This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/d77IWbkczkICwfpVT1sRhf7rXjA.roa File: d77IWbkczkICwfpVT1sRhf7rXjA.roa (raw, json) Hash identifier: zbuTl//ldlxEHT4wWa1vNyL5/cZHH2/ZJ1uuYflyQnM= Subject key identifier: 77:BE:C8:59:B9:1C:CE:42:02:C1:FA:55:4F:5B:11:85:FE:EB:5E:30 Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418 Certificate serial: 019BD2A972AB76E87AF15E98EFF618CF7383 Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/d77IWbkczkICwfpVT1sRhf7rXjA.roa Signing time: Sun 18 Jan 2026 19:51:18 +0000 ROA not before: Sun 18 Jan 2026 19:51:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16350 IP address blocks: 185.6.160.0/22 maxlen: 22 217.119.224.0/20 maxlen: 20 2a02:1398::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:a9:72:ab:76:e8:7a:f1:5e:98:ef:f6:18:cf:73:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418 Validity Not Before: Jan 18 19:51:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77bec859b91cce4202c1fa554f5b1185feeb5e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:0f:6d:98:9f:28:76:8b:84:59:b7:29:4b: ff:7f:06:79:0d:21:31:2a:8c:6f:2b:a0:c8:49:4f: 1f:9d:31:c6:26:23:a6:59:61:d0:81:91:66:17:20: e5:c4:63:5f:8a:e2:97:69:02:e3:ac:34:94:3b:d9: 1e:55:1e:8a:a1:ec:40:be:96:67:01:95:b8:5c:d7: ef:85:bd:28:d6:a4:72:ff:22:df:80:df:5e:f4:a6: c0:b4:dd:c5:9d:74:b3:b3:f9:ef:0e:b5:73:e7:24: 41:3f:65:51:60:5f:1d:fc:29:2f:3c:4a:13:1c:1b: 05:2f:46:b9:7f:b5:01:56:82:21:d7:f7:e7:c8:60: e7:fe:d7:be:e5:81:43:d8:27:b3:df:6c:8a:05:24: f3:45:c8:f8:38:1b:6f:9b:1b:cc:a2:85:2d:c6:81: e1:a6:5a:b8:20:07:5a:1a:bb:30:36:e2:4f:44:e0: 7b:fb:7c:06:40:b5:0b:18:94:34:9f:27:c3:49:fe: 95:f6:55:33:54:41:39:29:6d:43:f9:98:80:35:18: be:d4:b4:0f:59:1e:38:5c:c9:fa:5e:67:49:76:ea: c7:79:c5:67:d7:89:79:0c:af:71:17:36:30:2f:ea: e4:9b:df:33:d3:ce:70:02:d6:87:ec:51:63:13:fa: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BE:C8:59:B9:1C:CE:42:02:C1:FA:55:4F:5B:11:85:FE:EB:5E:30 X509v3 Authority Key Identifier: keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/d77IWbkczkICwfpVT1sRhf7rXjA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.6.160.0/22 217.119.224.0/20 IPv6: 2a02:1398::/32 Signature Algorithm: sha256WithRSAEncryption 39:64:0e:95:08:51:63:8f:4e:9d:ba:5d:fe:55:29:48:97:6f: c2:6f:60:63:b3:70:72:50:a6:f0:90:a9:48:5a:43:ed:d8:aa: ec:87:1d:12:ca:5b:09:d8:1b:bd:4d:40:e2:1a:16:1b:d8:ab: e3:94:ef:03:d2:7a:17:95:4a:fc:88:5e:54:d1:62:df:9a:be: 02:24:92:fd:5f:69:19:b4:d5:69:6a:d3:7d:c2:11:a6:50:9b: fa:f9:89:f8:74:69:ee:1f:08:5f:8e:9e:1c:dc:ad:4c:df:fa: 10:3d:9a:b3:af:96:ac:a7:0f:1e:4c:fd:97:14:f2:4d:a1:66: ea:ca:c4:f3:50:40:6f:ae:7e:bc:7a:d4:12:11:09:7f:8e:cb: 72:7a:38:f0:d7:1d:5f:e9:61:13:2c:c3:22:2e:29:26:84:fc: dc:b3:c9:e4:6b:34:55:97:b2:34:d8:3a:97:10:71:22:92:bf: a5:92:2b:9f:18:24:b1:4e:a1:18:96:47:06:0d:7c:36:83:13: c0:41:c7:cc:3f:cd:f0:55:6d:bf:a2:e2:5b:b4:7b:34:f1:d3: c0:df:b4:ee:cc:91:8e:3c:3b:53:e0:89:b6:54:c4:88:32:5b: 33:81:29:45:51:60:82:20:cd:66:75:6b:b4:6e:7c:52:e0:12: 46:1c:48:ee -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZvSqXKrduh68V6Y7/YYz3ODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyY2YzOGM4ZTdiMTkyMmY2ZWJmM2ZkMzQwNzM1Y2RiMDQy MzE0MTgwHhcNMjYwMTE4MTk1MTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2JlYzg1OWI5MWNjZTQyMDJjMWZhNTU0ZjViMTE4NWZlZWI1ZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme4PbZifKHaLhFm3KUv/fwZ5DSEx KoxvK6DISU8fnTHGJiOmWWHQgZFmFyDlxGNfiuKXaQLjrDSUO9keVR6KoexAvpZn AZW4XNfvhb0o1qRy/yLfgN9e9KbAtN3FnXSzs/nvDrVz5yRBP2VRYF8d/CkvPEoT HBsFL0a5f7UBVoIh1/fnyGDn/te+5YFD2Cez32yKBSTzRcj4OBtvmxvMooUtxoHh plq4IAdaGrswNuJPROB7+3wGQLULGJQ0nyfDSf6V9lUzVEE5KW1D+ZiANRi+1LQP WR44XMn6XmdJdurHecVn14l5DK9xFzYwL+rkm98z085wAtaH7FFjE/p6OQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHe+yFm5HM5CAsH6VU9bEYX+614wMB8GA1UdIwQY MBaAFBLPOMjnsZIvbr8/00BzXNsEIxQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2Mt YmUwYmFmYjc4MmVlLzEvZDc3SVdia2N6a0lDd2ZwVlQxc1JoZjdyWGpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2MtYmUwYmFmYjc4MmVl LzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQagAwQE 2XfgMA0EAgACMAcDBQAqAhOYMA0GCSqGSIb3DQEBCwUAA4IBAQA5ZA6VCFFjj06d ul3+VSlIl2/Cb2Bjs3ByUKbwkKlIWkPt2Krshx0SylsJ2Bu9TUDiGhYb2KvjlO8D 0noXlUr8iF5U0WLfmr4CJJL9X2kZtNVpatN9whGmUJv6+Yn4dGnuHwhfjp4c3K1M 3/oQPZqzr5aspw8eTP2XFPJNoWbqysTzUEBvrn68etQSEQl/jstyejjw1x1f6WET LMMiLikmhPzcs8nkazRVl7I02DqXEHEikr+lkiufGCSxTqEYlkcGDXw2gxPAQcfM P83wVW2/ouJbtHs08dPA37TuzJGOPDtT4Im2VMSIMlszgSlFUWCCIM1mdWu0bnxS 4BJGHEju -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:18 2026 by rpki-client