This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/hrfQx82AuTt0tWgtIEmqwq2Ay4I.roa File: hrfQx82AuTt0tWgtIEmqwq2Ay4I.roa (raw, json) Hash identifier: tIsyWCt/WMjs4Zs6i8RYA2TsbpQhKGtsDEaLgmsTNko= Subject key identifier: 86:B7:D0:C7:CD:80:B9:3B:74:B5:68:2D:20:49:AA:C2:AD:80:CB:82 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B77590482D4C5E738DF6D2AEB50A2551C Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/hrfQx82AuTt0tWgtIEmqwq2Ay4I.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202050 IP address blocks: 77.65.142.0/23 maxlen: 23 77.65.194.0/23 maxlen: 23 77.65.223.0/24 maxlen: 24 193.192.176.0/22 maxlen: 22 193.192.176.0/23 maxlen: 24 193.192.178.0/23 maxlen: 24 193.192.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:04:82:d4:c5:e7:38:df:6d:2a:eb:50:a2:55:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=86b7d0c7cd80b93b74b5682d2049aac2ad80cb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:18:51:16:2e:c3:28:86:97:ee:65:45:89:15: 86:ae:77:c6:9c:88:3e:a9:2a:23:9b:75:2f:85:78: 68:ae:0d:a9:84:a3:4c:04:f6:bb:50:5d:d3:e0:4d: ad:00:b9:0b:5f:ac:95:31:86:85:98:52:20:b3:8f: 0e:88:56:45:29:a8:fc:80:1a:21:4a:80:99:20:49: 37:0c:97:a8:02:4f:46:a4:78:6b:06:f1:ac:02:58: b7:83:6c:47:95:13:09:bd:4b:9c:3f:10:09:1b:f7: b8:48:4c:15:18:e5:55:09:9b:77:d8:1c:05:6f:f6: 74:95:a7:93:ff:f3:90:fe:5e:68:99:54:ee:0b:48: db:90:89:42:19:e7:c1:fe:0c:45:ec:c8:77:ff:40: 82:4f:e1:55:7c:a4:f7:5f:05:cd:d1:76:40:a4:2f: 0c:7f:6b:0d:91:7f:11:76:41:36:24:ab:4d:68:b8: 0a:e4:7b:9f:d3:69:5b:f2:9a:51:2e:1a:6d:8b:7b: 1f:e6:a2:9d:ed:72:dc:da:5d:20:21:6d:c6:86:87: 74:e8:b9:db:ad:9a:e0:cb:cf:6a:36:7b:1f:e3:e0: b8:39:05:71:10:71:a6:29:e1:eb:81:bf:8a:50:79: 63:25:50:17:e5:11:8f:44:b4:1f:42:ff:15:c2:98: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B7:D0:C7:CD:80:B9:3B:74:B5:68:2D:20:49:AA:C2:AD:80:CB:82 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/hrfQx82AuTt0tWgtIEmqwq2Ay4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.65.142.0/23 77.65.194.0/23 77.65.223.0/24 193.192.176.0-193.192.180.255 Signature Algorithm: sha256WithRSAEncryption 66:79:29:3f:50:91:f5:9d:ba:d4:b2:75:7e:5e:e9:8a:ce:81: df:54:86:a5:4b:22:83:79:31:75:4e:25:98:fc:56:ab:46:1d: 88:1e:4a:71:87:3f:96:69:5b:4c:ea:3b:70:21:8f:c4:fe:47: 26:f3:54:17:ee:b2:90:0e:99:cf:e4:6e:16:80:f2:ea:3b:b2: 20:90:74:65:e8:ee:48:a1:9f:d7:39:5f:50:7c:2a:d3:b7:59: c6:be:b8:e0:28:d2:90:32:fb:c9:4e:bb:f0:e1:9d:d7:a0:cd: 55:76:b2:48:ba:ac:cf:48:86:18:51:84:47:24:ab:2f:7c:ff: 1f:ce:e1:bc:93:11:d6:62:78:ac:fb:f5:87:2f:07:8a:e2:85: 10:bc:af:61:13:bf:f5:b0:80:8f:d9:49:90:cb:b5:50:1d:78: 39:5d:c1:ca:14:fb:84:c4:0a:28:36:b1:83:67:25:fa:ce:4e: 45:e3:93:90:f7:02:b9:ea:2a:59:2a:97:25:d5:e1:e6:69:76: 03:44:fa:f6:9a:d8:29:16:16:86:3f:24:e7:ab:d1:5a:72:19: e4:aa:9e:0b:fb:6b:c5:78:eb:28:c5:0f:4a:29:57:ac:db:fb: 0b:e2:1c:96:c9:7f:ca:4c:0a:36:7d:8d:80:b7:35:98:1b:7b: b1:39:9a:38 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3WQSC1MXnON9tKutQolUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NmI3ZDBjN2NkODBiOTNiNzRiNTY4MmQyMDQ5YWFjMmFkODBjYjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBhRFi7DKIaX7mVFiRWGrnfGnIg+ qSojm3UvhXhorg2phKNMBPa7UF3T4E2tALkLX6yVMYaFmFIgs48OiFZFKaj8gBoh SoCZIEk3DJeoAk9GpHhrBvGsAli3g2xHlRMJvUucPxAJG/e4SEwVGOVVCZt32BwF b/Z0laeT//OQ/l5omVTuC0jbkIlCGefB/gxF7Mh3/0CCT+FVfKT3XwXN0XZApC8M f2sNkX8RdkE2JKtNaLgK5Huf02lb8ppRLhpti3sf5qKd7XLc2l0gIW3Ghod06Lnb rZrgy89qNnsf4+C4OQVxEHGmKeHrgb+KUHljJVAX5RGPRLQfQv8VwpijUQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFIa30MfNgLk7dLVoLSBJqsKtgMuCMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvaHJmUXg4MkF1VHQwdFdndElFbXF3cTJBeTRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBTUGOAwQB TUHCAwQATUHfMAwDBATBwLADBADBwLQwDQYJKoZIhvcNAQELBQADggEBAGZ5KT9Q kfWdutSydX5e6YrOgd9UhqVLIoN5MXVOJZj8VqtGHYgeSnGHP5ZpW0zqO3Ahj8T+ RybzVBfuspAOmc/kbhaA8uo7siCQdGXo7kihn9c5X1B8KtO3Wca+uOAo0pAy+8lO u/DhndegzVV2ski6rM9IhhhRhEckqy98/x/O4byTEdZieKz79YcvB4rihRC8r2ET v/WwgI/ZSZDLtVAdeDldwcoU+4TECig2sYNnJfrOTkXjk5D3ArnqKlkqlyXV4eZp dgNE+vaa2CkWFoY/JOer0VpyGeSqngv7a8V46yjFD0opV6zb+wviHJbJf8pMCjZ9 jYC3NZgbe7E5mjg= -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:31 2026 by rpki-client