This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2xS1HlzW7hhzOLTFv8kk3_BgUAw.roa File: 2xS1HlzW7hhzOLTFv8kk3_BgUAw.roa (raw, json) Hash identifier: rdlpxfV0xXrr1mM5K0glBbp3WGLUjRIPHGmfYuTQTLU= Subject key identifier: DB:14:B5:1E:5C:D6:EE:18:73:38:B4:C5:BF:C9:24:DF:F0:60:50:0C Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C77B4C94471EC9D26877660AA2EF7F Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2xS1HlzW7hhzOLTFv8kk3_BgUAw.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204827 IP address blocks: 77.220.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7b:4c:94:47:1e:c9:d2:68:77:66:0a:a2:ef:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db14b51e5cd6ee187338b4c5bfc924dff060500c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:c9:53:d6:27:43:e9:f5:d7:ef:e4:f0:7f: e7:3e:64:30:2b:59:e6:37:08:64:c4:5f:3a:c4:92: 9d:b9:fc:7f:79:8f:61:58:b1:39:81:db:de:0d:e5: 99:0d:9d:99:dd:c6:de:54:15:ac:01:2b:56:ba:ad: c1:bf:4d:3d:d0:ec:2b:24:27:35:ab:8c:0b:83:31: b8:2e:6a:e9:4a:4f:1a:eb:c3:c4:12:a9:a1:f5:7f: 2c:e9:46:be:49:1b:a0:7f:5d:6e:d1:6a:5d:c8:5a: 95:b6:29:34:6f:d3:d7:17:12:27:18:e0:11:86:36: 91:95:48:2d:08:92:89:ca:28:03:ad:2a:64:84:31: 35:ab:d6:2f:1d:6a:0d:87:5f:b1:5c:9e:b4:5c:8f: 4e:2c:a3:ea:13:72:82:43:af:65:c7:65:1b:96:90: 72:73:96:42:77:c0:72:1f:e8:db:19:1c:64:f1:c1: 56:7b:68:48:22:51:9c:32:6a:c7:29:2b:e7:2c:a4: f8:23:72:ac:94:42:f1:d7:b8:39:c5:05:ee:4d:0e: af:3f:86:00:37:88:14:87:05:27:35:78:8d:13:cc: 03:c3:97:ec:d0:a1:8f:1c:2a:32:61:e7:38:9b:ed: 5d:3b:61:fd:87:f2:6d:7e:5e:3b:a4:7c:aa:73:9e: 61:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:14:B5:1E:5C:D6:EE:18:73:38:B4:C5:BF:C9:24:DF:F0:60:50:0C X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2xS1HlzW7hhzOLTFv8kk3_BgUAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.220.210.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:77:2b:e0:6f:55:6b:cc:81:89:c2:d2:40:3f:5c:e4:23:86: ba:4c:f6:5d:fe:8e:db:91:fd:b7:85:e6:42:d2:fd:21:ae:77: 51:76:d8:46:ba:5b:28:65:cd:69:22:3f:64:1d:f7:64:82:be: 6b:d2:f3:aa:45:51:66:24:93:a5:11:be:c6:5b:56:66:bd:7e: 23:c3:86:d0:d9:05:b4:0e:8b:d6:43:2c:c4:ef:db:cf:67:1c: 0c:fc:d4:9c:a3:16:9a:ba:3a:aa:78:11:a5:5b:1f:03:c1:dd: 15:b2:69:ae:f6:86:df:20:37:6d:9b:75:28:ee:35:05:93:1d: e3:37:d5:47:d8:25:de:84:b2:ff:6c:97:56:85:af:1d:36:64: de:d8:a3:56:c8:21:1e:4f:62:9c:33:bd:f4:54:c2:72:17:88: b0:a7:0a:ce:86:8f:33:19:ed:3e:fb:92:57:f1:14:dc:a1:31: a2:fd:01:84:56:4a:76:9c:3a:37:a2:08:e6:64:d2:bd:d5:72: 2e:5c:e3:48:65:d8:8b:03:91:e4:64:90:54:d6:74:04:b0:dc: 2b:bd:37:9b:0f:d4:ee:c7:68:cf:37:d0:2a:94:31:3d:66:2c: 00:57:78:cb:f2:ba:e5:8b:32:73:17:fc:64:83:7c:84:41:1b: e5:51:07:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3tMlEceydJod2YKou9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjE0YjUxZTVjZDZlZTE4NzMzOGI0YzViZmM5MjRkZmYwNjA1MDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymXJU9YnQ+n11+/k8H/nPmQwK1nm NwhkxF86xJKdufx/eY9hWLE5gdveDeWZDZ2Z3cbeVBWsAStWuq3Bv0090OwrJCc1 q4wLgzG4LmrpSk8a68PEEqmh9X8s6Ua+SRugf11u0WpdyFqVtik0b9PXFxInGOAR hjaRlUgtCJKJyigDrSpkhDE1q9YvHWoNh1+xXJ60XI9OLKPqE3KCQ69lx2UblpBy c5ZCd8ByH+jbGRxk8cFWe2hIIlGcMmrHKSvnLKT4I3KslELx17g5xQXuTQ6vP4YA N4gUhwUnNXiNE8wDw5fs0KGPHCoyYec4m+1dO2H9h/Jtfl47pHyqc55hLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNsUtR5c1u4Yczi0xb/JJN/wYFAMMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvMnhTMUhselc3aGh6T0xURnY4a2szX0JnVUF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATdzSMA0G CSqGSIb3DQEBCwUAA4IBAQBsdyvgb1VrzIGJwtJAP1zkI4a6TPZd/o7bkf23heZC 0v0hrndRdthGulsoZc1pIj9kHfdkgr5r0vOqRVFmJJOlEb7GW1ZmvX4jw4bQ2QW0 DovWQyzE79vPZxwM/NScoxaaujqqeBGlWx8Dwd0Vsmmu9obfIDdtm3Uo7jUFkx3j N9VH2CXehLL/bJdWha8dNmTe2KNWyCEeT2KcM730VMJyF4iwpwrOho8zGe0++5JX 8RTcoTGi/QGEVkp2nDo3ogjmZNK91XIuXONIZdiLA5HkZJBU1nQEsNwrvTebD9Tu x2jPN9AqlDE9ZiwAV3jL8rrlizJzF/xkg3yEQRvlUQce -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:44 2026 by rpki-client