This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/N67dLiGqW3gV8C1kx-hmlBjN5TA.roa File: N67dLiGqW3gV8C1kx-hmlBjN5TA.roa (raw, json) Hash identifier: ArpBN8vEN1vcjPm23RJHVhymMyyRoNy3XiIwSGDqpqE= Subject key identifier: 37:AE:DD:2E:21:AA:5B:78:15:F0:2D:64:C7:E8:66:94:18:CD:E5:30 Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F8423A727AAF987E1EA661377DD7FB4 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/N67dLiGqW3gV8C1kx-hmlBjN5TA.roa Signing time: Fri 02 Jan 2026 16:22:04 +0000 ROA not before: Fri 02 Jan 2026 16:22:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51487 IP address blocks: 77.228.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:23:a7:27:aa:f9:87:e1:ea:66:13:77:dd:7f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37aedd2e21aa5b7815f02d64c7e8669418cde530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6d:b3:e4:aa:4c:9a:0a:f9:6d:50:4b:70:8e: 5a:27:68:29:f1:89:55:2d:87:16:18:27:32:d5:f4: 9c:76:cf:ec:9d:85:d8:0e:9f:72:88:43:aa:4f:f3: 13:c4:6f:e3:ab:e1:57:a1:07:13:e1:42:53:31:77: 9b:7f:05:76:07:f3:94:ab:e6:b8:b4:7f:17:c9:fc: 6a:ef:9e:39:0b:85:57:93:0a:3e:de:36:ea:bc:ae: bf:fd:c7:f9:40:0e:3e:bf:53:f2:64:f5:dc:c7:95: 09:b0:58:48:42:c9:cb:8f:d1:f2:7a:d2:08:7a:b6: de:f7:8c:cd:34:c7:56:52:2d:9b:7d:d4:5c:14:73: 49:dd:e1:01:87:ea:1a:fb:5b:86:6a:1f:ac:86:a1: a2:b6:55:fc:ea:ab:22:81:44:5c:85:61:2e:74:45: 25:8a:77:ca:81:50:7d:7e:aa:c7:1d:f3:8d:29:a7: 2b:62:4e:d7:24:89:0d:1b:e9:ef:8b:f6:58:43:13: 82:3f:28:c5:a8:b1:44:35:cc:68:bd:4d:60:4c:a1: 68:59:43:ee:81:28:a7:35:74:e9:6d:b9:56:85:ea: 30:7c:bd:c9:f4:e1:99:af:6f:f8:32:ab:d8:d0:3c: 7f:96:10:a4:7d:7b:4d:6b:14:62:d9:74:c7:b2:66: 4f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AE:DD:2E:21:AA:5B:78:15:F0:2D:64:C7:E8:66:94:18:CD:E5:30 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/N67dLiGqW3gV8C1kx-hmlBjN5TA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.228.200.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:51:92:24:a3:0c:52:76:ec:1d:de:bd:ec:16:ed:ee:0b:0d: 4d:2a:6e:4b:8b:f9:7c:c1:2b:60:ae:88:64:e8:10:b8:54:e3: 85:95:58:18:a6:c7:13:19:dd:8b:7d:a5:b4:c2:e1:ee:ed:b1: 2d:8d:77:b8:09:70:a3:0f:61:cc:80:37:55:1f:17:60:6c:fa: 89:09:e6:1b:10:6d:26:55:47:a3:6f:58:b4:99:98:92:a6:45: 09:4c:43:4a:f6:88:7f:78:cd:19:17:55:21:92:aa:8c:ea:55: e0:4b:02:5b:2b:a3:8f:d2:81:e3:7f:d5:75:ca:0a:5c:70:66: ba:c6:cb:fd:72:10:d6:de:22:a9:82:d9:ac:9b:f7:4c:68:00: ec:64:9c:37:2b:f4:1c:2a:37:db:0a:8c:e5:2d:41:7b:f5:5c: 48:a9:00:cb:d4:b6:47:9f:ad:98:ee:5b:3f:42:d9:57:84:88: eb:13:f9:93:fb:40:e4:7f:15:92:b4:f9:f2:03:95:42:3c:bf: c8:28:b1:9c:91:5b:98:2e:7c:c2:e5:a6:50:16:ba:98:ea:c2: 3c:23:54:d0:22:af:cc:df:bb:4c:4f:ab:83:c8:b8:09:e3:ae: 5b:a0:bc:89:c3:b2:be:5d:5c:90:b5:92:18:63:99:17:9c:03: b2:41:b2:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hCOnJ6r5h+HqZhN33X+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2FlZGQyZTIxYWE1Yjc4MTVmMDJkNjRjN2U4NjY5NDE4Y2RlNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG2z5KpMmgr5bVBLcI5aJ2gp8YlV LYcWGCcy1fScds/snYXYDp9yiEOqT/MTxG/jq+FXoQcT4UJTMXebfwV2B/OUq+a4 tH8Xyfxq7545C4VXkwo+3jbqvK6//cf5QA4+v1PyZPXcx5UJsFhIQsnLj9HyetII erbe94zNNMdWUi2bfdRcFHNJ3eEBh+oa+1uGah+shqGitlX86qsigURchWEudEUl infKgVB9fqrHHfONKacrYk7XJIkNG+nvi/ZYQxOCPyjFqLFENcxovU1gTKFoWUPu gSinNXTpbblWheowfL3J9OGZr2/4MqvY0Dx/lhCkfXtNaxRi2XTHsmZPyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDeu3S4hqlt4FfAtZMfoZpQYzeUwMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTjY3ZExpR3FXM2dWOEMxa3gtaG1sQmpONVRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATeTIMA0G CSqGSIb3DQEBCwUAA4IBAQA8UZIkowxSduwd3r3sFu3uCw1NKm5Li/l8wStgrohk 6BC4VOOFlVgYpscTGd2LfaW0wuHu7bEtjXe4CXCjD2HMgDdVHxdgbPqJCeYbEG0m VUejb1i0mZiSpkUJTENK9oh/eM0ZF1UhkqqM6lXgSwJbK6OP0oHjf9V1ygpccGa6 xsv9chDW3iKpgtmsm/dMaADsZJw3K/QcKjfbCozlLUF79VxIqQDL1LZHn62Y7ls/ QtlXhIjrE/mT+0DkfxWStPnyA5VCPL/IKLGckVuYLnzC5aZQFrqY6sI8I1TQIq/M 37tMT6uDyLgJ465boLyJw7K+XVyQtZIYY5kXnAOyQbJ8 -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:18 2026 by rpki-client