This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/IBFPVg1WuDm65Jw2m_fVJAyOedk.roa File: IBFPVg1WuDm65Jw2m_fVJAyOedk.roa (raw, json) Hash identifier: tJKvOE2WhOZh+G+P3u4BKzx6sTkBmdWFGnRM26n0+zU= Subject key identifier: 20:11:4F:56:0D:56:B8:39:BA:E4:9C:36:9B:F7:D5:24:0C:8E:79:D9 Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019BEB9D418DAA7755049AFC6B78F4722EC2 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/IBFPVg1WuDm65Jw2m_fVJAyOedk.roa Signing time: Fri 23 Jan 2026 16:08:30 +0000 ROA not before: Fri 23 Jan 2026 16:08:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 77.110.64.0/20 maxlen: 20 77.110.64.0/24 maxlen: 24 77.110.65.0/24 maxlen: 24 77.110.66.0/24 maxlen: 24 77.110.67.0/24 maxlen: 24 77.110.68.0/24 maxlen: 24 77.110.69.0/24 maxlen: 24 77.110.70.0/24 maxlen: 24 77.110.71.0/24 maxlen: 24 77.110.72.0/24 maxlen: 24 77.110.73.0/24 maxlen: 24 77.110.74.0/24 maxlen: 24 77.110.75.0/24 maxlen: 24 77.110.76.0/24 maxlen: 24 77.110.77.0/24 maxlen: 24 77.110.78.0/24 maxlen: 24 77.110.79.0/24 maxlen: 24 77.110.80.0/20 maxlen: 20 77.110.80.0/24 maxlen: 24 77.110.81.0/24 maxlen: 24 77.110.82.0/24 maxlen: 24 77.110.83.0/24 maxlen: 24 77.110.84.0/24 maxlen: 24 77.110.85.0/24 maxlen: 24 77.110.86.0/24 maxlen: 24 77.110.87.0/24 maxlen: 24 77.110.88.0/24 maxlen: 24 77.110.89.0/24 maxlen: 24 77.110.90.0/24 maxlen: 24 77.110.91.0/24 maxlen: 24 77.110.92.0/24 maxlen: 24 77.110.93.0/24 maxlen: 24 77.110.94.0/24 maxlen: 24 77.110.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:9d:41:8d:aa:77:55:04:9a:fc:6b:78:f4:72:2e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jan 23 16:08:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20114f560d56b839bae49c369bf7d5240c8e79d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:c0:48:57:4b:4e:c9:80:0f:91:c9:da:f8: f7:9c:c3:47:57:20:e3:57:b7:1e:86:c9:45:79:73: 36:f1:0d:05:c7:4f:e8:5a:b0:10:fc:db:cd:d7:8e: f9:c6:f7:38:04:a2:84:50:01:40:ef:9f:ab:71:90: fd:ad:fa:2e:7e:2a:ca:04:c5:db:03:3f:8e:2f:0f: 80:9a:01:e8:48:60:c3:2a:8b:2e:a7:36:0b:7d:3b: 18:72:e4:6b:cf:4e:3a:b2:88:46:93:04:23:79:bc: 71:8f:2d:45:4f:15:27:a1:a4:17:6d:c1:13:c4:af: dc:9c:a0:79:7f:e0:f2:dc:8a:9c:c9:8f:94:8d:36: 82:7e:8a:65:73:1e:76:96:cd:7b:8d:05:ba:8c:e7: 0e:e9:d4:92:28:0c:af:46:0c:ff:0e:98:e9:df:33: b8:7f:cf:ca:10:e1:ec:b8:2a:73:d2:65:c2:98:cf: fe:3b:ee:e1:e7:37:ed:ce:2e:48:54:d4:53:86:df: 4c:d7:5c:97:a6:7b:f0:93:e1:f1:dd:8e:d1:bd:63: fc:52:6f:8a:ca:d3:ae:5e:95:6e:ca:d2:a8:ce:b5: