This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa
File: sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (raw, json)
Hash identifier: R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=
Subject key identifier: B0:FC:94:FD:79:B7:32:2E:03:AC:26:1D:FB:10:8F:1C:2B:BB:62:3F
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 019B7DCB47CA4FBC6C632B55BBCC45A7DD1F
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa
Signing time: Fri 02 Jan 2026 08:20:32 +0000
ROA not before: Fri 02 Jan 2026 08:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47253
IP address blocks: 77.91.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:47:ca:4f:bc:6c:63:2b:55:bb:cc:45:a7:dd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jan 2 08:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0fc94fd79b7322e03ac261dfb108f1c2bbb623f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:76:31:0f:d9:67:ef:00:62:eb:c4:99:23:
43:ea:e9:ea:fb:17:24:5c:8d:dd:0b:46:0b:74:dc:
41:c1:35:a2:be:9c:f1:6b:8f:27:24:1b:a5:f8:90:
5b:68:ca:21:9c:cf:c1:22:9b:32:3c:e2:f7:71:59:
47:c6:f4:57:b9:d8:03:ec:1e:55:3f:81:67:66:2c:
4d:0d:3d:9a:36:ea:7f:5e:6d:98:85:47:c3:5c:12:
d1:b9:2d:cd:a2:fb:bb:ed:73:c6:68:d5:ab:c5:70:
fd:dc:89:e5:9e:2a:16:cd:11:c3:7a:4f:b1:1b:77:
01:b2:35:ac:72:f5:3e:91:3d:ba:0c:93:e0:fe:f7:
f0:9f:36:65:af:43:45:4b:6b:46:ed:ee:50:f8:96:
c9:c8:8f:0c:91:fe:56:03:3d:a4:21:42:26:67:16:
ad:22:ae:75:5d:20:70:56:c7:87:fd:3c:9a:39:35:
17:4c:37:61:36:26:1a:18:28:b3:34:b3:6b:d1:19:
c4:71:85:88:ad:ba:e1:81:9d:07:c3:5c:09:bb:cf:
ab:a0:5a:84:1b:6e:8a:51:d4:1a:67:7a:9f:f0:3c:
ee:f3:a8:29:e0:20:c7:01:a2:4b:a9:f6:0e:3b:f7:
55:e7:ff:ab:9b:d7:16:67:15:0f:64:7a:82:c5:bf:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FC:94:FD:79:B7:32:2E:03:AC:26:1D:FB:10:8F:1C:2B:BB:62:3F
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.148.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:d4:70:d2:04:ce:17:45:9c:dd:bc:a6:09:bc:be:23:04:2c:
f1:29:e5:9c:65:f4:a2:c1:86:47:e4:43:14:d0:e4:be:4d:cd:
96:c6:4c:91:26:93:66:5d:88:93:94:a8:70:a1:7d:e8:6a:02:
9a:7d:67:b3:7a:3d:3a:e2:af:9b:0f:98:ab:3f:e4:e6:d8:d1:
d7:86:c2:2a:08:0c:d5:e3:42:97:ac:ed:0b:c0:66:15:f1:ba:
e0:0f:f8:af:66:ec:8b:ac:a9:af:63:4a:bd:67:47:a4:21:2a:
e2:01:86:7c:44:7d:3f:c4:ec:3a:b0:8a:93:c7:41:e7:47:e6:
65:1f:87:e8:c6:20:15:31:95:7e:60:71:32:22:60:9c:35:d9:
5c:62:ae:73:df:b4:42:97:ef:25:87:22:d0:2e:8a:51:a5:83:
c6:9a:7b:db:2a:f2:c6:87:3f:0e:39:8b:74:9e:70:7d:bd:16:
81:08:52:b3:29:64:e5:42:69:91:4a:1a:f9:ae:87:be:08:3b:
09:11:c0:30:da:63:e2:5c:fd:73:04:07:25:7c:92:15:63:3f:
b6:c8:5b:0f:1b:83:61:6d:1b:1e:6f:d9:ae:28:9b:f5:5d:de:
cc:21:ae:94:fd:d0:72:a5:48:62:da:48:ca:27:a1:4f:26:60:
4d:40:1d:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9y0fKT7xsYytVu8xFp90fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm
ZTc0ZjkwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGZjOTRmZDc5YjczMjJlMDNhYzI2MWRmYjEwOGYxYzJiYmI2MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCt2MQ/ZZ+8AYuvEmSND6unq+xck
XI3dC0YLdNxBwTWivpzxa48nJBul+JBbaMohnM/BIpsyPOL3cVlHxvRXudgD7B5V
P4FnZixNDT2aNup/Xm2YhUfDXBLRuS3Novu77XPGaNWrxXD93InlnioWzRHDek+x
G3cBsjWscvU+kT26DJPg/vfwnzZlr0NFS2tG7e5Q+JbJyI8Mkf5WAz2kIUImZxat
Iq51XSBwVseH/TyaOTUXTDdhNiYaGCizNLNr0RnEcYWIrbrhgZ0Hw1wJu8+roFqE
G26KUdQaZ3qf8Dzu86gp4CDHAaJLqfYOO/dV5/+rm9cWZxUPZHqCxb+ysQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLD8lP15tzIuA6wmHfsQjxwru2I/MB8GA1UdIwQY
MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt
ZWI1YTYyN2U3NmEzLzEvc1B5VV9YbTNNaTREckNZZC14Q1BIQ3U3WWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz
LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTVuUMA0G
CSqGSIb3DQEBCwUAA4IBAQCf1HDSBM4XRZzdvKYJvL4jBCzxKeWcZfSiwYZH5EMU
0OS+Tc2WxkyRJpNmXYiTlKhwoX3oagKafWezej064q+bD5irP+Tm2NHXhsIqCAzV
40KXrO0LwGYV8brgD/ivZuyLrKmvY0q9Z0ekISriAYZ8RH0/xOw6sIqTx0HnR+Zl
H4foxiAVMZV+YHEyImCcNdlcYq5z37RCl+8lhyLQLopRpYPGmnvbKvLGhz8OOYt0
nnB9vRaBCFKzKWTlQmmRShr5roe+CDsJEcAw2mPiXP1zBAclfJIVYz+2yFsPG4Nh
bRseb9muKJv1Xd7MIa6U/dBypUhi2kjKJ6FPJmBNQB3i
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:54 2026 by rpki-client