This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/b7WIoLNUFyReyBs5srL2P-7kWBY.roa File: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (raw, json) Hash identifier: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI= Subject key identifier: 6F:B5:88:A0:B3:54:17:24:5E:C8:1B:39:B2:B2:F6:3F:EE:E4:58:16 Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Certificate serial: 019B7C8076CD04335175E647AFF23B8CA2F2 Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/b7WIoLNUFyReyBs5srL2P-7kWBY.roa Signing time: Fri 02 Jan 2026 02:19:12 +0000 ROA not before: Fri 02 Jan 2026 02:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201364 IP address blocks: 185.77.1.0/24 maxlen: 24 185.77.2.0/24 maxlen: 24 2a05:5ec0::/29 maxlen: 29 2a05:5ec0:1::/48 maxlen: 48 2a05:5ec1::/32 maxlen: 32 2a05:5ec2::/32 maxlen: 32 2a05:5ec3::/32 maxlen: 32 2a05:5ec4::/32 maxlen: 32 2a05:5ec5::/32 maxlen: 32 2a05:5ec6::/32 maxlen: 32 2a05:5ec7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:76:cd:04:33:51:75:e6:47:af:f2:3b:8c:a2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fb588a0b35417245ec81b39b2b2f63feee45816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:53:a1:0c:b1:77:68:aa:4b:cf:5a:ae:d8:b3: 66:00:ca:7b:07:ba:40:bf:f3:0b:a0:0d:0a:5c:dd: 49:aa:47:7b:cf:bc:ee:7a:68:25:fa:88:1a:c6:f8: ae:58:86:98:95:36:df:9c:12:44:53:79:90:19:15: ed:43:29:49:3c:1a:26:b3:ba:dc:ba:ae:49:c1:48: 7f:f5:d8:89:d8:67:a5:f1:9f:2d:0f:98:73:05:e2: 2a:2d:f6:bd:e9:cc:8c:62:09:77:e7:2a:58:91:8c: 77:61:30:0e:42:49:a6:0d:e3:27:b7:71:25:42:1c: 85:e5:98:00:7f:0a:a8:ac:e9:f2:e2:ce:15:47:18: de:79:a7:02:47:4b:9d:dc:3c:d3:8c:4e:2c:70:88: c4:0f:b4:9f:d8:76:7d:db:b9:66:9a:a3:fc:54:87: e7:bf:61:d7:d1:1b:60:3c:90:dd:c9:b6:e1:bc:7c: 3c:9f:60:57:f0:cf:c7:2b:30:58:c8:0e:a9:ef:2c: 35:7a:21:b2:63:7d:f4:b2:e9:6b:2f:1a:ff:04:00: 46:53:d1:b3:bf:b3:55:45:0b:83:8f:6c:da:06:08: 17:d5:72:1d:21:e4:b6:f0:91:d1:2a:91:01:9b:9c: 60:0d:f7:8e:30:bf:ca:02:ee:c8:7e:24:2d:f2:c8: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:88:A0:B3:54:17:24:5E:C8:1B:39:B2:B2:F6:3F:EE:E4:58:16 X509v3 Authority Key Identifier: keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/b7WIoLNUFyReyBs5srL2P-7kWBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.1.0-185.77.2.255 IPv6: 2a05:5ec0::/29 Signature Algorithm: sha256WithRSAEncryption 9d:80:40:22:03:94:a0:34:d6:08:ce:8f:fd:be:fb:ae:20:d2: 61:23:e3:ed:cf:c9:82:6b:e6:01:06:fd:20:61:b2:b8:d3:44: e9:b1:23:a3:c6:7d:b0:c0:49:bf:23:bd:c7:22:a9:fc:df:5e: e2:7e:fc:6a:ff:e4:c9:e9:c6:ff:87:df:d9:74:a8:03:f2:7e: 61:b3:3c:57:6b:eb:25:a8:f6:b3:b3:f1:ef:eb:4b:84:0c:49: 37:a1:0f:9f:5c:db:e0:db:72:ee:47:d6:16:0b:9a:eb:5e:e3: d4:23:8c:9a:11:14:5b:f3:77:36:c1:69:e2:12:6a:77:0b:6b: 46:b6:01:57:09:49:6d:42:ef:b1:2d:39:d7:cd:5b:a2:f9:04: 2d:3b:69:7a:0f:2c:fa:91:92:a1:0d:75:71:11:a9:98:48:70: 24:16:e5:a1:41:01:fe:d2:8f:fd:88:74:87:56:2b:31:95:5e: 7b:d8:5b:ac:ef:72:5d:67:7f:bf:bf:4f:f0:00:65:72:84:0d: 6c:7f:52:3c:3b:3e:94:5a:84:2f:6c:2e:0e:09:4e:ff:74:f4: 7b:f0:96:db:0f:0f:4b:ad:c0:5d:3d:36:05:79:ef:7b:6e:90: c2:2d:82:c0:5b:b0:96:3f:57:80:cd:aa:9d:59:85:d3:14:30: d3:64:9b:5d -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8gHbNBDNRdeZHr/I7jKLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl YjlkMmMwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmI1ODhhMGIzNTQxNzI0NWVjODFiMzliMmIyZjYzZmVlZTQ1ODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1OhDLF3aKpLz1qu2LNmAMp7B7pA v/MLoA0KXN1Jqkd7z7zuemgl+ogaxviuWIaYlTbfnBJEU3mQGRXtQylJPBoms7rc uq5JwUh/9diJ2Gel8Z8tD5hzBeIqLfa96cyMYgl35ypYkYx3YTAOQkmmDeMnt3El QhyF5ZgAfwqorOny4s4VRxjeeacCR0ud3DzTjE4scIjED7Sf2HZ927lmmqP8VIfn v2HX0RtgPJDdybbhvHw8n2BX8M/HKzBYyA6p7yw1eiGyY330sulrLxr/BABGU9Gz v7NVRQuDj2zaBggX1XIdIeS28JHRKpEBm5xgDfeOML/KAu7IfiQt8shHuwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFG+1iKCzVBckXsgbObKy9j/u5FgWMB8GA1UdIwQY MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt MTNmYjdhNTEzMGNhLzEvYjdXSW9MTlVGeVJleUJzNXNyTDJQLTdrV0JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAC5TQED BAC5TQIwDQQCAAIwBwMFAyoFXsAwDQYJKoZIhvcNAQELBQADggEBAJ2AQCIDlKA0 1gjOj/2++64g0mEj4+3PyYJr5gEG/SBhsrjTROmxI6PGfbDASb8jvcciqfzfXuJ+ /Gr/5Mnpxv+H39l0qAPyfmGzPFdr6yWo9rOz8e/rS4QMSTehD59c2+Dbcu5H1hYL mute49QjjJoRFFvzdzbBaeISancLa0a2AVcJSW1C77EtOdfNW6L5BC07aXoPLPqR kqENdXERqZhIcCQW5aFBAf7Sj/2IdIdWKzGVXnvYW6zvcl1nf7+/T/AAZXKEDWx/ Ujw7PpRahC9sLg4JTv909HvwltsPD0utwF09NgV573tukMItgsBbsJY/V4DNqp1Z hdMUMNNkm10= -----END CERTIFICATE-----Generated at Sun Jan 11 18:14:13 2026 by rpki-client