This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/1K2LFFiurWkSS6BehPIABgELzig.roa File: 1K2LFFiurWkSS6BehPIABgELzig.roa (raw, json) Hash identifier: eUzuwicyTeWiMVFNehYoQf9+T/XhqLc10wnGWFbChM0= Subject key identifier: D4:AD:8B:14:58:AE:AD:69:12:4B:A0:5E:84:F2:00:06:01:0B:CE:28 Certificate issuer: /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18 Certificate serial: 019B77588AEB2892B49ADCEF0F04C376FD48 Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/1K2LFFiurWkSS6BehPIABgELzig.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44194 IP address blocks: 77.87.48.0/24 maxlen: 24 77.87.49.0/24 maxlen: 24 77.87.50.0/24 maxlen: 24 77.87.51.0/24 maxlen: 24 77.87.52.0/24 maxlen: 24 77.87.53.0/24 maxlen: 24 77.87.54.0/24 maxlen: 24 77.87.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8a:eb:28:92:b4:9a:dc:ef:0f:04:c3:76:fd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18 Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4ad8b1458aead69124ba05e84f20006010bce28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fd:cf:cc:a0:f8:f0:21:0a:c9:01:29:0c:5b: 4b:9f:47:8e:8b:15:4f:19:2d:23:8f:d2:37:e7:fe: 37:04:23:8a:83:6c:a7:59:2a:40:77:a1:4e:b8:3d: f4:29:61:42:23:04:2c:19:de:fb:4e:f1:12:d0:cf: bd:1d:2e:40:5d:c7:ec:bc:a6:32:4c:a0:f8:4e:15: b0:96:a9:31:41:85:cb:17:db:7c:2f:b9:00:ed:fc: 6a:0c:b7:d1:d9:fa:16:cc:9a:ec:33:c9:9e:7c:28: 0a:58:d1:44:1b:6b:38:99:74:fe:00:33:d4:cd:8b: 65:be:e6:67:98:3d:2c:ae:56:73:f0:5b:6f:ac:13: 4a:0c:c7:7f:c2:3a:46:5f:ca:c4:38:ed:8f:a1:42: 06:c2:3a:dc:3b:ef:0f:11:a9:ec:a2:ca:14:72:69: 03:da:7f:68:59:ca:eb:31:bb:d9:77:85:c5:11:1d: 1b:03:6b:b3:5b:54:7f:fa:09:69:84:0f:4b:92:26: 90:e4:80:90:bb:54:c9:aa:55:56:93:52:c1:0b:84: b2:e0:3e:47:99:4b:54:7a:e4:97:f5:6c:1a:92:97: 3f:f9:11:7f:9a:f9:18:9a:7c:d4:04:d6:66:30:0f: bb:3c:b5:67:15:4d:5f:a2:0b:73:8b:f8:8c:fc:86: 7f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AD:8B:14:58:AE:AD:69:12:4B:A0:5E:84:F2:00:06:01:0B:CE:28 X509v3 Authority Key Identifier: keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/1K2LFFiurWkSS6BehPIABgELzig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.48.0/21 Signature Algorithm: sha256WithRSAEncryption b9:0b:0d:26:3a:25:1c:b6:29:2c:61:23:a3:96:3e:80:aa:db: cc:7a:21:34:2a:07:33:32:8e:32:d9:53:13:a7:bb:26:f9:a1: 61:3d:92:18:52:a6:3c:d1:7b:66:3a:e4:31:5f:ae:90:2f:e4: 0c:5a:33:ba:b1:be:ba:fd:2a:23:d4:58:97:b6:cf:3e:c8:32: b8:eb:ae:57:3b:af:3d:94:cf:7b:c7:44:1a:5e:4a:d2:e3:de: 72:d8:71:68:e8:69:0a:ce:33:a0:ec:3a:8e:6c:5c:3b:be:e8: 2f:fa:8b:aa:02:d5:13:de:00:42:77:a0:79:6e:10:d4:3a:87: ec:e5:cd:be:34:d4:d8:0f:00:a7:ac:18:38:ef:34:fb:c3:b4: 7b:39:86:ee:a1:48:6b:af:7f:50:ed:a1:34:4b:68:14:50:4c: 08:b0:c3:25:ca:bc:37:a3:d8:0d:bc:b3:60:82:a6:06:21:c3: af:8f:25:78:91:9f:64:fe:36:b9:3e:82:0d:f0:6f:d6:88:01: 04:28:52:64:7c:a1:f5:3b:84:a0:ac:7c:ae:8b:bc:0a:1e:19: 75:cf:b2:08:d6:99:27:8f:ba:33:e0:e9:e4:23:4b:f5:46:e1: a5:6c:f6:3a:0a:89:e7:8d:fb:db:5b:56:9f:c2:d9:ab:4c:11: 73:15:bd:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIrrKJK0mtzvDwTDdv1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZjY0ZGIxYTQyYWRiZTlkYzMyMjZlYmM4MGFmYmI3NWQ0 YTdmMTgwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGFkOGIxNDU4YWVhZDY5MTI0YmEwNWU4NGYyMDAwNjAxMGJjZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f3PzKD48CEKyQEpDFtLn0eOixVP GS0jj9I35/43BCOKg2ynWSpAd6FOuD30KWFCIwQsGd77TvES0M+9HS5AXcfsvKYy TKD4ThWwlqkxQYXLF9t8L7kA7fxqDLfR2foWzJrsM8mefCgKWNFEG2s4mXT+ADPU zYtlvuZnmD0srlZz8FtvrBNKDMd/wjpGX8rEOO2PoUIGwjrcO+8PEansosoUcmkD 2n9oWcrrMbvZd4XFER0bA2uzW1R/+glphA9LkiaQ5ICQu1TJqlVWk1LBC4Sy4D5H mUtUeuSX9Wwakpc/+RF/mvkYmnzUBNZmMA+7PLVnFU1fogtzi/iM/IZ/LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNStixRYrq1pEkugXoTyAAYBC84oMB8GA1UdIwQY MBaAFFf2TbGkKtvp3DIm68gK+7ddSn8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZTk2ZjAtYTA5MS00Yjg1LWFmZjkt MWU4Mjg3N2MxNDYyLzEvMUsyTEZGaXVyV2tTUzZCZWhQSUFCZ0VMemlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lZTk2ZjAtYTA5MS00Yjg1LWFmZjktMWU4Mjg3N2MxNDYy LzEvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTVcwMA0G CSqGSIb3DQEBCwUAA4IBAQC5Cw0mOiUctiksYSOjlj6AqtvMeiE0KgczMo4y2VMT p7sm+aFhPZIYUqY80XtmOuQxX66QL+QMWjO6sb66/Soj1FiXts8+yDK4665XO689 lM97x0QaXkrS495y2HFo6GkKzjOg7DqObFw7vugv+ouqAtUT3gBCd6B5bhDUOofs 5c2+NNTYDwCnrBg47zT7w7R7OYbuoUhrr39Q7aE0S2gUUEwIsMMlyrw3o9gNvLNg gqYGIcOvjyV4kZ9k/ja5PoIN8G/WiAEEKFJkfKH1O4SgrHyui7wKHhl1z7II1pkn j7oz4OnkI0v1RuGlbPY6ConnjfvbW1afwtmrTBFzFb3R -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:53 2026 by rpki-client