This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/2fZ1bQhJblUq5fcVHhL0C_-Td54.roa File: 2fZ1bQhJblUq5fcVHhL0C_-Td54.roa (raw, json) Hash identifier: pAu1H6XJd6QLNwtCItbi85jUBgZSBz8c5zchsEegiak= Subject key identifier: D9:F6:75:6D:08:49:6E:55:2A:E5:F7:15:1E:12:F4:0B:FF:93:77:9E Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef Certificate serial: 019B7CEDF69A01F7EC813C6213DB2467E80C Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/2fZ1bQhJblUq5fcVHhL0C_-Td54.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39724 IP address blocks: 77.247.100.0/22 maxlen: 22 77.247.100.0/23 maxlen: 23 77.247.100.0/24 maxlen: 24 77.247.101.0/24 maxlen: 24 77.247.102.0/23 maxlen: 23 77.247.102.0/24 maxlen: 24 77.247.103.0/24 maxlen: 24 185.55.156.0/22 maxlen: 22 185.55.156.0/23 maxlen: 23 185.55.156.0/24 maxlen: 24 185.55.157.0/24 maxlen: 24 185.55.158.0/23 maxlen: 23 185.55.158.0/24 maxlen: 24 185.55.159.0/24 maxlen: 24 2a0d:a6c0::/29 maxlen: 29 2a0d:a6c0::/32 maxlen: 32 2a0d:a6c1::/32 maxlen: 32 2a0d:a6c2::/32 maxlen: 32 2a0d:a6c3::/32 maxlen: 32 2a0d:a6c4::/32 maxlen: 32 2a0d:a6c5::/32 maxlen: 32 2a0d:a6c6::/32 maxlen: 32 2a0d:a6c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f6:9a:01:f7:ec:81:3c:62:13:db:24:67:e8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9f6756d08496e552ae5f7151e12f40bff93779e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e6:aa:bf:d2:d6:96:5c:27:b5:b4:08:14:83: b3:65:86:c7:21:06:b4:26:ec:6b:48:8c:90:b2:f5: bc:06:9c:6a:82:88:89:a1:9d:92:9d:00:5d:3d:81: 24:74:51:9a:79:92:88:1f:9f:23:80:bb:32:80:b1: 92:c3:51:49:7a:31:e7:c4:9b:8b:bf:5a:aa:f7:18: 72:ad:fa:73:51:92:45:62:a3:12:08:a9:98:19:a8: 27:99:cc:9f:fc:1c:ce:f5:9c:09:45:eb:1d:ff:0c: 20:12:3c:5b:08:df:c3:29:e9:3d:bb:8b:c4:5e:b1: e5:25:e9:a4:f7:18:e3:fe:15:d7:a3:45:00:10:d5: 72:f0:72:83:2c:4c:03:21:8b:c3:73:3e:6b:9e:c9: 14:92:9a:21:36:bd:1d:6d:ff:3d:a7:91:ad:5d:74: ac:02:44:13:ea:8f:9f:79:ca:17:1e:a6:26:ff:fd: 8b:dd:b4:48:91:c8:2e:15:f3:2c:8e:7f:85:23:0d: 43:9c:fd:3f:0c:a6:15:15:39:ee:35:28:52:4f:e5: 40:78:bb:38:46:39:ef:05:8e:93:83:b1:b1:13:22: 6d:c9:1e:38:48:1b:c4:c9:f8:bc:d8:08:fe:76:2c: 93:e6:ef:f8:bb:73:5e:9f:04:1a:5d:c9:1b:38:6f: 5c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F6:75:6D:08:49:6E:55:2A:E5:F7:15:1E:12:F4:0B:FF:93:77:9E X509v3 Authority Key Identifier: keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/2fZ1bQhJblUq5fcVHhL0C_-Td54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.100.0/22 