This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/M1-F27wdU8lOA68XUmW0anz3Iq4.roa File: M1-F27wdU8lOA68XUmW0anz3Iq4.roa (raw, json) Hash identifier: SrqeFIuItNxxAyYX3kSCM4XcIXUiqr+XqZyKE0D0vMI= Subject key identifier: 33:5F:85:DB:BC:1D:53:C9:4E:03:AF:17:52:65:B4:6A:7C:F7:22:AE Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F5CBF8A9222D3769FF0E72FC74DD1 Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/M1-F27wdU8lOA68XUmW0anz3Iq4.roa Signing time: Fri 02 Jan 2026 02:18:00 +0000 ROA not before: Fri 02 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200094 IP address blocks: 77.79.252.0/22 maxlen: 22 77.79.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:5c:bf:8a:92:22:d3:76:9f:f0:e7:2f:c7:4d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=335f85dbbc1d53c94e03af175265b46a7cf722ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:e4:d2:8f:12:3f:ff:ca:24:a5:93:f3:77: 96:41:6d:6b:05:da:ab:25:b7:63:e7:31:0d:30:04: 44:1f:c4:57:b8:38:71:f6:46:3b:63:94:6e:6e:cb: c1:40:01:c5:16:0a:d2:a3:30:cc:89:49:52:d2:85: 2c:e6:6a:87:60:02:fd:bb:46:8f:42:35:1b:3e:32: e2:a3:d8:52:ab:b9:98:a4:5f:10:f1:20:3e:c5:b7: 52:b5:b8:bf:cc:8d:5d:6a:93:d8:d2:da:db:96:ae: 85:8d:31:84:67:aa:bb:bd:e4:28:db:e1:1e:42:27: 14:e4:90:15:e9:1c:45:36:01:46:42:42:6a:4c:6c: 18:bc:4b:ae:42:26:b8:f2:84:10:57:55:c1:1c:98: 14:ae:e8:45:ba:74:0c:58:08:2a:86:89:4f:6f:8a: 78:37:a2:6e:22:5f:ed:94:db:f8:eb:08:ca:eb:f6: 19:a8:7c:90:ad:41:f5:13:2e:f8:92:18:ed:bb:bc: 73:db:21:85:40:74:45:64:fd:3a:89:4b:7b:6f:48: 4d:03:c6:ae:0f:67:58:9f:eb:7e:13:38:93:ad:0e: 2b:62:0e:ef:91:86:7c:02:f5:e0:a2:10:46:5b:71: ee:3c:61:df:c8:08:a7:95:8a:56:a2:2d:94:b0:81: d3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5F:85:DB:BC:1D:53:C9:4E:03:AF:17:52:65:B4:6A:7C:F7:22:AE X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/M1-F27wdU8lOA68XUmW0anz3Iq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.79.252.0/22 Signature Algorithm: sha256WithRSAEncryption b1:06:13:2d:42:ff:8b:cd:69:06:a1:6b:ed:f8:4c:21:b6:ad: 48:b3:ba:e4:7a:eb:07:39:8e:1c:a3:7e:70:34:21:c9:4d:86: 24:f7:6c:aa:26:d4:bb:90:58:fc:dc:a0:6e:50:d7:41:dc:e3: 43:ea:6c:95:1b:89:5c:93:70:c0:64:72:aa:47:4c:9b:8d:13: fc:4f:45:ba:09:fd:95:e2:cf:9a:24:9a:3f:79:b9:15:ba:e1: 79:1e:35:2c:51:9e:89:af:2c:91:d0:7c:3e:b6:d0:14:ae:85: 4e:45:ce:3f:f4:14:fb:b7:fd:8f:e5:39:df:7c:1c:87:c0:f6: c1:cb:48:75:2a:a1:99:95:55:ed:4c:92:41:74:90:1d:3d:4b: df:b2:76:b5:91:7a:7b:b9:9c:33:76:f8:a1:55:a9:62:48:56: a4:8b:f0:17:cc:77:65:41:d6:95:62:77:fb:52:04:fd:1b:ec: dc:24:6d:34:31:d6:63:2a:f4:ba:e5:ae:31:0c:f8:68:fc:99: 5c:64:a6:9c:a2:67:87:3d:7c:45:c2:52:32:d1:e9:19:f6:06: 9c:80:15:fe:0b:ce:3c:d3:86:e7:6a:d4:95:af:46:96:75:d9: 06:24:77:e6:af:24:84:8c:17:b7:88:e1:03:94:13:73:fb:78: 8c:0a:56:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f1y/ipIi03af8Ocvx03RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzVmODVkYmJjMWQ1M2M5NGUwM2FmMTc1MjY1YjQ2YTdjZjcyMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nvk0o8SP//KJKWT83eWQW1rBdqr Jbdj5zENMAREH8RXuDhx9kY7Y5RubsvBQAHFFgrSozDMiUlS0oUs5mqHYAL9u0aP QjUbPjLio9hSq7mYpF8Q8SA+xbdStbi/zI1dapPY0trblq6FjTGEZ6q7veQo2+Ee QicU5JAV6RxFNgFGQkJqTGwYvEuuQia48oQQV1XBHJgUruhFunQMWAgqholPb4p4 N6JuIl/tlNv46wjK6/YZqHyQrUH1Ey74khjtu7xz2yGFQHRFZP06iUt7b0hNA8au D2dYn+t+EziTrQ4rYg7vkYZ8AvXgohBGW3HuPGHfyAinlYpWoi2UsIHTvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDNfhdu8HVPJTgOvF1JltGp89yKuMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvTTEtRjI3d2RVOGxPQTY4WFVtVzBhbnozSXE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTU/8MA0G CSqGSIb3DQEBCwUAA4IBAQCxBhMtQv+LzWkGoWvt+Ewhtq1Is7rkeusHOY4co35w NCHJTYYk92yqJtS7kFj83KBuUNdB3OND6myVG4lck3DAZHKqR0ybjRP8T0W6Cf2V 4s+aJJo/ebkVuuF5HjUsUZ6JryyR0Hw+ttAUroVORc4/9BT7t/2P5TnffByHwPbB y0h1KqGZlVXtTJJBdJAdPUvfsna1kXp7uZwzdvihValiSFaki/AXzHdlQdaVYnf7 UgT9G+zcJG00MdZjKvS65a4xDPho/JlcZKacomeHPXxFwlIy0ekZ9gacgBX+C848 04bnatSVr0aWddkGJHfmrySEjBe3iOEDlBNz+3iMClbp -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:10 2026 by rpki-client