This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/xHUkaCGlT6QuB7RyzdwG0QYj_Lo.roa File: xHUkaCGlT6QuB7RyzdwG0QYj_Lo.roa (raw, json) Hash identifier: 4007EqJZkMhf2bhN6qck9URjfrtwBxEOTcJ4ek2CBl8= Subject key identifier: C4:75:24:68:21:A5:4F:A4:2E:07:B4:72:CD:DC:06:D1:06:23:FC:BA Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC94DFF888573CF2277C70E0A363E6E Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/xHUkaCGlT6QuB7RyzdwG0QYj_Lo.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201476 IP address blocks: 77.104.194.0/24 maxlen: 24 77.104.210.0/24 maxlen: 24 77.104.216.0/24 maxlen: 24 77.104.223.0/24 maxlen: 24 77.104.240.0/24 maxlen: 24 77.104.245.0/24 maxlen: 24 94.138.116.0/22 maxlen: 22 94.138.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4d:ff:88:85:73:cf:22:77:c7:0e:0a:36:3e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c475246821a54fa42e07b472cddc06d10623fcba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:e8:1c:40:cc:e0:8e:49:9b:2d:10:3c:d5: d4:6b:7d:2a:d1:88:23:d7:74:8c:71:7b:83:b5:8e: 82:81:67:74:10:17:96:12:07:b6:1d:b0:5f:4e:86: dd:f4:26:1c:af:ab:ba:ab:84:5e:05:8d:dd:db:2f: 14:83:5e:70:26:2a:cc:d9:61:bf:60:b0:da:1f:3e: f9:48:15:52:c7:be:0d:02:73:6c:5e:7c:1f:df:8d: 38:ff:1d:ef:a5:85:f1:c8:b5:16:6a:95:73:54:11: 98:d2:23:f3:3e:c4:29:c6:a4:22:cd:19:bc:6d:8f: db:71:63:12:33:12:46:a3:99:f1:52:ab:d1:e9:32: 00:49:ab:5b:0f:db:1f:09:77:40:a0:f6:36:ae:e7: 59:7f:82:f6:e0:1c:d8:b4:e1:1c:22:71:08:6d:65: fc:42:51:96:43:29:cc:69:cf:91:f3:f2:0f:4b:9c: 48:4d:06:16:bc:3f:a5:25:5e:98:dd:85:7d:56:ca: 8c:bf:d6:d4:c8:9a:78:a9:7e:6e:32:00:32:df:74: 93:fe:9a:57:18:ae:ae:5d:cc:0b:56:f1:67:be:86: a2:38:ff:f6:16:20:cd:7a:34:dd:ea:31:59:68:9b: f7:3c:9d:31:7d:df:fc:18:95:cb:94:a7:7c:dd:92: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:75:24:68:21:A5:4F:A4:2E:07:B4:72:CD:DC:06:D1:06:23:FC:BA X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/xHUkaCGlT6QuB7RyzdwG0QYj_Lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.104.194.0/24 77.104.210.0/24 77.104.216.0/24 77.104.223.0/24 77.104.240.0/24 77.104.245.0/24 94.138.116.0-94.138.123.255 Signature Algorithm: sha256WithRSAEncryption bd:31:5c:6c:4e:86:c6:b0:79:e3:2e:0a:b1:fc:01:17:e6:d6: 49:77:e6:d0:d7:36:b2:09:06:0c:92:c6:ad:88:cb:e1:e2:73: a2:9e:10:6e:0e:ba:01:73:40:e4:6e:a7:38:30:33:91:16:e3: 5a:cf:a2:c4:1a:5d:4d:29:87:11:ca:2b:13:fb:79:6f:71:ea: 92:93:f3:ba:ab:d8:11:bb:3f:8f:83:38:e3:84:43:e9:f7:bc: 00:e2:73:24:09:b2:71:05:37:b7:92:64:ae:d8:6a:32:38:0f: c9:41:b8:7f:8e:0f:6f:4e:70:ef:f0:e0:fa:7a:e7:bb:d6:32: 47:d3:20:ce:39:34:ff:ee:40:d2:2d:87:64:83:02:df:e9:da: ff:80:20:da:33:b1:5c:e9:39:09:8e:88:ab:20:1c:c9:2b:64: 02:7d:a9:63:bc:25:10:b2:b4:4f:2f:f8:70:b4:9e:82:89:05: 69:4a:6a:f4:d2:5f:e0:7d:79:36:39:b6:68:19:30:8e:99:fe: ee:c5:d4:9b:aa:e0:5c:39:f0:e0:51:bf:d4:89:b6:35:4d:24: 6e:f0:b5:c6:6a:d7:67:3e:98:21:f8:30:28:b0:61:7c:48:39: f8:17:fc:5c:e2:72:03:53:5f:82:82:e1:7a:ce:cf:33:2c:99: 23:b7:b8:7e -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt6yU3/iIVzzyJ3xw4KNj5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDc1MjQ2ODIxYTU0ZmE0MmUwN2I0NzJjZGRjMDZkMTA2MjNmY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLLoHEDM4I5Jmy0QPNXUa30q0Ygj 13SMcXuDtY6CgWd0EBeWEge2HbBfTobd9CYcr6u6q4ReBY3d2y8Ug15wJirM2WG/ YLDaHz75SBVSx74NAnNsXnwf3404/x3vpYXxyLUWapVzVBGY0iPzPsQpxqQizRm8 bY/bcWMSMxJGo5nxUqvR6TIASatbD9sfCXdAoPY2rudZf4L24BzYtOEcInEIbWX8 QlGWQynMac+R8/IPS5xITQYWvD+lJV6Y3YV9VsqMv9bUyJp4qX5uMgAy33ST/ppX GK6uXcwLVvFnvoaiOP/2FiDNejTd6jFZaJv3PJ0xfd/8GJXLlKd83ZJHqwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFMR1JGghpU+kLge0cs3cBtEGI/y6MB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEveEhVa2FDR2xUNlF1QjdSeXpkd0cwUVlqX0xvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQATWjCAwQA TWjSAwQATWjYAwQATWjfAwQATWjwAwQATWj1MAwDBAJeinQDBAJeingwDQYJKoZI hvcNAQELBQADggEBAL0xXGxOhsaweeMuCrH8ARfm1kl35tDXNrIJBgySxq2Iy+Hi c6KeEG4OugFzQORupzgwM5EW41rPosQaXU0phxHKKxP7eW9x6pKT87qr2BG7P4+D OOOEQ+n3vADicyQJsnEFN7eSZK7YajI4D8lBuH+OD29OcO/w4Pp657vWMkfTIM45 NP/uQNIth2SDAt/p2v+AINozsVzpOQmOiKsgHMkrZAJ9qWO8JRCytE8v+HC0noKJ BWlKavTSX+B9eTY5tmgZMI6Z/u7F1Juq4Fw58OBRv9SJtjVNJG7wtcZq12c+mCH4 MCiwYXxIOfgX/FzicgNTX4KC4XrOzzMsmSO3uH4= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:39 2026 by rpki-client