This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/SRivJZ3NfmTceYbb0X0qedoYDkw.roa
File: SRivJZ3NfmTceYbb0X0qedoYDkw.roa (raw, json)
Hash identifier: +54ZwqGRotzytN67kFR0epWImuzogdtQhuQ9BjiZR4M=
Subject key identifier: 49:18:AF:25:9D:CD:7E:64:DC:79:86:DB:D1:7D:2A:79:DA:18:0E:4C
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 019A63A792434F6FFC31042A7EE879BA4ABB
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/SRivJZ3NfmTceYbb0X0qedoYDkw.roa
Signing time: Sat 08 Nov 2025 13:28:37 +0000
ROA not before: Sat 08 Nov 2025 13:28:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.105.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:63:a7:92:43:4f:6f:fc:31:04:2a:7e:e8:79:ba:4a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Nov 8 13:28:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4918af259dcd7e64dc7986dbd17d2a79da180e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:61:56:d9:ca:27:08:db:10:26:a5:34:93:
3a:7c:6b:30:34:5f:18:df:3e:c6:0a:eb:bc:d7:d1:
4b:c6:13:2f:5e:30:4d:30:21:7f:0d:5e:47:01:d3:
33:79:9c:77:b4:83:d7:67:a6:97:f0:ae:0a:71:27:
2b:ce:61:da:b8:f0:80:8b:6d:0a:55:c6:62:7d:0d:
15:05:89:50:be:05:4a:e8:c8:c5:32:ae:d3:5a:6f:
d2:e7:26:19:b4:bd:31:a8:58:29:b7:6e:4d:4b:17:
07:aa:e0:bb:02:29:b4:7d:34:4b:45:26:3c:ac:30:
c7:19:44:7a:49:52:26:bf:ae:81:b3:27:3e:9a:08:
60:04:b3:27:1a:76:a0:f4:a0:e7:f6:70:3d:d9:01:
e0:28:22:41:f9:6c:af:a8:2c:07:c3:e6:26:9f:83:
6d:42:09:3f:f8:09:ad:de:01:c9:57:49:dc:5d:8a:
a1:ef:2d:17:d5:e8:7d:43:5b:df:5c:54:11:82:81:
4d:b9:b6:a1:02:47:c9:59:64:88:6d:70:1e:b8:4b:
2a:47:1b:d2:4f:68:84:cf:89:52:08:f7:4d:53:ff:
d3:8f:33:35:02:8e:0e:1d:b7:31:a1:c5:7a:82:07:
8e:a7:66:d7:f7:74:ab:d2:f9:92:0d:4e:85:80:10:
25:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:18:AF:25:9D:CD:7E:64:DC:79:86:DB:D1:7D:2A:79:DA:18:0E:4C
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/SRivJZ3NfmTceYbb0X0qedoYDkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.166.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:61:b1:80:1d:d9:89:9f:d4:d9:b5:0c:8b:86:9c:6d:d7:c2:
05:98:45:2a:46:b4:79:be:bb:a0:d7:49:56:2f:a8:80:12:1e:
a9:ba:53:ca:f3:af:12:21:be:4a:7a:d4:32:aa:47:d1:fc:65:
5f:37:23:bc:c5:95:59:39:5f:a9:14:46:16:1b:10:43:b5:a2:
79:cf:82:a9:58:7d:6f:87:58:d8:46:bf:e3:3a:57:ce:69:d6:
c9:c5:c7:81:c6:90:4d:4c:15:75:53:8d:cb:08:d9:35:b1:19:
c1:7b:95:2a:ee:28:97:a2:c9:69:e0:fd:cb:47:9d:79:b1:88:
c4:61:1b:9f:91:bd:27:bf:96:18:ea:27:3a:20:89:51:62:4e:
f6:5a:f2:1f:87:8d:b7:c6:0e:93:6d:a8:ff:30:a4:fb:cd:b5:
f1:7e:40:89:f1:aa:44:0a:5f:3c:34:fb:b4:93:9b:55:c8:f8:
fe:f1:ec:9a:54:fa:ef:dc:64:eb:7c:16:cf:ac:9c:23:d5:ee:
0d:74:cd:f4:c0:63:a6:c3:2b:2e:67:57:f9:5b:f6:c2:20:6b:
a3:64:f4:90:42:a9:0c:16:9e:7d:f1:69:55:ae:57:c2:2b:76:
d3:08:1f:93:4f:e1:55:e9:fc:b6:3d:20:a9:93:ba:f6:ff:54:
7f:42:3a:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpjp5JDT2/8MQQqfuh5ukq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzBjNDQxZmI4OTJiOGM5ODE2NTM0ODg1MDY5ZmNkMzMw
MGM5YTQwHhcNMjUxMTA4MTMyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTE4YWYyNTlkY2Q3ZTY0ZGM3OTg2ZGJkMTdkMmE3OWRhMTgwZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yJhVtnKJwjbECalNJM6fGswNF8Y
3z7GCuu819FLxhMvXjBNMCF/DV5HAdMzeZx3tIPXZ6aX8K4KcScrzmHauPCAi20K
VcZifQ0VBYlQvgVK6MjFMq7TWm/S5yYZtL0xqFgpt25NSxcHquC7Aim0fTRLRSY8
rDDHGUR6SVImv66Bsyc+mghgBLMnGnag9KDn9nA92QHgKCJB+WyvqCwHw+Ymn4Nt
Qgk/+Amt3gHJV0ncXYqh7y0X1eh9Q1vfXFQRgoFNubahAkfJWWSIbXAeuEsqRxvS
T2iEz4lSCPdNU//TjzM1Ao4OHbcxocV6ggeOp2bX93Sr0vmSDU6FgBAlqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEkYryWdzX5k3HmG29F9KnnaGA5MMB8GA1UdIwQY
MBaAFNpwxEH7iSuMmBZTSIUGn80zAMmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMt
MTVmYzBiNjhmODQ0LzEvU1JpdkpaM05mbVRjZVliYjBYMHFlZG9ZRGt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNTNkZTUtMWI1Zi00NDY3LWE2OGMtMTVmYzBiNjhmODQ0
LzEvMm5ERVFmdUpLNHlZRmxOSWhRYWZ6VE1BeWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWmmMA0G
CSqGSIb3DQEBCwUAA4IBAQBNYbGAHdmJn9TZtQyLhpxt18IFmEUqRrR5vrug10lW
L6iAEh6pulPK868SIb5KetQyqkfR/GVfNyO8xZVZOV+pFEYWGxBDtaJ5z4KpWH1v
h1jYRr/jOlfOadbJxceBxpBNTBV1U43LCNk1sRnBe5Uq7iiXoslp4P3LR515sYjE
YRufkb0nv5YY6ic6IIlRYk72WvIfh423xg6Tbaj/MKT7zbXxfkCJ8apECl88NPu0
k5tVyPj+8eyaVPrv3GTrfBbPrJwj1e4NdM30wGOmwysuZ1f5W/bCIGujZPSQQqkM
Fp598WlVrlfCK3bTCB+TT+FV6fy2PSCpk7r2/1R/QjoZ
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:53:51 2025 by rpki-client