This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/53lC0H3btLRtkl48pavEGuRV3es.roa File: 53lC0H3btLRtkl48pavEGuRV3es.roa (raw, json) Hash identifier: MGSbnJd1vUZpt6uL4RTZOKaqC1aAoTugp6i9dh39DGs= Subject key identifier: E7:79:42:D0:7D:DB:B4:B4:6D:92:5E:3C:A5:AB:C4:1A:E4:55:DD:EB Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202 Certificate serial: 019B7FF1457F31D2BE1A09CE17DD9D5EEBE7 Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/53lC0H3btLRtkl48pavEGuRV3es.roa Signing time: Fri 02 Jan 2026 18:21:16 +0000 ROA not before: Fri 02 Jan 2026 18:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57619 IP address blocks: 77.71.112.0/24 maxlen: 24 77.71.113.0/24 maxlen: 24 77.71.114.0/24 maxlen: 24 77.71.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:45:7f:31:d2:be:1a:09:ce:17:dd:9d:5e:eb:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202 Validity Not Before: Jan 2 18:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e77942d07ddbb4b46d925e3ca5abc41ae455ddeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:1a:01:9f:74:bd:35:f2:1f:44:05:8d:c0: 65:b0:87:3d:ad:c8:63:bb:fb:ac:b4:88:9e:cc:ed: 77:fa:91:1e:3a:d6:48:d7:49:0c:67:ff:f3:c7:50: 54:2c:71:4d:7a:d3:81:77:e6:82:83:4d:38:09:f9: 38:f2:7c:fe:75:e5:40:d1:a3:db:d5:6f:50:0f:6a: 6b:bc:19:cf:64:1a:82:36:54:fa:d4:2c:4e:71:9e: b7:f9:66:15:27:f3:88:e6:4c:d3:50:bc:0b:b3:00: 27:5e:98:f4:c8:f8:2a:a0:97:70:5b:a7:fe:7a:04: 35:2d:3c:73:68:37:8f:01:01:71:ee:ef:13:6b:7e: 60:a5:5d:f5:83:a5:78:e1:d9:c3:38:85:4b:30:70: 26:7e:3e:61:16:c9:57:4b:64:a5:4c:b1:84:e1:ca: 62:14:b1:4f:24:18:79:ee:18:05:14:75:b4:69:bd: ea:4f:41:9e:d2:97:2f:f7:f9:68:62:3a:b1:cd:86: 12:ea:08:61:86:a1:9e:2a:4d:95:eb:4c:42:cd:9a: 70:18:f1:02:19:58:c9:d8:a9:62:e8:41:39:e6:45: 82:95:d0:76:c3:0e:e4:d8:b4:8b:f4:34:46:52:68: f5:92:d1:d4:dc:e6:ad:03:fe:fd:62:f3:61:d5:17: eb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:79:42:D0:7D:DB:B4:B4:6D:92:5E:3C:A5:AB:C4:1A:E4:55:DD:EB X509v3 Authority Key Identifier: keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/53lC0H3btLRtkl48pavEGuRV3es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.71.112.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:d7:5c:e6:91:3c:73:62:80:c1:da:b2:a9:d9:8a:2f:be:23: cb:8b:ea:64:85:6a:6b:db:eb:89:40:23:7a:99:ae:5d:0d:5d: 08:ec:d9:5a:85:76:37:47:a5:b7:ab:0e:b6:ed:5a:e4:09:90: 79:6e:3f:25:37:c0:4e:a8:34:c0:7d:a8:95:e4:1d:35:59:92: 29:6c:2c:41:b4:05:d1:36:de:87:88:4a:c5:11:f5:9a:a3:23: 02:09:ac:b2:5b:dd:80:44:65:09:e0:34:19:84:8a:23:a3:0a: e1:94:06:87:f7:de:a1:e3:74:b6:73:b6:a4:4d:74:a6:26:4d: a5:11:29:15:f4:0d:31:5d:c4:22:8b:81:eb:3c:66:eb:dd:b1: fa:15:46:04:28:2e:76:2f:33:65:7b:be:01:92:3c:ea:a4:2b: b7:61:fa:d1:69:03:78:81:79:2f:c3:5f:8f:cb:f2:07:01:c3: e3:1b:63:f0:e2:8e:16:5d:2d:a8:97:7d:11:69:b9:70:3e:6e: b8:ac:c3:cf:93:01:16:a2:16:b5:72:46:11:94:95:d5:73:42: d3:be:49:3d:67:f9:20:b7:65:f0:7f:91:ea:52:c3:be:ab:ac: 37:05:09:ac:c2:ee:26:07:48:29:71:90:38:f9:0d:a1:40:73: c1:d8:a0:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8UV/MdK+GgnOF92dXuvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZGVjOWEyMDk2ZGVjMTAzYmFlMmQ3YzM3OTZlMGQ0NzA4 NWMyMDIwHhcNMjYwMTAyMTgyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzc5NDJkMDdkZGJiNGI0NmQ5MjVlM2NhNWFiYzQxYWU0NTVkZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhoaAZ90vTXyH0QFjcBlsIc9rchj u/ustIiezO13+pEeOtZI10kMZ//zx1BULHFNetOBd+aCg004Cfk48nz+deVA0aPb 1W9QD2prvBnPZBqCNlT61CxOcZ63+WYVJ/OI5kzTULwLswAnXpj0yPgqoJdwW6f+ egQ1LTxzaDePAQFx7u8Ta35gpV31g6V44dnDOIVLMHAmfj5hFslXS2SlTLGE4cpi FLFPJBh57hgFFHW0ab3qT0Ge0pcv9/loYjqxzYYS6ghhhqGeKk2V60xCzZpwGPEC GVjJ2Kli6EE55kWCldB2ww7k2LSL9DRGUmj1ktHU3OatA/79YvNh1RfrwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOd5QtB927S0bZJePKWrxBrkVd3rMB8GA1UdIwQY MBaAFC7eyaIJbewQO64tfDeW4NRwhcICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEt MDU3ZDdhZjBhZWY0LzEvNTNsQzBIM2J0TFJ0a2w0OHBhdkVHdVJWM2VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9kZjBkMzctNGY2NS00MzlkLWE1MzEtMDU3ZDdhZjBhZWY0 LzEvTHQ3Sm9nbHQ3QkE3cmkxOE41YmcxSENGd2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTUdwMA0G CSqGSIb3DQEBCwUAA4IBAQCM11zmkTxzYoDB2rKp2YovviPLi+pkhWpr2+uJQCN6 ma5dDV0I7NlahXY3R6W3qw627VrkCZB5bj8lN8BOqDTAfaiV5B01WZIpbCxBtAXR Nt6HiErFEfWaoyMCCayyW92ARGUJ4DQZhIojowrhlAaH996h43S2c7akTXSmJk2l ESkV9A0xXcQii4HrPGbr3bH6FUYEKC52LzNle74BkjzqpCu3YfrRaQN4gXkvw1+P y/IHAcPjG2Pw4o4WXS2ol30RablwPm64rMPPkwEWoha1ckYRlJXVc0LTvkk9Z/kg t2Xwf5HqUsO+q6w3BQmswu4mB0gpcZA4+Q2hQHPB2KBn -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:32 2026 by rpki-client