This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/w1rSq9HiUPdlBfnJQU20TUnkDtc.roa File: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (raw, json) Hash identifier: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs= Subject key identifier: C3:5A:D2:AB:D1:E2:50:F7:65:05:F9:C9:41:4D:B4:4D:49:E4:0E:D7 Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Certificate serial: 019B7C80767563C15D6A56A212A500D4FC61 Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/w1rSq9HiUPdlBfnJQU20TUnkDtc.roa Signing time: Fri 02 Jan 2026 02:19:12 +0000 ROA not before: Fri 02 Jan 2026 02:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 185.77.1.0/24 maxlen: 24 185.77.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:76:75:63:c1:5d:6a:56:a2:12:a5:00:d4:fc:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c35ad2abd1e250f76505f9c9414db44d49e40ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:c8:64:2c:13:c1:8a:36:5d:61:bb:eb:15: 9b:89:7f:c7:b3:08:43:84:0a:67:1e:37:8a:d9:f1: e2:93:36:b5:03:92:34:1c:b2:ad:a7:06:f4:fb:f4: d6:c0:52:3f:98:8e:24:f6:1e:fa:44:5b:6f:04:b2: 42:37:aa:45:91:65:4c:60:61:1e:07:84:92:38:eb: 8d:fa:4c:11:69:ae:19:9b:9b:5a:63:64:fe:fe:4a: 9e:1d:a1:64:17:69:bd:59:d6:7e:bd:5a:91:16:38: 14:c8:a9:d8:27:e8:7b:04:04:e5:67:7b:24:79:04: f6:32:95:be:e7:33:af:e9:aa:df:05:d1:ca:65:82: 2e:f2:fd:99:ec:e7:e8:03:7e:16:f9:4f:2c:cd:75: 6c:35:71:1d:05:ce:bd:f8:ab:e6:49:e4:f0:db:38: 76:07:98:ed:6d:46:98:f1:04:81:cd:e4:67:67:5d: 4e:0b:13:84:d1:98:88:cf:a7:9f:91:50:b1:de:40: 5a:d5:42:bc:b0:44:11:5b:13:06:53:a6:91:fd:93: 79:95:8f:b1:31:a8:e7:e2:da:61:b3:d8:2a:be:37: 6d:c0:af:73:da:36:db:87:7d:13:1e:dd:a2:c6:5b: 68:a3:d1:6d:2e:f4:3d:f8:4f:be:39:fe:98:8c:f5: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5A:D2:AB:D1:E2:50:F7:65:05:F9:C9:41:4D:B4:4D:49:E4:0E:D7 X509v3 Authority Key Identifier: keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/w1rSq9HiUPdlBfnJQU20TUnkDtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.1.0-185.77.2.255 Signature Algorithm: sha256WithRSAEncryption 2a:87:bd:2d:e0:9d:83:74:2f:08:18:f1:9c:6a:b7:e3:58:79: 0c:79:8c:05:96:5b:b5:93:58:4b:3e:05:88:3a:18:be:7f:d8: 82:a9:9e:2e:9c:46:50:a5:75:f2:62:04:05:c3:d7:44:6a:ca: 79:29:df:e5:24:5e:6b:96:04:fe:ee:52:01:70:e3:1c:73:b9: d9:4c:e7:c9:95:68:4f:7f:e3:cd:e6:52:68:15:5d:04:1c:9f: 4a:68:9c:22:df:b1:57:56:22:9c:0b:d7:33:e3:41:51:f8:86: f3:51:75:2a:cb:12:8b:95:42:ee:fc:dc:f9:48:2a:87:c6:9b: fd:93:ca:96:af:32:09:05:bc:73:21:95:d9:8e:58:5f:4f:65: 02:1d:8a:3d:e3:2c:54:59:b3:12:8e:e9:b2:ad:31:4d:50:b0: a7:e8:38:52:3a:3f:34:8f:24:0d:36:86:3c:a4:fd:0a:4f:21: 39:34:7f:02:77:e8:f4:5e:c2:30:2a:f7:98:36:84:26:54:ee: 0e:95:c2:82:b6:36:e6:da:fb:dd:0d:3b:ed:17:b1:17:59:0b: de:b3:19:73:6b:13:f2:53:b4:93:30:27:78:c3:e0:c0:c3:09: 25:76:f1:32:fc:48:3e:f7:bf:75:c7:23:fc:ec:74:62:7d:d2: c2:81:0a:64 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gHZ1Y8FdalaiEqUA1PxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl YjlkMmMwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzVhZDJhYmQxZTI1MGY3NjUwNWY5Yzk0MTRkYjQ0ZDQ5ZTQwZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gXIZCwTwYo2XWG76xWbiX/HswhD hApnHjeK2fHikza1A5I0HLKtpwb0+/TWwFI/mI4k9h76RFtvBLJCN6pFkWVMYGEe B4SSOOuN+kwRaa4Zm5taY2T+/kqeHaFkF2m9WdZ+vVqRFjgUyKnYJ+h7BATlZ3sk eQT2MpW+5zOv6arfBdHKZYIu8v2Z7OfoA34W+U8szXVsNXEdBc69+KvmSeTw2zh2 B5jtbUaY8QSBzeRnZ11OCxOE0ZiIz6efkVCx3kBa1UK8sEQRWxMGU6aR/ZN5lY+x Majn4tphs9gqvjdtwK9z2jbbh30THt2ixltoo9FtLvQ9+E++Of6YjPX4ZwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMNa0qvR4lD3ZQX5yUFNtE1J5A7XMB8GA1UdIwQY MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt MTNmYjdhNTEzMGNhLzEvdzFyU3E5SGlVUGRsQmZuSlFVMjBUVW5rRHRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5TQED BAC5TQIwDQYJKoZIhvcNAQELBQADggEBACqHvS3gnYN0LwgY8Zxqt+NYeQx5jAWW W7WTWEs+BYg6GL5/2IKpni6cRlCldfJiBAXD10Rqynkp3+UkXmuWBP7uUgFw4xxz udlM58mVaE9/483mUmgVXQQcn0ponCLfsVdWIpwL1zPjQVH4hvNRdSrLEouVQu78 3PlIKofGm/2TypavMgkFvHMhldmOWF9PZQIdij3jLFRZsxKO6bKtMU1QsKfoOFI6 PzSPJA02hjyk/QpPITk0fwJ36PRewjAq95g2hCZU7g6VwoK2Nuba+90NO+0XsRdZ C96zGXNrE/JTtJMwJ3jD4MDDCSV28TL8SD73v3XHI/zsdGJ90sKBCmQ= -----END CERTIFICATE-----Generated at Sun Jan 11 18:14:45 2026 by rpki-client