This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/uuRczKZwsSuhCu172Grh6B9knxk.roa File: uuRczKZwsSuhCu172Grh6B9knxk.roa (raw, json) Hash identifier: P4PWs2fsYglkv3o2ELArEKxvKuDLCR2pbc5p9qH3He8= Subject key identifier: BA:E4:5C:CC:A6:70:B1:2B:A1:0A:ED:7B:D8:6A:E1:E8:1F:64:9F:19 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8DB3E622EC7F0222EA95A38697F71 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/uuRczKZwsSuhCu172Grh6B9knxk.roa Signing time: Thu 01 Jan 2026 18:19:02 +0000 ROA not before: Thu 01 Jan 2026 18:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12849 IP address blocks: 77.137.0.0/17 maxlen: 24 77.137.128.0/18 maxlen: 24 77.137.192.0/22 maxlen: 24 77.138.0.0/15 maxlen: 24 89.237.64.0/18 maxlen: 24 194.242.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:db:3e:62:2e:c7:f0:22:2e:a9:5a:38:69:7f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bae45ccca670b12ba10aed7bd86ae1e81f649f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:50:f3:ff:c3:4f:5b:60:2f:98:09:e9:09:66: 02:fa:49:76:ac:59:ea:e9:76:b4:74:8a:da:b3:64: 3d:a6:22:48:28:33:3e:51:46:c7:10:86:a1:ef:b3: 75:97:98:3e:bf:59:15:70:2e:fd:09:dd:21:0e:e4: 7c:b5:ab:ad:90:d5:90:51:61:bd:4b:79:80:d5:c9: 26:f6:32:d2:39:e8:17:e1:5f:3b:df:f2:3c:af:d6: b2:77:35:a0:af:f3:59:82:2c:1b:bd:83:a3:02:47: 87:e0:b8:3b:5a:76:bd:8d:53:1d:d9:74:29:78:b0: 4a:d2:18:a7:97:e5:a5:d2:c9:37:b4:0a:c2:3f:7d: 4e:12:ff:9e:fd:0f:b5:e2:ed:2c:d4:ed:d5:92:8d: 39:62:da:95:1d:f4:64:5f:0a:0a:c3:9b:20:b6:9f: fb:69:58:4e:0d:65:0c:f3:40:5c:4c:f5:a7:9a:44: 31:e3:24:6f:11:31:70:ce:cb:c1:72:16:f7:8d:a2: 17:02:8a:6f:8f:1d:89:3a:95:e2:f4:64:1c:f0:70: a0:f8:10:f1:47:54:ef:b7:6d:21:80:ec:99:bc:21: 06:f1:9c:f2:2e:50:86:3e:78:0a:90:b9:8c:20:c9: 49:76:07:e5:29:57:6e:29:11:34:77:70:90:9a:f4: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E4:5C:CC:A6:70:B1:2B:A1:0A:ED:7B:D8:6A:E1:E8:1F:64:9F:19 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/uuRczKZwsSuhCu172Grh6B9knxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.137.0.0-77.137.195.255 77.138.0.0/15 89.237.64.0/18 194.242.160.0/20 Signature Algorithm: sha256WithRSAEncryption a5:cd:38:f6:14:64:fb:79:a7:1b:89:bc:4c:f2:de:8a:f2:69: 2f:26:a0:57:30:37:d7:9d:74:80:82:cf:5e:85:8e:06:08:c1: 8a:31:90:68:d5:df:aa:ba:50:00:ab:54:65:0a:b6:bb:ed:a1: 9b:e5:dc:81:99:24:a9:97:11:a6:79:4f:45:fd:44:1f:6b:66: e6:be:1f:c3:63:00:a6:3b:fb:0e:83:1a:50:19:4c:86:14:4e: f7:6d:bb:2a:fd:2a:78:db:39:b0:74:9f:5a:c1:66:d1:2c:7b: 6e:7d:26:2a:ce:22:5e:24:d9:c4:de:8b:ca:7d:12:fb:4b:8e: a0:7b:69:d2:eb:e7:b8:90:ce:ee:3c:5d:fc:6f:6a:2d:5a:7f: 32:f5:54:77:b9:af:22:5e:01:dd:8e:76:4e:97:b5:3d:e2:5b: 5b:7e:1a:43:f8:c2:4b:ac:23:10:e9:17:1a:b1:98:6e:8d:da: c3:61:6a:59:dc:a4:e7:7d:6c:ce:06:81:5d:e8:e8:99:90:81: cf:73:f3:b9:3a:f3:50:de:19:53:55:c0:15:cf:f3:a2:0f:05: 3f:22:87:68:e6:2d:46:39:d1:d8:35:f3:8f:fe:97:d3:6d:48: 8e:6c:0d:a8:f9:0b:dd:89:a6:b1:a6:59:53:e5:68:17:11:8a: 3f:5e:1b:96 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6yNs+Yi7H8CIuqVo4aX9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWU0NWNjY2E2NzBiMTJiYTEwYWVkN2JkODZhZTFlODFmNjQ5ZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VDz/8NPW2AvmAnpCWYC+kl2rFnq 6Xa0dIras2Q9piJIKDM+UUbHEIah77N1l5g+v1kVcC79Cd0hDuR8tautkNWQUWG9 S3mA1ckm9jLSOegX4V873/I8r9aydzWgr/NZgiwbvYOjAkeH4Lg7Wna9jVMd2XQp eLBK0hinl+Wl0sk3tArCP31OEv+e/Q+14u0s1O3Vko05YtqVHfRkXwoKw5sgtp/7 aVhODWUM80BcTPWnmkQx4yRvETFwzsvBchb3jaIXAopvjx2JOpXi9GQc8HCg+BDx R1Tvt20hgOyZvCEG8ZzyLlCGPngKkLmMIMlJdgflKVduKRE0d3CQmvTEnQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLrkXMymcLEroQrte9hq4egfZJ8ZMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvdXVSY3pLWndzU3VoQ3UxNzJHcmg2QjlrbnhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeMAsDAwBNiQME Ak2JwAMDAU2KAwQGWe1AAwQEwvKgMA0GCSqGSIb3DQEBCwUAA4IBAQClzTj2FGT7 eacbibxM8t6K8mkvJqBXMDfXnXSAgs9ehY4GCMGKMZBo1d+qulAAq1RlCra77aGb 5dyBmSSplxGmeU9F/UQfa2bmvh/DYwCmO/sOgxpQGUyGFE73bbsq/Sp42zmwdJ9a wWbRLHtufSYqziJeJNnE3ovKfRL7S46ge2nS6+e4kM7uPF38b2otWn8y9VR3ua8i XgHdjnZOl7U94ltbfhpD+MJLrCMQ6RcasZhujdrDYWpZ3KTnfWzOBoFd6OiZkIHP c/O5OvNQ3hlTVcAVz/OiDwU/Iodo5i1GOdHYNfOP/pfTbUiObA2o+QvdiaaxpllT 5WgXEYo/XhuW -----END CERTIFICATE-----Generated at Mon Jan 26 00:38:43 2026 by rpki-client