This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/E7YrJLZox5cMdv7vDN1PtbTDm6g.roa File: E7YrJLZox5cMdv7vDN1PtbTDm6g.roa (raw, json) Hash identifier: ye/Ek9Tph2fY4eIKSzP4eaFgW49JScmhNAnowqEnfUM= Subject key identifier: 13:B6:2B:24:B6:68:C7:97:0C:76:FE:EF:0C:DD:4F:B5:B4:C3:9B:A8 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B42DB30144FA72313357FDC2A1E1 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/E7YrJLZox5cMdv7vDN1PtbTDm6g.roa Signing time: Fri 02 Jan 2026 14:20:21 +0000 ROA not before: Fri 02 Jan 2026 14:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53767 IP address blocks: 77.67.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b4:2d:b3:01:44:fa:72:31:33:57:fd:c2:a1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13b62b24b668c7970c76feef0cdd4fb5b4c39ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:17:e4:5e:66:52:20:47:33:9b:aa:20:bf:00: e8:ac:ce:a0:76:2a:12:c5:01:c7:78:ac:bb:4f:4c: ab:7f:9d:06:69:7f:f4:ff:15:29:3b:45:6e:f5:f9: b2:67:d4:d7:9b:c6:60:23:f7:b7:78:d9:1d:fb:64: 10:d9:3b:9e:d7:78:6c:6a:ea:3b:61:54:b7:ca:a3: d5:f9:4a:25:42:f1:63:b3:49:b9:e2:41:10:76:45: 68:f5:b2:9b:d9:5b:5c:78:2f:7e:12:dd:1d:01:0a: 27:a2:c2:2e:c6:3a:f2:60:0c:31:23:f8:0f:51:94: 59:6a:a7:2c:30:a0:16:13:e3:76:ef:a5:f7:2c:60: 49:c3:82:15:17:85:e4:82:06:f1:a3:f9:7d:c4:94: 79:cb:86:60:a9:d4:ad:05:25:53:e9:cc:68:5f:4e: f6:6f:fb:c2:98:fa:d2:f5:b7:6c:72:8b:ca:78:e2: ae:14:ae:17:41:cb:8b:1f:14:7a:d8:31:ed:a6:e6: a0:b5:5d:c0:ea:6a:15:b4:b7:ed:d0:92:87:18:be: 3d:cf:fb:a0:2a:46:4f:34:c2:a9:ae:21:c6:a5:62: c5:62:c3:09:51:ac:ea:78:1f:b7:fa:bd:68:bb:25: ce:78:d2:d5:c3:4e:89:82:ab:07:04:bd:ee:63:dd: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B6:2B:24:B6:68:C7:97:0C:76:FE:EF:0C:DD:4F:B5:B4:C3:9B:A8 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/E7YrJLZox5cMdv7vDN1PtbTDm6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.67.106.0/24 Signature Algorithm: sha256WithRSAEncryption 97:67:7b:27:46:9e:b4:60:e0:5f:b3:b2:6a:83:07:7f:37:c0: 2c:16:f4:12:85:d8:6c:0b:24:41:88:60:a5:a3:b7:de:7d:ef: f6:5c:e9:d5:24:c0:f1:6b:0e:08:10:77:ae:6e:01:db:c9:ef: 73:04:55:28:17:e6:db:28:4e:91:01:7b:3f:b8:68:8b:09:b1: 0c:50:93:cd:6c:ce:b5:89:35:4f:f1:0f:66:9a:60:6b:c2:db: 1e:c0:fc:84:13:1d:0b:a1:d2:ff:8b:4a:78:06:8b:a0:4c:54: 5c:4d:8c:44:57:f1:dc:ce:87:38:56:e5:d6:3b:b3:6f:c7:d9: 70:77:33:82:4b:0b:95:89:af:b8:5d:aa:06:9c:90:e3:4c:22: b9:9a:38:b0:91:a4:a2:b2:96:bd:07:56:b3:bd:ae:90:e4:8b: cd:62:6f:3f:0d:e8:4e:28:6c:05:88:99:47:86:b4:9d:79:00: e4:ed:28:f3:c6:06:c3:4e:e0:a1:e6:a7:c7:d3:21:93:8b:39: cc:e8:c1:f2:9d:5e:9f:9c:aa:99:71:4b:2a:0f:30:54:a7:c0: ee:14:5c:64:c1:25:52:6a:f9:7d:13:52:5b:9f:f4:ed:68:73: 2d:ee:14:d7:69:1c:39:8e:ea:ed:57:56:cb:bf:32:ef:0c:4e: 80:89:ba:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FLQtswFE+nIxM1f9wqHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2I2MmIyNGI2NjhjNzk3MGM3NmZlZWYwY2RkNGZiNWI0YzM5YmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xfkXmZSIEczm6ogvwDorM6gdioS xQHHeKy7T0yrf50GaX/0/xUpO0Vu9fmyZ9TXm8ZgI/e3eNkd+2QQ2Tue13hsauo7 YVS3yqPV+UolQvFjs0m54kEQdkVo9bKb2VtceC9+Et0dAQonosIuxjryYAwxI/gP UZRZaqcsMKAWE+N276X3LGBJw4IVF4Xkggbxo/l9xJR5y4ZgqdStBSVT6cxoX072 b/vCmPrS9bdscovKeOKuFK4XQcuLHxR62DHtpuagtV3A6moVtLft0JKHGL49z/ug KkZPNMKpriHGpWLFYsMJUazqeB+3+r1ouyXOeNLVw06JgqsHBL3uY91m8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBO2KyS2aMeXDHb+7wzdT7W0w5uoMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvRTdZckpMWm94NWNNZHY3dkROMVB0YlREbTZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUNqMA0G CSqGSIb3DQEBCwUAA4IBAQCXZ3snRp60YOBfs7Jqgwd/N8AsFvQShdhsCyRBiGCl o7fefe/2XOnVJMDxaw4IEHeubgHbye9zBFUoF+bbKE6RAXs/uGiLCbEMUJPNbM61 iTVP8Q9mmmBrwtsewPyEEx0LodL/i0p4BougTFRcTYxEV/Hczoc4VuXWO7Nvx9lw dzOCSwuVia+4XaoGnJDjTCK5mjiwkaSispa9B1azva6Q5IvNYm8/DehOKGwFiJlH hrSdeQDk7SjzxgbDTuCh5qfH0yGTiznM6MHynV6fnKqZcUsqDzBUp8DuFFxkwSVS avl9E1Jbn/TtaHMt7hTXaRw5jurtV1bLvzLvDE6Aibox -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:20 2026 by rpki-client