185.55.156.0/22 IPv6: 2a0d:a6c0::/29 Signature Algorithm: sha256WithRSAEncryption 21:57:e5:49:0e:c6:28:22:aa:e6:b6:05:15:28:24:96:ef:8f: 15:17:71:45:f3:72:10:b7:26:7b:f8:a3:e6:80:27:10:68:1a: 56:d1:d7:fb:dc:32:bf:b4:a5:75:c7:02:a7:91:b1:89:7f:81: ce:f8:98:63:27:83:9c:36:60:c4:fa:3c:70:ef:93:cd:45:58: 00:8c:18:de:df:aa:c6:6b:fa:ab:24:73:77:06:f1:af:99:1d: bc:ea:28:66:ee:4a:69:f5:07:19:97:ae:eb:2e:e0:f7:d7:23: e4:53:53:e8:57:ef:b6:84:b0:67:3e:8f:7d:87:66:4f:05:ef: 50:34:0f:c7:5d:ed:83:2e:79:34:a4:fd:27:30:be:cf:65:c2: 31:99:1b:50:8e:11:65:cc:96:13:1f:85:11:88:f7:d2:3f:c7: 75:b9:31:23:9e:a5:f8:1c:44:ed:d1:0d:64:79:cf:61:5d:99: 3b:d1:5a:f0:67:38:59:94:88:87:43:34:1e:b8:26:e0:5e:22: cc:94:7b:49:3c:32:2b:5e:58:5a:f4:a2:22:ca:e5:e1:21:91: 66:55:31:a0:d7:d5:96:6b:91:79:20:23:0d:a1:f9:40:b9:1b: ac:ce:85:6c:3d:a2:55:a5:dc:19:2d:2c:59:be:31:07:91:b2: 53:0a:af:34 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87faaAffsgTxiE9skZ+gMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmM2VkM2Q0ZDQ3YjhlODI1ZmJmZDA3OTQ4MmY3YTBjMjFk YzkxZWYwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWY2NzU2ZDA4NDk2ZTU1MmFlNWY3MTUxZTEyZjQwYmZmOTM3NzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+aqv9LWllwntbQIFIOzZYbHIQa0 JuxrSIyQsvW8BpxqgoiJoZ2SnQBdPYEkdFGaeZKIH58jgLsygLGSw1FJejHnxJuL v1qq9xhyrfpzUZJFYqMSCKmYGagnmcyf/BzO9ZwJResd/wwgEjxbCN/DKek9u4vE XrHlJemk9xjj/hXXo0UAENVy8HKDLEwDIYvDcz5rnskUkpohNr0dbf89p5GtXXSs AkQT6o+fecoXHqYm//2L3bRIkcguFfMsjn+FIw1DnP0/DKYVFTnuNShST+VAeLs4 RjnvBY6Tg7GxEyJtyR44SBvEyfi82Aj+diyT5u/4u3NenwQaXckbOG9ccQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNn2dW0ISW5VKuX3FR4S9Av/k3eeMB8GA1UdIwQY MBaAFP8+09TUe46CX7/QeUgvegwh3JHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2Mzct NWIwOWE2NzQzMzc1LzEvMmZaMWJRaEpibFVxNWZjVkhoTDBDXy1UZDU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2MzctNWIwOWE2NzQzMzc1 LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCTfdkAwQC uTecMA0EAgACMAcDBQMqDabAMA0GCSqGSIb3DQEBCwUAA4IBAQAhV+VJDsYoIqrm tgUVKCSW748VF3FF83IQtyZ7+KPmgCcQaBpW0df73DK/tKV1xwKnkbGJf4HO+Jhj J4OcNmDE+jxw75PNRVgAjBje36rGa/qrJHN3BvGvmR286ihm7kpp9QcZl67rLuD3 1yPkU1PoV++2hLBnPo99h2ZPBe9QNA/HXe2DLnk0pP0nML7PZcIxmRtQjhFlzJYT H4URiPfSP8d1uTEjnqX4HETt0Q1kec9hXZk70VrwZzhZlIiHQzQeuCbgXiLMlHtJ PDIrXlha9KIiyuXhIZFmVTGg19WWa5F5ICMNoflAuRuszoVsPaJVpdwZLSxZvjEH kbJTCq80 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:25 2026 by rpki-client