:16:3c:b2:0f:9e:3a:81:09:fc:a5:54:39:f5:07: e0:c1:fe:b5:01:ec:fd:0d:0f:46:e7:0a:37:ac:24: e1:ca:aa:c9:b0:38:fc:d9:eb:97:44:23:81:af:54: d4:01:98:22:9d:29:5c:b6:e1:30:45:ac:c8:73:2b: 4d:c2:b8:64:d5:a9:d4:73:50:73:f7:14:c1:77:8f: 6d:61:85:fd:7e:e5:25:ea:82:4f:08:b3:3e:e1:88: 5a:e5:c2:69:63:1e:83:33:f7:14:9d:d7:b7:14:b4: ff:a0:78:26:d3:c9:77:09:ea:14:78:23:e2:b9:4f: 74:0a:45:bd:0c:67:72:5c:f8:71:e6:9d:e8:7e:7c: 6a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F9:C6:56:4C:F2:BD:E2:FC:1C:B6:7F:9F:2D:3E:F4:7D:FC:6F:E4 X509v3 Authority Key Identifier: keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/1_nGVkzyveL8HLZ_ny0-9H38b-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.112.0/21 Signature Algorithm: sha256WithRSAEncryption 5f:cc:b6:9a:05:e0:9d:1f:58:6d:e4:43:17:ac:10:07:78:63: 23:6b:36:ed:ce:80:32:0b:17:ce:ca:e7:03:2a:23:ec:7b:6a: a4:4e:7f:06:b8:27:29:9f:91:75:ac:1f:c9:b6:4a:2e:cf:90: 7a:3e:77:46:1b:36:d7:70:6b:c1:c7:05:36:bc:f9:2a:7b:2e: 10:24:b3:fd:ef:db:3b:4d:8a:13:ea:83:26:98:42:56:37:b3: ca:f4:5d:ba:b7:22:21:c2:10:05:a5:ea:f0:45:1f:a8:ee:c6: f0:60:2f:ab:f4:bf:dc:94:1b:45:d9:fa:7b:64:3e:c5:b8:47: 12:68:7f:fa:f0:c0:94:df:6e:9f:6e:93:20:af:a9:ad:e8:c3: bb:95:14:43:c4:5a:eb:37:ea:fe:e1:7e:6e:f8:4a:1d:d8:6d: 58:67:8d:b5:a7:24:f3:25:f7:7f:26:d5:d1:6e:2a:8e:96:cb: 15:bc:55:6a:37:95:3d:99:ef:88:a9:f1:ea:28:65:9a:07:f8: 19:c8:bd:af:01:2c:ac:93:69:4f:87:2b:19:c9:ce:43:2a:cb: ce:e3:65:e6:1a:c5:cc:b0:2f:a2:48:1c:09:62:13:ed:ee:ca: 02:fc:27:a0:4d:8c:8a:49:24:bd:88:5c:c2:83:15:0f:b3:50: 73:64:14:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+plbLAAyE1NQ61+ctw87OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMmFlNDVjNTA5MDQxYTc5NmE5Njg5NTM1ODFmNTFkNDVi ZmNlNTUwHhcNMjYwMTAyMTIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2Y5YzY1NjRjZjJiZGUyZmMxY2I2N2Y5ZjJkM2VmNDdkZmM2ZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23ceG0A1hZhFb163mY71WEbHxTVC u9bL4X8mHXrX4kUIArs9fAW+v+XVKrXJm9IekBseOlB5/qbMqyPWSI+dZ2xoGqCS GJ1386pddmWXe6N7sky/OdIQy61giCMjmRbv6DWFH1yTXBSA6mQQqXUQUn5nIfid JYyVFjyyD546gQn8pVQ59Qfgwf61Aez9DQ9G5wo3rCThyqrJsDj82euXRCOBr1TU AZginSlctuEwRazIcytNwrhk1anUc1Bz9xTBd49tYYX9fuUl6oJPCLM+4Yha5cJp Yx6DM/cUnde3FLT/oHgm08l3CeoUeCPiuU90CkW9DGdyXPhx5p3ofnxqzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNf5xlZM8r3i/By2f58tPvR9/G/kMB8GA1UdIwQY MBaAFI8q5FxQkEGnlqlolTWB9R1Fv85VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85MzkwMWEtMDQzYi00OWM4LWFkMzct YWM3ZjIxYjZiNzRkLzEvMV9uR1Zrenl2ZUw4SExaX255MC05SDM4Yi1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85MzkwMWEtMDQzYi00OWM4LWFkMzctYWM3ZjIxYjZiNzRk LzEvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTUtwMA0G CSqGSIb3DQEBCwUAA4IBAQBfzLaaBeCdH1ht5EMXrBAHeGMjazbtzoAyCxfOyucD KiPse2qkTn8GuCcpn5F1rB/Jtkouz5B6PndGGzbXcGvBxwU2vPkqey4QJLP979s7 TYoT6oMmmEJWN7PK9F26tyIhwhAFperwRR+o7sbwYC+r9L/clBtF2fp7ZD7FuEcS aH/68MCU326fbpMgr6mt6MO7lRRDxFrrN+r+4X5u+Eod2G1YZ421pyTzJfd/JtXR biqOlssVvFVqN5U9me+IqfHqKGWaB/gZyL2vASysk2lPhysZyc5DKsvO42XmGsXM sC+iSBwJYhPt7soC/CegTYyKSSS9iFzCgxUPs1BzZBTI -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:40 2026 by rpki-client