This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/KjzZQ3XHTR1E4K2w5QoidTvxCog.roa File: KjzZQ3XHTR1E4K2w5QoidTvxCog.roa (raw, json) Hash identifier: 0FtQ/w38a9SAPO2B+4vZGc9BxQRkeEmmddcJQ1zQ63s= Subject key identifier: 2A:3C:D9:43:75:C7:4D:1D:44:E0:AD:B0:E5:0A:22:75:3B:F1:0A:88 Certificate issuer: /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad Certificate serial: 019B7C806D9E0316B3280C1350C576B2AE75 Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/KjzZQ3XHTR1E4K2w5QoidTvxCog.roa Signing time: Fri 02 Jan 2026 02:19:09 +0000 ROA not before: Fri 02 Jan 2026 02:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 77.232.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6d:9e:03:16:b3:28:0c:13:50:c5:76:b2:ae:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad Validity Not Before: Jan 2 02:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2a3cd94375c74d1d44e0adb0e50a22753bf10a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:01:3e:04:e2:3e:68:66:3a:2a:a9:d2:bc: d3:57:08:f7:ec:84:af:1a:ab:cf:89:11:95:78:53: d0:a1:4e:b2:f2:31:eb:9a:96:0b:65:0d:dd:a0:82: fe:b4:51:67:d9:57:41:a6:3d:b2:c2:95:03:f6:f8: e5:b3:a1:d1:e6:c9:d9:4b:08:88:b9:7a:58:dc:93: 32:97:ea:50:62:a8:47:97:61:34:d3:65:03:97:28: 68:f3:e1:e3:37:a1:c3:75:34:ce:3b:49:fd:44:8c: 76:7d:b1:a0:e0:17:68:96:81:6b:0c:cb:70:68:11: df:c5:de:31:60:f6:05:82:5a:55:a9:f1:2a:ed:95: 30:c4:de:23:32:6d:ed:5f:ca:20:13:f4:d5:68:d8: f9:60:0f:b4:a6:25:0f:ab:46:ea:c4:39:46:5a:4d: ce:b0:dc:da:b9:85:c4:2a:85:85:f6:b2:07:02:b3: 64:6f:e0:84:20:f6:32:04:3d:c1:87:b7:16:c8:d0: 0e:a2:f2:6a:97:02:66:93:b1:23:8c:68:95:f8:0f: c4:15:8e:fe:f3:a4:79:5b:fd:52:27:86:7e:81:b1: 31:4b:c9:c7:75:82:04:2d:9f:d8:81:e2:75:3c:ed: 0e:04:e7:26:f6:b3:f6:9f:61:f2:02:98:df:8f:2c: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3C:D9:43:75:C7:4D:1D:44:E0:AD:B0:E5:0A:22:75:3B:F1:0A:88 X509v3 Authority Key Identifier: keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/KjzZQ3XHTR1E4K2w5QoidTvxCog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.232.97.0/24 Signature Algorithm: sha256WithRSAEncryption 71:63:05:2f:c0:9c:be:95:16:0e:02:fc:9d:a5:96:45:e3:c4: c1:9c:ef:86:a6:f2:3f:da:e7:95:3e:9c:eb:10:7e:46:5c:a5: d1:3d:fc:3a:86:b6:f2:71:2a:e1:0f:92:6a:9c:ff:da:ad:84: 5d:e5:d2:73:b9:74:bb:70:c7:59:6d:3f:c3:1c:77:c6:86:a4: 16:b4:30:db:51:ae:8c:a8:40:dc:5d:00:2f:8e:53:7c:df:0d: f6:95:2c:42:80:ff:58:8c:58:4b:be:2f:e6:27:94:41:5d:30: 8b:8d:cd:1c:8c:2d:9b:4d:70:b2:b5:20:26:ba:89:6c:50:1e: 35:f0:d8:28:ba:89:e6:5c:88:da:c9:37:13:97:70:92:f8:a6: 1a:49:a6:fb:bf:ba:52:79:42:ec:32:97:13:d9:89:ae:26:65: 7e:32:e5:c2:e6:5e:34:ea:6f:19:f7:1a:3c:70:cf:a8:b9:df: 30:cc:4a:5d:68:82:41:51:ea:72:6a:d8:97:14:f2:90:e0:5c: 82:44:45:cb:0a:93:38:78:3e:f6:50:a7:dc:e2:56:6c:4e:44: 73:fb:22:ae:62:a6:6c:46:73:00:6b:c7:ac:b5:ef:5c:31:82: d7:fe:17:f8:9e:97:56:64:3b:b0:6c:25:a2:d3:2c:df:e6:2b: 2f:90:07:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gG2eAxazKAwTUMV2sq51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlOGJhODgyNGM1YzhkMjA3MzI2YTRhM2FiODkzZWJiOGY1 MDk2YWQwHhcNMjYwMTAyMDIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTNjZDk0Mzc1Yzc0ZDFkNDRlMGFkYjBlNTBhMjI3NTNiZjEwYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cMBPgTiPmhmOiqp0rzTVwj37ISv GqvPiRGVeFPQoU6y8jHrmpYLZQ3doIL+tFFn2VdBpj2ywpUD9vjls6HR5snZSwiI uXpY3JMyl+pQYqhHl2E002UDlyho8+HjN6HDdTTOO0n9RIx2fbGg4BdoloFrDMtw aBHfxd4xYPYFglpVqfEq7ZUwxN4jMm3tX8ogE/TVaNj5YA+0piUPq0bqxDlGWk3O sNzauYXEKoWF9rIHArNkb+CEIPYyBD3Bh7cWyNAOovJqlwJmk7EjjGiV+A/EFY7+ 86R5W/1SJ4Z+gbExS8nHdYIELZ/YgeJ1PO0OBOcm9rP2n2HyApjfjyzauQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCo82UN1x00dROCtsOUKInU78QqIMB8GA1UdIwQY MBaAFO6LqIJMXI0gcyako6uJPruPUJatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQt ZWVjZDI4ZTI4ZTM1LzEvS2p6WlEzWEhUUjFFNEsydzVRb2lkVHZ4Q29nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQtZWVjZDI4ZTI4ZTM1 LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATehhMA0G CSqGSIb3DQEBCwUAA4IBAQBxYwUvwJy+lRYOAvydpZZF48TBnO+GpvI/2ueVPpzr EH5GXKXRPfw6hrbycSrhD5JqnP/arYRd5dJzuXS7cMdZbT/DHHfGhqQWtDDbUa6M qEDcXQAvjlN83w32lSxCgP9YjFhLvi/mJ5RBXTCLjc0cjC2bTXCytSAmuolsUB41 8NgouonmXIjayTcTl3CS+KYaSab7v7pSeULsMpcT2YmuJmV+MuXC5l406m8Z9xo8 cM+oud8wzEpdaIJBUepyatiXFPKQ4FyCREXLCpM4eD72UKfc4lZsTkRz+yKuYqZs RnMAa8este9cMYLX/hf4npdWZDuwbCWi0yzf5isvkAct -----END CERTIFICATE-----Generated at Tue Jan 20 07:56:31 2026 by rpki-client