This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/qA1FSgo8W2WfbgMfxgehUTGINhY.roa File: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (raw, json) Hash identifier: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM= Subject key identifier: A8:0D:45:4A:0A:3C:5B:65:9F:6E:03:1F:C6:07:A1:51:31:88:36:16 Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Certificate serial: 019B7C8075C95D38CBB597C96B4470DC777E Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/qA1FSgo8W2WfbgMfxgehUTGINhY.roa Signing time: Fri 02 Jan 2026 02:19:12 +0000 ROA not before: Fri 02 Jan 2026 02:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20649 IP address blocks: 185.77.1.0/24 maxlen: 24 185.77.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:75:c9:5d:38:cb:b5:97:c9:6b:44:70:dc:77:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a80d454a0a3c5b659f6e031fc607a15131883616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:30:9e:45:4f:8a:7b:71:7c:b6:d4:ee:d8: 2d:26:35:33:db:12:6e:ee:9b:c1:d7:0d:f3:3d:49: 6c:41:e2:e0:2d:9c:f9:ae:03:a9:3e:37:b7:41:45: 27:e1:ed:81:41:4a:52:de:8d:78:f8:35:8b:60:f2: db:a1:a3:d5:be:83:55:e5:68:4a:1d:30:e6:e9:eb: 2c:bc:19:2a:a9:2b:7c:9e:fc:79:3c:30:0c:5c:2b: 75:cc:73:88:7b:cc:ae:50:9c:80:57:e6:9b:3a:3a: b6:58:a7:9f:06:3d:c1:ac:07:0e:a2:7f:00:3c:c6: 91:1e:e0:7c:2d:69:bf:70:3c:3a:f6:8d:3e:81:30: c9:0b:61:0b:e3:db:75:1c:3b:dd:f7:8a:d4:7a:7e: 03:12:15:a8:ca:ae:8b:b5:5d:ad:80:cd:23:fa:df: 3a:f7:b2:2b:36:73:8c:25:06:3c:21:11:23:24:ac: bf:e9:53:68:e6:e1:0b:04:42:ae:f3:5c:b2:d2:8c: 61:86:83:5b:16:bc:0a:51:31:ff:98:01:b9:d3:14: 2d:67:c8:90:2e:49:63:9c:72:c6:4f:d1:95:8f:18: 8f:79:c7:c4:95:2e:6b:09:a6:21:e1:23:fc:cb:74: 4a:a1:06:ba:da:99:46:ba:15:83:c4:90:53:db:e0: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0D:45:4A:0A:3C:5B:65:9F:6E:03:1F:C6:07:A1:51:31:88:36:16 X509v3 Authority Key Identifier: keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/qA1FSgo8W2WfbgMfxgehUTGINhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.1.0-185.77.2.255 Signature Algorithm: sha256WithRSAEncryption 21:d5:24:d8:bb:f8:2a:20:c4:56:a8:88:b9:85:97:c7:4d:b0: 50:92:da:40:24:84:68:f4:aa:3d:d3:77:31:3f:f2:74:66:19: a1:70:d0:8b:3b:b6:11:d3:07:70:e2:fd:e5:aa:59:49:5e:0c: 73:9e:db:2d:b7:79:eb:8a:cc:1f:65:91:b6:29:a3:e1:57:e2: 23:f1:11:d4:35:bf:e9:e8:e6:65:80:07:f6:b0:95:91:97:19: 61:b1:df:23:f9:c1:25:be:99:6e:39:f6:23:a2:a3:7c:e8:31: 3d:38:f9:8c:29:84:6b:e3:37:8a:df:b0:0e:df:af:f2:5b:5c: 24:e5:7f:65:18:f1:69:34:0c:43:21:71:4f:67:b2:d9:e7:53: cb:64:c0:f3:5c:2c:89:b3:07:5b:b6:03:76:cc:e4:45:ea:e1: 97:13:3d:41:19:33:1d:2b:f5:e5:74:3b:f4:10:a1:03:80:2c: 0b:22:d3:56:b1:a6:5d:ce:dc:80:89:34:63:c3:fb:51:6d:7d: 4d:40:c5:6d:5e:d8:dd:19:97:de:56:b7:07:d3:fa:fb:84:31: 80:61:57:de:f8:ff:34:43:89:28:7c:46:14:8c:d9:3c:3e:d1: d6:a8:4e:05:ab:64:77:bc:83:f6:00:df:79:f0:bf:b4:66:7d: af:f9:37:f2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gHXJXTjLtZfJa0Rw3Hd+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl YjlkMmMwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODBkNDU0YTBhM2M1YjY1OWY2ZTAzMWZjNjA3YTE1MTMxODgzNjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6IwnkVPintxfLbU7tgtJjUz2xJu 7pvB1w3zPUlsQeLgLZz5rgOpPje3QUUn4e2BQUpS3o14+DWLYPLboaPVvoNV5WhK HTDm6essvBkqqSt8nvx5PDAMXCt1zHOIe8yuUJyAV+abOjq2WKefBj3BrAcOon8A PMaRHuB8LWm/cDw69o0+gTDJC2EL49t1HDvd94rUen4DEhWoyq6LtV2tgM0j+t86 97IrNnOMJQY8IREjJKy/6VNo5uELBEKu81yy0oxhhoNbFrwKUTH/mAG50xQtZ8iQ LkljnHLGT9GVjxiPecfElS5rCaYh4SP8y3RKoQa62plGuhWDxJBT2+CW4wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKgNRUoKPFtln24DH8YHoVExiDYWMB8GA1UdIwQY MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt MTNmYjdhNTEzMGNhLzEvcUExRlNnbzhXMldmYmdNZnhnZWhVVEdJTmhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5TQED BAC5TQIwDQYJKoZIhvcNAQELBQADggEBACHVJNi7+CogxFaoiLmFl8dNsFCS2kAk hGj0qj3TdzE/8nRmGaFw0Is7thHTB3Di/eWqWUleDHOe2y23eeuKzB9lkbYpo+FX 4iPxEdQ1v+no5mWAB/awlZGXGWGx3yP5wSW+mW459iOio3zoMT04+YwphGvjN4rf sA7fr/JbXCTlf2UY8Wk0DEMhcU9nstnnU8tkwPNcLImzB1u2A3bM5EXq4ZcTPUEZ Mx0r9eV0O/QQoQOALAsi01axpl3O3ICJNGPD+1FtfU1AxW1e2N0Zl95WtwfT+vuE MYBhV974/zRDiSh8RhSM2Tw+0daoTgWrZHe8g/YA33nwv7Rmfa/5N/I= -----END CERTIFICATE-----Generated at Sun Jan 11 18:14:14 2026 by rpki-client