This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/SiifDnWuBugdllwKqmYmkxLxzjY.roa
File: SiifDnWuBugdllwKqmYmkxLxzjY.roa (raw, json)
Hash identifier: AOh77rl5eszozhBtjR9BHlvHJ39/4sZ3CwY0agEINJM=
Subject key identifier: 4A:28:9F:0E:75:AE:06:E8:1D:96:5C:0A:AA:66:26:93:12:F1:CE:36
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019B7F14B29404DE103090B7F15B6AE5FC60
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/SiifDnWuBugdllwKqmYmkxLxzjY.roa
Signing time: Fri 02 Jan 2026 14:20:21 +0000
ROA not before: Fri 02 Jan 2026 14:20:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47874
IP address blocks: 77.77.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:14:b2:94:04:de:10:30:90:b7:f1:5b:6a:e5:fc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 14:20:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a289f0e75ae06e81d965c0aaa66269312f1ce36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bf:d7:de:f8:97:ff:d5:8a:31:79:3e:df:78:
ee:ba:b3:40:51:28:cf:25:f9:e1:bf:f8:26:83:e5:
60:4b:aa:b1:74:a2:d0:c8:c6:ee:dc:da:6a:c4:57:
8d:06:3a:8c:c0:1f:a6:8f:f8:c7:08:30:da:e2:f6:
e3:7f:ef:5a:fe:b8:46:1a:8d:39:11:37:bc:27:dd:
2d:2d:bb:45:2e:1f:27:4d:88:bb:55:31:b7:b9:6f:
0d:e6:85:4c:81:8e:92:76:de:34:02:31:91:ac:df:
50:8b:5d:a4:e5:50:2b:25:97:30:d0:cb:e5:ab:e9:
b5:a7:bd:a6:a3:a9:4b:76:09:3d:50:4c:b1:ba:d9:
b1:7c:53:55:95:23:2f:bd:5f:e3:b3:9f:f7:a5:50:
9a:92:69:ef:95:70:45:06:05:80:65:80:2b:f0:42:
07:49:ac:01:ce:26:a3:ff:fd:ae:07:d8:c6:ec:8e:
08:a5:48:2e:d8:77:30:3d:6f:0e:8e:d5:35:63:bb:
b9:00:b9:94:e6:97:c7:28:d6:76:b8:af:ac:46:19:
67:55:ea:22:7c:d5:bb:76:da:80:cf:33:26:de:7b:
20:dd:84:62:2c:69:c9:d7:31:d9:14:e0:69:54:af:
a4:73:14:57:55:b4:3a:23:27:c1:3e:4f:bb:c6:a6:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:28:9F:0E:75:AE:06:E8:1D:96:5C:0A:AA:66:26:93:12:F1:CE:36
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/SiifDnWuBugdllwKqmYmkxLxzjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.163.0/24
Signature Algorithm: sha256WithRSAEncryption
10:78:66:2e:8a:4b:52:f6:8e:6a:8c:f7:a4:fd:db:70:7b:7c:
7a:f9:00:cf:6e:c2:d0:c4:43:ac:67:5f:72:53:19:46:17:fd:
b4:83:ce:06:7a:c2:d8:b1:8a:1c:de:9e:3d:06:be:52:29:3a:
c0:46:98:8c:16:a4:72:ef:f2:4d:35:fb:6c:fe:80:00:bb:e7:
b4:c9:38:39:9f:5f:67:f7:37:29:37:14:84:b1:5f:ac:46:5e:
a0:d7:63:89:cc:2c:eb:d2:a4:39:62:97:3e:56:ec:7a:c3:4c:
e9:d1:73:eb:93:b4:88:6d:07:cb:77:5a:03:a5:58:7b:98:4e:
c7:b8:f3:6b:bc:cc:6c:2e:ff:83:ad:b9:57:04:f6:1c:40:0a:
a0:46:8e:ee:2b:f4:98:09:25:01:a3:7a:8d:f3:05:b0:4d:14:
6d:67:99:79:d0:44:cf:4e:2b:af:e5:9f:54:30:f1:70:5b:7e:
3a:54:9d:f7:0d:3a:16:30:2d:45:8d:51:8e:a9:38:ff:5b:56:
61:0f:95:c3:70:8e:ac:ed:ff:af:30:d1:92:ea:a2:ff:47:8e:
90:ee:20:a9:33:06:98:8b:bf:d5:ce:03:5e:07:19:1b:4f:04:
75:03:e4:6c:c7:fd:0f:ba:58:0b:91:81:79:43:cb:50:b7:7d:
64:1f:f2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:52:04 2026 by rpki-client