This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa
File: gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (raw, json)
Hash identifier: argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=
Subject key identifier: 83:3A:1E:67:60:20:3B:57:B2:ED:93:5C:BA:42:73:DF:38:D3:D4:B6
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 019C1F0E34B4336C2EC381DA446C98F98055
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa
Signing time: Mon 02 Feb 2026 15:52:30 +0000
ROA not before: Mon 02 Feb 2026 15:52:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 77.73.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1f:0e:34:b4:33:6c:2e:c3:81:da:44:6c:98:f9:80:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Feb 2 15:52:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=833a1e6760203b57b2ed935cba4273df38d3d4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:94:be:90:3f:80:78:c9:02:7f:02:b1:c5:
9e:7a:55:e5:25:72:37:4a:c2:fb:a8:ae:1c:f3:97:
2b:f4:ce:45:66:c4:8a:00:8a:ab:3e:fd:d8:47:33:
cc:af:65:6a:ae:1a:9f:c6:b9:ab:57:65:be:9b:d7:
ac:fe:c7:de:a2:7b:ca:27:51:72:9c:5a:94:33:ab:
b2:63:f2:3d:3f:87:30:fd:69:c7:b4:eb:5f:6d:51:
17:af:ce:1d:7f:39:a8:74:e9:ea:a8:83:c7:98:86:
fb:33:9b:85:29:f7:84:b9:3e:86:e0:19:a6:eb:f0:
78:8d:e1:5e:90:c8:f4:a1:8d:75:d9:1c:71:10:f3:
13:b5:8e:b6:14:8f:91:5b:c9:b2:cd:2f:94:68:af:
bc:7d:1e:7a:0f:0b:ca:e0:da:a2:32:40:1c:88:9e:
f3:b7:e7:45:74:3a:fc:29:f5:e1:19:5f:70:2e:c7:
9d:39:58:f1:2e:ac:c9:3b:37:7e:ca:b1:9a:86:20:
00:99:28:f1:a7:aa:65:29:a0:26:56:46:0b:de:7b:
6f:d6:c2:17:b2:db:f2:9c:f6:0c:2b:e8:0b:12:16:
3b:62:69:c0:59:0f:c1:a1:7e:38:4e:c2:4e:3c:e8:
9d:68:08:88:13:55:b7:44:69:9b:d1:79:ce:e9:58:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3A:1E:67:60:20:3B:57:B2:ED:93:5C:BA:42:73:DF:38:D3:D4:B6
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.113.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f8:e8:bc:ee:05:d4:9a:5f:87:d2:49:82:25:3b:3c:dc:a4:
73:f4:9d:d4:3e:a7:e1:f9:a8:f3:1c:61:a6:54:d9:37:93:c3:
23:18:ee:22:b5:08:c9:67:15:35:f3:43:66:f9:d2:04:49:d8:
54:ed:e1:c6:3d:17:fd:18:9a:7d:b9:15:ea:2d:3b:9c:e2:ed:
80:9d:6d:25:09:6a:bf:6f:cb:f9:b7:54:10:bd:86:d3:64:db:
34:0d:3b:fb:42:a9:2b:a6:63:87:66:3b:e0:d8:c7:5e:6f:94:
2a:6f:88:cb:15:b6:7f:24:9c:8c:b1:cb:fb:89:8c:77:34:b7:
10:c1:f0:8a:e8:3e:d6:b0:99:38:52:38:6e:34:6f:36:97:ff:
3d:69:51:da:e8:67:a1:6d:5f:1e:c1:05:7f:d7:13:ba:cd:b7:
87:99:7f:4b:8c:79:be:22:7d:c7:16:a6:3d:19:ab:a3:66:68:
12:3a:87:5b:87:fd:db:9b:d5:d8:44:67:05:38:0b:6e:e3:5b:
fd:b3:fd:4f:cd:4b:10:30:55:a2:a3:b1:bc:90:f4:61:2b:f2:
84:41:25:15:34:96:2b:34:53:0d:03:9e:7f:ee:31:5e:a5:0e:
a1:e1:0f:ab:d1:0f:35:c2:5c:6c:fa:db:fd:6e:b4:47:16:3b:
b2:f0:de:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:16 2026 by rpki-client