This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/oxOUpQ0FwseclzcVvtlkSLjr_aM.roa File: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (raw, json) Hash identifier: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA= Subject key identifier: A3:13:94:A5:0D:05:C2:C7:9C:97:37:15:BE:D9:64:48:B8:EB:FD:A3 Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789 Certificate serial: 019B7BA522BECAE4D5884B3C7A00D54E4D69 Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/oxOUpQ0FwseclzcVvtlkSLjr_aM.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42396 IP address blocks: 77.109.0.0/23 maxlen: 23 77.109.1.0/24 maxlen: 24 77.109.4.0/24 maxlen: 24 77.109.5.0/24 maxlen: 24 77.109.6.0/24 maxlen: 24 77.109.7.0/24 maxlen: 24 77.109.8.0/24 maxlen: 24 77.109.9.0/24 maxlen: 24 77.109.12.0/22 maxlen: 22 77.109.12.0/24 maxlen: 24 77.109.16.0/23 maxlen: 23 77.109.16.0/24 maxlen: 24 77.109.17.0/24 maxlen: 24 77.109.18.0/24 maxlen: 24 77.109.20.0/24 maxlen: 24 77.109.21.0/24 maxlen: 24 77.109.22.0/24 maxlen: 24 77.109.23.0/24 maxlen: 24 77.109.24.0/21 maxlen: 21 77.109.24.0/24 maxlen: 24 77.109.26.0/23 maxlen: 23 77.109.29.0/24 maxlen: 24 77.109.30.0/24 maxlen: 24 77.109.31.0/24 maxlen: 24 77.109.32.0/23 maxlen: 23 77.109.32.0/24 maxlen: 24 77.109.33.0/24 maxlen: 24 77.109.34.0/23 maxlen: 23 77.109.36.0/23 maxlen: 23 77.109.38.0/23 maxlen: 23 77.109.40.0/21 maxlen: 21 77.109.48.0/22 maxlen: 22 77.109.52.0/22 maxlen: 22 77.109.57.0/24 maxlen: 24 77.109.60.0/24 maxlen: 24 77.109.61.0/24 maxlen: 24 77.109.62.0/24 maxlen: 24 94.248.0.0/20 maxlen: 20 94.248.0.0/21 maxlen: 21 94.248.8.0/22 maxlen: 22 94.248.12.0/22 maxlen: 22 94.248.16.0/23 maxlen: 23 94.248.18.0/23 maxlen: 23 94.248.20.0/23 maxlen: 23 94.248.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:22:be:ca:e4:d5:88:4b:3c:7a:00:d5:4e:4d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a31394a50d05c2c79c973715bed96448b8ebfda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:80:66:d6:f8:40:dc:1b:ae:b8:7a:89:9a: 5d:32:61:90:f6:2b:86:9a:84:d7:1c:18:44:55:0b: 0f:af:e7:fc:3a:3a:cc:82:87:0a:e0:56:6c:6a:68: 7e:11:d9:00:cc:96:4b:1a:ae:16:ad:29:ad:23:36: 52:0e:6d:a2:4c:20:2e:3d:d3:fb:05:7b:fb:19:23: e8:8c:f4:46:b6:7e:2b:5a:a5:4f:17:75:2b:b2:18: 9b:b3:de:05:d8:ca:0c:4a:02:b7:dc:0d:47:e4:4a: cc:d4:5e:2e:96:b2:03:f3:d2:74:9d:4e:d6:86:54: 20:53:c2:8c:95:9c:e2:0e:b7:67:06:a1:07:9f:28: 6e:86:31:6a:a5:47:fd:a4:3b:ad:d9:0c:bc:65:23: e2:a7:42:f6:73:01:b7:75:00:c1:ce:99:bc:0b:ac: 2d:e8:52:e6:fc:1a:ad:07:e6:0a:de:20:3b:da:d2: 65:20:03:33:b9:5a:84:9e:18:5d:d2:f3:9e:7d:29: 79:38:92:0c:14:95:0e:2e:24:c0:bc:28:d7:6b:36: 25:36:a9:07:fd:ec:19:2e:b9:33:9e:52:7d:b6:47: ab:e0:a2:cb:c1:b5:bb:75:08:d1:43:65:e8:15:e9: d0:73:a2:03:4b:d3:f0:6d:6e:a4:74:06:00:6b:4a: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:13:94:A5:0D:05:C2:C7:9C:97:37:15:BE:D9:64:48:B8:EB:FD:A3 