This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/I1qBnna-xusJzzZmxCgqlsyjSyg.roa File: I1qBnna-xusJzzZmxCgqlsyjSyg.roa (raw, json) Hash identifier: 4PSkpuSjGWN0BhwNTLO3ZVEoWd47i6kcp7EoG/5Ntw0= Subject key identifier: 23:5A:81:9E:76:BE:C6:EB:09:CF:36:66:C4:28:2A:96:CC:A3:4B:28 Certificate issuer: /CN=27618505d3b4c000217590f7b7b59bf61ff2f375 Certificate serial: 019B78350A6848E64DCBEB26B754E4A2F064 Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/I1qBnna-xusJzzZmxCgqlsyjSyg.roa Signing time: Thu 01 Jan 2026 06:18:20 +0000 ROA not before: Thu 01 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43568 IP address blocks: 77.247.144.0/20 maxlen: 21 128.0.16.0/21 maxlen: 21 178.250.216.0/21 maxlen: 21 2a02:2470::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0a:68:48:e6:4d:cb:eb:26:b7:54:e4:a2:f0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375 Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=235a819e76bec6eb09cf3666c4282a96cca34b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:54:96:43:9d:c1:e5:4f:d5:97:48:ef:39: 36:35:75:eb:df:59:e6:ea:78:1e:35:48:05:ad:15: 34:16:62:a9:1d:c2:34:ed:49:18:4e:6b:2a:02:af: 17:7d:ba:20:7b:fb:4b:6e:19:8d:41:aa:d0:23:ea: 6c:95:c4:8c:0b:48:9f:bc:e6:12:a8:23:34:f0:6b: d5:d2:cd:fc:ff:0d:3e:77:1e:47:a1:8b:6b:aa:b5: 5a:f2:23:db:7e:b0:ce:f5:61:38:a9:d7:b1:05:0d: 90:04:d1:44:91:f4:4a:b5:73:8b:2e:44:f1:b9:e0: f6:e8:a9:0d:75:05:08:61:49:99:c6:fd:e6:a2:1f: b9:a7:89:5c:a4:4a:85:a2:aa:6d:94:6d:2d:3f:0a: 0c:36:f8:0a:c1:3b:41:ab:c8:8c:d5:93:f2:0f:0e: 59:22:a6:52:45:01:c0:b3:be:d0:0f:28:68:18:b2: 9c:44:12:06:17:0a:c6:48:40:ca:33:73:c4:1b:4c: f4:8b:30:ac:cb:37:a2:88:1f:a1:1e:ac:ee:06:0b: 3d:7c:f8:a9:7e:74:bd:9f:6d:7f:ce:0e:0f:7a:c2: 06:4a:58:b8:f6:99:8d:74:24:b8:8c:81:46:92:30: c5:2d:df:91:f5:cb:27:5a:67:ae:70:42:cc:ea:f9: 65:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5A:81:9E:76:BE:C6:EB:09:CF:36:66:C4:28:2A:96:CC:A3:4B:28 X509v3 Authority Key Identifier: keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/I1qBnna-xusJzzZmxCgqlsyjSyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.144.0/20 128.0.16.0/21 178.250.216.0/21 IPv6: 2a02:2470::/29 Signature Algorithm: sha256WithRSAEncryption 85:ee:10:12:a5:74:09:e0:1a:e6:4c:b1:99:b4:13:c8:b0:f5: 38:68:f4:de:76:2b:e5:66:c8:c7:d2:c1:e2:df:7e:9f:c4:ee: 73:b0:b2:2a:94:d5:c5:6d:95:28:2d:d9:5a:74:aa:36:71:bf: ed:dc:fc:53:d7:c5:fc:08:20:17:5b:b6:2c:3a:d9:3c:8f:51: a9:59:d6:a5:bc:85:a8:ac:b6:d1:0d:ab:41:ab:0b:6b:a2:89: 7b:da:9f:5e:c9:bd:09:0d:4c:79:fd:e9:b7:90:41:ff:4e:c3: 73:bd:ee:f7:27:d2:74:f1:12:02:08:11:27:a7:f1:b4:9c:bc: 06:93:bf:7d:5f:12:7e:43:23:60:26:76:04:b8:7e:9f:42:96: ba:4f:50:d8:ec:b5:81:9a:b9:3d:08:eb:f3:ba:00:1b:47:86: 77:e4:ea:d9:63:68:81:42:38:a3:9d:39:bb:df:a1:57:c7:73: 2c:aa:df:18:82:56:25:38:ac:64:db:3f:46:d6:4b:f7:f4:22: cf:b6:81:64:25:90:8d:5a:ff:03:ae:5e:0f:0d:b0:9e:a0:ed: c0:f4:52:2d:a8:6f:3e:2d:88:42:c2:df:63:cd:ea:13:08:7c: d7:ba:a9:a6:0c:21:2a:14:78:45:2d:19:73:0c:32:94:16:9e: c5:1c:09:1c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NQpoSOZNy+smt1TkovBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NjE4NTA1ZDNiNGMwMDAyMTc1OTBmN2I3YjU5YmY2MWZm MmYzNzUwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzVhODE5ZTc2YmVjNmViMDljZjM2NjZjNDI4MmE5NmNjYTM0YjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEtUlkOdweVP1ZdI7zk2NXXr31nm 6ngeNUgFrRU0FmKpHcI07UkYTmsqAq8Xfboge/tLbhmNQarQI+pslcSMC0ifvOYS qCM08GvV0s38/w0+dx5HoYtrqrVa8iPbfrDO9WE4qdexBQ2QBNFEkfRKtXOLLkTx ueD26KkNdQUIYUmZxv3moh+5p4lcpEqFoqptlG0tPwoMNvgKwTtBq8iM1ZPyDw5Z IqZSRQHAs77QDyhoGLKcRBIGFwrGSEDKM3PEG0z0izCsyzeiiB+hHqzuBgs9fPip fnS9n21/zg4PesIGSli49pmNdCS4jIFGkjDFLd+R9csnWmeucELM6vllKwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCNagZ52vsbrCc82ZsQoKpbMo0soMB8GA1UdIwQY MBaAFCdhhQXTtMAAIXWQ97e1m/Yf8vN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYt OWQ1ZTU5Zjc2ZTZiLzEvSTFxQm5uYS14dXNKenpabXhDZ3Fsc3lqU3lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83ZTYyNjItZWNkZC00MzM0LThiOWYtOWQ1ZTU5Zjc2ZTZi LzEvSjJHRkJkTzB3QUFoZFpEM3Q3V2I5aF95ODNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQETfeQAwQD gAAQAwQDsvrYMA0EAgACMAcDBQMqAiRwMA0GCSqGSIb3DQEBCwUAA4IBAQCF7hAS pXQJ4BrmTLGZtBPIsPU4aPTedivlZsjH0sHi336fxO5zsLIqlNXFbZUoLdladKo2 cb/t3PxT18X8CCAXW7YsOtk8j1GpWdalvIWorLbRDatBqwtrool72p9eyb0JDUx5 /em3kEH/TsNzve73J9J08RICCBEnp/G0nLwGk799XxJ+QyNgJnYEuH6fQpa6T1DY 7LWBmrk9COvzugAbR4Z35OrZY2iBQjijnTm736FXx3Msqt8YglYlOKxk2z9G1kv3 9CLPtoFkJZCNWv8Drl4PDbCeoO3A9FItqG8+LYhCwt9jzeoTCHzXuqmmDCEqFHhF LRlzDDKUFp7FHAkc -----END CERTIFICATE-----Generated at Tue Feb 10 04:48:59 2026 by rpki-client