This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Yvc2_q8CFIwWxi0_smM6_pvj9ww.roa
File: Yvc2_q8CFIwWxi0_smM6_pvj9ww.roa (raw, json)
Hash identifier: 8dw0+2FsP3o1RY2f4OPjt1CqoHjoBZsOhq5I+7cMB1s=
Subject key identifier: 62:F7:36:FE:AF:02:14:8C:16:C6:2D:3F:B2:63:3A:FE:9B:E3:F7:0C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019B7A5AEE3CA3E22678CE6C17CEC0E17881
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Yvc2_q8CFIwWxi0_smM6_pvj9ww.roa
Signing time: Thu 01 Jan 2026 16:18:58 +0000
ROA not before: Thu 01 Jan 2026 16:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401783
IP address blocks: 77.107.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 08:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:ee:3c:a3:e2:26:78:ce:6c:17:ce:c0:e1:78:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 16:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62f736feaf02148c16c62d3fb2633afe9be3f70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:36:47:a2:83:56:a4:97:b2:ae:ca:fc:58:
e0:97:7c:39:75:ff:ac:a7:1e:d8:9c:fe:e9:fc:65:
d0:f5:b3:e7:ba:63:cf:ec:2d:27:cb:ae:23:e4:be:
29:f3:53:78:1e:c7:81:a6:92:b3:5d:b6:70:0f:3c:
6b:4a:6c:e3:c8:3c:d2:2b:75:dc:0a:60:30:c7:6b:
7d:54:30:08:55:6e:0a:56:d8:37:17:c3:9f:0b:7b:
64:0e:33:97:03:fa:53:70:36:f5:87:3a:fa:e3:e9:
d5:b2:a3:66:c9:b4:13:ed:d6:ea:14:1b:36:e0:7a:
a4:4e:89:44:2b:a0:2e:20:d3:c4:18:71:1b:92:42:
a1:77:80:ce:2c:18:a8:ec:ad:33:06:70:19:96:2c:
c2:65:1d:ea:b3:14:92:6f:6b:d0:07:ec:0c:1b:97:
7a:0b:6c:4f:a6:cf:3f:33:c2:3c:d0:fb:0b:b6:bb:
0b:7e:a1:63:89:4e:3e:01:f2:2e:a0:40:0a:aa:cc:
c1:73:e6:b0:d0:dc:61:40:1c:b0:7c:84:18:e8:62:
e4:5b:37:94:e0:d2:45:73:ac:30:2d:ff:f0:5d:d2:
47:b5:65:19:54:eb:9f:56:52:7e:6a:4d:8c:0e:23:
e6:2d:52:ae:c7:ca:67:02:90:c7:e3:ce:87:12:c8:
74:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F7:36:FE:AF:02:14:8C:16:C6:2D:3F:B2:63:3A:FE:9B:E3:F7:0C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Yvc2_q8CFIwWxi0_smM6_pvj9ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.99.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d9:cb:26:35:4b:64:72:22:52:b9:2d:03:e8:04:f2:0e:8d:
4f:3c:f9:95:2f:78:f1:70:62:7a:08:0e:91:ac:67:e9:ed:1f:
8e:9a:42:16:1d:0f:b8:e1:16:5d:f5:71:62:fd:f5:d1:36:54:
64:bd:c2:2d:55:4d:da:c2:89:1f:34:f3:44:84:e3:4a:ff:0b:
64:9a:05:71:fd:8b:15:3e:9b:7a:9b:d1:ec:5f:f4:d7:a3:91:
72:49:92:0b:9b:b7:e2:2f:c5:96:ef:0e:2f:ad:21:db:11:d6:
86:0c:61:a4:63:73:f0:bd:7d:d6:93:71:dc:c0:18:9b:6e:49:
a3:12:52:63:a5:dc:4f:3f:0f:f2:af:be:1a:dd:17:09:5e:4b:
39:6b:2b:af:69:75:da:79:f4:4c:64:f3:0c:c2:af:34:f0:10:
7b:b8:f0:80:78:7a:1c:cb:5e:39:8d:6d:69:92:9e:ea:01:cd:
cc:ef:30:9a:d7:48:db:11:a2:9f:bf:70:cf:17:c5:04:c2:7e:
ca:85:6b:92:c7:ce:d0:23:76:0d:68:12:25:69:c9:02:f5:31:
de:65:62:90:d7:71:f3:f0:54:5f:06:cc:37:91:75:7a:d2:a0:
74:43:58:8d:17:53:fa:ec:f6:db:09:3a:86:d6:56:36:8c:65:
e7:7d:92:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:09 2026 by rpki-client