X509v3 Authority Key Identifier: keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/oxOUpQ0FwseclzcVvtlkSLjr_aM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.109.0.0/23 77.109.4.0-77.109.9.255 77.109.12.0-77.109.18.255 77.109.20.0-77.109.55.255 77.109.57.0/24 77.109.60.0-77.109.62.255 94.248.0.0-94.248.23.255 Signature Algorithm: sha256WithRSAEncryption 8c:19:d1:20:40:c8:06:a4:96:ea:90:5e:e0:a8:c5:7e:98:24: f1:9c:b4:d0:90:4d:24:b7:01:3e:b4:b4:b8:1a:6d:b2:7a:ae: 13:74:62:17:a7:1a:57:d4:a4:1e:1d:9b:86:72:6b:e0:61:bc: fb:8d:19:56:bb:86:fd:54:61:ba:63:0c:60:ef:bf:e1:af:12: 5d:db:75:59:4b:7c:04:e3:d5:b7:43:7b:ca:d5:96:0a:07:c1: 94:cb:f7:23:a5:1c:97:41:c2:58:e4:a7:7f:7e:24:f1:74:0d: 53:d1:fc:09:fb:d8:3d:7e:2b:d3:91:dc:43:e6:f5:26:1f:21: 26:36:ef:0b:a0:cd:29:56:9b:2a:47:b4:49:07:76:a6:f9:e4: 6e:5b:13:5f:fb:41:a5:03:1f:f1:4c:3c:d2:63:99:e3:3e:0b: 94:d1:be:af:83:26:9d:d5:31:94:a4:4d:d3:a7:da:b6:58:e0: 44:14:91:5d:a9:51:e6:21:a4:1a:92:a6:5a:1b:9c:22:c8:09: 25:c2:54:e1:43:fa:56:63:29:a7:58:56:35:01:aa:a4:05:ea: 22:69:8f:9f:4b:d4:d7:ef:ff:33:07:f9:38:4c:8e:05:a8:0e: 55:a3:86:a5:0f:db:09:f7:c7:89:58:64:cc:d4:ae:d8:52:46: 57:e5:07:d9 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt7pSK+yuTViEs8egDVTk1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMzk2NDlmYWE4ZjlkZTNkYWU5MWJlNzk5YTI3ZTJjYTY2 Mjg3ODkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzEzOTRhNTBkMDVjMmM3OWM5NzM3MTViZWQ5NjQ0OGI4ZWJmZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyOAZtb4QNwbrrh6iZpdMmGQ9iuG moTXHBhEVQsPr+f8OjrMgocK4FZsamh+EdkAzJZLGq4WrSmtIzZSDm2iTCAuPdP7 BXv7GSPojPRGtn4rWqVPF3Urshibs94F2MoMSgK33A1H5ErM1F4ulrID89J0nU7W hlQgU8KMlZziDrdnBqEHnyhuhjFqpUf9pDut2Qy8ZSPip0L2cwG3dQDBzpm8C6wt 6FLm/BqtB+YK3iA72tJlIAMzuVqEnhhd0vOefSl5OJIMFJUOLiTAvCjXazYlNqkH /ewZLrkznlJ9tker4KLLwbW7dQjRQ2XoFenQc6IDS9PwbW6kdAYAa0rsjwIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFKMTlKUNBcLHnJc3Fb7ZZEi46/2jMB8GA1UdIwQY MBaAFOA5ZJ+qj53j2ukb55mifiymYoeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgt ZDc2NzhhMDc4N2QxLzEvb3hPVXBRMEZ3c2VjbHpjVnZ0bGtTTGpyX2FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgtZDc2NzhhMDc4N2Qx LzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAATBRAwQBTW0AMAwD BAJNbQQDBAFNbQgwDAMEAk1tDAMEAE1tEjAMAwQCTW0UAwQDTW0wAwQATW05MAwD BAJNbTwDBABNbT4wCwMDA174AwQDXvgQMA0GCSqGSIb3DQEBCwUAA4IBAQCMGdEg QMgGpJbqkF7gqMV+mCTxnLTQkE0ktwE+tLS4Gm2yeq4TdGIXpxpX1KQeHZuGcmvg Ybz7jRlWu4b9VGG6Ywxg77/hrxJd23VZS3wE49W3Q3vK1ZYKB8GUy/cjpRyXQcJY 5Kd/fiTxdA1T0fwJ+9g9fivTkdxD5vUmHyEmNu8LoM0pVpsqR7RJB3am+eRuWxNf +0GlAx/xTDzSY5njPguU0b6vgyad1TGUpE3Tp9q2WOBEFJFdqVHmIaQakqZaG5wi yAklwlThQ/pWYymnWFY1AaqkBeoiaY+fS9TX7/8zB/k4TI4FqA5Vo4alD9sJ98eJ WGTM1K7YUkZX5QfZ -----END CERTIFICATE-----Generated at Sat Jan 10 09:22:11 2026 by rpki-client