This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/zOFTSoFBiwz4XttYPKajiVAa53U.roa
File: zOFTSoFBiwz4XttYPKajiVAa53U.roa (raw, json)
Hash identifier: YXl0j7qu3TA7+56+EZPRnL+gqzFGRCWGQL1KAPnRN/8=
Subject key identifier: CC:E1:53:4A:81:41:8B:0C:F8:5E:DB:58:3C:A6:A3:89:50:1A:E7:75
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 019B7758FEB41A63075C62A624336B4A44BE
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/zOFTSoFBiwz4XttYPKajiVAa53U.roa
Signing time: Thu 01 Jan 2026 02:17:59 +0000
ROA not before: Thu 01 Jan 2026 02:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199896
IP address blocks: 77.65.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:fe:b4:1a:63:07:5c:62:a6:24:33:6b:4a:44:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 02:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cce1534a81418b0cf85edb583ca6a389501ae775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:b4:30:4f:34:b2:2e:b2:a3:72:2f:ee:30:
c5:ff:78:bf:b8:cf:ba:f6:65:9a:53:bb:5e:4a:ab:
62:9a:c4:7a:20:b2:2d:95:b5:2b:ba:a5:b2:cd:1c:
4d:5d:e3:f1:10:3f:b4:40:a0:8e:02:84:f6:64:c5:
51:63:d9:2c:07:af:a5:88:9f:14:a4:62:3a:97:65:
56:54:92:5a:05:2d:57:8a:05:a9:9c:7c:6c:7c:2f:
28:be:13:9b:2c:d4:15:b8:b0:48:7e:c5:fb:d4:d8:
72:f4:ae:f6:68:d1:e6:57:c1:f5:4b:87:6a:90:eb:
95:cf:c2:b4:23:05:1a:c7:99:00:b4:d2:25:0e:ed:
df:1c:89:93:24:b5:32:9f:25:bb:a9:ec:96:a5:97:
e6:4e:96:5e:42:51:45:25:76:88:66:f9:f9:2f:49:
46:f6:e3:eb:b5:1e:5d:c7:7e:63:a4:28:c4:36:93:
a1:a0:28:39:2d:a3:dd:b8:a3:87:8b:31:1a:da:b9:
aa:aa:1c:e2:f5:43:b2:d7:de:7f:ea:4b:c4:30:92:
8a:b9:e3:5e:4d:c2:fa:65:5a:93:19:56:3a:7c:61:
7e:d1:40:d2:b5:2d:03:f7:29:a4:e2:fd:2a:a1:6c:
e0:37:c6:e5:68:35:47:66:6e:bc:db:38:9d:92:c1:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:53:4A:81:41:8B:0C:F8:5E:DB:58:3C:A6:A3:89:50:1A:E7:75
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/zOFTSoFBiwz4XttYPKajiVAa53U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.135.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c1:a0:bd:a7:d1:e7:d9:fa:b4:98:6c:9b:90:e6:6a:58:27:
53:cd:5d:70:86:a8:48:73:87:4d:cd:9a:e5:6a:18:83:a9:42:
ad:22:fa:ab:b8:e1:62:27:96:4a:20:95:34:d0:99:c2:f8:77:
7e:4b:5e:b1:88:17:13:68:d4:3d:e5:72:d9:83:05:7d:41:0d:
76:18:68:50:9e:62:12:f8:9a:ae:7b:1a:b7:25:59:26:42:e0:
cb:50:41:a0:6b:f8:f9:42:b4:a2:f0:99:51:8a:55:e9:95:67:
62:c4:3c:a6:3e:46:3e:a8:c3:2e:c0:e9:1c:eb:e9:39:0d:94:
f9:e2:eb:72:ee:c5:09:99:bd:16:78:07:39:b1:35:1a:8f:1f:
9d:55:7d:e4:53:69:fb:03:e3:ba:e5:03:c4:26:ce:10:77:b9:
c2:30:aa:2d:b4:8b:ea:db:31:2c:71:4d:b0:40:ba:0e:e3:72:
59:89:67:af:5e:87:df:da:89:55:51:a0:a2:74:42:71:7a:20:
ce:6c:d9:36:44:1b:00:7a:44:1d:66:f2:22:f6:22:b1:b8:76:
29:1f:8a:5a:59:dc:2f:8a:29:5e:ac:81:cd:1e:7b:78:8b:ce:
52:6d:b0:f2:5c:ec:0e:98:52:c1:76:a6:05:25:ba:05:f1:59:
ea:61:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:42 2026 by rpki-client