This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/77NxWrnmqimKFMCuf2girgSv7YY.roa
File: 77NxWrnmqimKFMCuf2girgSv7YY.roa (raw, json)
Hash identifier: yvL8A+trO3nIzWdqFnzJlWa2S2CDPylqKXuoFVyMQzo=
Subject key identifier: EF:B3:71:5A:B9:E6:AA:29:8A:14:C0:AE:7F:68:22:AE:04:AF:ED:86
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019B77C6B04DBCEAFC299CFC90E2B6A93921
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/77NxWrnmqimKFMCuf2girgSv7YY.roa
Signing time: Thu 01 Jan 2026 04:17:48 +0000
ROA not before: Thu 01 Jan 2026 04:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206424
IP address blocks: 46.8.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:b0:4d:bc:ea:fc:29:9c:fc:90:e2:b6:a9:39:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 1 04:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efb3715ab9e6aa298a14c0ae7f6822ae04afed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:64:30:c5:33:90:71:42:8f:bb:30:1f:90:de:
94:fd:01:72:1f:2f:6f:7b:ed:b9:6a:7b:7a:18:d2:
cc:e8:88:86:15:ae:63:0f:8e:99:a7:91:9e:7e:7b:
a8:a5:5d:56:5d:a1:87:95:72:06:0d:9e:5d:f4:42:
af:14:cb:9f:64:7b:ad:e1:0a:3a:51:73:e4:3c:e7:
1b:e3:14:c1:10:85:a0:0f:71:fb:f6:a1:9e:e3:51:
d6:03:c0:7c:4a:bf:0c:7a:93:12:f3:87:23:5d:17:
ea:c1:31:46:aa:4b:71:d6:7a:bb:3b:9b:ff:f4:eb:
28:a9:2b:d5:92:6d:97:a3:f8:ca:17:de:c3:15:59:
fb:6f:34:f1:ee:48:49:dc:4a:af:e2:99:02:d9:4c:
fa:56:48:52:99:53:1f:58:da:43:11:c2:17:bb:86:
ea:9e:ca:08:79:82:28:23:e4:d1:bd:28:86:5f:20:
b0:07:71:25:d0:bd:b9:00:49:f1:87:00:00:19:8e:
4f:3e:f4:09:0e:a9:fe:c0:c1:eb:c7:6b:ff:b1:1c:
8b:03:3d:92:08:61:d3:96:66:8c:ff:7c:c3:69:d7:
79:bc:27:96:8d:db:ef:3c:d9:4c:2b:90:10:30:05:
c3:30:ac:b2:70:01:4a:0c:90:53:6d:51:0f:af:18:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B3:71:5A:B9:E6:AA:29:8A:14:C0:AE:7F:68:22:AE:04:AF:ED:86
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/77NxWrnmqimKFMCuf2girgSv7YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:24:ef:11:ee:9e:f3:09:63:ff:d6:8a:8b:01:e6:e1:40:34:
e9:62:87:01:7b:7e:fd:8d:dc:6a:7e:a5:82:5c:dd:c4:59:0e:
90:6c:c4:f5:87:1a:54:4c:6c:82:fb:66:5f:22:e8:f0:b2:85:
58:c8:88:d4:74:cc:9c:e5:5f:eb:be:2b:91:a3:74:0b:2c:51:
5e:b0:b5:5c:62:4a:83:2f:0c:31:b7:8b:cd:fc:f2:23:c8:f1:
94:01:44:4e:e2:51:00:68:61:74:97:4a:6f:68:17:b6:45:42:
b3:f7:17:99:52:f2:ad:1f:c7:1d:33:eb:c9:3d:e6:0a:9e:bd:
a0:51:13:be:ee:2e:c7:0f:39:c2:cc:81:80:b9:4d:ff:57:8a:
28:ad:28:e7:69:7b:a9:75:7c:64:a1:e9:80:5b:17:78:13:b6:
52:f6:eb:13:45:b5:b0:69:91:b3:69:f8:a7:bf:f2:88:9d:f3:
e1:9e:11:6a:70:a4:77:b0:ae:92:1a:58:13:58:cd:36:6a:ba:
3e:dd:bb:2e:ba:e5:eb:49:57:40:9b:df:79:6a:8f:21:23:4a:
d6:88:14:60:63:11:7e:fa:4b:bc:37:07:ee:59:95:25:a9:82:
dc:c3:3f:97:a6:97:f0:42:a7:d3:4a:55:70:35:1c:86:2c:55:
5e:74:bb:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xrBNvOr8KZz8kOK2qTkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmIzNzE1YWI5ZTZhYTI5OGExNGMwYWU3ZjY4MjJhZTA0YWZlZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mQwxTOQcUKPuzAfkN6U/QFyHy9v
e+25ant6GNLM6IiGFa5jD46Zp5GefnuopV1WXaGHlXIGDZ5d9EKvFMufZHut4Qo6
UXPkPOcb4xTBEIWgD3H79qGe41HWA8B8Sr8MepMS84cjXRfqwTFGqktx1nq7O5v/
9OsoqSvVkm2Xo/jKF97DFVn7bzTx7khJ3Eqv4pkC2Uz6VkhSmVMfWNpDEcIXu4bq
nsoIeYIoI+TRvSiGXyCwB3El0L25AEnxhwAAGY5PPvQJDqn+wMHrx2v/sRyLAz2S
CGHTlmaM/3zDadd5vCeWjdvvPNlMK5AQMAXDMKyycAFKDJBTbVEPrxgL5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+zcVq55qopihTArn9oIq4Er+2GMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvNzdOeFdybm1xaW1LRk1DdWYyZ2lyZ1N2N1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALggbMA0G
CSqGSIb3DQEBCwUAA4IBAQB6JO8R7p7zCWP/1oqLAebhQDTpYocBe379jdxqfqWC
XN3EWQ6QbMT1hxpUTGyC+2ZfIujwsoVYyIjUdMyc5V/rviuRo3QLLFFesLVcYkqD
Lwwxt4vN/PIjyPGUAURO4lEAaGF0l0pvaBe2RUKz9xeZUvKtH8cdM+vJPeYKnr2g
URO+7i7HDznCzIGAuU3/V4oorSjnaXupdXxkoemAWxd4E7ZS9usTRbWwaZGzafin
v/KInfPhnhFqcKR3sK6SGlgTWM02aro+3bsuuuXrSVdAm995ao8hI0rWiBRgYxF+
+ku8NwfuWZUlqYLcwz+XppfwQqfTSlVwNRyGLFVedLtP
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:05:35 2026 by rpki-client