a9:fc:51:3f:dc:53:3f:47:92:56:f5:0b:e5:ec:e7: b7:d7:91:94:5a:81:9e:31:c7:6a:51:63:30:7c:59: 80:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:11:4F:56:0D:56:B8:39:BA:E4:9C:36:9B:F7:D5:24:0C:8E:79:D9 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/IBFPVg1WuDm65Jw2m_fVJAyOedk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.110.64.0/19 Signature Algorithm: sha256WithRSAEncryption 0c:a6:a0:b8:6d:ed:ae:e5:8f:c0:84:60:3d:16:cc:7d:02:f5: fb:b9:6b:5d:f3:c8:3f:9e:86:be:8f:d1:76:89:7d:c1:01:63: 59:86:c3:12:7e:d7:76:51:1e:09:5b:82:84:97:17:f0:75:48: 52:b7:8d:2d:f5:a7:89:43:fe:99:ed:1a:ca:ee:57:e4:ba:3a: 0f:07:f1:8b:95:fe:2b:bf:11:f2:78:aa:e5:06:98:63:2d:ef: fd:e0:13:e9:f9:f3:02:5c:07:b1:da:6f:56:49:d5:55:26:4e: 8d:ff:71:4a:61:39:d7:a5:b4:f6:c9:22:3e:ac:8a:7e:04:ba: 56:fc:e0:ff:76:4b:3f:0e:a0:21:ab:5f:07:44:90:f2:fc:e7: f5:d3:4e:ed:02:db:2a:54:fd:5b:cf:b7:86:8e:c8:46:18:76: 9b:4e:69:af:91:c1:a4:35:52:39:0c:c8:7c:0a:37:c5:12:3d: b4:b4:dd:64:4b:2b:5c:1a:ba:01:4b:81:86:61:c7:ad:fd:77: 88:68:4c:54:1e:bb:a4:20:1a:60:04:c7:6e:a4:55:88:b1:4d: 3a:7f:b2:44:65:68:20:a8:9f:59:73:45:8a:87:bb:59:a3:8f: 57:b5:b5:a3:b9:ca:4b:06:98:8b:97:62:f3:4a:89:f2:c8:3b: 3e:e9:40:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvrnUGNqndVBJr8a3j0ci7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMTIzMTYwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDExNGY1NjBkNTZiODM5YmFlNDljMzY5YmY3ZDUyNDBjOGU3OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6DASFdLTsmAD5HJ2vj3nMNHVyDj V7cehslFeXM28Q0Fx0/oWrAQ/NvN1475xvc4BKKEUAFA75+rcZD9rfoufirKBMXb Az+OLw+AmgHoSGDDKosupzYLfTsYcuRrz046sohGkwQjebxxjy1FTxUnoaQXbcET xK/cnKB5f+Dy3IqcyY+UjTaCfoplcx52ls17jQW6jOcO6dSSKAyvRgz/Dpjp3zO4 f8/KEOHsuCpz0mXCmM/+O+7h5zftzi5IVNRTht9M11yXpnvwk+Hx3Y7RvWP8Um+K ytOuXpVuytKozrWp/FE/3FM/R5JW9Qvl7Oe315GUWoGeMcdqUWMwfFmAywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCART1YNVrg5uuScNpv31SQMjnnZMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvSUJGUFZnMVd1RG02NUp3Mm1fZlZKQXlPZWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTW5AMA0G CSqGSIb3DQEBCwUAA4IBAQAMpqC4be2u5Y/AhGA9Fsx9AvX7uWtd88g/noa+j9F2 iX3BAWNZhsMSftd2UR4JW4KElxfwdUhSt40t9aeJQ/6Z7RrK7lfkujoPB/GLlf4r vxHyeKrlBphjLe/94BPp+fMCXAex2m9WSdVVJk6N/3FKYTnXpbT2ySI+rIp+BLpW /OD/dks/DqAhq18HRJDy/Of1007tAtsqVP1bz7eGjshGGHabTmmvkcGkNVI5DMh8 CjfFEj20tN1kSytcGroBS4GGYcet/XeIaExUHrukIBpgBMdupFWIsU06f7JEZWgg qJ9Zc0WKh7tZo49XtbWjucpLBpiLl2LzSonyyDs+6UAz -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:13 2026 by rpki-client