This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7cq7i0uFlGtrRFHyZctBqtQ_lxM.roa File: 7cq7i0uFlGtrRFHyZctBqtQ_lxM.roa (raw, json) Hash identifier: 1yZ1dgohr6gA8Cnonud+UVi29BkbuO/s9uMgjMHfzZ4= Subject key identifier: ED:CA:BB:8B:4B:85:94:6B:6B:44:51:F2:65:CB:41:AA:D4:3F:97:13 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77595627FBDD2BB73642548D72B9CA96 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7cq7i0uFlGtrRFHyZctBqtQ_lxM.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51102 IP address blocks: 77.81.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:56:27:fb:dd:2b:b7:36:42:54:8d:72:b9:ca:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edcabb8b4b85946b6b4451f265cb41aad43f9713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9e:4c:d3:f3:f1:d9:5a:4e:79:33:8d:01:99: 49:22:eb:c9:3f:ec:ee:de:83:50:bc:39:2b:66:9e: f6:6e:06:e1:c7:17:70:cb:43:bb:78:0b:2b:19:6f: 32:51:22:0c:9c:ae:d4:1c:a6:96:02:84:06:c8:01: 05:ef:87:3f:82:12:1e:8a:7c:df:e3:bb:26:74:02: ac:ca:63:fe:57:fa:4d:d3:00:7f:3f:76:e1:b4:13: 34:3f:20:1b:34:36:9b:47:a0:48:bf:f5:46:a4:95: 43:b8:8a:db:56:18:12:02:86:22:2e:fa:2f:2c:b3: 4a:29:db:23:a1:d8:1d:2a:0b:da:ea:c9:62:b0:25: 34:12:cb:e5:05:8c:8b:ba:9e:30:23:b5:91:cf:fa: 67:5d:71:da:ea:e2:e4:15:e5:e7:5d:76:93:6c:2b: 5d:ad:e2:14:e7:ed:d6:d1:46:29:b5:2e:43:66:61: 71:e2:63:4d:ba:b8:af:de:66:7a:03:6b:f2:78:96: 64:bb:d1:c6:2b:13:2b:d3:d9:48:7c:c2:e4:85:a7: f1:33:eb:99:db:96:3c:5f:5c:00:d5:02:74:a9:2a: 35:01:6d:2d:d8:18:80:72:95:40:fc:e3:1e:4a:9a: df:07:df:b1:b3:f6:01:06:3a:0b:6d:d2:58:26:79: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CA:BB:8B:4B:85:94:6B:6B:44:51:F2:65:CB:41:AA:D4:3F:97:13 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7cq7i0uFlGtrRFHyZctBqtQ_lxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.48.0/24 Signature Algorithm: sha256WithRSAEncryption af:04:b9:20:53:a4:a8:d9:e5:f6:f8:49:c5:de:f3:87:6e:b7: 01:dd:db:8d:a5:c0:b2:26:f9:42:05:8a:76:6b:43:79:9f:0c: 41:c1:a2:2d:62:99:60:bc:c9:49:02:00:03:41:13:cb:73:36: 51:7e:60:a2:c8:8c:09:6b:0e:f6:01:3e:b2:5c:e0:3c:97:67: 1f:54:9f:3a:b1:74:fb:f8:be:6c:29:b1:b2:25:50:1b:d2:2e: 75:c8:fb:05:ff:f4:c4:9a:f2:3c:f0:3e:8c:26:f6:58:8b:88: 78:55:41:c4:8f:26:d0:10:36:de:32:74:0c:ce:da:7b:b9:26: ac:1d:8a:e1:6e:28:8c:f7:64:db:17:a7:01:03:f6:a7:0f:ee: f7:a0:7d:ad:51:18:4b:50:3a:56:55:84:89:75:84:0d:dc:39: c6:17:9a:3f:49:51:1f:53:42:15:29:d6:7b:05:0a:ba:41:c7: 64:57:9c:ca:8d:5d:68:bd:4c:a8:e8:7e:2c:71:4d:0f:32:55: 7a:a1:dd:4a:02:a8:51:77:31:0d:60:00:89:d2:65:08:30:db: a7:10:9f:1c:4a:bf:36:6d:20:dc:90:72:b2:b5:c7:3c:1c:a1: 1d:e8:88:a3:3a:93:c2:74:7d:a2:33:1d:5e:71:36:d1:df:9c: 6b:1c:a2:74 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVYn+90rtzZCVI1yucqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGNhYmI4YjRiODU5NDZiNmI0NDUxZjI2NWNiNDFhYWQ0M2Y5NzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p5M0/Px2VpOeTONAZlJIuvJP+zu 3oNQvDkrZp72bgbhxxdwy0O7eAsrGW8yUSIMnK7UHKaWAoQGyAEF74c/ghIeinzf 47smdAKsymP+V/pN0wB/P3bhtBM0PyAbNDabR6BIv/VGpJVDuIrbVhgSAoYiLvov LLNKKdsjodgdKgva6slisCU0EsvlBYyLup4wI7WRz/pnXXHa6uLkFeXnXXaTbCtd reIU5+3W0UYptS5DZmFx4mNNuriv3mZ6A2vyeJZku9HGKxMr09lIfMLkhafxM+uZ 25Y8X1wA1QJ0qSo1AW0t2BiAcpVA/OMeSprfB9+xs/YBBjoLbdJYJnlunwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFO3Ku4tLhZRra0RR8mXLQarUP5cTMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzdjcTdpMHVGbEd0clJGSHlaY3RCcXRRX2x4TS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABNUTAw DQYJKoZIhvcNAQELBQADggEBAK8EuSBTpKjZ5fb4ScXe84dutwHd242lwLIm+UIF inZrQ3mfDEHBoi1imWC8yUkCAANBE8tzNlF+YKLIjAlrDvYBPrJc4DyXZx9Unzqx dPv4vmwpsbIlUBvSLnXI+wX/9MSa8jzwPowm9liLiHhVQcSPJtAQNt4ydAzO2nu5 JqwdiuFuKIz3ZNsXpwED9qcP7vegfa1RGEtQOlZVhIl1hA3cOcYXmj9JUR9TQhUp 1nsFCrpBx2RXnMqNXWi9TKjofixxTQ8yVXqh3UoCqFF3MQ1gAInSZQgw26cQnxxK vzZtINyQcrK1xzwcoR3oiKM6k8J0faIzHV5xNtHfnGsconQ= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:21 2026 by rpki-client