This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/1-77MLKbMDtDiajP4cnfRaQ3miEM.roa
File: 1-77MLKbMDtDiajP4cnfRaQ3miEM.roa (raw, json)
Hash identifier: uR4xAscZt2UY723RU9mF1OjyVpc+mJ5l3PG1PYSxgqc=
Subject key identifier: FB:BE:CC:2C:A6:CC:0E:D0:E2:6A:33:F8:72:77:D1:69:0D:E6:88:43
Certificate issuer: /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial: 019B7A5B0CC44829502D5A0A4DEC92E8D6F3
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/1-77MLKbMDtDiajP4cnfRaQ3miEM.roa
Signing time: Thu 01 Jan 2026 16:19:05 +0000
ROA not before: Thu 01 Jan 2026 16:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2119
IP address blocks: 91.233.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:0c:c4:48:29:50:2d:5a:0a:4d:ec:92:e8:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Validity
Not Before: Jan 1 16:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbbecc2ca6cc0ed0e26a33f87277d1690de68843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:71:5c:4f:44:63:9d:46:dc:e9:a7:d0:f0:
8f:4f:7d:07:fe:91:29:2b:2d:6f:1b:77:f3:64:7c:
c3:52:da:02:0f:4f:46:ca:bd:b5:ae:e9:ae:bc:5a:
22:d4:e0:78:a4:ef:d1:fe:73:d4:67:ab:08:85:b5:
43:c8:38:79:c5:88:2c:e3:3c:8c:41:1f:8d:3d:ab:
ab:b6:e8:15:d6:aa:a4:f4:74:fc:08:05:ed:d1:b7:
6c:8c:52:c8:50:61:5b:66:3d:53:ea:74:5e:8b:de:
c5:a4:94:0e:29:9d:28:a1:06:6c:bd:df:20:29:c6:
71:de:33:f3:7f:1a:2d:1a:29:a1:72:37:16:4c:dd:
bf:f5:2f:ea:14:8c:ca:c7:9f:98:70:ac:c6:47:73:
f2:36:2b:52:3a:28:32:db:a8:eb:04:c7:56:58:d1:
17:d5:64:e5:38:14:34:9b:c6:80:4f:f1:ff:2a:48:
f2:e9:26:c5:d3:4f:f1:1a:67:89:39:fe:80:9b:81:
d9:df:bf:a0:42:44:b0:e5:40:f8:65:c0:19:6f:62:
4e:20:ef:0b:03:db:62:65:2a:37:ef:0c:89:22:89:
af:c8:4f:f8:31:4d:7f:03:c1:60:2d:4e:68:17:24:
23:38:93:4d:28:76:a3:a2:64:bf:8b:b2:bb:42:43:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BE:CC:2C:A6:CC:0E:D0:E2:6A:33:F8:72:77:D1:69:0D:E6:88:43
X509v3 Authority Key Identifier:
keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/1-77MLKbMDtDiajP4cnfRaQ3miEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.14.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:4e:a4:47:8d:fa:a8:e4:d7:24:ab:d9:5d:6e:70:16:c6:e6:
9c:76:27:8f:d0:b4:e7:46:4b:36:36:7f:0b:1a:5b:ef:f0:96:
98:48:4f:68:ce:ed:e1:77:89:58:b0:4c:7e:51:b9:2f:f7:50:
54:4a:36:c9:a6:51:45:02:cb:ef:30:2f:f2:7b:04:f3:d5:0c:
78:63:03:57:86:8f:8e:af:02:2c:92:ec:2d:b9:f0:92:2d:1b:
36:07:7f:7a:ee:d5:fa:54:d1:51:d0:3a:a6:32:1c:6f:28:a2:
59:9d:f0:9c:56:b3:7d:09:90:33:9a:ef:d0:22:30:b2:f4:35:
d5:f0:56:80:4e:c9:55:75:5b:61:76:18:84:1c:17:ae:55:c4:
07:38:c1:45:6e:da:19:ca:f7:4e:0a:8b:b9:64:28:9e:de:5d:
a9:b1:b2:6d:6b:d6:c9:97:56:e3:a9:7c:d3:fc:4b:85:37:53:
6c:2d:63:3c:7e:89:1e:fc:02:fe:7b:43:33:04:5a:23:82:b8:
51:43:ca:dc:e8:c8:16:9d:0e:19:f6:a0:ff:37:15:4e:e2:5f:
bb:83:a3:1f:08:4f:1e:a8:88:c7:8c:dd:5b:6d:f3:c2:16:b5:
57:bd:81:cb:87:60:bd:f9:5e:9c:34:d1:8d:90:52:f4:09:39:
73:a3:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:11:36 2026 by rpki-client