This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Ztx5883bK84tY0HARcS8sYjlri4.roa File: Ztx5883bK84tY0HARcS8sYjlri4.roa (raw, json) Hash identifier: bpcCdBvqDQHLcDos6XVgo6TvWqDUz3X955uO9/6fckE= Subject key identifier: 66:DC:79:F3:CD:DB:2B:CE:2D:63:41:C0:45:C4:BC:B1:88:E5:AE:2E Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C74A1435F56AEE2576026F267B9FC8 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Ztx5883bK84tY0HARcS8sYjlri4.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 77.81.1.0/24 maxlen: 24 94.177.27.0/24 maxlen: 24 176.223.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4a:14:35:f5:6a:ee:25:76:02:6f:26:7b:9f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66dc79f3cddb2bce2d6341c045c4bcb188e5ae2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b0:62:da:1e:8b:cf:30:cc:03:cd:06:bb:ea: 5a:39:be:2e:88:98:28:7a:fc:64:97:44:a7:17:5d: 3d:09:5e:fa:4d:3e:c2:19:b2:8a:a8:68:0b:5e:c6: 43:a4:e7:3c:21:29:ac:62:95:d1:9a:00:65:2f:b9: 4a:44:c3:52:7a:fc:ad:8c:cf:da:ff:a3:6f:16:a7: 87:17:0a:f7:6d:54:a0:b3:88:d0:22:1e:97:98:0f: db:b9:54:ac:17:27:1c:7c:8f:e2:d7:fd:82:f3:4b: b1:53:fa:32:31:59:10:71:33:a6:0e:8e:35:74:82: 40:a7:c2:10:0b:44:ac:ed:7c:87:5f:a7:b1:9d:16: a1:b6:26:b7:d7:66:92:82:ab:a4:c8:69:e2:42:09: 4d:07:e0:30:dd:2c:37:10:2c:4f:68:25:46:28:6a: bd:fd:43:6d:be:b1:57:30:4e:8b:14:3c:ec:d4:5a: ec:4e:da:52:36:d4:6c:65:cc:b1:18:1a:b5:29:d9: b4:20:c0:cc:2d:59:00:89:13:a7:3b:b4:49:58:e7: 8c:5e:0c:fa:cb:90:ed:23:52:34:38:f3:f5:73:f5: d4:7b:00:3b:20:8c:00:12:2a:b8:3b:94:32:5b:45: 54:34:9e:03:f1:16:11:af:9c:4a:e9:53:b2:83:86: cb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DC:79:F3:CD:DB:2B:CE:2D:63:41:C0:45:C4:BC:B1:88:E5:AE:2E X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Ztx5883bK84tY0HARcS8sYjlri4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.1.0/24 94.177.27.0/24 176.223.181.0/24 Signature Algorithm: sha256WithRSAEncryption 09:7d:2a:da:0c:45:f9:d9:23:de:a8:a8:d3:8a:3a:f6:ee:56: 03:a2:42:63:10:5d:c7:f0:45:a9:7a:29:f9:e6:26:8f:6d:56: ef:16:6a:d7:27:9b:a9:aa:84:64:f2:a7:9f:9c:0f:71:07:5b: 5e:20:ca:47:65:b2:e3:8e:41:e9:37:11:da:13:a3:25:c5:71: 3f:d2:3d:d2:05:79:fa:98:f3:d3:31:b1:50:1d:f2:45:36:c4: 40:3b:64:36:6a:0c:17:86:03:55:87:3c:25:2a:af:43:93:1d: 56:f7:34:17:0d:cc:01:d2:e2:b7:07:e9:b8:65:27:d7:40:26: f9:2a:91:e2:b8:88:a6:1d:ed:e4:f3:21:07:da:db:e6:a0:d1: 90:52:ef:e1:9f:a9:cf:5f:45:b6:39:9f:b8:74:47:a3:79:94: c9:dd:7b:95:f2:fd:d1:bf:eb:a1:40:b8:8c:1f:d4:47:a0:bc: 5c:f0:ca:83:96:2a:be:79:44:b2:72:34:22:be:88:75:dc:af: c7:87:b7:be:f6:2f:3b:bb:66:66:05:e4:18:ee:9a:ee:42:5f: 0a:fc:eb:35:e8:6d:3d:6a:8f:30:9a:c0:03:ec:e0:ee:34:b2: e1:b0:5f:6c:b6:6e:ba:60:86:93:60:e2:d0:67:1f:84:5e:61: 30:d8:17:dd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3x0oUNfVq7iV2Am8me5/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmRjNzlmM2NkZGIyYmNlMmQ2MzQxYzA0NWM0YmNiMTg4ZTVhZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bBi2h6LzzDMA80Gu+paOb4uiJgo evxkl0SnF109CV76TT7CGbKKqGgLXsZDpOc8ISmsYpXRmgBlL7lKRMNSevytjM/a /6NvFqeHFwr3bVSgs4jQIh6XmA/buVSsFyccfI/i1/2C80uxU/oyMVkQcTOmDo41 dIJAp8IQC0Ss7XyHX6exnRahtia312aSgqukyGniQglNB+Aw3Sw3ECxPaCVGKGq9 /UNtvrFXME6LFDzs1FrsTtpSNtRsZcyxGBq1Kdm0IMDMLVkAiROnO7RJWOeMXgz6 y5DtI1I0OPP1c/XUewA7IIwAEiq4O5QyW0VUNJ4D8RYRr5xK6VOyg4bLEwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGbcefPN2yvOLWNBwEXEvLGI5a4uMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvWnR4NTg4M2JLODR0WTBIQVJjUzhzWWpscmk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVEBAwQA XrEbAwQAsN+1MA0GCSqGSIb3DQEBCwUAA4IBAQAJfSraDEX52SPeqKjTijr27lYD okJjEF3H8EWpein55iaPbVbvFmrXJ5upqoRk8qefnA9xB1teIMpHZbLjjkHpNxHa E6MlxXE/0j3SBXn6mPPTMbFQHfJFNsRAO2Q2agwXhgNVhzwlKq9Dkx1W9zQXDcwB 0uK3B+m4ZSfXQCb5KpHiuIimHe3k8yEH2tvmoNGQUu/hn6nPX0W2OZ+4dEejeZTJ 3XuV8v3Rv+uhQLiMH9RHoLxc8MqDliq+eUSycjQivoh13K/Hh7e+9i87u2ZmBeQY 7pruQl8K/Os16G09ao8wmsAD7ODuNLLhsF9stm66YIaTYOLQZx+EXmEw2Bfd -----END CERTIFICATE-----Generated at Thu Jan 1 20:24:01 2026 by rpki-client