This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/gshxbhBitWunn7XnxdgbU8rd8sQ.roa File: gshxbhBitWunn7XnxdgbU8rd8sQ.roa (raw, json) Hash identifier: yVxOcZA6PG9vRRylQFUG5bd57Ctzru9SJRfVr2IqaGg= Subject key identifier: 82:C8:71:6E:10:62:B5:6B:A7:9F:B5:E7:C5:D8:1B:53:CA:DD:F2:C4 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 019BEFA24FFAF7E83269F96EAC0BA6866E50 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/gshxbhBitWunn7XnxdgbU8rd8sQ.roa Signing time: Sat 24 Jan 2026 10:52:30 +0000 ROA not before: Sat 24 Jan 2026 10:52:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216300 IP address blocks: 77.105.128.0/24 maxlen: 24 77.105.129.0/24 maxlen: 24 77.105.130.0/24 maxlen: 24 77.105.132.0/24 maxlen: 24 77.105.134.0/24 maxlen: 24 77.105.135.0/24 maxlen: 24 77.105.160.0/24 maxlen: 24 77.105.164.0/24 maxlen: 24 185.225.202.0/24 maxlen: 24 185.225.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:a2:4f:fa:f7:e8:32:69:f9:6e:ac:0b:a6:86:6e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Jan 24 10:52:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82c8716e1062b56ba79fb5e7c5d81b53caddf2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3c:02:f2:35:21:34:8f:32:32:1e:8a:13:21: 56:53:53:5a:e7:7a:2b:b0:a1:5a:6b:97:18:5a:d2: 6a:b6:89:b2:cd:f8:34:6a:16:19:99:48:50:13:77: 61:d7:1a:8c:0d:93:3c:d3:f4:0d:b7:38:05:a6:da: 96:f1:67:6a:5a:27:59:de:ea:48:12:e6:42:2f:db: b2:69:c3:81:f2:7e:fc:c6:31:7b:cb:2b:55:88:89: 81:6b:56:fb:19:ec:88:36:40:40:93:27:6f:45:1a: 10:0d:30:21:d2:64:74:b6:ed:e7:58:65:3f:6a:6e: 89:d1:84:4c:8e:72:ff:1a:5f:fe:5e:6e:61:90:4d: bd:c4:5a:45:99:9d:8b:73:3b:42:0d:0e:d1:61:0d: 12:63:63:e3:1c:ba:b5:9c:d1:57:20:dd:45:d7:f8: 22:f7:6f:49:f8:69:03:72:b4:19:86:e3:37:85:75: ed:3f:bf:dc:4b:71:cc:c6:09:de:24:2b:9c:dd:24: 4a:a7:62:4f:e5:fb:0b:75:83:a5:e5:e7:c4:47:94: 2c:e7:dd:73:9d:fa:19:08:18:69:f3:3a:3a:93:4a: 52:85:f0:a8:dd:98:44:05:e8:07:aa:44:69:8b:4d: ad:80:2a:10:e9:56:42:84:ba:4a:d0:51:6d:0d:a5: f4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C8:71:6E:10:62:B5:6B:A7:9F:B5:E7:C5:D8:1B:53:CA:DD:F2:C4 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/gshxbhBitWunn7XnxdgbU8rd8sQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.128.0-77.105.130.255 77.105.132.0/24 77.105.134.0/23 77.105.160.0/24 77.105.164.0/24 185.225.202.0/23 Signature Algorithm: sha256WithRSAEncryption 07:91:41:a4:f3:29:64:e0:e6:55:f6:e9:9c:6c:4e:1e:d7:6a: 29:23:82:c2:72:0c:33:99:26:3a:ad:21:b1:fa:06:89:06:13: e4:aa:cf:99:47:60:87:2d:e4:a1:74:08:70:ac:bb:a2:6c:75: a2:7c:39:0b:7c:ee:84:ed:68:82:00:39:5c:1a:14:56:65:e8: b3:f5:e3:78:63:ac:d6:c1:6d:a9:d0:0f:87:08:f9:9a:3b:db: 2b:88:fa:b9:d4:42:1f:6e:52:5c:22:71:d7:a2:75:10:6d:09: c8:ea:76:a9:f3:88:84:1a:91:af:54:ac:6e:b7:46:bc:23:4f: 26:fa:08:06:f3:d7:2d:05:f3:bc:f4:e5:9c:e0:df:a0:04:28: 53:71:8d:82:b6:60:a6:41:1e:7b:2c:ec:fa:65:1a:96:85:55: 4e:c6:0e:13:f7:15:8b:3c:a6:b3:2c:ad:05:f1:0b:c4:56:fd: 1a:91:45:06:69:6a:e7:c2:66:f7:e9:81:c6:70:2c:9a:04:f4: db:58:75:28:34:6b:3a:8a:1d:0a:fd:0c:a0:cf:a2:0e:3d:88: 2b:4a:98:1a:20:05:67:ce:3a:9f:ba:17:87:53:92:c2:b6:e8: 78:55:46:0f:ab:04:42:a7:0f:2b:c3:6d:d9:8f:0d:da:8d:2c: a7:d4:ec:bc -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZvvok/69+gyaflurAumhm5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwMTI0MTA1MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmM4NzE2ZTEwNjJiNTZiYTc5ZmI1ZTdjNWQ4MWI1M2NhZGRmMmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDwC8jUhNI8yMh6KEyFWU1Na53or sKFaa5cYWtJqtomyzfg0ahYZmUhQE3dh1xqMDZM80/QNtzgFptqW8WdqWidZ3upI EuZCL9uyacOB8n78xjF7yytViImBa1b7GeyINkBAkydvRRoQDTAh0mR0tu3nWGU/ am6J0YRMjnL/Gl/+Xm5hkE29xFpFmZ2LcztCDQ7RYQ0SY2PjHLq1nNFXIN1F1/gi 929J+GkDcrQZhuM3hXXtP7/cS3HMxgneJCuc3SRKp2JP5fsLdYOl5efER5Qs591z nfoZCBhp8zo6k0pShfCo3ZhEBegHqkRpi02tgCoQ6VZChLpK0FFtDaX0YwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFILIcW4QYrVrp5+158XYG1PK3fLEMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvZ3NoeGJoQml0V3VubjdYbnhkZ2JVOHJkOHNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAdNaYAD BABNaYIDBABNaYQDBAFNaYYDBABNaaADBABNaaQDBAG54cowDQYJKoZIhvcNAQEL BQADggEBAAeRQaTzKWTg5lX26ZxsTh7XaikjgsJyDDOZJjqtIbH6BokGE+Sqz5lH YIct5KF0CHCsu6JsdaJ8OQt87oTtaIIAOVwaFFZl6LP143hjrNbBbanQD4cI+Zo7 2yuI+rnUQh9uUlwicdeidRBtCcjqdqnziIQaka9UrG63RrwjTyb6CAbz1y0F87z0 5Zzg36AEKFNxjYK2YKZBHnss7PplGpaFVU7GDhP3FYs8prMsrQXxC8RW/RqRRQZp aufCZvfpgcZwLJoE9NtYdSg0azqKHQr9DKDPog49iCtKmBogBWfOOp+6F4dTksK2 6HhVRg+rBEKnDyvDbdmPDdqNLKfU7Lw= -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:19 2026 by rpki-client