This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa File: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (raw, json) Hash identifier: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8= Subject key identifier: C1:04:C4:F9:14:37:81:17:8B:B5:8C:5E:E1:06:3F:43:BC:A0:EF:96 Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e Certificate serial: 019B7F15418254B0AEC7D2F95AA8DC4B6412 Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa Signing time: Fri 02 Jan 2026 14:20:58 +0000 ROA not before: Fri 02 Jan 2026 14:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7155 IP address blocks: 185.77.116.0/24 maxlen: 24 185.77.117.0/24 maxlen: 24 185.77.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:41:82:54:b0:ae:c7:d2:f9:5a:a8:dc:4b:64:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e Validity Not Before: Jan 2 14:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c104c4f9143781178bb58c5ee1063f43bca0ef96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:79:05:60:54:bb:3d:22:5c:14:fa:2b:0d:4f: a5:99:90:c1:10:27:23:ce:e6:b8:37:9a:05:2f:e8: c0:0b:00:de:3b:83:2f:1b:15:59:51:07:8e:5c:bd: a9:e1:f4:97:b6:ac:81:7b:95:96:f7:7c:f0:fd:0a: cf:32:db:43:02:d1:ec:32:42:96:cd:d9:e3:06:d4: a7:bc:e9:87:d5:c0:76:6d:78:de:51:47:2d:91:d6: 71:ee:5c:4f:df:4d:5a:f5:17:5f:e2:d7:ac:b5:4f: bd:59:2d:c1:25:a1:67:5a:52:bb:32:6e:34:73:14: 99:e9:18:71:cc:a4:bd:bc:aa:9a:ff:38:e6:8b:fd: 93:fb:40:cf:cf:16:de:08:7f:bd:e9:8f:0a:a2:30: 72:5c:09:1d:6b:0b:61:1f:b4:41:f7:11:dc:8d:cc: 14:4f:b3:e3:19:1d:be:c5:67:80:4c:17:8a:fb:bc: 19:96:d5:b4:d7:dd:79:48:85:a6:2e:13:57:e4:fd: 1a:8b:92:73:aa:e8:7a:bb:a9:e3:b6:3e:a1:44:13: 42:10:93:75:fb:01:8c:2f:f0:e7:55:77:b1:ec:52: 9a:06:2b:a1:bd:5e:f0:01:41:3d:2c:41:c3:4f:1d: 74:a1:ce:18:ce:42:bc:b4:49:c8:b2:00:d3:c3:37: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:04:C4:F9:14:37:81:17:8B:B5:8C:5E:E1:06:3F:43:BC:A0:EF:96 X509v3 Authority Key Identifier: keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.116.0-185.77.118.255 Signature Algorithm: sha256WithRSAEncryption 28:a3:f0:04:87:22:9d:a2:74:2c:01:62:83:7d:91:6b:bc:4b: d4:a3:60:35:ec:62:20:0c:47:3d:1a:37:7d:17:80:76:01:31: 9e:32:f4:3b:f6:7f:a7:fe:4c:9d:bc:bb:61:bf:d2:56:cd:e1: e9:a7:69:59:40:42:f4:61:4c:83:80:63:ce:0c:53:5c:59:c0: 06:4c:26:7a:ef:8f:7f:1d:8d:bd:24:9f:4e:95:6b:a1:5a:2e: 29:46:4f:ac:79:a8:25:1f:3a:71:e1:f7:73:5f:6e:09:14:5b: d7:50:3a:e1:a8:97:a7:45:4d:09:be:3f:94:6d:e6:5b:2a:7f: 43:6f:c5:8f:b9:8f:d6:6e:c3:09:71:e6:bd:ee:9a:5c:04:03: c6:52:56:89:0f:86:8a:9e:4d:a6:d8:ae:34:d5:93:aa:67:e2: 07:18:20:b0:12:f7:11:56:44:26:d7:03:81:43:e5:41:51:38: 2d:97:7d:a2:74:4e:35:0b:02:31:b5:cd:99:32:dd:10:ee:a9: 59:bc:4c:9c:01:7b:3f:d2:0b:d5:8e:05:c0:d0:e9:73:6d:63: 7f:12:55:56:18:27:be:fd:72:77:7a:d5:78:e1:8f:d5:94:c6: 27:74:61:8b:e8:60:9f:bb:66:e1:45:42:41:12:56:56:b2:2c: 1d:d9:cf:6e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FUGCVLCux9L5WqjcS2QSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh Y2VjNmUwHhcNMjYwMTAyMTQyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTA0YzRmOTE0Mzc4MTE3OGJiNThjNWVlMTA2M2Y0M2JjYTBlZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13kFYFS7PSJcFPorDU+lmZDBECcj zua4N5oFL+jACwDeO4MvGxVZUQeOXL2p4fSXtqyBe5WW93zw/QrPMttDAtHsMkKW zdnjBtSnvOmH1cB2bXjeUUctkdZx7lxP301a9Rdf4testU+9WS3BJaFnWlK7Mm40 cxSZ6RhxzKS9vKqa/zjmi/2T+0DPzxbeCH+96Y8KojByXAkdawthH7RB9xHcjcwU T7PjGR2+xWeATBeK+7wZltW01915SIWmLhNX5P0ai5Jzquh6u6njtj6hRBNCEJN1 +wGML/DnVXex7FKaBiuhvV7wAUE9LEHDTx10oc4YzkK8tEnIsgDTwzca/QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMEExPkUN4EXi7WMXuEGP0O8oO+WMB8GA1UdIwQY MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt YmEzNzUxMTQwNGMyLzEvd1FURS1SUTNnUmVMdFl4ZTRRWV9RN3lnNzVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5TXQD BAC5TXYwDQYJKoZIhvcNAQELBQADggEBACij8ASHIp2idCwBYoN9kWu8S9SjYDXs YiAMRz0aN30XgHYBMZ4y9Dv2f6f+TJ28u2G/0lbN4emnaVlAQvRhTIOAY84MU1xZ wAZMJnrvj38djb0kn06Va6FaLilGT6x5qCUfOnHh93NfbgkUW9dQOuGol6dFTQm+ P5Rt5lsqf0NvxY+5j9Zuwwlx5r3umlwEA8ZSVokPhoqeTabYrjTVk6pn4gcYILAS 9xFWRCbXA4FD5UFROC2XfaJ0TjULAjG1zZky3RDuqVm8TJwBez/SC9WOBcDQ6XNt Y38SVVYYJ779cnd61Xjhj9WUxid0YYvoYJ+7ZuFFQkESVlayLB3Zz24= -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:06 2026 by rpki-client