This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mXmUuX_z1OXPNZsK7-1vf7VM0l8.roa File: mXmUuX_z1OXPNZsK7-1vf7VM0l8.roa (raw, json) Hash identifier: /cdncanXRu5nadZMtlnUAQ68/83J3J37IKCJTQD37YQ= Subject key identifier: 99:79:94:B9:7F:F3:D4:E5:CF:35:9B:0A:EF:ED:6F:7F:B5:4C:D2:5F Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C76990E4382590315BA85859B57BE9 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mXmUuX_z1OXPNZsK7-1vf7VM0l8.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39266 IP address blocks: 77.242.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:69:90:e4:38:25:90:31:5b:a8:58:59:b5:7b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=997994b97ff3d4e5cf359b0aefed6f7fb54cd25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:cf:42:7c:13:d9:72:f1:ca:6e:39:8b:31: 22:ec:31:0b:5d:03:d9:91:19:53:f7:7f:11:b3:1c: 61:95:cb:fc:34:f7:38:7f:84:ff:80:a9:3e:4a:c5: 56:17:b2:02:e0:e1:c6:5d:e0:d3:b5:21:ae:72:b8: 80:fc:02:cc:3f:50:ad:94:6a:56:f8:73:bb:72:f2: 0f:48:de:29:3b:83:d3:f0:b7:3d:2d:9b:06:43:eb: 81:2d:3a:3c:f0:8d:47:6e:20:41:57:af:90:16:f8: c5:d5:03:48:6b:a0:4d:51:c9:e5:ec:89:e3:8c:d4: 01:af:63:e8:e7:08:28:20:0b:c4:ff:8a:2e:06:8b: 53:28:43:05:8b:dc:f1:e7:ed:fd:79:e2:15:c3:66: df:66:25:5b:8d:1a:80:0b:a1:96:c9:7b:cb:40:12: 7a:6f:b5:27:88:59:75:52:59:4d:e7:fa:53:7f:f3: 34:a0:47:cd:26:40:bc:39:5a:43:0c:4d:cc:8f:3d: e7:47:4e:61:9d:e6:2c:db:2b:aa:3a:0e:48:cc:2f: af:13:ff:2b:d8:3d:ca:8c:11:4a:dc:bf:d9:b4:9d: 48:fc:14:d4:14:2d:7b:a2:31:23:49:e3:21:61:bc: 4c:92:27:a9:25:7a:45:b7:0a:e7:77:d2:83:99:da: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:79:94:B9:7F:F3:D4:E5:CF:35:9B:0A:EF:ED:6F:7F:B5:4C:D2:5F X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mXmUuX_z1OXPNZsK7-1vf7VM0l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.242.14.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:cf:47:b5:af:61:23:95:18:22:fb:f9:2f:40:da:7c:33:0a: 0b:d8:a5:de:63:df:f0:31:5a:65:c5:3c:07:e6:d5:d9:8b:f7: ea:7f:9e:35:5d:71:79:df:3f:90:0e:70:4f:1d:9a:f1:d0:bb: be:b9:65:49:63:c0:86:ba:16:3d:81:53:f6:ab:d4:cf:67:27: b3:9a:f3:ac:9b:cd:77:e6:95:bd:16:ee:75:74:b2:9d:1e:64: 26:d8:31:57:ef:e4:4b:94:bd:cd:46:63:cc:03:a8:a0:fd:ed: ab:e5:d7:28:75:da:c5:97:53:1e:86:68:cc:86:15:46:41:7e: ef:d8:45:38:3f:b6:09:a5:05:5c:a0:7e:1e:d6:91:ef:39:84: 00:9c:16:b2:39:92:d3:e8:48:81:15:e7:a6:91:cd:a8:cb:22: 09:89:8c:6d:fb:0a:10:02:6a:a5:e6:4d:4f:6b:64:84:08:43: 39:5f:34:aa:53:f0:76:5a:3b:d5:1c:90:7f:4a:fd:96:53:d8: 13:56:31:9a:4e:64:b0:89:76:41:68:d7:08:4f:a7:52:2a:7a: fc:21:5b:e2:39:05:5e:ae:a2:3d:a6:cc:12:07:1d:e0:7e:0f: f5:b3:a9:93:61:77:46:c2:66:28:d4:f5:b2:2b:53:ad:ae:e5: 33:93:df:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2mQ5DglkDFbqFhZtXvpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTc5OTRiOTdmZjNkNGU1Y2YzNTliMGFlZmVkNmY3ZmI1NGNkMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupHPQnwT2XLxym45izEi7DELXQPZ kRlT938Rsxxhlcv8NPc4f4T/gKk+SsVWF7IC4OHGXeDTtSGucriA/ALMP1CtlGpW +HO7cvIPSN4pO4PT8Lc9LZsGQ+uBLTo88I1HbiBBV6+QFvjF1QNIa6BNUcnl7Inj jNQBr2Po5wgoIAvE/4ouBotTKEMFi9zx5+39eeIVw2bfZiVbjRqAC6GWyXvLQBJ6 b7UniFl1UllN5/pTf/M0oEfNJkC8OVpDDE3Mjz3nR05hneYs2yuqOg5IzC+vE/8r 2D3KjBFK3L/ZtJ1I/BTUFC17ojEjSeMhYbxMkiepJXpFtwrnd9KDmdrIcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJl5lLl/89TlzzWbCu/tb3+1TNJfMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvbVhtVXVYX3oxT1hQTlpzSzctMXZmN1ZNMGw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfIOMA0G CSqGSIb3DQEBCwUAA4IBAQCaz0e1r2EjlRgi+/kvQNp8MwoL2KXeY9/wMVplxTwH 5tXZi/fqf541XXF53z+QDnBPHZrx0Lu+uWVJY8CGuhY9gVP2q9TPZyezmvOsm813 5pW9Fu51dLKdHmQm2DFX7+RLlL3NRmPMA6ig/e2r5dcoddrFl1MehmjMhhVGQX7v 2EU4P7YJpQVcoH4e1pHvOYQAnBayOZLT6EiBFeemkc2oyyIJiYxt+woQAmql5k1P a2SECEM5XzSqU/B2WjvVHJB/Sv2WU9gTVjGaTmSwiXZBaNcIT6dSKnr8IVviOQVe rqI9pswSBx3gfg/1s6mTYXdGwmYo1PWyK1OtruUzk9+2 -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:45 2026 by rpki-client