This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/geYG7jgB_IZyvx4sV17jbEgt41M.roa File: geYG7jgB_IZyvx4sV17jbEgt41M.roa (raw, json) Hash identifier: qoLpQdomqm+vqekuFSAQcJ4kiUnpRFshCLt0DR6rKD4= Subject key identifier: 81:E6:06:EE:38:01:FC:86:72:BF:1E:2C:57:5E:E3:6C:48:2D:E3:53 Certificate issuer: /CN=952156c8847f24d09da60d5f5b10542b2ecf9016 Certificate serial: 019B7B3622835E045CACCF565F32517C587F Authority key identifier: 95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/geYG7jgB_IZyvx4sV17jbEgt41M.roa Signing time: Thu 01 Jan 2026 20:18:23 +0000 ROA not before: Thu 01 Jan 2026 20:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12387 IP address blocks: 77.237.192.0/19 maxlen: 19 77.237.204.0/23 maxlen: 23 77.237.206.0/23 maxlen: 23 77.237.208.0/23 maxlen: 23 2a00:c10::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.mft rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:22:83:5e:04:5c:ac:cf:56:5f:32:51:7c:58:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=952156c8847f24d09da60d5f5b10542b2ecf9016 Validity Not Before: Jan 1 20:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81e606ee3801fc8672bf1e2c575ee36c482de353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:fd:4d:01:7d:64:11:7e:3e:a7:f6:9e:ec: 1d:92:bc:99:33:ee:ef:74:c9:5a:3f:6a:76:61:c5: fc:e2:81:c2:41:e8:d1:2d:d7:1d:be:00:d2:61:30: 55:06:58:be:6b:53:c9:88:6c:b1:0d:1d:85:09:75: 9f:b0:a2:df:44:c9:8e:61:46:04:70:d3:db:2c:a7: 86:61:09:b8:d2:30:90:b3:d6:8d:1a:81:f3:da:ea: df:7a:cf:52:e5:1a:78:f7:9d:8c:ed:0b:a4:06:92: 54:94:ce:5d:8c:04:e1:a7:8c:da:09:ed:61:8f:5e: a3:3d:1a:e7:8f:98:c1:5b:65:d7:01:4e:3e:f8:dc: 19:c8:02:9a:17:d9:c8:6a:7c:14:46:d7:4b:79:73: 40:ae:40:05:3c:8b:64:f0:ae:46:ff:95:8e:b2:2c: 20:69:a8:fa:de:a4:13:8c:39:4c:65:35:20:65:56: 3e:7e:41:f4:fd:c1:85:82:1b:8d:b1:0f:2c:7e:d7: c5:e8:ef:13:7a:7c:ea:2f:8d:5b:98:bb:d6:a7:6c: 46:73:cc:85:5c:41:fc:7f:af:8a:59:35:7a:7c:bb: 2e:de:99:c5:12:08:46:bd:bc:a6:56:2a:57:1a:b4: 40:20:22:f4:6b:14:c2:62:02:b3:bb:74:68:76:93: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E6:06:EE:38:01:FC:86:72:BF:1E:2C:57:5E:E3:6C:48:2D:E3:53 X509v3 Authority Key Identifier: keyid:95:21:56:C8:84:7F:24:D0:9D:A6:0D:5F:5B:10:54:2B:2E:CF:90:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSFWyIR_JNCdpg1fWxBUKy7PkBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/geYG7jgB_IZyvx4sV17jbEgt41M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c43d4f-f52c-4387-9362-b3c01d1a6c85/1/lSFWyIR_JNCdpg1fWxBUKy7PkBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.237.192.0/19 