This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/uzcmX6aVXVtiO7_4nXhYekuZD8o.roa File: uzcmX6aVXVtiO7_4nXhYekuZD8o.roa (raw, json) Hash identifier: 7x7xlMP1yianlPCbPG6o6JY/ufIwvtnUiZalCxbyGTQ= Subject key identifier: BB:37:26:5F:A6:95:5D:5B:62:3B:BF:F8:9D:78:58:7A:4B:99:0F:CA Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F84279586DA44BB546F587DEA3659B2 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/uzcmX6aVXVtiO7_4nXhYekuZD8o.roa Signing time: Fri 02 Jan 2026 16:22:05 +0000 ROA not before: Fri 02 Jan 2026 16:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207412 IP address blocks: 77.227.23.0/24 maxlen: 24 77.227.24.0/24 maxlen: 24 77.231.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:27:95:86:da:44:bb:54:6f:58:7d:ea:36:59:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb37265fa6955d5b623bbff89d78587a4b990fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:5c:cb:39:94:af:12:84:dc:11:d9:21:52: 07:00:3b:50:bb:0c:7f:64:2d:cd:6b:88:f5:6c:75: 25:b8:ed:7e:c4:a9:80:2f:47:79:b1:20:c5:54:c7: ff:50:8f:bf:83:e7:6c:e9:0e:48:84:57:2e:3f:51: 92:af:00:46:f7:65:d2:99:5c:0e:5b:9c:56:32:63: 0c:c3:cb:dc:b6:98:96:09:c8:8b:30:2c:38:f9:80: c4:40:12:5b:c5:66:aa:8a:f2:fb:71:f5:7f:cc:9f: f8:ad:e0:be:0a:1e:f3:ef:b1:3f:79:c6:7b:de:ff: c9:7d:49:7e:ea:e6:61:42:0a:e0:0a:89:e4:f8:39: eb:02:f5:07:64:29:09:40:55:1d:4a:a9:c3:2c:64: 0b:28:e0:98:f0:b2:01:63:19:13:20:80:c5:b7:40: bf:8e:93:97:d4:e4:28:2c:22:3c:a3:87:6f:6f:9f: 1c:32:8f:09:72:47:5b:5f:00:b0:ef:72:94:37:e0: dc:fe:52:14:ba:bd:c8:3c:84:9a:a5:fb:74:95:7f: 0f:da:3c:80:08:84:8f:a7:e9:02:df:79:e5:af:dd: 68:1e:74:1a:3b:c2:e0:04:93:cf:84:89:9f:ed:d7: f4:9a:ff:94:16:04:27:10:dc:a9:3f:da:c2:51:58: 73:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:37:26:5F:A6:95:5D:5B:62:3B:BF:F8:9D:78:58:7A:4B:99:0F:CA X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/uzcmX6aVXVtiO7_4nXhYekuZD8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.227.23.0-77.227.24.255 77.231.176.0/24 Signature Algorithm: sha256WithRSAEncryption b2:dd:d9:03:9a:d0:09:76:4d:29:80:d5:bf:ad:e2:d3:a4:83: 4e:d8:ed:24:43:3e:96:90:b9:40:9c:23:2e:92:e1:41:6a:73: d3:88:99:33:51:d4:28:dd:84:88:81:93:6c:af:d3:68:57:01: 86:c0:86:25:cb:dd:fb:27:a5:ec:57:a0:e5:5c:0b:e1:ff:d3: ac:82:35:9e:36:18:d9:77:8f:f9:ce:35:8f:66:01:05:23:dd: d4:64:d4:3a:bd:21:07:de:7a:6e:f1:21:31:fb:80:6c:4c:d7: 14:dc:1a:15:41:bb:6a:6a:cf:e9:04:1e:68:67:02:e9:ff:87: 9b:cd:e6:dc:d9:1b:a4:7f:b8:55:70:e5:27:35:3b:c4:4e:29: 84:b5:4b:f1:dc:89:a3:a5:ba:38:86:e6:df:9a:13:a4:a2:83: 6f:d4:1f:73:a3:e4:ae:27:6f:ee:08:9d:a2:ae:81:48:50:80: d6:91:a1:4b:27:b2:b2:0e:e9:72:6c:e4:e2:93:13:2e:d7:49: 1b:29:9a:5e:69:3f:86:c0:7e:18:62:3c:16:8d:7e:96:fb:c9: d6:67:06:6b:30:ff:f4:ca:83:ee:c8:00:6c:e8:46:ff:b9:df: f9:54:f1:7b:de:75:bd:62:f4:f1:aa:cd:0a:43:9b:ef:19:55: 81:7a:d1:5e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/hCeVhtpEu1RvWH3qNlmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjM3MjY1ZmE2OTU1ZDViNjIzYmJmZjg5ZDc4NTg3YTRiOTkwZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW1cyzmUrxKE3BHZIVIHADtQuwx/ ZC3Na4j1bHUluO1+xKmAL0d5sSDFVMf/UI+/g+ds6Q5IhFcuP1GSrwBG92XSmVwO W5xWMmMMw8vctpiWCciLMCw4+YDEQBJbxWaqivL7cfV/zJ/4reC+Ch7z77E/ecZ7 3v/JfUl+6uZhQgrgConk+DnrAvUHZCkJQFUdSqnDLGQLKOCY8LIBYxkTIIDFt0C/ jpOX1OQoLCI8o4dvb58cMo8JckdbXwCw73KUN+Dc/lIUur3IPISapft0lX8P2jyA CISPp+kC33nlr91oHnQaO8LgBJPPhImf7df0mv+UFgQnENypP9rCUVhzEQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLs3Jl+mlV1bYju/+J14WHpLmQ/KMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvdXpjbVg2YVZYVnRpTzdfNG5YaFlla3VaRDhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABN4xcD BABN4xgDBABN57AwDQYJKoZIhvcNAQELBQADggEBALLd2QOa0Al2TSmA1b+t4tOk g07Y7SRDPpaQuUCcIy6S4UFqc9OImTNR1CjdhIiBk2yv02hXAYbAhiXL3fsnpexX oOVcC+H/06yCNZ42GNl3j/nONY9mAQUj3dRk1Dq9IQfeem7xITH7gGxM1xTcGhVB u2pqz+kEHmhnAun/h5vN5tzZG6R/uFVw5Sc1O8ROKYS1S/HciaOlujiG5t+aE6Si g2/UH3Oj5K4nb+4InaKugUhQgNaRoUsnsrIO6XJs5OKTEy7XSRspml5pP4bAfhhi PBaNfpb7ydZnBmsw//TKg+7IAGzoRv+53/lU8Xvedb1i9PGqzQpDm+8ZVYF60V4= -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:34 2026 by rpki-client