This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/xmOzcr6lxPTRPADy6CpR95O7sF8.roa File: xmOzcr6lxPTRPADy6CpR95O7sF8.roa (raw, json) Hash identifier: XkTf2vdpptILRuqJJs0WI2X+ppey6cgWY94/Zljo9tQ= Subject key identifier: C6:63:B3:72:BE:A5:C4:F4:D1:3C:00:F2:E8:2A:51:F7:93:BB:B0:5F Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8 Certificate serial: 019B7911026037E242F63B88E6CFFF8BA5B0 Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/xmOzcr6lxPTRPADy6CpR95O7sF8.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200030 IP address blocks: 77.241.164.0/22 maxlen: 22 77.241.168.0/22 maxlen: 22 77.241.172.0/22 maxlen: 22 92.63.112.0/22 maxlen: 22 92.63.116.0/22 maxlen: 22 92.63.120.0/22 maxlen: 22 92.63.124.0/24 maxlen: 24 92.63.125.0/24 maxlen: 24 92.63.126.0/24 maxlen: 24 92.63.127.0/24 maxlen: 24 185.49.156.0/22 maxlen: 22 2a01:a360::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:02:60:37:e2:42:f6:3b:88:e6:cf:ff:8b:a5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762239893807eb09846e829727d71a92e963a7c8 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c663b372bea5c4f4d13c00f2e82a51f793bbb05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:66:df:d9:48:1f:52:e5:4d:e8:2e:5f:08:ea: 4d:97:e0:bf:be:07:9b:cf:2b:72:b3:6c:38:cd:1f: 39:95:f5:7f:e2:3d:fe:36:ce:2b:55:bd:be:70:cf: 21:49:be:8f:c2:7d:3b:54:51:bf:ac:cf:e4:40:e4: 77:45:ce:a0:28:b1:80:3c:f9:2a:1a:41:72:de:ef: 6d:82:4a:d3:8d:28:28:47:11:5d:a5:65:81:36:79: 5a:98:5b:34:b9:34:ed:84:e9:32:72:78:00:94:b1: a8:1a:ea:ec:e0:a8:91:0a:90:ed:7f:49:b5:bc:da: a6:35:99:b7:97:f6:8e:31:7b:d5:e7:a3:52:46:a9: fe:9e:3c:d4:b6:77:8c:93:b2:d6:74:d7:b2:47:33: c4:b7:80:9a:c5:a4:4c:69:52:7b:a0:df:66:c0:c0: 5b:d5:29:54:f5:82:45:75:fe:20:b0:b3:22:73:9a: ae:94:67:44:fe:c5:ae:89:b7:49:9c:0c:21:e6:42: 75:da:39:e1:e1:3e:c2:d2:bd:6e:58:4f:97:ba:d0: a1:ac:c4:fe:ab:d9:35:96:11:57:bd:5b:79:c4:59: a4:d3:e7:80:b8:92:6c:f6:b1:5f:c3:43:3b:5c:12: fc:ef:8a:bf:12:52:c1:c6:40:f6:8e:8d:3f:66:3f: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:63:B3:72:BE:A5:C4:F4:D1:3C:00:F2:E8:2A:51:F7:93:BB:B0:5F X509v3 Authority Key Identifier: keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/xmOzcr6lxPTRPADy6CpR95O7sF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.241.164.0-77.241.175.255 92.63.112.0/20 185.49.156.0/22 IPv6: 2a01:a360::/32 Signature Algorithm: sha256WithRSAEncryption 6f:9f:5b:87:cd:81:8a:52:c7:6d:95:ab:ba:a6:13:35:05:b3: 