This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/jXdXWkgPJAckS1tbfXfBM3oOl2g.roa File: jXdXWkgPJAckS1tbfXfBM3oOl2g.roa (raw, json) Hash identifier: R2Qr1JCatkYhkl5XRuMbtN2cCVq0Xmr5HkM/fW29yJ0= Subject key identifier: 8D:77:57:5A:48:0F:24:07:24:4B:5B:5B:7D:77:C1:33:7A:0E:97:68 Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9 Certificate serial: 019B7DCADAAEBEE6A16646BFA9D6221A1939 Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/jXdXWkgPJAckS1tbfXfBM3oOl2g.roa Signing time: Fri 02 Jan 2026 08:20:04 +0000 ROA not before: Fri 02 Jan 2026 08:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24634 IP address blocks: 80.77.176.0/20 maxlen: 24 185.125.152.0/22 maxlen: 24 2a06:b880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:da:ae:be:e6:a1:66:46:bf:a9:d6:22:1a:19:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9 Validity Not Before: Jan 2 08:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d77575a480f2407244b5b5b7d77c1337a0e9768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:09:bc:f0:e1:13:51:e5:2c:68:c8:df:27: fe:13:38:96:31:4e:5c:cf:ec:6f:9f:dc:2e:bf:e4: 9d:a0:07:84:75:4a:40:d2:f7:71:59:2c:77:0d:40: fe:3d:6d:94:c2:a6:cc:f1:1b:bb:30:81:45:f9:93: ea:02:7c:b6:41:66:1b:f0:28:28:10:1f:db:e3:b4: 7c:16:e4:73:76:57:8d:90:60:f7:92:eb:e1:a5:b2: 00:94:e4:52:2d:e3:1a:f1:d4:3e:12:c1:d9:fe:74: 12:40:93:60:0e:7b:b1:f7:37:9e:37:78:e1:d0:d2: 4e:f6:d1:87:5f:9f:e7:c4:4e:fe:b0:62:48:c2:dd: 96:a6:87:9f:4a:50:f4:9b:ed:eb:68:79:7a:f7:ab: 97:ad:4d:ce:f1:eb:8d:4c:f4:cf:a6:69:57:13:d1: 6e:e5:bb:ad:94:b3:fc:ea:59:1f:5c:92:80:2d:15: a9:17:b2:ae:65:fb:e6:9c:9f:ca:df:a7:4d:9c:ed: d7:eb:35:0c:9f:6b:0f:c9:ee:ce:73:68:ca:c6:37: 33:ae:7f:6d:f6:de:2d:d0:0a:df:52:60:b1:87:0c: e2:06:34:29:b8:ff:9a:bf:dd:b9:39:fc:87:92:8b: 15:67:4b:e1:fe:50:22:a3:0d:b7:8a:09:11:30:51: 12:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:77:57:5A:48:0F:24:07:24:4B:5B:5B:7D:77:C1:33:7A:0E:97:68 X509v3 Authority Key Identifier: keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/jXdXWkgPJAckS1tbfXfBM3oOl2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.77.176.0/20 185.125.152.0/22 IPv6: 2a06:b880::/29 Signature Algorithm: sha256WithRSAEncryption 36:62:41:62:2c:f5:1f:a2:0f:cb:5b:ab:f2:70:0a:8c:df:03: f5:b8:0b:6b:ae:99:29:1f:cb:e0:0d:43:a4:21:43:e5:31:6d: 23:d6:02:1d:bb:5e:6b:a5:77:28:2b:26:34:b0:93:d7:42:3c: 95:01:3b:53:e3:69:d8:e6:97:f6:60:72:9c:12:fa:eb:6f:c1: 94:63:ed:83:30:36:26:9b:95:91:8e:75:f7:c0:c8:32:aa:47: 59:1c:6b:92:c6:c1:fc:1f:1f:41:35:c2:d3:24:9d:5b:d7:f2: e3:31:26:45:2f:20:85:1b:6e:86:c5:44:b6:34:b6:36:ae:55: fa:96:c9:f0:ac:13:a9:94:c2:ae:e1:bb:e1:e6:df:e5:68:3f: 06:70:96:bb:ac:69:a5:e2:0d:88:55:7a:07:9e:57:bc:74:60: e3:8f:05:bd:dc:03:69:5b:1b:08:b3:84:cb:77:39:30:66:5f: 48:4e:39:5f:fe:09:18:35:0c:fc:49:fe:c7:d4:02:45:da:05: a7:53:75:99:a3:d3:55:42:fc:4c:a7:0a:e7:cf:17:07:86:c3: d1:2b:40:85:a7:cc:fe:76:a2:a3:78:88:15:be:ad:c6:8f:98: f1:a1:da:8d:27:79:1d:73:0b:49:89:0d:2f:f8:26:cf:36:76: fb:db:cf:6c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9ytquvuahZka/qdYiGhk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3M2U4MzE0NmE0Mzg2OWY2NTc0NTFlNzZkMGEzMDVmMTVh N2FlZTkwHhcNMjYwMTAyMDgyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDc3NTc1YTQ4MGYyNDA3MjQ0YjViNWI3ZDc3YzEzMzdhMGU5NzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC0JvPDhE1HlLGjI3yf+EziWMU5c z+xvn9wuv+SdoAeEdUpA0vdxWSx3DUD+PW2UwqbM8Ru7MIFF+ZPqAny2QWYb8Cgo EB/b47R8FuRzdleNkGD3kuvhpbIAlORSLeMa8dQ+EsHZ/nQSQJNgDnux9zeeN3jh 0NJO9tGHX5/nxE7+sGJIwt2WpoefSlD0m+3raHl696uXrU3O8euNTPTPpmlXE9Fu 5butlLP86lkfXJKALRWpF7KuZfvmnJ/K36dNnO3X6zUMn2sPye7Oc2jKxjczrn9t 9t4t0ArfUmCxhwziBjQpuP+av925OfyHkosVZ0vh/lAiow23igkRMFESnQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFI13V1pIDyQHJEtbW313wTN6DpdoMB8GA1UdIwQY MBaAFNc+gxRqQ4afZXRR520KMF8Vp67pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDkt ZDNiMjdhMDIyNWIwLzEvalhkWFdrZ1BKQWNrUzF0YmZYZkJNM29PbDJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8wZjY0NzAtZTdmNC00MTUxLThhZDktZDNiMjdhMDIyNWIw LzEvMXo2REZHcERocDlsZEZIbmJRb3dYeFducnVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUE2wAwQC uX2YMA0EAgACMAcDBQMqBriAMA0GCSqGSIb3DQEBCwUAA4IBAQA2YkFiLPUfog/L W6vycAqM3wP1uAtrrpkpH8vgDUOkIUPlMW0j1gIdu15rpXcoKyY0sJPXQjyVATtT 42nY5pf2YHKcEvrrb8GUY+2DMDYmm5WRjnX3wMgyqkdZHGuSxsH8Hx9BNcLTJJ1b 1/LjMSZFLyCFG26GxUS2NLY2rlX6lsnwrBOplMKu4bvh5t/laD8GcJa7rGml4g2I VXoHnle8dGDjjwW93ANpWxsIs4TLdzkwZl9ITjlf/gkYNQz8Sf7H1AJF2gWnU3WZ o9NVQvxMpwrnzxcHhsPRK0CFp8z+dqKjeIgVvq3Gj5jxodqNJ3kdcwtJiQ0v+CbP Nnb7289s -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:38 2026 by rpki-client