This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/u7mWFsXgCQcoidizt8xKhyGJvDg.roa
File: u7mWFsXgCQcoidizt8xKhyGJvDg.roa (raw, json)
Hash identifier: 9wJPo8WWhKELIxvhxuN9tUgNDNqYtZSQj49gD9XqYJA=
Subject key identifier: BB:B9:96:16:C5:E0:09:07:28:89:D8:B3:B7:CC:4A:87:21:89:BC:38
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7759177CFC2A9D816B8D2D1E4459A10F
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/u7mWFsXgCQcoidizt8xKhyGJvDg.roa
Signing time: Thu 01 Jan 2026 02:18:06 +0000
ROA not before: Thu 01 Jan 2026 02:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210997
IP address blocks: 77.65.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:17:7c:fc:2a:9d:81:6b:8d:2d:1e:44:59:a1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbb99616c5e009072889d8b3b7cc4a872189bc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:15:cb:09:5c:67:3e:e1:aa:c5:3d:69:4e:
f8:7a:fe:84:67:a1:51:9b:bf:64:87:ef:d1:0a:b9:
37:be:ed:ce:cc:df:1b:bc:d2:b7:df:2a:0d:e6:e7:
67:b7:24:56:95:32:1e:91:cf:15:a5:55:90:c8:d0:
02:8c:b0:a0:85:89:aa:eb:dc:76:6a:56:9b:59:02:
76:fb:be:05:a9:90:7d:eb:e5:11:41:7f:6f:8b:3c:
a7:ee:84:e3:d6:9e:07:91:fb:de:32:8e:1d:31:39:
6e:8c:25:a2:64:bf:da:32:eb:75:a2:ce:ae:1c:5c:
c3:22:97:1f:b4:67:d3:e2:2e:c1:b1:ff:c9:81:52:
0a:a4:7a:16:04:b8:0c:d1:d0:17:81:97:32:44:f4:
12:56:c0:86:e0:2a:4a:a6:1b:39:62:ae:3a:cf:8e:
9e:18:a0:9a:b8:e3:05:34:e4:10:be:7f:b2:d4:30:
fd:93:04:78:10:e8:5c:13:35:67:12:06:2b:f0:ee:
1c:ee:5b:b6:d8:67:a5:a5:19:d9:05:a8:42:d9:64:
35:12:64:b5:2b:e2:b6:de:8e:b1:0a:07:64:e7:06:
67:1e:3d:03:b5:a3:f3:9e:1a:78:55:ca:bc:5d:1f:
b5:4e:e5:5e:eb:98:68:e7:7e:07:1d:08:4d:04:c7:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B9:96:16:C5:E0:09:07:28:89:D8:B3:B7:CC:4A:87:21:89:BC:38
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/u7mWFsXgCQcoidizt8xKhyGJvDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.217.0/24
Signature Algorithm: sha256WithRSAEncryption
32:80:1e:02:37:f6:85:8f:9a:56:3e:90:51:6b:3e:7a:c6:d3:
72:76:07:46:67:05:0f:e4:04:cd:26:ac:34:91:bf:e8:db:16:
ae:55:19:84:90:e7:5e:c9:fc:93:cc:38:a5:bd:e8:cd:88:a8:
75:60:dd:0d:99:a1:53:87:0f:37:ca:5d:58:bb:ec:c4:3e:65:
51:e2:c9:97:cc:5b:e1:61:fe:84:42:43:f5:bf:6d:e5:74:0f:
6a:c8:b1:64:8a:8f:61:d7:8e:51:ca:ce:b0:79:ea:0f:18:83:
e4:d4:4d:c5:06:62:f6:be:a0:78:4e:7b:9f:62:5a:37:1a:1d:
7c:28:4c:e3:ba:c1:46:46:e7:a2:e5:ea:09:e2:c0:60:7d:f0:
0e:f8:e3:df:b3:39:0b:10:d3:7b:85:7c:b7:30:21:48:21:fd:
1d:92:09:c2:db:86:24:19:37:af:3b:8a:db:57:c2:ad:7f:a4:
14:41:62:45:5f:76:9b:53:bb:b7:2e:b6:ba:a0:f2:45:65:7f:
d2:09:21:14:88:3e:c6:b9:87:ce:27:24:f1:55:d5:65:06:56:
b1:7a:1a:c8:b2:8e:60:d9:ca:8e:13:39:8b:b9:4d:ef:42:0d:
de:3c:e8:54:06:77:3f:20:5b:62:ce:8f:42:9b:b1:38:07:72:
e1:30:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:33 2026 by rpki-client