This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/1mSfxcl8USMNTYVA2ac_I15q63g.roa File: 1mSfxcl8USMNTYVA2ac_I15q63g.roa (raw, json) Hash identifier: 2i0VcgoXzFFisNrlXL5nDBcmyV2po2HvWri7FSI6tQE= Subject key identifier: D6:64:9F:C5:C9:7C:51:23:0D:4D:85:40:D9:A7:3F:23:5E:6A:EB:78 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019BAE36EEEDB11EAC9135457FAE3B91C716 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/1mSfxcl8USMNTYVA2ac_I15q63g.roa Signing time: Sun 11 Jan 2026 17:59:54 +0000 ROA not before: Sun 11 Jan 2026 17:59:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211522 IP address blocks: 77.91.70.0/24 maxlen: 24 77.91.76.0/24 maxlen: 24 77.91.77.0/24 maxlen: 24 77.91.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:36:ee:ed:b1:1e:ac:91:35:45:7f:ae:3b:91:c7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jan 11 17:59:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6649fc5c97c51230d4d8540d9a73f235e6aeb78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:b1:d2:b3:47:a0:4a:74:4a:01:4b:7d:25: 5d:c6:21:8b:f6:72:7b:93:f5:ce:bd:68:cf:22:fb: 04:6a:1a:70:0f:3e:14:69:db:0c:bb:50:19:59:2a: e0:18:ea:a8:38:32:de:6c:b0:7c:14:21:0c:dd:2a: 29:df:50:8c:3f:ec:05:60:b1:ae:64:f1:68:08:71: 8e:6d:d7:fd:4a:84:c6:34:b0:2e:c4:d5:ae:ad:eb: 1b:57:20:c2:45:ca:0d:77:d0:7e:25:a1:e7:df:fa: 4f:1a:a6:64:5f:9b:35:7b:bd:bd:5f:d4:28:2c:40: 9e:ae:72:31:5a:13:36:87:fe:e3:c3:11:87:7b:4b: d8:9f:65:1f:20:42:cc:9b:97:4f:57:a5:1f:4e:99: 95:c9:21:5e:9e:4d:50:3c:7f:04:18:c5:8d:41:f8: 59:68:2e:ed:4e:49:12:1e:f8:cb:5e:0f:3b:bc:7d: 82:a0:f0:dc:46:97:3d:ed:53:f5:c4:63:11:cf:ce: 6c:7a:4e:e4:b3:49:ec:3a:36:ac:76:5e:9f:a5:30: c9:52:ea:1a:5f:67:cb:d6:43:35:64:63:89:39:41: a2:f4:f7:6e:73:77:4a:80:11:b4:c0:1f:56:11:8c: 9a:c2:66:ea:28:1c:aa:e2:ac:db:54:67:49:49:7e: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:64:9F:C5:C9:7C:51:23:0D:4D:85:40:D9:A7:3F:23:5E:6A:EB:78 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/1mSfxcl8USMNTYVA2ac_I15q63g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.70.0/24 77.91.76.0-77.91.78.255 Signature Algorithm: sha256WithRSAEncryption 27:ef:5b:57:c7:41:a4:54:f1:68:dd:75:c9:51:3f:c8:dc:9b: 6d:00:fb:b1:7a:c7:a4:1f:07:ef:e5:7a:10:9e:3d:79:53:56: 75:dd:8d:95:d3:93:2d:ed:82:fd:ce:56:5e:26:24:3a:07:7e: 70:ab:4c:eb:1a:da:76:91:63:95:97:34:8a:2d:3b:15:2e:1c: 92:8b:c0:f1:e6:11:99:4b:a1:4b:52:bc:1d:19:26:d5:e4:6e: 88:cf:a1:c8:07:6c:6f:69:7a:93:20:ea:1b:94:27:1c:6c:bf: df:51:59:87:c8:0a:c9:0b:87:71:5d:db:68:e3:65:0d:1f:a8: f5:f0:8d:c5:f5:f4:e6:8d:94:c0:63:e7:5b:62:dc:e7:4b:06: 93:48:40:4e:49:3f:69:d8:6e:52:61:01:9c:14:0e:60:3b:06: 2b:be:3f:b3:68:b5:7b:53:17:58:bc:61:4e:1a:a5:2b:36:19: ad:45:29:7a:ff:93:96:10:d2:c6:98:67:34:0c:a4:32:85:ba: 3b:88:cf:b6:0f:f7:b5:1f:21:0a:ca:96:59:ac:4f:65:c7:07: 3b:93:9e:a4:a7:c3:49:56:18:e8:cf:04:31:31:5e:1e:f1:96: c9:92:be:03:3d:77:cc:da:92:31:34:45:ce:2c:fa:3c:b8:70: 83:a6:53:13 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZuuNu7tsR6skTVFf647kccWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMTExMTc1OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjY0OWZjNWM5N2M1MTIzMGQ0ZDg1NDBkOWE3M2YyMzVlNmFlYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzax0rNHoEp0SgFLfSVdxiGL9nJ7 k/XOvWjPIvsEahpwDz4UadsMu1AZWSrgGOqoODLebLB8FCEM3Sop31CMP+wFYLGu ZPFoCHGObdf9SoTGNLAuxNWuresbVyDCRcoNd9B+JaHn3/pPGqZkX5s1e729X9Qo LECernIxWhM2h/7jwxGHe0vYn2UfIELMm5dPV6UfTpmVySFenk1QPH8EGMWNQfhZ aC7tTkkSHvjLXg87vH2CoPDcRpc97VP1xGMRz85sek7ks0nsOjasdl6fpTDJUuoa X2fL1kM1ZGOJOUGi9Pduc3dKgBG0wB9WEYyawmbqKByq4qzbVGdJSX4UswIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNZkn8XJfFEjDU2FQNmnPyNeaut4MB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvMW1TZnhjbDhVU01OVFlWQTJhY19JMTVxNjNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQATVtGMAwD BAJNW0wDBABNW04wDQYJKoZIhvcNAQELBQADggEBACfvW1fHQaRU8WjddclRP8jc m20A+7F6x6QfB+/lehCePXlTVnXdjZXTky3tgv3OVl4mJDoHfnCrTOsa2naRY5WX NIotOxUuHJKLwPHmEZlLoUtSvB0ZJtXkbojPocgHbG9pepMg6huUJxxsv99RWYfI CskLh3Fd22jjZQ0fqPXwjcX19OaNlMBj51ti3OdLBpNIQE5JP2nYblJhAZwUDmA7 Biu+P7NotXtTF1i8YU4apSs2Ga1FKXr/k5YQ0saYZzQMpDKFujuIz7YP97UfIQrK llmsT2XHBzuTnqSnw0lWGOjPBDExXh7xlsmSvgM9d8zakjE0Rc4s+jy4cIOmUxM= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:16 2026 by rpki-client