61:4f:19:37:90:0e:a3:75:53:82:2b:e1:92:a3:98:fe:4d:5e: 49:68:0a:7b:12:5d:0e:bc:7b:6a:fe:a3:3b:80:71:da:ca:3d: 2f:ae:01:74:52:a7:4e:d6:96:cc:f3:0c:da:e9:c0:75:68:fe: 04:81:c5:db:73:39:75:6c:57:08:31:d3:35:8a:aa:15:b6:97: 83:75:ae:b3:29:dc:ad:45:b2:b6:ed:c6:11:82:1c:b0:9b:69: f2:a9:9b:ab:84:6e:40:0d:b0:d4:d9:30:96:6f:2a:f9:d4:24: 9c:94:0b:9f:34:d4:e5:6b:81:a4:ac:30:7d:07:16:b5:94:d6: 06:cd:27:95:4c:81:a3:76:1b:42:21:21:d5:2b:3e:8f:ed:11: a0:ba:79:0a:40:be:d3:f5:66:4e:e5:1d:2f:c3:06:f2:f7:e6: 82:79:36:74:1f:f2:1e:f0:9d:3a:08:d1:f0:9c:fd:a7:c4:73: 54:ae:da:b2:a9:88:8f:46:66:1f:0d:8c:c6:e7:58:f3:a0:bf: 1c:f8:cc:95:da:ac:a8:d9:54:7c:ec:f0:1d:4f:59:d3:91:bf: 39:8e:77:93:54:80:49:96:55:4b:88:29:07:0a:8e:90:4b:91: 23:90:c1:59 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt5EQJgN+JC9juI5s//i6WwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjIzOTg5MzgwN2ViMDk4NDZlODI5NzI3ZDcxYTkyZTk2 M2E3YzgwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjYzYjM3MmJlYTVjNGY0ZDEzYzAwZjJlODJhNTFmNzkzYmJiMDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmbf2UgfUuVN6C5fCOpNl+C/vgeb zytys2w4zR85lfV/4j3+Ns4rVb2+cM8hSb6Pwn07VFG/rM/kQOR3Rc6gKLGAPPkq GkFy3u9tgkrTjSgoRxFdpWWBNnlamFs0uTTthOkycngAlLGoGurs4KiRCpDtf0m1 vNqmNZm3l/aOMXvV56NSRqn+njzUtneMk7LWdNeyRzPEt4CaxaRMaVJ7oN9mwMBb 1SlU9YJFdf4gsLMic5qulGdE/sWuibdJnAwh5kJ12jnh4T7C0r1uWE+XutChrMT+ q9k1lhFXvVt5xFmk0+eAuJJs9rFfw0M7XBL874q/ElLBxkD2jo0/Zj+jvQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFMZjs3K+pcT00TwA8ugqUfeTu7BfMB8GA1UdIwQY MBaAFHYiOYk4B+sJhG6ClyfXGpLpY6fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlJNWlUZ0g2d21FYm9LWEo5Y2FrdWxqcDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NGMyY2UtOWY3Yi00Y2E3LWFiYmMt Y2E2N2ZkNjRkMzRjLzEveG1PemNyNmx4UFRSUEFEeTZDcFI5NU83c0Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC85NGMyY2UtOWY3Yi00Y2E3LWFiYmMtY2E2N2ZkNjRkMzRj LzEvZGlJNWlUZ0g2d21FYm9LWEo5Y2FrdWxqcDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAJN8aQD BARN8aADBARcP3ADBAK5MZwwDQQCAAIwBwMFACoBo2AwDQYJKoZIhvcNAQELBQAD ggEBAG+fW4fNgYpSx22Vq7qmEzUFs2FPGTeQDqN1U4Ir4ZKjmP5NXkloCnsSXQ68 e2r+ozuAcdrKPS+uAXRSp07WlszzDNrpwHVo/gSBxdtzOXVsVwgx0zWKqhW2l4N1 rrMp3K1FsrbtxhGCHLCbafKpm6uEbkANsNTZMJZvKvnUJJyUC5801OVrgaSsMH0H FrWU1gbNJ5VMgaN2G0IhIdUrPo/tEaC6eQpAvtP1Zk7lHS/DBvL35oJ5NnQf8h7w nToI0fCc/afEc1Su2rKpiI9GZh8NjMbnWPOgvxz4zJXarKjZVHzs8B1PWdORvzmO d5NUgEmWVUuIKQcKjpBLkSOQwVk= -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:41 2026 by rpki-client