This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/IFqpkhO5gO2UjJmxvG7jVFqo1pY.roa File: IFqpkhO5gO2UjJmxvG7jVFqo1pY.roa (raw, json) Hash identifier: GEMvgI77bHsSjOD12TbALwE6XUCc2L9yKJ+0Lg8dty0= Subject key identifier: 20:5A:A9:92:13:B9:80:ED:94:8C:99:B1:BC:6E:E3:54:5A:A8:D6:96 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B062D7AEF279EB1DE8DC40278947C Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/IFqpkhO5gO2UjJmxvG7jVFqo1pY.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29582 IP address blocks: 77.76.3.0/24 maxlen: 24 78.142.22.0/23 maxlen: 24 79.124.80.0/23 maxlen: 24 91.92.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:06:2d:7a:ef:27:9e:b1:de:8d:c4:02:78:94:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=205aa99213b980ed948c99b1bc6ee3545aa8d696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:b4:00:d1:38:67:f1:3a:22:46:4a:77:53: 10:ba:02:f8:be:f5:eb:08:22:1d:cc:c3:cb:3f:b1: 0c:65:94:d3:92:78:13:dd:57:b2:a3:7c:6b:55:50: f5:77:da:23:d6:ac:13:5a:ed:09:e6:46:85:bc:d6: 62:04:8e:a3:27:5d:c1:b0:5e:b9:99:f1:e9:a4:e1: 06:a2:5a:ca:26:98:07:75:ec:b7:87:da:a3:ca:e3: 84:19:05:52:05:75:d6:dd:d0:37:19:62:fe:93:49: fa:eb:de:b1:7f:da:09:d1:4d:30:76:ee:5d:c4:b0: 18:6e:f8:cf:d4:f5:bb:9b:01:b8:85:f4:c9:84:6b: a9:5e:a1:d5:b3:b3:83:70:40:06:4d:37:5e:9c:e0: 50:66:8b:10:cd:18:47:f8:40:b7:e4:19:db:8c:38: b0:ba:88:0f:fb:78:14:76:58:17:6d:5b:5b:42:58: aa:c3:cc:12:a5:57:46:c6:ff:9e:d6:6c:8a:09:0b: 85:66:f1:c4:70:af:a9:52:bd:22:c8:f9:bb:f3:fe: d0:22:82:52:b8:4b:10:c3:1e:fb:60:a9:e9:d3:f4: 7e:2f:6c:4b:be:96:25:a2:aa:dc:da:78:eb:0a:18: c9:1c:bd:c3:0c:e0:e0:23:52:17:f3:d2:b7:a5:0a: a5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5A:A9:92:13:B9:80:ED:94:8C:99:B1:BC:6E:E3:54:5A:A8:D6:96 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/IFqpkhO5gO2UjJmxvG7jVFqo1pY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.3.0/24 78.142.22.0/23 79.124.80.0/23 91.92.59.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:13:37:a4:34:41:0a:c3:c7:54:8b:ba:78:74:89:2f:a7:b2: e7:ef:da:e2:e4:d6:4a:ea:37:c5:c3:03:69:dc:4f:cb:37:dd: bc:46:f7:ca:63:11:a8:c2:14:9c:81:42:8c:77:6a:63:34:1b: 93:14:da:2c:9b:82:3b:cd:4f:c9:4f:13:5a:eb:59:19:59:72: bd:3c:6b:23:a3:09:44:c0:b5:c7:19:48:f9:34:21:31:ab:49: d1:b1:c7:8d:e3:fb:4e:66:88:49:5a:35:55:40:1d:25:8c:a3: 57:b4:87:18:03:d7:16:ab:ef:fe:2d:c0:c0:44:dd:d0:57:f5: 2e:a0:41:9b:75:9e:00:6c:84:69:92:a6:e5:b6:9d:f4:f7:d0: 17:2a:c0:c2:fa:bc:a4:d8:d3:84:c4:db:e3:ad:41:0d:55:57: 96:8e:2e:b5:34:23:0a:9f:6f:7a:5c:e6:ad:74:ad:d5:83:41: 0f:de:e9:17:cd:c4:3a:71:ef:e3:ef:87:40:fe:dd:46:f1:aa: 1b:41:74:b2:b5:d0:9e:50:59:bb:bd:67:8f:32:ef:04:5a:87: e3:72:f5:53:22:0f:79:11:69:a4:55:6e:ca:8a:95:f5:fd:3d: 29:cd:f1:7e:d6:ac:8e:32:3f:da:b0:89:d4:4c:67:50:d7:62: 8f:8d:99:c7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9WwYteu8nnrHejcQCeJR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDVhYTk5MjEzYjk4MGVkOTQ4Yzk5YjFiYzZlZTM1NDVhYThkNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3a0ANE4Z/E6IkZKd1MQugL4vvXr CCIdzMPLP7EMZZTTkngT3Veyo3xrVVD1d9oj1qwTWu0J5kaFvNZiBI6jJ13BsF65 mfHppOEGolrKJpgHdey3h9qjyuOEGQVSBXXW3dA3GWL+k0n6696xf9oJ0U0wdu5d xLAYbvjP1PW7mwG4hfTJhGupXqHVs7ODcEAGTTdenOBQZosQzRhH+EC35BnbjDiw uogP+3gUdlgXbVtbQliqw8wSpVdGxv+e1myKCQuFZvHEcK+pUr0iyPm78/7QIoJS uEsQwx77YKnp0/R+L2xLvpYloqrc2njrChjJHL3DDODgI1IX89K3pQql2QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCBaqZITuYDtlIyZsbxu41RaqNaWMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvSUZxcGtoTzVnTzJVakpteHZHN2pWRnFvMXBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATUwDAwQB To4WAwQBT3xQAwQAW1w7MA0GCSqGSIb3DQEBCwUAA4IBAQB8EzekNEEKw8dUi7p4 dIkvp7Ln79ri5NZK6jfFwwNp3E/LN928RvfKYxGowhScgUKMd2pjNBuTFNosm4I7 zU/JTxNa61kZWXK9PGsjowlEwLXHGUj5NCExq0nRsceN4/tOZohJWjVVQB0ljKNX tIcYA9cWq+/+LcDARN3QV/UuoEGbdZ4AbIRpkqbltp3099AXKsDC+ryk2NOExNvj rUENVVeWji61NCMKn296XOatdK3Vg0EP3ukXzcQ6ce/j74dA/t1G8aobQXSytdCe UFm7vWePMu8EWofjcvVTIg95EWmkVW7KipX1/T0pzfF+1qyOMj/asInUTGdQ12KP jZnH -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:14 2026 by rpki-client