This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/77KaIeUfPyORPkZsiXwZYFvu7P0.roa File: 77KaIeUfPyORPkZsiXwZYFvu7P0.roa (raw, json) Hash identifier: KYrus27wO8vOJPN2UlWVKh4IqezdyuKHAstMnzLdgmo= Subject key identifier: EF:B2:9A:21:E5:1F:3F:23:91:3E:46:6C:89:7C:19:60:5B:EE:EC:FD Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B7759013BED5B359F0EF775FE952DCC42 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/77KaIeUfPyORPkZsiXwZYFvu7P0.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 84.55.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:01:3b:ed:5b:35:9f:0e:f7:75:fe:95:2d:cc:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efb29a21e51f3f23913e466c897c19605beeecfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:e1:52:9e:97:55:bc:88:d8:f4:ba:82:85: 38:1c:08:6a:c7:2a:9a:c2:a4:03:b1:aa:97:44:49: ef:61:c7:61:03:d7:f0:4e:67:b4:e7:37:e5:58:86: f9:f2:b6:17:2b:ce:f6:5c:17:0d:82:8b:1c:51:e0: d0:fc:00:1b:1e:08:2c:96:c6:6f:22:88:ae:f7:7d: 04:84:6b:0e:df:03:0f:e4:51:10:9c:b2:f6:32:5a: e9:8c:29:0a:16:62:e1:03:d8:e6:9e:9e:18:5e:a6: 41:fe:32:a4:94:89:cd:9f:99:37:92:d8:ff:94:c0: 87:f4:29:a8:03:0d:d2:c6:46:b3:a0:fb:00:00:90: e1:da:d0:9a:9e:15:86:14:c9:ec:c5:d2:20:11:a9: 71:0f:95:11:1d:d1:6f:2c:4b:a8:49:4f:42:3a:e8: 75:dc:93:8a:2f:33:32:18:c5:b0:d6:90:81:04:3b: f8:bc:68:e9:00:6d:b5:d4:c5:95:6d:0e:73:28:39: db:8c:0c:18:22:cf:fc:eb:9e:9f:fa:64:9c:86:75: ed:00:93:91:82:6d:2e:6e:ee:e1:01:ec:d1:05:85: 7d:3c:f6:24:dd:a5:08:73:72:53:92:e9:2e:4d:e0: ab:d6:33:2b:b1:ac:61:e4:e6:27:92:78:56:e3:72: ea:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B2:9A:21:E5:1F:3F:23:91:3E:46:6C:89:7C:19:60:5B:EE:EC:FD X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/77KaIeUfPyORPkZsiXwZYFvu7P0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.55.10.0/24 Signature Algorithm: sha256WithRSAEncryption 49:ea:0d:b4:87:35:e9:00:ff:61:19:55:41:d1:ca:96:86:8a: cd:1f:0e:e9:d8:04:57:fb:ce:a6:c2:b9:eb:2e:f7:ef:bd:2e: 61:ee:68:d9:c6:ae:25:ce:89:b1:5b:39:64:38:39:7b:75:39: 06:96:4b:24:91:8c:98:73:33:99:e7:6c:9b:90:ee:98:5e:94: a0:e9:b3:08:17:8f:b8:13:77:30:4f:43:17:8f:54:a5:48:cc: 93:70:0b:4c:90:a8:c2:9f:3f:de:bc:1c:8d:4b:48:a5:de:4a: 8c:23:63:4d:30:76:94:5c:43:b6:b0:2c:b8:a7:76:56:06:38: a1:7f:8a:9a:20:04:ac:3d:07:b6:18:69:5d:b3:ba:cd:14:e2: 6c:c2:bb:b6:36:d4:44:b6:93:30:7e:1b:8a:79:65:ec:82:b6: 1a:6d:51:73:82:a9:cb:83:cf:c4:8b:76:4b:16:1d:56:fe:3c: de:35:cf:43:a9:c3:3e:9e:e1:cb:9a:c2:21:1c:2b:84:ec:eb: 82:b4:38:6f:10:51:30:fa:9b:8d:b1:58:7e:d7:73:8e:db:d1: ae:5e:27:35:cc:6c:ed:56:c9:df:58:18:2e:cf:aa:41:75:e1: 86:ad:92:b9:c2:6b:4a:bd:5e:1f:83:92:92:4d:b7:af:2b:45: a8:4f:fa:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQE77Vs1nw73df6VLcxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmIyOWEyMWU1MWYzZjIzOTEzZTQ2NmM4OTdjMTk2MDViZWVlY2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxHhUp6XVbyI2PS6goU4HAhqxyqa wqQDsaqXREnvYcdhA9fwTme05zflWIb58rYXK872XBcNgoscUeDQ/AAbHggslsZv Ioiu930EhGsO3wMP5FEQnLL2MlrpjCkKFmLhA9jmnp4YXqZB/jKklInNn5k3ktj/ lMCH9CmoAw3SxkazoPsAAJDh2tCanhWGFMnsxdIgEalxD5URHdFvLEuoSU9COuh1 3JOKLzMyGMWw1pCBBDv4vGjpAG211MWVbQ5zKDnbjAwYIs/8656f+mSchnXtAJOR gm0ubu7hAezRBYV9PPYk3aUIc3JTkukuTeCr1jMrsaxh5OYnknhW43LqYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO+ymiHlHz8jkT5GbIl8GWBb7uz9MB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvNzdLYUllVWZQeU9SUGtac2lYd1pZRnZ1N1AwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDcKMA0G CSqGSIb3DQEBCwUAA4IBAQBJ6g20hzXpAP9hGVVB0cqWhorNHw7p2ARX+86mwrnr LvfvvS5h7mjZxq4lzomxWzlkODl7dTkGlkskkYyYczOZ52ybkO6YXpSg6bMIF4+4 E3cwT0MXj1SlSMyTcAtMkKjCnz/evByNS0il3kqMI2NNMHaUXEO2sCy4p3ZWBjih f4qaIASsPQe2GGlds7rNFOJswru2NtREtpMwfhuKeWXsgrYabVFzgqnLg8/Ei3ZL Fh1W/jzeNc9DqcM+nuHLmsIhHCuE7OuCtDhvEFEw+puNsVh+13OO29GuXic1zGzt VsnfWBguz6pBdeGGrZK5wmtKvV4fg5KSTbevK0WoT/q1 -----END CERTIFICATE-----Generated at Thu Jan 8 08:55:14 2026 by rpki-client