This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/77sTgwy-ffTM5bX6rODkoagLpmY.roa File: 77sTgwy-ffTM5bX6rODkoagLpmY.roa (raw, json) Hash identifier: 2X9qQDH/I9MfUV0etK3Z+NsJ2pj1408TL60VT+n5uqY= Subject key identifier: EF:BB:13:83:0C:BE:7D:F4:CC:E5:B5:FA:AC:E0:E4:A1:A8:0B:A6:66 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E2BDAC9BACF976CB18F1599B48944 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/77sTgwy-ffTM5bX6rODkoagLpmY.roa Signing time: Thu 01 Jan 2026 12:17:50 +0000 ROA not before: Thu 01 Jan 2026 12:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48105 IP address blocks: 185.142.141.0/24 maxlen: 32 2a06:7a04::/43 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2b:da:c9:ba:cf:97:6c:b1:8f:15:99:b4:89:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efbb13830cbe7df4cce5b5faace0e4a1a80ba666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:95:14:65:6f:a2:0d:da:4a:8d:41:8d:48: 6d:f9:50:28:bf:f7:1d:ac:11:2f:9e:c0:a2:06:d7: d0:af:86:cd:c9:86:bf:3a:73:1f:ad:fe:b2:a2:73: 1e:0f:fb:09:18:e3:a5:83:d8:ef:14:b5:05:87:c9: f6:15:99:d7:c0:cc:e8:d0:23:f3:8a:92:8a:ef:96: 99:34:0e:04:8f:00:5b:03:01:8d:21:4e:f8:48:92: af:29:43:3c:0f:18:dd:b0:60:03:9d:f0:cb:03:28: 95:bb:a6:64:2b:9b:c0:e6:0f:af:c8:ff:d7:f8:5c: f8:f9:bd:a0:88:fd:40:e8:4f:6b:f7:3e:60:8a:5d: 48:2a:b9:a2:79:64:ff:07:ee:aa:d9:5d:8f:a4:64: f0:ed:e2:6e:01:df:53:66:0c:49:c8:33:b6:84:1c: 0d:88:8b:cb:0c:09:51:1e:a3:06:07:ea:6b:6e:7d: a2:d1:f6:bb:c5:bf:65:98:4f:3a:68:74:fe:f9:c9: 2f:b6:2b:e4:65:51:f4:29:5e:4c:16:01:2f:0b:b8: df:1f:62:6a:7f:4d:74:8b:39:48:49:50:b5:04:52: 8f:a1:e8:37:e0:2d:3e:91:a5:85:b5:95:b5:e0:b9: c6:d2:5a:fd:e1:a6:c1:c2:6a:77:7a:1c:2b:da:9d: 1d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BB:13:83:0C:BE:7D:F4:CC:E5:B5:FA:AC:E0:E4:A1:A8:0B:A6:66 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/77sTgwy-ffTM5bX6rODkoagLpmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.141.0/24 IPv6: 2a06:7a04::/43 Signature Algorithm: sha256WithRSAEncryption 96:5b:57:61:00:23:e0:81:6a:05:64:64:00:a8:9b:d5:07:11: af:20:6b:45:cc:b1:c2:c5:d4:29:ad:b5:34:82:16:27:24:f6: 9d:62:02:87:bc:d9:a5:64:9e:1c:0d:54:39:8b:e9:17:05:91: d2:40:a1:aa:18:ee:18:8b:81:1c:bc:c3:de:92:58:a5:56:be: 3e:a2:4c:04:0b:d7:19:5c:dc:84:32:48:08:da:88:d4:91:0b: 0f:13:a4:f8:ef:a3:73:f1:96:c9:9b:50:1f:9e:a0:ae:32:12: 35:78:23:c1:83:17:aa:46:8c:c1:f1:45:4f:53:f6:be:a1:0f: d9:36:2d:b3:90:25:95:b0:24:d4:3d:a9:b7:1b:f9:45:f7:2d: 43:0d:c5:89:67:26:c6:b1:86:3c:77:c9:7e:e1:c1:0c:67:7b: 5b:ae:46:6e:43:32:ac:27:4f:7b:d1:74:0f:62:45:cb:d1:2d: b9:bf:55:0d:3d:fd:c2:05:3a:8f:cd:b4:bf:e6:77:e2:38:fb: 50:2e:bc:4c:66:a8:6a:44:0f:cb:eb:41:01:d6:4e:03:39:ff: 59:42:de:22:6f:0f:f1:02:d9:aa:b9:a5:94:ae:28:74:7e:3d: f5:cc:bc:2c:7c:93:51:0b:20:1d:ee:59:dd:93:bd:3a:85:af: 1f:bb:fe:20 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fivaybrPl2yxjxWZtIlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmJiMTM4MzBjYmU3ZGY0Y2NlNWI1ZmFhY2UwZTRhMWE4MGJhNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37GVFGVvog3aSo1BjUht+VAov/cd rBEvnsCiBtfQr4bNyYa/OnMfrf6yonMeD/sJGOOlg9jvFLUFh8n2FZnXwMzo0CPz ipKK75aZNA4EjwBbAwGNIU74SJKvKUM8DxjdsGADnfDLAyiVu6ZkK5vA5g+vyP/X +Fz4+b2giP1A6E9r9z5gil1IKrmieWT/B+6q2V2PpGTw7eJuAd9TZgxJyDO2hBwN iIvLDAlRHqMGB+prbn2i0fa7xb9lmE86aHT++ckvtivkZVH0KV5MFgEvC7jfH2Jq f010izlISVC1BFKPoeg34C0+kaWFtZW14LnG0lr94abBwmp3ehwr2p0dDQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFO+7E4MMvn30zOW1+qzg5KGoC6ZmMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvNzdzVGd3eS1mZlRNNWJYNnJPRGtvYWdMcG1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuY6NMA8E AgACMAkDBwUqBnoEAAAwDQYJKoZIhvcNAQELBQADggEBAJZbV2EAI+CBagVkZACo m9UHEa8ga0XMscLF1CmttTSCFick9p1iAoe82aVknhwNVDmL6RcFkdJAoaoY7hiL gRy8w96SWKVWvj6iTAQL1xlc3IQySAjaiNSRCw8TpPjvo3PxlsmbUB+eoK4yEjV4 I8GDF6pGjMHxRU9T9r6hD9k2LbOQJZWwJNQ9qbcb+UX3LUMNxYlnJsaxhjx3yX7h wQxne1uuRm5DMqwnT3vRdA9iRcvRLbm/VQ09/cIFOo/NtL/md+I4+1AuvExmqGpE D8vrQQHWTgM5/1lC3iJvD/EC2aq5pZSuKHR+PfXMvCx8k1ELIB3uWd2TvTqFrx+7 /iA= -----END CERTIFICATE-----Generated at Mon Jan 19 20:23:11 2026 by rpki-client