This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/dnduiHSq4pdGGNCHwK557Q8gLl8.roa File: dnduiHSq4pdGGNCHwK557Q8gLl8.roa (raw, json) Hash identifier: T1l11nW1MeZuYb7w6SUvEAo6y4O9FtVPko26xk1q278= Subject key identifier: 76:77:6E:88:74:AA:E2:97:46:18:D0:87:C0:AE:79:ED:0F:20:2E:5F Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019B78353B52509C574EF80EA050C05CF23D Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/dnduiHSq4pdGGNCHwK557Q8gLl8.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202015 IP address blocks: 77.83.199.0/24 maxlen: 24 79.141.160.0/23 maxlen: 23 79.141.162.0/23 maxlen: 23 79.141.172.0/24 maxlen: 24 79.141.173.0/24 maxlen: 24 85.158.111.0/24 maxlen: 24 89.46.38.0/24 maxlen: 24 91.193.19.0/24 maxlen: 24 185.33.84.0/23 maxlen: 23 185.33.86.0/23 maxlen: 23 185.253.119.0/24 maxlen: 24 193.42.38.0/24 maxlen: 24 193.111.208.0/24 maxlen: 24 194.124.229.0/24 maxlen: 24 2a01:8640:4::/48 maxlen: 48 2a01:8640:5::/48 maxlen: 48 2a01:8640:b::/48 maxlen: 48 2a01:8640:e::/48 maxlen: 48 2a01:8640:1e::/48 maxlen: 48 2a01:8640:1f::/48 maxlen: 48 2a01:8640:22::/48 maxlen: 48 2a01:8640:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3b:52:50:9c:57:4e:f8:0e:a0:50:c0:5c:f2:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76776e8874aae2974618d087c0ae79ed0f202e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:1b:b7:58:84:4f:f6:51:2c:c0:73:73:fb: 8a:d6:82:94:63:62:b1:dd:99:fe:7a:07:ed:e5:c2: b0:c6:ff:8c:e0:b3:1a:45:b1:98:07:79:2f:72:a1: 2d:3e:91:be:88:a3:94:66:c7:cb:aa:c0:43:34:5a: 5b:02:2d:eb:24:3d:2f:84:26:47:50:5a:5e:1f:96: 9a:7a:4f:5f:de:e9:88:b6:91:07:fc:0d:5c:2d:b8: cb:a7:b1:c7:22:a2:16:75:87:ce:0e:27:95:68:06: 8a:b3:c8:4c:04:98:f4:4e:9f:3a:20:a2:8b:a3:04: b7:f9:c1:3d:05:bb:ab:68:4b:89:23:d4:94:c5:d1: d7:00:70:48:b3:b9:df:28:9f:27:08:6d:a9:51:af: de:72:47:8a:25:e7:0d:58:51:d3:6a:f0:03:75:0c: a1:3f:30:93:d2:d0:f0:97:3f:37:d5:48:4a:20:69: 3c:87:c6:e3:64:3e:90:b2:a6:2e:f3:aa:e8:84:a0: 1f:f8:56:df:70:f9:fb:ad:bc:08:24:7a:e1:4f:2e: 2d:6b:42:e8:d1:61:9f:a4:33:c0:6d:26:f0:2c:63: 81:1d:87:f4:11:aa:ec:3d:8d:85:42:d9:fc:c4:16: 04:e6:28:20:74:94:e1:d4:52:1e:2b:35:b7:84:5b: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:77:6E:88:74:AA:E2:97:46:18:D0:87:C0:AE:79:ED:0F:20:2E:5F X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/dnduiHSq4pdGGNCHwK557Q8gLl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.199.0/24 79.141.160.0/22 79.141.172.0/23 85.158.111.0/24 89.46.38.0/24 