IPv6: 2a00:c10::/32 Signature Algorithm: sha256WithRSAEncryption 71:b1:be:52:f6:27:f3:9f:4d:45:03:83:b0:cb:61:8b:0b:e0: 59:c9:57:53:78:b9:5f:32:0d:79:e5:52:63:b4:10:5d:56:81: b3:f8:4e:96:98:a5:c0:e6:72:df:59:68:66:52:33:ae:ff:7a: b2:b3:3f:e8:b8:4b:59:22:bd:da:b4:7a:63:75:b7:2b:db:5f: 32:02:45:e4:0c:a1:3f:48:d1:4c:48:a7:cf:f1:e3:c2:24:1b: 3e:14:21:08:dc:c3:86:0b:a6:06:c4:41:b8:b5:68:5f:4f:ed: 0f:59:9a:1e:e9:dd:e8:1d:cc:fc:d7:cf:bb:85:99:32:08:3d: 4e:3a:57:b7:fb:b0:f8:a6:e5:3b:9c:66:c4:9e:3e:69:ac:bb: 0d:52:0f:ef:42:4e:57:9f:76:74:18:89:2c:dc:f6:cd:bc:3f: df:93:1c:fb:d9:13:f3:70:6e:27:d1:8a:34:e6:98:da:aa:2d: 19:95:15:4c:6d:da:7a:fc:90:4b:05:9f:5e:1d:22:91:6d:82: 9c:b0:91:c3:6b:6a:7c:ab:fc:ce:d2:6c:2c:64:64:f8:27:53: 10:47:4c:6e:de:c0:30:51:b6:d9:1f:f2:cb:c9:21:4e:e9:63: 2a:c6:d9:a5:00:73:3e:0a:f9:8b:cf:ce:b6:b8:8c:b8:99:35: 0c:b5:91:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NiKDXgRcrM9WXzJRfFh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjE1NmM4ODQ3ZjI0ZDA5ZGE2MGQ1ZjViMTA1NDJiMmVj ZjkwMTYwHhcNMjYwMTAxMjAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWU2MDZlZTM4MDFmYzg2NzJiZjFlMmM1NzVlZTM2YzQ4MmRlMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPP9TQF9ZBF+Pqf2nuwdkryZM+7v dMlaP2p2YcX84oHCQejRLdcdvgDSYTBVBli+a1PJiGyxDR2FCXWfsKLfRMmOYUYE cNPbLKeGYQm40jCQs9aNGoHz2urfes9S5Rp4952M7QukBpJUlM5djAThp4zaCe1h j16jPRrnj5jBW2XXAU4++NwZyAKaF9nIanwURtdLeXNArkAFPItk8K5G/5WOsiwg aaj63qQTjDlMZTUgZVY+fkH0/cGFghuNsQ8sftfF6O8TenzqL41bmLvWp2xGc8yF XEH8f6+KWTV6fLsu3pnFEghGvbymVipXGrRAICL0axTCYgKzu3RodpOTjwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIHmBu44AfyGcr8eLFde42xILeNTMB8GA1UdIwQY MBaAFJUhVsiEfyTQnaYNX1sQVCsuz5AWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjIt YjNjMDFkMWE2Yzg1LzEvZ2VZRzdqZ0JfSVp5dng0c1YxN2piRWd0NDFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jNDNkNGYtZjUyYy00Mzg3LTkzNjItYjNjMDFkMWE2Yzg1 LzEvbFNGV3lJUl9KTkNkcGcxZld4QlVLeTdQa0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFTe3AMA0E AgACMAcDBQAqAAwQMA0GCSqGSIb3DQEBCwUAA4IBAQBxsb5S9ifzn01FA4Owy2GL C+BZyVdTeLlfMg155VJjtBBdVoGz+E6WmKXA5nLfWWhmUjOu/3qysz/ouEtZIr3a tHpjdbcr218yAkXkDKE/SNFMSKfP8ePCJBs+FCEI3MOGC6YGxEG4tWhfT+0PWZoe 6d3oHcz818+7hZkyCD1OOle3+7D4puU7nGbEnj5prLsNUg/vQk5Xn3Z0GIks3PbN vD/fkxz72RPzcG4n0Yo05pjaqi0ZlRVMbdp6/JBLBZ9eHSKRbYKcsJHDa2p8q/zO 0mwsZGT4J1MQR0xu3sAwUbbZH/LLySFO6WMqxtmlAHM+CvmLz862uIy4mTUMtZGR -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:50 2026 by rpki-client