This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/ZVUX-ukmxmMuSmBaOHN4VXarmdk.roa File: ZVUX-ukmxmMuSmBaOHN4VXarmdk.roa (raw, json) Hash identifier: v4YUjhuoNj8kXmli1Rh7WdYmfXPmnvN9UdaKmw/4lRw= Subject key identifier: 65:55:17:FA:E9:26:C6:63:2E:4A:60:5A:38:73:78:55:76:AB:99:D9 Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019BEA365FF1901463659E82496FCDF2BA9A Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/ZVUX-ukmxmMuSmBaOHN4VXarmdk.roa Signing time: Fri 23 Jan 2026 09:36:30 +0000 ROA not before: Fri 23 Jan 2026 09:36:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206336 IP address blocks: 77.110.109.0/24 maxlen: 24 77.110.114.0/24 maxlen: 24 77.110.115.0/24 maxlen: 24 77.110.119.0/24 maxlen: 24 77.110.122.0/24 maxlen: 24 77.110.123.0/24 maxlen: 24 77.110.124.0/24 maxlen: 24 77.110.125.0/24 maxlen: 24 77.110.126.0/24 maxlen: 24 77.110.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:36:5f:f1:90:14:63:65:9e:82:49:6f:cd:f2:ba:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jan 23 09:36:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=655517fae926c6632e4a605a3873785576ab99d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:b5:55:fa:c4:ff:87:27:aa:10:b5:f2:11: 1d:6d:15:27:15:ac:90:e4:cc:2d:9a:99:da:a4:0e: 66:5c:30:4c:a1:05:c1:63:fb:83:4f:d1:f3:44:5e: 1b:f4:7c:73:f4:4a:d7:ae:0a:a0:4d:e9:23:1b:58: e8:bb:b4:85:e5:7f:9f:b9:cc:71:0b:2e:70:83:c8: f9:89:df:07:1a:89:91:78:90:8b:29:e2:d6:05:7d: 71:9a:bb:9e:6b:a8:47:98:a4:8a:71:68:1f:d4:87: 69:c1:ab:c5:d3:38:a1:a0:2f:35:1f:8a:b4:20:dd: 12:24:a2:3f:d3:ce:d4:63:3b:61:4e:0e:bb:c1:5e: cf:bf:de:e4:2e:8a:31:05:e5:b4:90:02:5b:0d:e5: 47:be:dd:e3:1f:24:ed:bb:5e:56:32:9e:55:78:ea: a1:b5:53:a7:f9:1d:aa:ba:35:45:6b:46:61:04:01: 01:b5:3d:38:64:cc:2a:43:6b:1e:10:56:b6:4c:3d: 3b:57:30:6d:e8:43:81:8d:cd:4c:65:a7:df:84:13: b7:32:25:67:ba:06:36:0f:93:02:67:9e:5b:14:a9: ca:63:68:2d:ab:a7:fc:83:ce:6c:e0:4a:b3:da:77: 2b:2f:18:06:e2:cf:08:35:68:94:a3:1c:73:b7:1e: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:55:17:FA:E9:26:C6:63:2E:4A:60:5A:38:73:78:55:76:AB:99:D9 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/ZVUX-ukmxmMuSmBaOHN4VXarmdk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.110.109.0/24 77.110.114.0/23 77.110.119.0/24 77.110.122.0-77.110.127.255 Signature Algorithm: sha256WithRSAEncryption 61:84:f6:aa:76:36:0c:7c:6e:83:45:e8:e2:47:34:64:e7:bb: 2f:77:00:49:87:c3:5d:bd:75:7e:c3:d7:d6:fb:91:fd:cb:01: 10:7b:ff:af:c0:d3:f5:22:97:3a:66:c1:92:64:af:41:2c:f1: db:99:a6:3f:e5:82:a1:7d:99:f8:bc:7b:01:92:e2:cc:56:0e: eb:db:eb:0e:ac:74:15:05:36:74:f0:03:f9:5b:fe:40:f5:fa: c9:ae:2c:11:de:d5:56:e9:88:1e:51:dd:92:7e:d3:ea:7e:b6: bf:fc:36:18:4c:43:9e:0e:81:b7:21:82:86:a4:d6:9e:d8:3b: b2:98:a0:78:0d:63:f8:f0:ee:c3:bc:15:c2:36:65:87:19:d8: 9d:8d:bf:8d:1d:2e:95:25:64:7f:30:9c:6f:ff:b6:29:f9:1d: ee:41:f5:68:fc:de:59:65:85:6e:ed:4e:fb:49:25:a8:5d:e0: 74:56:31:02:ef:68:db:16:21:c4:2f:e0:b0:dc:3b:76:05:b7: 4d:c1:af:8c:bf:ab:65:dd:d8:de:ae:9a:9d:a8:dc:5a:e6:d2: a5:40:df:0a:58:48:0e:52:af:a8:b6:2b:c5:d6:6c:7a:92:5b: 7b:3c:ac:44:cd:a5:b5:cf:f7:ce:a8:60:88:7d:13:0f:ed:c9: be:99:33:95 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZvqNl/xkBRjZZ6CSW/N8rqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMTIzMDkzNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTU1MTdmYWU5MjZjNjYzMmU0YTYwNWEzODczNzg1NTc2YWI5OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmK1VfrE/4cnqhC18hEdbRUnFayQ 5MwtmpnapA5mXDBMoQXBY/uDT9HzRF4b9Hxz9ErXrgqgTekjG1jou7SF5X+fucxx Cy5wg8j5id8HGomReJCLKeLWBX1xmruea6hHmKSKcWgf1IdpwavF0zihoC81H4q0 IN0SJKI/087UYzthTg67wV7Pv97kLooxBeW0kAJbDeVHvt3jHyTtu15WMp5VeOqh tVOn+R2qujVFa0ZhBAEBtT04ZMwqQ2seEFa2TD07VzBt6EOBjc1MZaffhBO3MiVn ugY2D5MCZ55bFKnKY2gtq6f8g85s4Eqz2ncrLxgG4s8INWiUoxxztx6/wwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFGVVF/rpJsZjLkpgWjhzeFV2q5nZMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvWlZVWC11a214bU11U21CYU9ITjRWWGFybWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQATW5tAwQB TW5yAwQATW53MAwDBAFNbnoDBAdNbgAwDQYJKoZIhvcNAQELBQADggEBAGGE9qp2 Ngx8boNF6OJHNGTnuy93AEmHw129dX7D19b7kf3LARB7/6/A0/UilzpmwZJkr0Es 8duZpj/lgqF9mfi8ewGS4sxWDuvb6w6sdBUFNnTwA/lb/kD1+smuLBHe1VbpiB5R 3ZJ+0+p+tr/8NhhMQ54Ogbchgoak1p7YO7KYoHgNY/jw7sO8FcI2ZYcZ2J2Nv40d LpUlZH8wnG//tin5He5B9Wj83lllhW7tTvtJJahd4HRWMQLvaNsWIcQv4LDcO3YF t03Br4y/q2Xd2N6ump2o3Frm0qVA3wpYSA5Sr6i2K8XWbHqSW3s8rETNpbXP986o YIh9Ew/tyb6ZM5U= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:13 2026 by rpki-client