91.193.19.0/24 185.33.84.0/22 185.253.119.0/24 193.42.38.0/24 193.111.208.0/24 194.124.229.0/24 IPv6: 2a01:8640:4::/47 2a01:8640:b::/48 2a01:8640:e::/48 2a01:8640:1e::/47 2a01:8640:22::/47 Signature Algorithm: sha256WithRSAEncryption 57:1a:74:d7:7f:0a:bc:53:e8:22:fa:6c:b3:0d:51:92:2b:03: ef:41:83:cb:53:9e:d1:9a:63:6c:20:b0:11:da:5c:7b:80:37: 4b:2f:e7:a2:5b:b6:b9:91:2c:83:8d:50:27:84:21:de:0b:18: 1d:9b:d1:1a:58:1e:ac:8f:ed:cc:c1:09:64:c0:1f:db:72:05: ee:31:97:ad:ed:22:f7:ed:11:21:c0:6a:58:3b:31:25:a8:78: 7d:b9:b8:e6:f2:6e:41:fa:c0:2a:d0:62:2e:ff:6a:d3:cd:74: cb:43:9d:7d:85:83:e1:a1:fc:a1:ff:b6:0a:9e:2e:89:57:90: 65:42:84:ce:de:41:37:83:20:d4:b1:3f:90:6b:71:81:94:94: 92:e4:66:52:ec:da:a1:16:16:42:8f:e3:14:52:6d:11:97:e5: f7:c5:be:d2:d0:66:18:fa:03:e3:18:81:76:29:a6:bd:10:ff: 36:95:40:1c:28:ce:1e:1b:e1:ee:ec:20:d8:a1:44:ef:ca:8e: c7:af:a5:e9:f2:0f:9f:41:fe:03:b0:8d:f5:0c:40:53:9e:7e: 00:ef:0c:ce:18:b6:b4:ab:98:25:c5:e2:01:86:22:ab:80:9f: fd:ad:54:de:ab:76:ea:41:34:42:07:c3:fe:ec:85:1d:e3:32: 21:3d:d1:fa -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZt4NTtSUJxXTvgOoFDAXPI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Njc3NmU4ODc0YWFlMjk3NDYxOGQwODdjMGFlNzllZDBmMjAyZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Qbt1iET/ZRLMBzc/uK1oKUY2Kx 3Zn+egft5cKwxv+M4LMaRbGYB3kvcqEtPpG+iKOUZsfLqsBDNFpbAi3rJD0vhCZH UFpeH5aaek9f3umItpEH/A1cLbjLp7HHIqIWdYfODieVaAaKs8hMBJj0Tp86IKKL owS3+cE9BburaEuJI9SUxdHXAHBIs7nfKJ8nCG2pUa/eckeKJecNWFHTavADdQyh PzCT0tDwlz831UhKIGk8h8bjZD6QsqYu86rohKAf+FbfcPn7rbwIJHrhTy4ta0Lo 0WGfpDPAbSbwLGOBHYf0EarsPY2FQtn8xBYE5iggdJTh1FIeKzW3hFtNLQIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFHZ3boh0quKXRhjQh8Cuee0PIC5fMB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvZG5kdWlIU3E0cGRHR05DSHdLNTU3UThnTGw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MEgEAgABMEIDBABNU8cD BAJPjaADBAFPjawDBABVnm8DBABZLiYDBABbwRMDBAK5IVQDBAC5/XcDBADBKiYD BADBb9ADBADCfOUwMwQCAAIwLQMHASoBhkAABAMHACoBhkAACwMHACoBhkAADgMH ASoBhkAAHgMHASoBhkAAIjANBgkqhkiG9w0BAQsFAAOCAQEAVxp0138KvFPoIvps sw1RkisD70GDy1Oe0ZpjbCCwEdpce4A3Sy/nolu2uZEsg41QJ4Qh3gsYHZvRGlge rI/tzMEJZMAf23IF7jGXre0i9+0RIcBqWDsxJah4fbm45vJuQfrAKtBiLv9q0810 y0OdfYWD4aH8of+2Cp4uiVeQZUKEzt5BN4Mg1LE/kGtxgZSUkuRmUuzaoRYWQo/j FFJtEZfl98W+0tBmGPoD4xiBdimmvRD/NpVAHCjOHhvh7uwg2KFE78qOx6+l6fIP n0H+A7CN9QxAU55+AO8Mzhi2tKuYJcXiAYYiq4Cf/a1U3qt26kE0QgfD/uyFHeMy IT3R+g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:34 2026 by rpki-client