This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/1gx51DcX_brbkgLU88J2iqha27o.roa File: 1gx51DcX_brbkgLU88J2iqha27o.roa (raw, json) Hash identifier: UvLTx+yZ3enaGwB1TfAt+S7PHTMOfGgqytH9LAHVu28= Subject key identifier: D6:0C:79:D4:37:17:FD:BA:DB:92:02:D4:F3:C2:76:8A:A8:5A:DB:BA Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa Certificate serial: 019B7DCA6EE1A8C2C7240282AEDC74DE6CC6 Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/1gx51DcX_brbkgLU88J2iqha27o.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50656 IP address blocks: 77.73.168.0/24 maxlen: 24 77.73.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6e:e1:a8:c2:c7:24:02:82:ae:dc:74:de:6c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d60c79d43717fdbadb9202d4f3c2768aa85adbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e3:ea:7e:f6:2a:33:d9:c3:06:0a:e9:ec:19: ff:bf:78:2e:be:47:31:3d:6f:06:0e:64:72:2c:d6: c3:ec:e6:03:ee:61:7f:8e:95:0b:73:19:03:b7:ba: fe:a0:ff:1a:bd:7a:41:d3:65:7e:87:79:f8:57:f1: ff:b3:7e:b7:01:34:f5:c0:26:ec:c0:76:d4:ad:cd: a5:68:10:d5:3c:35:c0:b7:55:37:2d:05:3b:1a:5e: ab:c2:31:ec:17:49:ba:06:6d:1e:f1:6f:5d:c5:1d: f1:ef:b4:17:06:48:98:f2:89:32:50:5c:82:b9:47: 82:57:a1:74:29:9f:01:21:bf:de:b7:29:23:48:ba: c7:d5:91:b6:dc:4d:6b:12:84:3c:be:00:79:26:9a: 1f:85:65:44:78:20:d9:83:7a:f9:b3:9d:e2:b5:ed: f8:f5:2c:82:d4:b7:38:66:b1:1c:78:2a:f9:92:6d: 2c:51:e1:b5:a1:26:70:8d:64:86:fb:c4:e1:28:54: 72:0e:5f:ef:19:00:2c:32:2d:6a:a2:74:0b:cb:5c: 42:2f:ba:1c:23:8f:a0:ab:0c:4f:1c:a4:1d:e5:10: ef:c6:06:cf:68:18:6e:7c:0a:6c:d2:90:2d:6f:06: 16:05:c4:b7:66:21:d2:2b:9c:67:4e:46:10:27:ac: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0C:79:D4:37:17:FD:BA:DB:92:02:D4:F3:C2:76:8A:A8:5A:DB:BA X509v3 Authority Key Identifier: keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/1gx51DcX_brbkgLU88J2iqha27o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.168.0/23 Signature Algorithm: sha256WithRSAEncryption 11:f3:2a:4f:56:55:e6:46:e0:af:16:86:99:5a:48:68:dc:0d: 54:6f:2a:fc:7d:4e:0f:d6:7e:b4:d6:74:91:77:bf:2e:d2:c3: 09:22:73:2d:c2:05:d5:8b:5c:90:c6:9d:06:87:41:90:1a:09: 77:86:53:ab:b0:e1:a0:c9:39:85:e3:be:a0:fb:1c:ce:ee:e3: b7:48:1a:9d:88:93:8f:2d:40:60:cf:f1:da:3d:d8:2a:68:61: cc:24:a5:e5:6a:f6:5a:37:ae:83:c3:95:a7:62:a3:56:61:26: 9f:79:af:47:42:ac:d6:f1:b5:73:80:93:38:57:93:ad:28:8f: 51:97:15:d8:43:c5:88:ab:a9:ca:d4:d8:b3:a1:01:53:32:f1: 86:33:c8:93:a1:38:95:a3:ca:de:30:ff:ff:96:53:3f:b3:84: be:4e:17:7b:54:fe:35:09:c6:5a:00:1e:0c:d4:51:ea:a6:41: ac:0b:d7:56:e8:0b:be:be:46:34:97:b4:61:9f:21:3f:fa:ea: b0:4b:7d:ba:ed:58:0a:9a:0a:24:a8:ae:c4:0a:ef:0f:55:c3: 35:55:bf:cc:a2:33:52:b4:cc:83:34:dc:38:e9:9a:aa:80:4f: 34:0b:e9:72:79:3b:55:0f:bd:23:de:39:11:85:50:37:1c:3e: d2:fa:5e:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ym7hqMLHJAKCrtx03mzGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZDZlODI3M2Y5MDUxYWMzMWNiOTU3OTJjYjUxNDAwZGFi NzE0YWEwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjBjNzlkNDM3MTdmZGJhZGI5MjAyZDRmM2MyNzY4YWE4NWFkYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+PqfvYqM9nDBgrp7Bn/v3guvkcx PW8GDmRyLNbD7OYD7mF/jpULcxkDt7r+oP8avXpB02V+h3n4V/H/s363ATT1wCbs wHbUrc2laBDVPDXAt1U3LQU7Gl6rwjHsF0m6Bm0e8W9dxR3x77QXBkiY8okyUFyC uUeCV6F0KZ8BIb/etykjSLrH1ZG23E1rEoQ8vgB5JpofhWVEeCDZg3r5s53ite34 9SyC1Lc4ZrEceCr5km0sUeG1oSZwjWSG+8ThKFRyDl/vGQAsMi1qonQLy1xCL7oc I4+gqwxPHKQd5RDvxgbPaBhufAps0pAtbwYWBcS3ZiHSK5xnTkYQJ6xAGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNYMedQ3F/2625IC1PPCdoqoWtu6MB8GA1UdIwQY MBaAFALW6Cc/kFGsMcuVeSy1FADatxSqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXRib0p6LVFVYXd4eTVWNUxMVVVBTnEzRktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83Y2EzZGUtOTJjOC00OWZiLWFjYWUt OWYxYTVkYmI0MWQ2LzEvMWd4NTFEY1hfYnJia2dMVTg4SjJpcWhhMjdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83Y2EzZGUtOTJjOC00OWZiLWFjYWUtOWYxYTVkYmI0MWQ2 LzEvQXRib0p6LVFVYXd4eTVWNUxMVVVBTnEzRktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTUmoMA0G CSqGSIb3DQEBCwUAA4IBAQAR8ypPVlXmRuCvFoaZWkho3A1Ubyr8fU4P1n601nSR d78u0sMJInMtwgXVi1yQxp0Gh0GQGgl3hlOrsOGgyTmF476g+xzO7uO3SBqdiJOP LUBgz/HaPdgqaGHMJKXlavZaN66Dw5WnYqNWYSafea9HQqzW8bVzgJM4V5OtKI9R lxXYQ8WIq6nK1NizoQFTMvGGM8iToTiVo8reMP//llM/s4S+Thd7VP41CcZaAB4M 1FHqpkGsC9dW6Au+vkY0l7RhnyE/+uqwS3267VgKmgokqK7ECu8PVcM1Vb/MojNS tMyDNNw46ZqqgE80C+lyeTtVD70j3jkRhVA3HD7S+l6y -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:15 2026 by rpki-client