This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/IRGg0foxSUGfOHZNIMiC1ewLzAY.roa File: IRGg0foxSUGfOHZNIMiC1ewLzAY.roa (raw, json) Hash identifier: giVtmM9q1yhx5JXyoMJ4+6H4vQ40BnaU8PVfW59t+OM= Subject key identifier: 21:11:A0:D1:FA:31:49:41:9F:38:76:4D:20:C8:82:D5:EC:0B:CC:06 Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019C1F5F9071B1D4294A3D378B6783317B46 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/IRGg0foxSUGfOHZNIMiC1ewLzAY.roa Signing time: Mon 02 Feb 2026 17:21:22 +0000 ROA not before: Mon 02 Feb 2026 17:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55154 IP address blocks: 77.110.66.0/24 maxlen: 24 80.71.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:5f:90:71:b1:d4:29:4a:3d:37:8b:67:83:31:7b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Feb 2 17:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2111a0d1fa3149419f38764d20c882d5ec0bcc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e5:3f:2c:68:82:74:f8:9e:04:4c:2a:96:e7: f8:2e:9e:14:da:92:ef:7a:6e:c2:8e:3d:c5:d3:f5: 9e:8b:b7:f9:e1:d7:cd:b3:8a:0e:5b:dd:06:52:1c: d9:d6:fd:0a:27:e9:2a:4a:ef:e2:2d:8d:aa:34:21: fc:07:6b:c1:62:f7:d0:bd:46:95:e2:b2:88:9c:e6: 0a:af:72:87:80:2c:bc:4e:41:bf:cb:38:12:1c:94: 37:94:8a:35:b8:f5:34:10:45:7b:3d:73:5d:86:4a: c6:07:9f:3e:2b:61:1b:94:6b:06:d7:e0:26:0a:51: 07:cf:cc:ff:9e:cd:f0:e9:ef:f4:60:25:9f:ac:b6: c2:0a:42:02:44:0a:70:33:c0:4e:6a:63:78:40:1c: 8a:7d:46:c6:e2:c3:4d:ce:7b:52:80:84:00:70:25: 3b:8a:f2:a4:69:64:30:7b:9a:6c:de:55:97:fd:41: 50:81:50:02:bd:9e:8e:99:58:e4:8d:6f:9e:5b:f6: 1a:2e:9c:89:0c:19:cb:e1:72:05:93:9a:0a:03:08: d2:0b:9f:18:aa:65:81:33:d8:48:e1:f0:e5:62:6e: ed:80:ec:8c:1c:22:a0:7b:ba:e6:5f:11:c0:87:27: 03:98:d8:ec:51:65:a9:46:a5:e8:52:c1:b1:f1:75: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:11:A0:D1:FA:31:49:41:9F:38:76:4D:20:C8:82:D5:EC:0B:CC:06 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/IRGg0foxSUGfOHZNIMiC1ewLzAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.110.66.0/24 80.71.153.0/24 Signature Algorithm: sha256WithRSAEncryption 08:94:f2:14:95:4b:f1:93:8b:0a:8c:a7:ec:98:b4:09:12:9d: 29:0d:58:f1:21:69:48:63:08:73:a0:ff:5c:ce:d6:df:7a:f0: e7:03:35:93:55:f6:e9:33:3d:b5:0c:4b:ec:c0:45:06:de:41: 40:df:d6:c2:4a:59:bf:7e:db:17:d8:46:90:6d:42:55:32:56: 27:f6:6d:a2:60:5f:cb:31:79:1e:de:f4:9e:32:31:de:2a:c7: e1:31:43:65:38:ea:2d:72:1f:ee:bd:2a:ff:c4:b7:d2:4f:35: 67:94:a4:fc:3a:d9:25:eb:72:81:0f:1c:ed:21:9d:48:c2:88: 80:3c:b5:ea:55:26:58:27:02:63:b8:04:2d:ed:22:6d:14:71: 7b:fa:17:95:a8:b5:63:a7:02:4a:92:09:ef:51:9f:46:cd:db: 38:d4:fc:84:d0:09:ba:e4:96:86:45:33:d7:13:53:80:f3:f4: 5e:fa:c5:c9:1a:62:4d:0b:d9:bc:ea:21:4a:fe:69:89:ba:7f: 48:b2:c0:d5:6b:02:5f:b4:db:55:df:0e:0f:30:0f:63:85:c7: 2e:7c:f6:1c:57:03:ad:c7:7f:0f:c5:9d:f9:d1:9c:59:c8:5a: 6a:ea:7f:81:94:39:23:da:dc:77:f8:59:75:63:ca:93:ec:fa: da:30:13:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwfX5BxsdQpSj03i2eDMXtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMjAyMTcyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTExYTBkMWZhMzE0OTQxOWYzODc2NGQyMGM4ODJkNWVjMGJjYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eU/LGiCdPieBEwqluf4Lp4U2pLv em7Cjj3F0/Wei7f54dfNs4oOW90GUhzZ1v0KJ+kqSu/iLY2qNCH8B2vBYvfQvUaV 4rKInOYKr3KHgCy8TkG/yzgSHJQ3lIo1uPU0EEV7PXNdhkrGB58+K2EblGsG1+Am ClEHz8z/ns3w6e/0YCWfrLbCCkICRApwM8BOamN4QByKfUbG4sNNzntSgIQAcCU7 ivKkaWQwe5ps3lWX/UFQgVACvZ6OmVjkjW+eW/YaLpyJDBnL4XIFk5oKAwjSC58Y qmWBM9hI4fDlYm7tgOyMHCKge7rmXxHAhycDmNjsUWWpRqXoUsGx8XVXfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCERoNH6MUlBnzh2TSDIgtXsC8wGMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvSVJHZzBmb3hTVUdmT0haTklNaUMxZXdMekFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATW5CAwQA UEeZMA0GCSqGSIb3DQEBCwUAA4IBAQAIlPIUlUvxk4sKjKfsmLQJEp0pDVjxIWlI YwhzoP9cztbfevDnAzWTVfbpMz21DEvswEUG3kFA39bCSlm/ftsX2EaQbUJVMlYn 9m2iYF/LMXke3vSeMjHeKsfhMUNlOOotch/uvSr/xLfSTzVnlKT8Otkl63KBDxzt IZ1IwoiAPLXqVSZYJwJjuAQt7SJtFHF7+heVqLVjpwJKkgnvUZ9Gzds41PyE0Am6 5JaGRTPXE1OA8/Re+sXJGmJNC9m86iFK/mmJun9IssDVawJftNtV3w4PMA9jhccu fPYcVwOtx38PxZ350ZxZyFpq6n+BlDkj2tx3+Fl1Y8qT7PraMBPt -----END CERTIFICATE-----Generated at Tue Feb 3 16:09:41 2026 by rpki-client