This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/OBJUqWKdq6kiQbp0gg2le_lxwc8.roa File: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (raw, json) Hash identifier: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas= Subject key identifier: 38:12:54:A9:62:9D:AB:A9:22:41:BA:74:82:0D:A5:7B:F9:71:C1:CF Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4 Certificate serial: 019B78A3167F147122027B7390028C85E04C Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/OBJUqWKdq6kiQbp0gg2le_lxwc8.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202423 IP address blocks: 77.220.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:16:7f:14:71:22:02:7b:73:90:02:8c:85:e0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4 Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=381254a9629daba92241ba74820da57bf971c1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:07:11:63:f4:fb:87:5a:ad:06:97:01:73:b2: 18:84:4d:f6:b7:91:1f:4d:cf:f3:31:6e:35:07:36: 43:5e:2a:fc:54:8e:fa:cd:5e:ac:b5:89:0c:95:0b: b2:39:e1:56:9b:02:5b:7d:c9:7b:c7:e0:63:42:71: 86:63:37:6b:ab:36:1d:ad:e0:a8:81:db:48:9c:2c: 26:cf:46:93:39:26:a5:9b:0b:f0:a1:c6:64:c6:8a: 8e:5d:c8:a8:5b:40:ea:48:e9:9e:90:af:91:f0:ac: a7:9a:53:b4:61:31:84:ed:3b:bd:d4:47:2e:5c:9e: 88:6e:a8:29:df:96:89:bf:4d:39:16:46:79:1a:40: 0b:ef:5d:b4:2f:4b:14:c0:8a:2a:26:5d:6f:bc:a6: 07:79:18:a7:3f:5d:81:4a:56:4f:4a:5a:93:ac:3d: a1:4a:31:6e:c3:a6:57:ac:3d:55:b0:71:ed:12:7a: 18:6f:49:ad:a2:24:aa:27:e5:27:79:59:d8:7f:50: 4b:72:2a:e1:25:00:5e:37:cf:41:4c:40:f2:60:eb: 84:3e:18:9b:2b:dc:0e:3c:7b:9b:0f:33:0a:20:81: 41:94:d9:eb:61:63:a2:f8:f4:11:7b:3c:7c:d7:05: 7b:0f:7e:ce:dc:6d:66:9c:27:56:e2:e0:1d:07:08: 8f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:12:54:A9:62:9D:AB:A9:22:41:BA:74:82:0D:A5:7B:F9:71:C1:CF X509v3 Authority Key Identifier: keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/OBJUqWKdq6kiQbp0gg2le_lxwc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.220.205.0/24 Signature Algorithm: sha256WithRSAEncryption ce:f2:75:4f:16:42:9b:d4:ac:27:96:31:67:68:76:e0:8e:0c: e2:0b:60:a3:cf:9e:e6:57:05:39:10:5e:79:79:ab:a3:e3:cc: e7:06:87:eb:07:6b:d6:5b:e7:8d:5e:7e:6c:70:a8:e0:77:d4: 6b:4f:f0:02:14:d7:4a:39:94:0c:1e:bb:bb:50:ff:bf:cd:5b: 01:8a:22:01:0c:a0:37:0f:fb:b9:ae:12:de:97:bf:5b:e3:0c: aa:0a:ee:7e:0b:20:42:2a:6c:7a:31:3a:9a:72:da:d3:98:f1: d1:5d:8d:e7:0c:39:42:8f:cc:f8:03:3b:37:5e:b4:ef:09:87: 08:60:60:97:4f:92:b2:dd:9b:0e:0d:22:9d:dc:f4:14:92:fa: e5:75:c9:97:2f:2b:cb:ea:ac:c7:3f:8e:39:ea:5f:b8:e2:2f: a3:f0:96:c2:22:8d:49:7d:29:c2:5a:22:67:15:f6:60:e1:23: 6b:dc:43:d6:e9:bd:46:b7:ee:e2:b6:29:ab:2c:f7:dd:66:60: b6:09:96:ce:9a:8c:09:16:4f:87:db:c7:ef:d2:0d:f9:d8:67: 29:d2:99:fe:7c:3e:f5:1f:de:bc:ae:1a:62:c3:ef:13:6c:fa: b4:98:cd:2e:a8:60:e8:c8:d0:20:fd:2a:a4:5e:de:bd:4e:e2: 41:b3:00:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxZ/FHEiAntzkAKMheBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3 ZGU1YzQwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODEyNTRhOTYyOWRhYmE5MjI0MWJhNzQ4MjBkYTU3YmY5NzFjMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QcRY/T7h1qtBpcBc7IYhE32t5Ef Tc/zMW41BzZDXir8VI76zV6stYkMlQuyOeFWmwJbfcl7x+BjQnGGYzdrqzYdreCo gdtInCwmz0aTOSalmwvwocZkxoqOXcioW0DqSOmekK+R8KynmlO0YTGE7Tu91Ecu XJ6Ibqgp35aJv005FkZ5GkAL7120L0sUwIoqJl1vvKYHeRinP12BSlZPSlqTrD2h SjFuw6ZXrD1VsHHtEnoYb0mtoiSqJ+UneVnYf1BLcirhJQBeN89BTEDyYOuEPhib K9wOPHubDzMKIIFBlNnrYWOi+PQRezx81wV7D37O3G1mnCdW4uAdBwiPbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDgSVKlinaupIkG6dIINpXv5ccHPMB8GA1UdIwQY MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt NjJiMWRhMjYxMzI5LzEvT0JKVXFXS2RxNmtpUWJwMGdnMmxlX2x4d2M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5 LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATdzNMA0G CSqGSIb3DQEBCwUAA4IBAQDO8nVPFkKb1KwnljFnaHbgjgziC2Cjz57mVwU5EF55 eauj48znBofrB2vWW+eNXn5scKjgd9RrT/ACFNdKOZQMHru7UP+/zVsBiiIBDKA3 D/u5rhLel79b4wyqCu5+CyBCKmx6MTqactrTmPHRXY3nDDlCj8z4Azs3XrTvCYcI YGCXT5Ky3ZsODSKd3PQUkvrldcmXLyvL6qzHP4456l+44i+j8JbCIo1JfSnCWiJn FfZg4SNr3EPW6b1Gt+7itimrLPfdZmC2CZbOmowJFk+H28fv0g352Gcp0pn+fD71 H968rhpiw+8TbPq0mM0uqGDoyNAg/SqkXt69TuJBswBA -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:07 2026 by rpki-client