This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/hK7GLmuFR-UZU_nfZ_fdsEwflNw.roa File: hK7GLmuFR-UZU_nfZ_fdsEwflNw.roa (raw, json) Hash identifier: qSG+GFEeR/GOxXMLx7StdEf6sz41a8hoOmnDw6GdlPY= Subject key identifier: 84:AE:C6:2E:6B:85:47:E5:19:53:F9:DF:67:F7:DD:B0:4C:1F:94:DC Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9 Certificate serial: 019B7DCADA106B19121FCFFF3C9B5EC1239B Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/hK7GLmuFR-UZU_nfZ_fdsEwflNw.roa Signing time: Fri 02 Jan 2026 08:20:04 +0000 ROA not before: Fri 02 Jan 2026 08:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9051 IP address blocks: 80.77.176.0/20 maxlen: 24 185.125.152.0/22 maxlen: 24 2a06:b880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:da:10:6b:19:12:1f:cf:ff:3c:9b:5e:c1:23:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9 Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84aec62e6b8547e51953f9df67f7ddb04c1f94dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:80:e6:66:f8:49:dd:f2:fe:07:6a:5b:73: fb:45:e4:cd:83:65:b7:e9:2a:bf:aa:0e:b8:f9:76: 6f:a9:9a:31:87:fc:a0:c4:fc:0b:f9:1e:b4:a3:06: 81:d8:0f:07:24:f5:64:7d:a2:79:06:ce:08:51:d3: 64:24:ad:cc:6a:5f:a6:b0:5f:b5:ff:7e:69:d4:9f: b9:b7:dc:aa:ad:68:13:be:de:86:3f:0d:e8:4a:a8: 83:51:31:d4:66:d4:88:dc:46:36:ff:ca:fd:24:05: 29:43:58:28:93:92:42:ce:d2:43:aa:46:f9:b9:dd: b3:f5:44:51:c7:db:c9:ca:3d:96:39:c0:91:8a:10: 58:65:45:7e:3c:8e:bc:13:90:0c:1e:ee:7f:e9:7a: 3a:c8:79:be:66:e9:29:0f:c6:06:57:94:14:bc:4a: 8a:6f:af:fc:2d:d6:35:03:10:d3:23:10:8b:c6:70: 5c:35:09:78:c9:1b:e2:36:db:82:e0:ea:6e:53:71: 99:ed:0f:63:a7:60:bc:01:94:2d:f4:0c:69:3f:e4: f1:02:e6:5b:82:8c:5f:40:de:85:d9:95:35:d6:6c: a4:bd:e5:65:1e:54:7b:c5:ca:e0:30:74:f4:a8:6c: ee:c5:e2:6c:cf:6c:60:2a:06:61:16:ca:0c:84:ac: ad:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:C6:2E:6B:85:47:E5:19:53:F9:DF:67:F7:DD:B0:4C:1F:94:DC X509v3 Authority Key Identifier: keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/hK7GLmuFR-UZU_nfZ_fdsEwflNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.77.176.0/20 185.125.152.0/22 IPv6: 2a06:b880::/29 Signature Algorithm: sha256WithRSAEncryption 81:ce:c4:05:5e:8b:f5:57:af:07:9c:71:1b:46:dc:7f:ef:95: 8a:c1:55:64:22:cd:15:52:e3:73:f5:9a:df:35:f8:97:b9:f4: ff:4a:09:4d:40:18:39:73:1b:da:b2:12:fe:36:17:1c:fb:43: e5:3f:88:9c:12:00:10:e4:d9:25:93:f7:52:09:f7:f2:6a:60: b8:1c:a7:e2:76:9f:c3:ff:a2:f2:29:81:74:42:3a:f5:2e:2a: d0:5a:7e:4a:bd:1b:a9:2c:88:59:7b:fa:34:8b:d1:7e:86:f8: d7:5d:69:6d:f1:6a:94:3f:56:cf:75:a3:57:9f:ba:05:8e:7a: 63:66:69:60:73:66:0f:68:a0:0d:21:5a:7c:b8:6f:70:33:4d: a2:5d:cd:f7:e0:1f:20:3c:21:90:71:be:7c:5f:56:5f:99:9b: 80:c0:5d:79:74:c4:3a:5c:5e:38:f1:d2:44:dc:60:2a:5f:2c: e4:b2:2e:b1:31:83:af:5b:21:f1:06:f6:a9:82:a4:dd:82:8f: c8:70:5c:3b:30:1f:28:28:c2:53:2c:b7:68:c0:21:7f:18:7f: 34:f5:ad:ac:a3:8f:33:18:f7:7d:3d:b9:63:bd:44:24:1d:71: ed:18:ae:32:93:6a:6b:dc:83:f4:8a:a3:00:2e:81:6f:d4:1a: c8:6c:08:d7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ytoQaxkSH8//PJtewSObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3M2U4MzE0NmE0Mzg2OWY2NTc0NTFlNzZkMGEzMDVmMTVh N2FlZTkwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGFlYzYyZTZiODU0N2U1MTk1M2Y5ZGY2N2Y3ZGRiMDRjMWY5NGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy2A5mb4Sd3y/gdqW3P7ReTNg2W3 6Sq/qg64+XZvqZoxh/ygxPwL+R60owaB2A8HJPVkfaJ5Bs4IUdNkJK3Mal+msF+1 /35p1J+5t9yqrWgTvt6GPw3oSqiDUTHUZtSI3EY2/8r9JAUpQ1gok5JCztJDqkb5 ud2z9URRx9vJyj2WOcCRihBYZUV+PI68E5AMHu5/6Xo6yHm+ZukpD8YGV5QUvEqK b6/8LdY1AxDTIxCLxnBcNQl4yRviNtuC4OpuU3GZ7Q9jp2C8AZQt9AxpP+TxAuZb goxfQN6F2ZU11mykveVlHlR7xcrgMHT0qGzuxeJsz2xgKgZhFsoMhKythQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFISuxi5rhUflGVP532f33bBMH5TcMB8GA1UdIwQY MBaAFNc+gxRqQ4afZXRR520KMF8Vp67pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDkt ZDNiMjdhMDIyNWIwLzEvaEs3R0xtdUZSLVVaVV9uZlpfZmRzRXdmbE53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDktZDNiMjdhMDIyNWIw LzEvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUE2wAwQC uX2YMA0EAgACMAcDBQMqBriAMA0GCSqGSIb3DQEBCwUAA4IBAQCBzsQFXov1V68H nHEbRtx/75WKwVVkIs0VUuNz9ZrfNfiXufT/SglNQBg5cxvashL+Nhcc+0PlP4ic EgAQ5Nklk/dSCffyamC4HKfidp/D/6LyKYF0Qjr1LirQWn5KvRupLIhZe/o0i9F+ hvjXXWlt8WqUP1bPdaNXn7oFjnpjZmlgc2YPaKANIVp8uG9wM02iXc334B8gPCGQ cb58X1ZfmZuAwF15dMQ6XF448dJE3GAqXyzksi6xMYOvWyHxBvapgqTdgo/IcFw7 MB8oKMJTLLdowCF/GH809a2so48zGPd9PbljvUQkHXHtGK4yk2pr3IP0iqMALoFv 1BrIbAjX -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:09 2026 by rpki-client