This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_aKsPgxuslFc76jdem018hQH4PM.roa File: _aKsPgxuslFc76jdem018hQH4PM.roa (raw, json) Hash identifier: 1WMwyMLdkk5n9AS8zpWHnu+Nyqv1BBo0S2OAlTKYvlc= Subject key identifier: FD:A2:AC:3E:0C:6E:B2:51:5C:EF:A8:DD:7A:6D:35:F2:14:07:E0:F3 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76E483E5D09B0131210BED3DFBD0D Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_aKsPgxuslFc76jdem018hQH4PM.roa Signing time: Fri 02 Jan 2026 12:21:00 +0000 ROA not before: Fri 02 Jan 2026 12:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34974 IP address blocks: 77.82.0.0/20 maxlen: 20 77.82.48.0/20 maxlen: 20 77.82.64.0/18 maxlen: 24 77.82.80.0/21 maxlen: 21 77.82.128.0/17 maxlen: 17 77.82.130.0/24 maxlen: 24 77.82.140.0/23 maxlen: 23 77.82.142.0/24 maxlen: 24 85.28.192.0/18 maxlen: 23 85.28.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6e:48:3e:5d:09:b0:13:12:10:be:d3:df:bd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fda2ac3e0c6eb2515cefa8dd7a6d35f21407e0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:a8:a3:7f:14:27:b6:dc:3c:83:b3:b4:49: 17:96:76:db:70:6f:51:69:f9:30:a0:b7:db:4a:dd: 99:e3:09:f8:ab:23:62:25:ae:01:ee:0b:17:e1:47: 07:79:7b:5b:7d:6e:40:53:e4:91:6c:7a:ba:3f:bb: 70:c5:42:f2:b7:d2:0f:59:0b:04:42:5c:b0:22:b1: b9:d3:db:69:04:f5:5a:58:7a:9e:0e:bc:46:45:38: 13:4a:2e:57:c2:e8:32:95:1b:8b:d8:28:34:1a:1a: 02:a5:58:b5:58:83:6f:cc:03:4e:95:e8:4b:ab:ce: c9:b1:b7:fe:c3:4c:5d:2a:2d:9f:8c:6a:e0:9c:c3: ea:c8:a2:da:3e:a4:53:b8:a3:63:8b:3d:38:19:3d: 55:50:69:b5:76:e2:a3:78:14:3a:a4:1a:c0:33:10: 58:21:c3:53:87:1e:1e:f0:84:c7:76:7d:71:b8:81: 66:73:fb:18:c4:c4:42:f1:e3:33:8d:1f:bb:19:92: a5:86:d0:54:47:0f:ae:7a:7d:bf:80:15:7f:63:df: a5:1c:c6:04:c9:db:53:ac:1e:c3:b3:10:73:a2:e6: 51:7f:25:d5:9a:b6:5e:3d:16:f0:6d:f7:31:1b:01: bd:6c:1a:ad:5d:c9:31:7a:aa:e9:de:09:50:fa:e8: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A2:AC:3E:0C:6E:B2:51:5C:EF:A8:DD:7A:6D:35:F2:14:07:E0:F3 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_aKsPgxuslFc76jdem018hQH4PM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.82.0.0/20 77.82.48.0-77.82.255.255 85.28.192.0/18 Signature Algorithm: sha256WithRSAEncryption 7e:dd:46:fe:ee:71:e1:0c:77:14:d6:5e:45:8f:1e:09:a6:ac: 97:06:46:3b:76:87:e5:a5:4d:13:b6:d0:46:93:ce:27:92:07: 28:f1:05:2c:5a:04:20:ff:27:d3:17:f2:d1:15:79:95:95:54: e6:06:c5:37:ac:09:84:56:4b:bb:67:96:d3:15:df:5e:09:14: 39:57:8a:99:eb:fd:37:59:43:04:a5:ff:f5:87:c1:15:d7:1b: e6:6a:8e:f4:a7:45:a4:bc:bd:d5:9b:94:13:70:37:95:5c:19: 74:f8:6c:b9:58:c5:b2:10:ba:92:cf:90:3a:48:d7:87:66:57: 33:4e:29:17:c7:ed:51:06:a1:a1:9a:19:72:3e:9e:b5:92:16: 39:a7:a2:fe:7e:61:f7:ab:7f:94:48:8f:95:fb:64:61:90:28: b8:c9:3d:42:6c:58:5d:b5:82:47:a2:86:3c:a2:d6:87:35:31: 63:75:cc:a8:db:c5:d4:d3:fc:62:5a:bb:0c:7c:11:05:63:76: 9f:97:bb:60:f0:e8:75:4c:6b:f1:fd:be:61:ab:7c:39:7e:56: 18:ce:08:72:8c:1c:fc:c3:2d:9a:51:6c:1e:02:8a:4e:5d:7f: e6:7c:2d:86:b7:80:93:d4:04:af:53:63:3d:fd:e5:79:ba:09: 55:47:bc:4f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt+p25IPl0JsBMSEL7T370NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGEyYWMzZTBjNmViMjUxNWNlZmE4ZGQ3YTZkMzVmMjE0MDdlMGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwOoo38UJ7bcPIOztEkXlnbbcG9R afkwoLfbSt2Z4wn4qyNiJa4B7gsX4UcHeXtbfW5AU+SRbHq6P7twxULyt9IPWQsE QlywIrG509tpBPVaWHqeDrxGRTgTSi5XwugylRuL2Cg0GhoCpVi1WINvzANOlehL q87Jsbf+w0xdKi2fjGrgnMPqyKLaPqRTuKNjiz04GT1VUGm1duKjeBQ6pBrAMxBY IcNThx4e8ITHdn1xuIFmc/sYxMRC8eMzjR+7GZKlhtBURw+uen2/gBV/Y9+lHMYE ydtTrB7DsxBzouZRfyXVmrZePRbwbfcxGwG9bBqtXckxeqrp3glQ+uibxQIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFP2irD4MbrJRXO+o3XptNfIUB+DzMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvX2FLc1BneHVzbEZjNzZqZGVtMDE4aFFINFBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQETVIAMAsD BARNUjADAwBNUgMEBlUcwDANBgkqhkiG9w0BAQsFAAOCAQEAft1G/u5x4Qx3FNZe RY8eCaaslwZGO3aH5aVNE7bQRpPOJ5IHKPEFLFoEIP8n0xfy0RV5lZVU5gbFN6wJ hFZLu2eW0xXfXgkUOVeKmev9N1lDBKX/9YfBFdcb5mqO9KdFpLy91ZuUE3A3lVwZ dPhsuVjFshC6ks+QOkjXh2ZXM04pF8ftUQahoZoZcj6etZIWOaei/n5h96t/lEiP lftkYZAouMk9QmxYXbWCR6KGPKLWhzUxY3XMqNvF1NP8Ylq7DHwRBWN2n5e7YPDo dUxr8f2+Yat8OX5WGM4Icowc/MMtmlFsHgKKTl1/5nwthreAk9QEr1NjPf3leboJ VUe8Tw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:01 2026 by rpki-client