This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/qU_heo92V_7ktbIEU7O5a9lknfE.roa File: qU_heo92V_7ktbIEU7O5a9lknfE.roa (raw, json) Hash identifier: CB0hHmuh07mb6c1bZ7apzs3X1NptXEZeA9FKVZCoXgg= Subject key identifier: A9:4F:E1:7A:8F:76:57:FE:E4:B5:B2:04:53:B3:B9:6B:D9:64:9D:F1 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807D15256B47F618A1E7A4FCD15B99 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/qU_heo92V_7ktbIEU7O5a9lknfE.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42325 IP address blocks: 77.72.104.0/21 maxlen: 24 77.72.106.0/24 maxlen: 24 77.72.107.0/24 maxlen: 24 77.72.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7d:15:25:6b:47:f6:18:a1:e7:a4:fc:d1:5b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a94fe17a8f7657fee4b5b20453b3b96bd9649df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:9b:d1:6e:6a:4b:22:71:78:77:67:11:fb: f1:da:1e:4f:b4:17:7b:8d:c5:19:93:bc:dc:8c:4d: 7b:34:de:97:67:ec:55:2d:83:1e:4a:08:df:66:88: 8a:10:d8:d6:2f:9f:bc:3c:5b:a9:24:2d:75:d8:61: 9a:8a:22:32:dd:73:0b:6e:20:8c:c0:86:76:15:6b: 4a:f8:28:a3:3a:00:32:35:73:2d:41:8c:5f:05:66: bf:d1:c2:7f:7c:68:1f:b5:19:60:27:74:a7:d4:93: 8a:04:01:02:0d:d5:98:a1:34:9f:8f:ff:14:09:d6: a6:ad:82:20:48:40:f6:4e:aa:d9:6f:cf:0d:dd:5b: b1:ed:3d:d9:ec:b6:2f:6b:f7:30:49:78:6e:45:46: 7d:2e:ff:7f:76:d6:9b:9a:70:0b:a7:a6:4f:20:a9: ad:3c:83:73:66:2f:a3:37:4e:97:9d:07:54:38:1f: 1f:bf:67:8d:7d:d4:cd:53:37:77:12:af:0c:37:63: 96:a5:9c:c9:5f:2d:e4:7b:38:5f:df:de:8d:b4:00: 46:8f:db:9a:e8:6f:a2:71:c9:cf:ec:e9:69:8a:1e: e9:4f:41:d6:df:6d:8c:06:85:c9:d8:4b:76:b2:01: ad:26:9f:87:56:41:ca:92:9c:53:1c:7c:62:86:49: 8d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4F:E1:7A:8F:76:57:FE:E4:B5:B2:04:53:B3:B9:6B:D9:64:9D:F1 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/qU_heo92V_7ktbIEU7O5a9lknfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.104.0/21 Signature Algorithm: sha256WithRSAEncryption bc:b2:81:3c:98:89:26:44:07:be:d5:80:bf:63:01:1b:b4:56: 37:b2:7e:77:8e:4d:e4:a2:e0:18:25:1a:f9:f2:94:46:8d:d8: 1a:bf:d3:04:f7:f3:93:6b:9a:cf:a1:49:d9:d3:44:95:c9:32: a1:db:7b:a3:6b:fb:a3:fb:51:0d:1e:c6:90:d3:4f:1c:22:c3: 45:58:59:02:dd:88:bb:a3:da:0d:7a:23:8e:dc:34:72:78:7e: df:ff:3b:13:d0:8f:b8:43:5f:6c:4b:c1:a0:69:76:ab:0b:1e: 35:78:48:36:d7:a2:7f:c2:8d:99:0d:1b:8d:15:25:61:8b:e5: 87:a3:ca:a7:0c:23:4d:c1:ff:c9:82:8e:2e:45:d2:2b:5a:02: 00:ba:33:b8:95:c6:4c:8a:f0:3f:19:31:0e:cf:d3:25:c7:ac: d4:ae:4b:76:74:f8:fb:40:1f:ed:9b:99:3a:8b:45:6e:3a:8e: 76:ee:4e:cd:90:ed:75:a6:90:ac:85:d0:76:13:62:8c:c8:06: b9:b8:3b:03:1a:2e:13:bb:3a:21:e4:90:40:23:b6:d3:6c:4a: 7c:9c:de:bc:24:fd:58:6f:22:d0:f8:89:07:85:a7:23:3c:ce: 41:95:f3:16:cd:66:4c:4d:02:05:00:0e:6d:ad:50:9a:ae:0f: 09:c0:8a:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gH0VJWtH9hih56T80VuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTRmZTE3YThmNzY1N2ZlZTRiNWIyMDQ1M2IzYjk2YmQ5NjQ5ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr6b0W5qSyJxeHdnEfvx2h5PtBd7 jcUZk7zcjE17NN6XZ+xVLYMeSgjfZoiKENjWL5+8PFupJC112GGaiiIy3XMLbiCM wIZ2FWtK+CijOgAyNXMtQYxfBWa/0cJ/fGgftRlgJ3Sn1JOKBAECDdWYoTSfj/8U CdamrYIgSED2TqrZb88N3Vux7T3Z7LYva/cwSXhuRUZ9Lv9/dtabmnALp6ZPIKmt PINzZi+jN06XnQdUOB8fv2eNfdTNUzd3Eq8MN2OWpZzJXy3kezhf396NtABGj9ua 6G+iccnP7Olpih7pT0HW322MBoXJ2Et2sgGtJp+HVkHKkpxTHHxihkmNmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKlP4XqPdlf+5LWyBFOzuWvZZJ3xMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvcVVfaGVvOTJWXzdrdGJJRVU3TzVhOWxrbmZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTUhoMA0G CSqGSIb3DQEBCwUAA4IBAQC8soE8mIkmRAe+1YC/YwEbtFY3sn53jk3kouAYJRr5 8pRGjdgav9ME9/OTa5rPoUnZ00SVyTKh23uja/uj+1ENHsaQ008cIsNFWFkC3Yi7 o9oNeiOO3DRyeH7f/zsT0I+4Q19sS8GgaXarCx41eEg216J/wo2ZDRuNFSVhi+WH o8qnDCNNwf/Jgo4uRdIrWgIAujO4lcZMivA/GTEOz9Mlx6zUrkt2dPj7QB/tm5k6 i0VuOo527k7NkO11ppCshdB2E2KMyAa5uDsDGi4Tuzoh5JBAI7bTbEp8nN68JP1Y byLQ+IkHhacjPM5BlfMWzWZMTQIFAA5trVCarg8JwIrB -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:33 2026 by rpki-client