This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/j62jc6YcbBHT7ZJWUu6HcM-IPhg.roa File: j62jc6YcbBHT7ZJWUu6HcM-IPhg.roa (raw, json) Hash identifier: GJ+bauXdScUzEvf57rjOSn949ZP8TFlef1MKQj/V+HQ= Subject key identifier: 8F:AD:A3:73:A6:1C:6C:11:D3:ED:92:56:52:EE:87:70:CF:88:3E:18 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F146A882FBA4B3FCA2D355A2EF7794A Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/j62jc6YcbBHT7ZJWUu6HcM-IPhg.roa Signing time: Fri 02 Jan 2026 14:20:02 +0000 ROA not before: Fri 02 Jan 2026 14:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216024 IP address blocks: 77.221.145.0/24 maxlen: 24 176.98.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6a:88:2f:ba:4b:3f:ca:2d:35:5a:2e:f7:79:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fada373a61c6c11d3ed925652ee8770cf883e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:86:db:ca:c9:f7:f7:9e:63:50:09:b2:c9: fe:fb:bc:66:46:d6:43:5d:99:19:af:f7:6e:9f:dc: 43:0a:5f:d4:92:68:db:bf:18:01:3a:d9:13:88:3b: 92:6e:71:d5:b9:8d:17:cf:e3:4d:56:6f:06:af:af: 8e:08:fc:76:09:60:4a:14:b4:87:e9:04:41:dc:97: 23:4b:5d:fe:fb:d4:ba:df:58:d7:f8:36:1d:06:ee: 25:25:59:09:d1:83:e6:74:34:41:eb:60:20:72:c8: ca:37:66:e5:f2:24:8d:7b:00:6e:04:de:0a:7f:f9: dc:68:bd:79:31:23:e0:6d:ac:6b:47:24:22:4a:63: 9f:dd:63:52:77:76:5f:24:79:91:05:13:51:c0:b0: 11:c2:f4:c2:28:f5:a4:60:7c:e6:f7:b5:74:36:52: 69:cd:b5:fc:23:26:04:43:cb:06:46:68:b1:d0:c8: 9e:4c:d0:ef:18:ef:e4:75:59:f3:e9:34:b7:c0:62: 4c:ce:f2:9a:27:90:0f:a4:2f:4e:ef:29:5e:61:92: 8b:74:b5:12:cb:16:bc:e3:b4:af:02:91:90:74:80: 29:7b:df:d3:b3:c6:60:5d:a8:7b:5b:ea:51:63:b8: 69:a9:ce:ce:fc:b8:fe:df:fc:4c:0e:d1:58:3b:9b: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AD:A3:73:A6:1C:6C:11:D3:ED:92:56:52:EE:87:70:CF:88:3E:18 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/j62jc6YcbBHT7ZJWUu6HcM-IPhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.145.0/24 176.98.191.0/24 Signature Algorithm: sha256WithRSAEncryption 14:69:13:3e:32:7a:c3:6c:a9:ca:d7:7b:8d:87:98:0a:85:b3: d1:86:00:21:cd:9f:2b:a6:b7:74:bf:1a:27:b0:d7:4a:cb:fc: 9e:61:65:14:c8:03:13:5f:ec:40:9e:2a:62:c6:94:a5:9c:ac: 00:da:a9:b9:9a:81:07:ad:3f:ab:76:3d:e5:d0:5f:30:52:82: 29:1a:10:53:e9:d0:c6:13:7b:6f:c2:fb:3a:73:53:12:7e:8e: db:44:6e:e8:eb:55:f3:04:d5:80:64:d7:4b:19:93:c1:5e:1b: 19:c5:4f:3a:14:79:bb:84:a8:30:b6:93:36:f4:20:ca:9c:da: 52:ef:b1:a5:e7:bb:ba:df:f0:3c:04:9d:fb:49:28:b3:c9:f4: 4a:db:b8:08:cd:3d:0c:57:8d:27:8d:8d:cd:63:15:de:10:fd: 01:b3:5e:ac:73:71:ad:6b:ba:fa:2d:a2:65:67:62:cb:9d:ee: 95:5d:63:bd:28:66:e4:1f:5e:9b:6c:60:70:cc:63:ad:8c:ab: 61:da:ba:e2:5e:24:b4:d4:77:12:10:74:b9:b0:95:3f:48:ac: d8:b7:5c:a1:38:9f:d8:6e:73:e5:0b:19:1f:d2:00:a6:5d:ca: 5a:4f:3f:4a:1c:fe:12:ac:18:cc:79:05:d7:0a:26:c3:cd:b3: 3b:68:be:b2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FGqIL7pLP8otNVou93lKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmFkYTM3M2E2MWM2YzExZDNlZDkyNTY1MmVlODc3MGNmODgzZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b6G28rJ9/eeY1AJssn++7xmRtZD XZkZr/dun9xDCl/UkmjbvxgBOtkTiDuSbnHVuY0Xz+NNVm8Gr6+OCPx2CWBKFLSH 6QRB3JcjS13++9S631jX+DYdBu4lJVkJ0YPmdDRB62AgcsjKN2bl8iSNewBuBN4K f/ncaL15MSPgbaxrRyQiSmOf3WNSd3ZfJHmRBRNRwLARwvTCKPWkYHzm97V0NlJp zbX8IyYEQ8sGRmix0MieTNDvGO/kdVnz6TS3wGJMzvKaJ5APpC9O7yleYZKLdLUS yxa847SvApGQdIApe9/Ts8ZgXah7W+pRY7hpqc7O/Lj+3/xMDtFYO5uqeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI+to3OmHGwR0+2SVlLuh3DPiD4YMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvajYyamM2WWNiQkhUN1pKV1V1NkhjTS1JUGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATd2RAwQA sGK/MA0GCSqGSIb3DQEBCwUAA4IBAQAUaRM+MnrDbKnK13uNh5gKhbPRhgAhzZ8r prd0vxonsNdKy/yeYWUUyAMTX+xAnipixpSlnKwA2qm5moEHrT+rdj3l0F8wUoIp GhBT6dDGE3tvwvs6c1MSfo7bRG7o61XzBNWAZNdLGZPBXhsZxU86FHm7hKgwtpM2 9CDKnNpS77Gl57u63/A8BJ37SSizyfRK27gIzT0MV40njY3NYxXeEP0Bs16sc3Gt a7r6LaJlZ2LLne6VXWO9KGbkH16bbGBwzGOtjKth2rriXiS01HcSEHS5sJU/SKzY t1yhOJ/YbnPlCxkf0gCmXcpaTz9KHP4SrBjMeQXXCibDzbM7aL6y -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:58 2026 by rpki-client