This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/bntWlO8oAlo3XYjAKgtrS7rFv8o.roa File: bntWlO8oAlo3XYjAKgtrS7rFv8o.roa (raw, json) Hash identifier: 6tubppKQ5zfg5RFiNy88jOr/kwZ+vEP0vXQ4G8njoEg= Subject key identifier: 6E:7B:56:94:EF:28:02:5A:37:5D:88:C0:2A:0B:6B:4B:BA:C5:BF:CA Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019B797EB111B227A0C62CC927191CD1C66B Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/bntWlO8oAlo3XYjAKgtrS7rFv8o.roa Signing time: Thu 01 Jan 2026 12:18:24 +0000 ROA not before: Thu 01 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 781 IP address blocks: 77.72.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b1:11:b2:27:a0:c6:2c:c9:27:19:1c:d1:c6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Jan 1 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e7b5694ef28025a375d88c02a0b6b4bbac5bfca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:25:8d:a3:9f:d7:c7:bd:e4:30:5b:5c:28: 85:18:2d:93:9c:98:d0:ad:f4:d5:64:74:6f:b5:4e: cd:3f:33:ee:04:b2:e7:cd:31:25:0d:a6:0e:b8:75: 57:6d:66:56:66:ab:06:d6:bc:78:19:2f:bf:a6:99: 33:b6:5b:c0:cf:f3:c0:4a:7b:f0:93:ba:91:39:55: a9:1d:43:0e:a5:04:bd:a6:6e:fb:f2:b7:38:cf:e9: 69:7f:70:6f:81:5e:fa:10:23:aa:23:20:16:1a:16: 5b:0c:fd:63:7c:a7:0c:27:82:7e:83:c0:ec:cd:23: a6:17:41:c6:78:fc:d4:7b:c2:9e:5e:e4:25:2a:c3: da:a6:50:7b:93:1c:1b:e0:b2:b0:55:a7:ba:23:e3: ea:f1:38:7f:0c:a3:39:22:f6:3e:3d:66:5c:71:28: 2d:50:88:0e:ad:6e:8e:73:40:d5:b4:51:33:0b:ee: b9:5f:0a:a0:94:78:f2:f7:b9:21:02:97:cf:68:a7: 94:77:f0:11:7b:d7:c4:e6:d3:a3:76:23:1f:53:9f: 04:27:3f:c4:c4:bb:e9:98:e0:30:04:53:b5:7e:4f: 25:94:de:53:05:c9:d3:d2:1c:3b:43:1a:2c:33:95: f7:0c:d5:03:30:0b:2e:a2:ef:d8:1d:50:43:04:6d: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7B:56:94:EF:28:02:5A:37:5D:88:C0:2A:0B:6B:4B:BA:C5:BF:CA X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/bntWlO8oAlo3XYjAKgtrS7rFv8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.40.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:61:27:e7:88:5c:22:48:5f:83:3e:b8:d7:6d:83:1d:37:ad: fa:8a:5f:ea:b6:96:62:62:f3:59:78:eb:87:ce:f8:36:2d:cc: 63:c7:4e:eb:a0:82:d0:8a:81:d1:4f:77:c0:67:6d:62:65:a7: 1f:fa:9e:91:9a:ac:75:7f:cd:ff:bb:3f:36:2d:1d:86:86:83: e8:02:f5:9c:8e:ab:7a:5a:ea:ce:87:6d:8e:95:48:d7:56:29: 90:64:a2:1c:e5:b5:bf:65:55:b1:71:2b:b5:3c:54:ed:5b:b0: a8:db:a1:10:f0:46:80:93:a2:9e:ba:2c:f0:86:0f:31:b8:7b: 72:5d:db:30:07:4b:ad:8b:51:44:af:19:2f:b3:ab:5d:4b:33: 1c:22:f8:a9:d2:1d:b2:03:47:f0:1e:62:72:11:04:f9:8e:df: 76:d6:a1:f4:1e:dc:01:29:c6:04:db:fe:17:f8:8f:2c:7a:02: 3f:56:19:65:62:fa:09:ea:48:06:e9:72:93:11:c0:6d:e5:c7: 5a:03:4c:d6:61:4c:42:9a:f9:55:6d:90:18:8e:5a:d6:9d:da: b2:48:6e:06:61:81:17:b6:af:94:b0:92:fb:91:9e:20:44:7b: 48:36:4d:6b:9a:a2:d5:09:d6:df:18:3b:cc:61:94:90:6d:8a: ac:b7:2f:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5frERsiegxizJJxkc0cZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjYwMTAxMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTdiNTY5NGVmMjgwMjVhMzc1ZDg4YzAyYTBiNmI0YmJhYzViZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc0ljaOf18e95DBbXCiFGC2TnJjQ rfTVZHRvtU7NPzPuBLLnzTElDaYOuHVXbWZWZqsG1rx4GS+/ppkztlvAz/PASnvw k7qROVWpHUMOpQS9pm778rc4z+lpf3BvgV76ECOqIyAWGhZbDP1jfKcMJ4J+g8Ds zSOmF0HGePzUe8KeXuQlKsPaplB7kxwb4LKwVae6I+Pq8Th/DKM5IvY+PWZccSgt UIgOrW6Oc0DVtFEzC+65XwqglHjy97khApfPaKeUd/ARe9fE5tOjdiMfU58EJz/E xLvpmOAwBFO1fk8llN5TBcnT0hw7QxosM5X3DNUDMAsuou/YHVBDBG30yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG57VpTvKAJaN12IwCoLa0u6xb/KMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvYm50V2xPOG9BbG8zWFlqQUtndHJTN3JGdjhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUgoMA0G CSqGSIb3DQEBCwUAA4IBAQB9YSfniFwiSF+DPrjXbYMdN636il/qtpZiYvNZeOuH zvg2Lcxjx07roILQioHRT3fAZ21iZacf+p6Rmqx1f83/uz82LR2GhoPoAvWcjqt6 WurOh22OlUjXVimQZKIc5bW/ZVWxcSu1PFTtW7Co26EQ8EaAk6Keuizwhg8xuHty XdswB0uti1FErxkvs6tdSzMcIvip0h2yA0fwHmJyEQT5jt921qH0HtwBKcYE2/4X +I8segI/VhllYvoJ6kgG6XKTEcBt5cdaA0zWYUxCmvlVbZAYjlrWndqySG4GYYEX tq+UsJL7kZ4gRHtINk1rmqLVCdbfGDvMYZSQbYqsty9l -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:52 2026 by rpki-client