This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/AXDbFHRRURCQerpRgnAggK7Ta-Y.roa File: AXDbFHRRURCQerpRgnAggK7Ta-Y.roa (raw, json) Hash identifier: p8zZBqBwXmRPjDHpTUw1CzO1XmAgl9lFsGmMaXiazxE= Subject key identifier: 01:70:DB:14:74:51:51:10:90:7A:BA:51:82:70:20:80:AE:D3:6B:E6 Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6 Certificate serial: 019B7B3631DA01EB27EF842A6363A3079D52 Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/AXDbFHRRURCQerpRgnAggK7Ta-Y.roa Signing time: Thu 01 Jan 2026 20:18:27 +0000 ROA not before: Thu 01 Jan 2026 20:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205718 IP address blocks: 77.83.144.0/22 maxlen: 22 2a09:fcc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:31:da:01:eb:27:ef:84:2a:63:63:a3:07:9d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6 Validity Not Before: Jan 1 20:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0170db1474515110907aba5182702080aed36be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:81:4c:fc:3e:dd:e1:7b:81:b2:31:7e:79: 87:ea:21:af:c6:58:0e:23:98:68:a1:52:6d:ba:ee: 7f:df:b1:6c:17:23:71:9c:9d:75:ca:3e:c5:63:e8: 06:e3:30:d1:fc:cc:08:46:46:60:ec:8a:38:b1:61: 7c:bf:24:32:52:ec:9d:0d:7d:37:c2:83:c3:e5:0d: 87:5e:d3:c0:2d:19:72:43:64:f2:7c:f0:66:4a:1b: 77:84:75:3a:11:4b:e8:a0:7e:5d:01:2b:17:e7:b7: 79:b3:9f:1e:89:d3:2e:82:17:d0:b8:7f:dd:ae:71: a4:9f:cc:04:b4:f4:c8:07:ef:f1:39:28:b0:91:01: 06:7d:6d:47:7a:8d:67:4d:2c:c9:42:f4:e1:d6:3f: ad:32:3a:85:35:a1:7f:77:b3:39:bf:6a:6b:6f:57: bc:c0:eb:70:8f:4a:73:62:8b:fa:87:2c:fd:00:97: cc:6c:62:d6:ce:62:a9:ba:68:22:ab:52:b7:38:20: 10:70:84:2c:2a:82:bc:2a:c5:98:68:83:ec:34:8b: 2e:45:24:35:9a:2c:ff:73:8b:8c:69:3f:f7:65:5a: 0c:ab:50:74:8a:f6:1f:6e:03:f1:6a:51:9e:bb:98: d7:e8:e7:48:7c:a6:49:0b:66:98:f6:56:aa:81:0b: 05:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:70:DB:14:74:51:51:10:90:7A:BA:51:82:70:20:80:AE:D3:6B:E6 X509v3 Authority Key Identifier: keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/AXDbFHRRURCQerpRgnAggK7Ta-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.144.0/22 IPv6: 2a09:fcc0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:7d:51:5d:25:62:6d:01:3e:eb:4b:87:27:aa:bb:1a:ca:95: 8d:34:23:a3:4e:f4:73:bd:ea:e8:73:9a:2f:81:ca:d6:89:42: a3:99:12:56:0b:9d:f5:c1:71:0b:b7:a9:e1:77:f7:f0:e4:eb: 43:47:bc:98:55:8d:ce:71:91:ca:99:e0:5e:4d:d2:24:92:50: a7:e7:90:3c:2d:f1:51:32:2a:a5:e1:75:23:94:e3:8a:1c:39: 52:6f:9e:f9:b3:88:cf:8a:51:6d:99:6c:4e:e4:c2:22:19:81: 15:5b:bf:9b:47:5c:1a:ab:31:e0:85:f2:e4:6d:fa:7f:64:25: 0d:f6:50:3e:1b:38:bb:be:99:a0:1f:38:e4:7b:cb:81:10:8f: 3a:2e:0e:79:f0:c4:55:f7:1a:0a:03:cd:ec:6c:ed:cb:ac:e1: 5a:b5:83:53:82:a9:1b:77:5f:eb:e9:7b:d3:3a:2d:dc:b0:7e: fb:36:cc:27:9d:61:5e:fe:aa:f9:05:7e:2a:67:b7:46:6a:1d: e2:73:83:3c:db:b0:6f:87:1d:ba:08:f3:1d:99:61:d5:f3:f4: 4e:89:e1:bc:e1:86:f7:c6:44:19:a5:71:cb:f2:48:4e:7c:05: b4:44:f2:d7:dd:28:26:77:1f:2f:37:24:68:c8:80:01:02:ee: 9e:c4:7e:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NjHaAesn74QqY2OjB51SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZmI1MjhhYmEwMThmMTQyZjQ0NDRjY2NjOTcyMzczNmNk NGU0YjYwHhcNMjYwMTAxMjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTcwZGIxNDc0NTE1MTEwOTA3YWJhNTE4MjcwMjA4MGFlZDM2YmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzyBTPw+3eF7gbIxfnmH6iGvxlgO I5hooVJtuu5/37FsFyNxnJ11yj7FY+gG4zDR/MwIRkZg7Io4sWF8vyQyUuydDX03 woPD5Q2HXtPALRlyQ2TyfPBmSht3hHU6EUvooH5dASsX57d5s58eidMughfQuH/d rnGkn8wEtPTIB+/xOSiwkQEGfW1Heo1nTSzJQvTh1j+tMjqFNaF/d7M5v2prb1e8 wOtwj0pzYov6hyz9AJfMbGLWzmKpumgiq1K3OCAQcIQsKoK8KsWYaIPsNIsuRSQ1 miz/c4uMaT/3ZVoMq1B0ivYfbgPxalGeu5jX6OdIfKZJC2aY9laqgQsF9QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAFw2xR0UVEQkHq6UYJwIICu02vmMB8GA1UdIwQY MBaAFCL7Uoq6AY8UL0REzMyXI3Ns1OS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQt NmFlOTBiMjQ3NTkyLzEvQVhEYkZIUlJVUkNRZXJwUmduQWdnSzdUYS1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQtNmFlOTBiMjQ3NTky LzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCTVOQMA0E AgACMAcDBQAqCfzAMA0GCSqGSIb3DQEBCwUAA4IBAQBrfVFdJWJtAT7rS4cnqrsa ypWNNCOjTvRzveroc5ovgcrWiUKjmRJWC531wXELt6nhd/fw5OtDR7yYVY3OcZHK meBeTdIkklCn55A8LfFRMiql4XUjlOOKHDlSb575s4jPilFtmWxO5MIiGYEVW7+b R1waqzHghfLkbfp/ZCUN9lA+Gzi7vpmgHzjke8uBEI86Lg558MRV9xoKA83sbO3L rOFatYNTgqkbd1/r6XvTOi3csH77NswnnWFe/qr5BX4qZ7dGah3ic4M827Bvhx26 CPMdmWHV8/ROieG84Yb3xkQZpXHL8khOfAW0RPLX3Sgmdx8vNyRoyIABAu6exH4V -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:41 2026 by rpki-client