This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/N64gyRV3fyLEotYnOGpZXANVQTY.roa File: N64gyRV3fyLEotYnOGpZXANVQTY.roa (raw, json) Hash identifier: usaMJ60NvDnxkMJGfw4/sj/B9kuu+SgaBjkVvUD8MA4= Subject key identifier: 37:AE:20:C9:15:77:7F:22:C4:A2:D6:27:38:6A:59:5C:03:55:41:36 Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00 Certificate serial: 019B77C6D156AF93E17CABBFE73627EDB198 Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/N64gyRV3fyLEotYnOGpZXANVQTY.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47110 IP address blocks: 77.223.216.0/21 maxlen: 21 92.62.124.0/22 maxlen: 22 185.10.84.0/22 maxlen: 22 212.6.38.0/24 maxlen: 24 2a03:5e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d1:56:af:93:e1:7c:ab:bf:e7:36:27:ed:b1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00 Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37ae20c915777f22c4a2d627386a595c03554136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:0c:62:e0:0f:17:7a:fd:ca:b8:81:89:d2: 35:7d:aa:45:ff:52:12:56:9c:45:54:32:88:97:49: 89:45:13:29:52:5e:79:47:d8:5f:7b:54:ce:66:29: 48:3b:e9:61:a3:d2:78:d0:7c:b1:af:1a:46:cc:98: af:9a:de:b0:7b:a9:e7:bd:e7:1e:5e:2f:76:02:86: a5:46:35:80:d1:a0:4b:c8:a1:1c:44:9f:b5:06:68: f1:56:e6:72:3a:c9:ae:9f:36:e1:45:f8:98:c8:49: de:90:06:c8:26:45:2f:69:3f:2f:29:20:ab:45:ad: a5:1b:05:37:b8:16:30:c0:47:4c:44:3c:35:74:24: e6:4f:87:c1:96:6f:cf:63:90:5b:a6:94:4c:9d:25: f9:07:a2:7d:a7:26:ff:2d:b2:c2:b9:fe:6d:74:9f: c9:f6:e1:a5:65:55:90:a9:e1:e8:8d:4d:ae:f1:2c: d5:97:8a:0f:2e:03:3b:52:90:7c:a8:40:86:67:ae: d1:5a:90:70:1c:0c:0e:03:d9:b9:4a:6e:2a:81:7e: 64:d6:7a:c9:7e:98:ff:a8:89:7c:94:75:e2:ca:c5: 7b:0b:72:1c:e1:23:73:8a:1b:d0:a3:f4:b5:ed:e6: b2:45:5e:65:f7:f0:47:a6:dc:c9:e1:ef:b4:13:02: 79:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AE:20:C9:15:77:7F:22:C4:A2:D6:27:38:6A:59:5C:03:55:41:36 X509v3 Authority Key Identifier: keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/N64gyRV3fyLEotYnOGpZXANVQTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.223.216.0/21 92.62.124.0/22 185.10.84.0/22 212.6.38.0/24 IPv6: 2a03:5e40::/32 Signature Algorithm: sha256WithRSAEncryption 60:6d:c4:84:56:3a:56:1b:72:01:ca:da:73:66:8f:3d:56:1a: 71:cd:10:39:1f:7c:d9:d4:b5:52:3d:46:42:21:c0:96:8c:7e: f8:38:9c:0c:45:ac:9a:ea:62:0a:50:d4:26:c4:6a:89:7c:71: 3a:19:99:2a:9a:d3:39:95:0c:20:ca:ce:b1:81:8a:ac:39:c8: 52:0f:16:7d:9b:9b:d8:e8:46:ac:d8:d6:b9:1c:18:97:08:bd: 68:62:6d:0a:ea:04:be:d0:63:f0:1e:5c:81:fa:04:12:e4:ce: bf:eb:76:e9:d6:d8:3d:3f:c6:da:15:ea:bf:ec:63:b0:61:c4: f6:66:d1:a5:d5:d3:3d:b0:e5:80:c4:88:4c:10:2f:6f:a5:fb: ae:42:1f:09:00:e1:85:38:22:ca:c0:d7:a6:9d:e7:e8:8a:bd: 56:c5:8c:c5:0c:f8:ee:af:0f:5c:b8:df:08:d2:23:ec:77:ca: 24:2f:f5:52:b3:c6:cf:8c:f2:7d:b2:ac:93:37:f1:ec:87:98: c3:eb:f8:6e:ab:a3:1c:7f:d9:36:fc:69:f8:49:7b:df:41:b5: 24:d6:12:28:5f:88:e7:21:2f:1b:97:fc:e0:7c:0a:35:a7:f8: 7d:bb:8d:4e:c0:ea:9b:6f:dc:93:b9:a2:a4:bb:6d:41:05:68: 73:1b:57:70 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3xtFWr5PhfKu/5zYn7bGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MDAxZDU1N2EwNjk4ZGFkNzdjNGIzZWRkZjJhN2QzNmI3 MmFiMDAwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2FlMjBjOTE1Nzc3ZjIyYzRhMmQ2MjczODZhNTk1YzAzNTU0MTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNQMYuAPF3r9yriBidI1fapF/1IS VpxFVDKIl0mJRRMpUl55R9hfe1TOZilIO+lho9J40HyxrxpGzJivmt6we6nnvece Xi92AoalRjWA0aBLyKEcRJ+1BmjxVuZyOsmunzbhRfiYyEnekAbIJkUvaT8vKSCr Ra2lGwU3uBYwwEdMRDw1dCTmT4fBlm/PY5BbppRMnSX5B6J9pyb/LbLCuf5tdJ/J 9uGlZVWQqeHojU2u8SzVl4oPLgM7UpB8qECGZ67RWpBwHAwOA9m5Sm4qgX5k1nrJ fpj/qIl8lHXiysV7C3Ic4SNzihvQo/S17eayRV5l9/BHptzJ4e+0EwJ5AQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFDeuIMkVd38ixKLWJzhqWVwDVUE2MB8GA1UdIwQY MBaAFBkAHVV6Bpja13xLPt3yp9NrcqsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDkt MjBkZTY5NzI2MDliLzEvTjY0Z3lSVjNmeUxFb3RZbk9HcFpYQU5WUVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDktMjBkZTY5NzI2MDli LzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDTd/YAwQC XD58AwQCuQpUAwQA1AYmMA0EAgACMAcDBQAqA15AMA0GCSqGSIb3DQEBCwUAA4IB AQBgbcSEVjpWG3IBytpzZo89VhpxzRA5H3zZ1LVSPUZCIcCWjH74OJwMRaya6mIK UNQmxGqJfHE6GZkqmtM5lQwgys6xgYqsOchSDxZ9m5vY6Eas2Na5HBiXCL1oYm0K 6gS+0GPwHlyB+gQS5M6/63bp1tg9P8baFeq/7GOwYcT2ZtGl1dM9sOWAxIhMEC9v pfuuQh8JAOGFOCLKwNemnefoir1WxYzFDPjurw9cuN8I0iPsd8okL/VSs8bPjPJ9 sqyTN/Hsh5jD6/huq6Mcf9k2/Gn4SXvfQbUk1hIoX4jnIS8bl/zgfAo1p/h9u41O wOqbb9yTuaKku21BBWhzG1dw -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:11 2026 by rpki-client