This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/2aoGpLTGgK9wzCk0NHOhSBbwi24.roa File: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (raw, json) Hash identifier: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo= Subject key identifier: D9:AA:06:A4:B4:C6:80:AF:70:CC:29:34:34:73:A1:48:16:F0:8B:6E Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Certificate serial: 019B7F824FF778065E76B05F7B26CFA1797B Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/2aoGpLTGgK9wzCk0NHOhSBbwi24.roa Signing time: Fri 02 Jan 2026 16:20:05 +0000 ROA not before: Fri 02 Jan 2026 16:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20750 IP address blocks: 77.76.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:4f:f7:78:06:5e:76:b0:5f:7b:26:cf:a1:79:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d Validity Not Before: Jan 2 16:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9aa06a4b4c680af70cc29343473a14816f08b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4d:b4:32:90:b1:61:d6:de:ec:96:5c:38:89: 19:41:2a:47:32:cd:af:6d:5f:8b:68:ad:d4:e1:02: 66:d0:48:09:66:f1:0b:91:95:eb:d1:b5:34:66:08: b7:2f:34:40:03:44:23:21:7c:b9:1c:aa:53:e0:31: fb:c5:01:62:07:82:06:41:47:ca:59:68:d2:f0:5d: 41:bd:75:a1:8c:02:0f:45:92:8c:72:ae:dc:2c:59: 06:f8:ff:52:a3:9d:16:05:b3:77:09:9a:d0:07:b4: 09:f4:ac:40:f0:b8:f1:e9:ff:ae:0c:40:a7:4a:c3: 8b:31:64:02:eb:a7:04:78:56:b9:6a:38:c9:c0:98: 07:f5:c8:a9:fc:34:05:0b:bf:fc:33:7d:52:35:ad: 14:51:c6:0b:91:ac:77:3f:8e:99:60:d2:7f:f6:12: c1:9e:86:d5:9f:86:af:cb:0a:f1:9e:b9:4f:05:43: 0a:42:f5:89:d2:5a:61:de:7a:aa:43:e2:54:14:29: fd:b9:5c:7a:35:eb:86:f6:0a:a5:25:03:4b:a8:16: 0b:b8:87:84:73:4b:43:f8:e9:cb:99:8d:50:e6:de: 2b:1b:5d:a7:74:67:76:e5:a7:96:96:aa:23:9a:30: e8:f9:5a:57:8a:d9:8a:db:3f:96:68:38:0e:d3:b3: 69:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AA:06:A4:B4:C6:80:AF:70:CC:29:34:34:73:A1:48:16:F0:8B:6E X509v3 Authority Key Identifier: keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/2aoGpLTGgK9wzCk0NHOhSBbwi24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.136.0/24 Signature Algorithm: sha256WithRSAEncryption bb:2b:8d:6e:80:91:b0:a3:2f:fe:39:b6:24:e8:dc:65:c9:12: 7a:a3:9c:42:da:70:b6:f8:80:b5:1f:21:47:a1:92:13:49:4b: 23:9a:2e:13:aa:5e:43:64:c6:93:c2:26:72:4e:71:13:33:d3: a9:21:1d:9e:bd:30:bf:a7:80:a9:6d:55:7b:5c:f2:fb:fc:05: b9:e7:61:bc:00:55:c6:fb:49:84:dc:71:a3:2c:c0:c9:bb:26: 34:31:90:3f:4d:b2:74:08:f2:51:5b:c4:11:2e:94:2b:67:c9: f1:58:0a:7c:91:13:21:99:9d:60:fc:50:50:df:6a:73:fe:21: f8:01:6d:7c:b8:40:9c:d0:96:6a:c8:dc:12:c3:70:2b:a0:61: e4:64:1d:5a:88:55:6e:06:15:db:4e:ef:21:32:a2:2a:6b:42: c7:d8:67:2b:93:14:0a:0f:3d:fb:30:dd:54:e3:8b:4b:2c:40: 10:bf:72:5b:cf:51:27:29:2e:f0:17:59:03:02:a5:3f:39:00: b6:4b:7a:80:b5:da:28:06:c3:53:8d:7a:e2:aa:a2:f9:b9:5a: be:12:70:5b:db:29:d8:96:a2:cb:b5:0d:e9:52:b8:2b:fb:b8: 6e:2c:39:90:1b:7e:dc:72:46:6c:5b:aa:f5:c9:c8:42:4d:73: d8:c5:8d:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gk/3eAZedrBfeybPoXl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3 OGIzOGQwHhcNMjYwMTAyMTYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWFhMDZhNGI0YzY4MGFmNzBjYzI5MzQzNDczYTE0ODE2ZjA4YjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk20MpCxYdbe7JZcOIkZQSpHMs2v bV+LaK3U4QJm0EgJZvELkZXr0bU0Zgi3LzRAA0QjIXy5HKpT4DH7xQFiB4IGQUfK WWjS8F1BvXWhjAIPRZKMcq7cLFkG+P9So50WBbN3CZrQB7QJ9KxA8Ljx6f+uDECn SsOLMWQC66cEeFa5ajjJwJgH9cip/DQFC7/8M31SNa0UUcYLkax3P46ZYNJ/9hLB nobVn4avywrxnrlPBUMKQvWJ0lph3nqqQ+JUFCn9uVx6NeuG9gqlJQNLqBYLuIeE c0tD+OnLmY1Q5t4rG12ndGd25aeWlqojmjDo+VpXitmK2z+WaDgO07NpgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNmqBqS0xoCvcMwpNDRzoUgW8ItuMB8GA1UdIwQY MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt NmIxNDY5YzNiOTVhLzEvMmFvR3BMVEdnSzl3ekNrME5IT2hTQmJ3aTI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUyIMA0G CSqGSIb3DQEBCwUAA4IBAQC7K41ugJGwoy/+ObYk6NxlyRJ6o5xC2nC2+IC1HyFH oZITSUsjmi4Tql5DZMaTwiZyTnETM9OpIR2evTC/p4CpbVV7XPL7/AW552G8AFXG +0mE3HGjLMDJuyY0MZA/TbJ0CPJRW8QRLpQrZ8nxWAp8kRMhmZ1g/FBQ32pz/iH4 AW18uECc0JZqyNwSw3AroGHkZB1aiFVuBhXbTu8hMqIqa0LH2GcrkxQKDz37MN1U 44tLLEAQv3Jbz1EnKS7wF1kDAqU/OQC2S3qAtdooBsNTjXriqqL5uVq+EnBb2ynY lqLLtQ3pUrgr+7huLDmQG37cckZsW6r1ychCTXPYxY3a -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:08 2026 by rpki-client