This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/7lAzklFt5hv21weZsd8RUSnd9Ig.roa File: 7lAzklFt5hv21weZsd8RUSnd9Ig.roa (raw, json) Hash identifier: +VKWZFr+6W37JzEA9GSsY/1+wtiBPUM4ZOAfeR7K+UM= Subject key identifier: EE:50:33:92:51:6D:E6:1B:F6:D7:07:99:B1:DF:11:51:29:DD:F4:88 Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d Certificate serial: 019B79EC8A5ACCD2CE94A245E0A3D9787C40 Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/7lAzklFt5hv21weZsd8RUSnd9Ig.roa Signing time: Thu 01 Jan 2026 14:18:23 +0000 ROA not before: Thu 01 Jan 2026 14:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21473 IP address blocks: 77.72.216.0/21 maxlen: 24 77.72.221.0/24 maxlen: 24 213.183.64.0/19 maxlen: 24 213.206.160.0/19 maxlen: 24 2a02:24d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8a:5a:cc:d2:ce:94:a2:45:e0:a3:d9:78:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d Validity Not Before: Jan 1 14:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee503392516de61bf6d70799b1df115129ddf488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:b7:3e:34:5e:c9:15:9c:18:d8:2c:8b:10: c1:9d:f8:fc:24:f1:bb:0f:71:30:b8:97:87:4f:6a: 45:45:e7:4c:be:8d:f0:99:11:32:a5:af:6f:b3:81: cb:c5:1b:77:f1:bb:84:6e:16:e3:89:86:26:19:39: da:5b:bd:de:fb:cc:c8:f6:4c:d2:dd:a5:07:e6:c8: 14:a9:20:88:dd:d3:5f:19:10:b9:7c:62:3a:ef:1a: 72:cf:e3:9c:ec:82:da:5f:c5:30:96:41:d3:00:3f: 65:d2:66:38:98:8f:e1:71:aa:d9:ac:3b:d3:1b:c2: 7f:cf:54:90:df:e7:cd:9b:d2:ab:1e:84:b7:a5:e4: 45:86:1b:e6:29:ef:7b:69:83:58:3b:13:20:8f:13: 1c:1c:11:ac:8e:6c:91:43:5a:b4:3d:d3:a7:29:3d: dc:e7:aa:67:71:ce:9f:f6:c1:56:25:92:eb:b1:4c: 1d:3e:2f:8a:cb:60:d8:96:36:0b:a0:bd:fd:8c:f1: dd:7f:b9:03:27:7a:fc:50:f8:fa:2f:87:c6:86:68: 5a:95:c7:7a:4b:ee:45:3a:34:dd:cd:0f:77:65:c4: f5:4f:5a:dd:a7:a1:38:5c:b5:d7:6d:9c:51:76:19: 59:f8:57:bf:82:05:c6:1a:27:79:68:d5:dc:85:1f: 57:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:50:33:92:51:6D:E6:1B:F6:D7:07:99:B1:DF:11:51:29:DD:F4:88 X509v3 Authority Key Identifier: keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/7lAzklFt5hv21weZsd8RUSnd9Ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.216.0/21 213.183.64.0/19 213.206.160.0/19 IPv6: 2a02:24d8::/32 Signature Algorithm: sha256WithRSAEncryption b5:72:7c:65:52:c3:69:b4:d2:cf:78:a4:cb:ae:77:0c:3a:b9: b1:82:00:52:4a:9e:f6:61:21:27:e4:26:f5:0f:d4:b4:a5:b5: 85:cf:d6:91:52:ce:8a:12:91:7a:ca:71:82:6b:9b:06:c6:b3: 2a:9c:15:3e:73:51:6c:69:cc:73:cb:cc:71:94:d4:84:38:81: 9e:70:5c:8b:ef:65:19:c2:46:6e:17:b3:13:03:85:a5:55:af: 3f:62:b3:49:bb:cc:3e:74:e6:bf:fb:e9:0e:9f:77:42:15:98: 85:16:94:da:27:34:f8:d0:80:68:de:1e:a7:59:f3:18:dd:d1: 75:6d:c9:7b:98:9c:a5:09:8d:b7:50:09:7f:ad:e0:7e:7e:71: 20:83:45:d1:30:b0:8c:77:f4:14:b5:83:46:5d:ff:b4:23:8f: 12:0d:c4:f0:ad:64:db:bc:6a:86:0c:f2:fd:cb:72:16:74:5e: b2:90:8f:36:46:a5:85:bf:e5:cd:63:0e:e2:eb:22:b2:d2:46: b8:b7:0c:d0:6a:1b:73:d5:e7:04:e5:0d:f6:7a:dd:ed:4c:01: 37:c7:6b:fb:94:f5:47:a6:c3:77:92:c2:3d:c0:ec:73:61:89: 62:23:30:80:0a:d2:38:5f:76:e1:f3:ba:34:ff:fd:de:04:54: fa:fc:79:f4 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57IpazNLOlKJF4KPZeHxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZDgwMWRlOWZlOGE2NjgwNzU4ODE3ODIzYWUzNmJhMDY1 YzYxMGQwHhcNMjYwMTAxMTQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTUwMzM5MjUxNmRlNjFiZjZkNzA3OTliMWRmMTE1MTI5ZGRmNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsi3PjReyRWcGNgsixDBnfj8JPG7 D3EwuJeHT2pFRedMvo3wmREypa9vs4HLxRt38buEbhbjiYYmGTnaW73e+8zI9kzS 3aUH5sgUqSCI3dNfGRC5fGI67xpyz+Oc7ILaX8UwlkHTAD9l0mY4mI/hcarZrDvT G8J/z1SQ3+fNm9KrHoS3peRFhhvmKe97aYNYOxMgjxMcHBGsjmyRQ1q0PdOnKT3c 56pncc6f9sFWJZLrsUwdPi+Ky2DYljYLoL39jPHdf7kDJ3r8UPj6L4fGhmhalcd6 S+5FOjTdzQ93ZcT1T1rdp6E4XLXXbZxRdhlZ+Fe/ggXGGid5aNXchR9XmwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFO5QM5JRbeYb9tcHmbHfEVEp3fSIMB8GA1UdIwQY MBaAFBjYAd6f6KZoB1iBeCOuNroGXGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTkt NjU1MDNhOTMwNmEwLzEvN2xBemtsRnQ1aHYyMXdlWnNkOFJVU25kOUlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NWMzYzgtNmFiMS00OTUxLThmNTktNjU1MDNhOTMwNmEw LzEvR05nQjNwX29wbWdIV0lGNEk2NDJ1Z1pjWVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDTUjYAwQF 1bdAAwQF1c6gMA0EAgACMAcDBQAqAiTYMA0GCSqGSIb3DQEBCwUAA4IBAQC1cnxl UsNptNLPeKTLrncMOrmxggBSSp72YSEn5Cb1D9S0pbWFz9aRUs6KEpF6ynGCa5sG xrMqnBU+c1Fsacxzy8xxlNSEOIGecFyL72UZwkZuF7MTA4WlVa8/YrNJu8w+dOa/ ++kOn3dCFZiFFpTaJzT40IBo3h6nWfMY3dF1bcl7mJylCY23UAl/reB+fnEgg0XR MLCMd/QUtYNGXf+0I48SDcTwrWTbvGqGDPL9y3IWdF6ykI82RqWFv+XNYw7i6yKy 0ka4twzQahtz1ecE5Q32et3tTAE3x2v7lPVHpsN3ksI9wOxzYYliIzCACtI4X3bh 87o0//3eBFT6/Hn0 -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:41 2026 by rpki-client