This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa File: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (raw, json) Hash identifier: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8= Subject key identifier: 34:AA:AB:BF:DB:03:67:59:C0:53:B2:75:1E:B5:DD:18:C7:66:7D:E7 Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019B79ED26B433677FCA01385F4A90827924 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 77.110.96.0/24 maxlen: 24 77.110.97.0/24 maxlen: 24 77.110.98.0/24 maxlen: 24 77.110.99.0/24 maxlen: 24 77.110.100.0/24 maxlen: 24 77.110.101.0/24 maxlen: 24 77.110.102.0/24 maxlen: 24 77.110.103.0/24 maxlen: 24 77.110.104.0/24 maxlen: 24 77.110.105.0/24 maxlen: 24 77.110.106.0/24 maxlen: 24 77.110.108.0/24 maxlen: 24 77.110.109.0/24 maxlen: 24 77.110.110.0/24 maxlen: 24 77.110.114.0/24 maxlen: 24 77.110.115.0/24 maxlen: 24 77.110.116.0/24 maxlen: 24 77.110.118.0/24 maxlen: 24 77.110.119.0/24 maxlen: 24 77.110.120.0/24 maxlen: 24 77.110.121.0/24 maxlen: 24 77.110.122.0/24 maxlen: 24 77.110.123.0/24 maxlen: 24 77.110.124.0/24 maxlen: 24 77.110.125.0/24 maxlen: 24 77.110.126.0/24 maxlen: 24 77.110.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:26:b4:33:67:7f:ca:01:38:5f:4a:90:82:79:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34aaabbfdb036759c053b2751eb5dd18c7667de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:99:55:e7:16:36:26:f2:ff:c9:5c:19:ce:d2: 21:b4:3e:80:1a:c8:4c:dd:80:ea:85:da:14:e9:3d: 6f:04:05:a4:76:02:cf:61:40:26:fd:e5:ae:91:58: c2:5b:d9:0e:d8:95:9d:b6:7f:d4:e7:3b:df:62:4c: 3e:a3:d5:f1:0c:2a:d8:70:af:a5:e7:75:94:63:d9: 82:63:cc:0c:32:de:3e:b4:d8:5c:92:64:49:71:da: b6:33:48:47:96:fc:e2:0d:08:4f:75:55:f4:a4:65: 58:c9:74:6c:ef:e3:f4:c9:33:d9:35:8e:11:1f:7f: ba:81:e7:fa:7c:a5:a9:e9:11:72:c2:41:32:2c:95: 96:2b:aa:14:39:0a:d5:98:0d:02:e6:96:96:21:b9: 4e:cc:8d:ce:fe:ed:d0:a9:51:78:42:30:bb:d4:25: 52:b7:88:f7:f7:31:bd:99:01:96:d2:1a:b6:ee:f0: d5:2a:39:5b:ae:af:62:6e:fa:ec:84:81:c9:56:e1: 4e:32:83:cd:ff:1b:94:56:5c:24:bf:76:ae:d8:0f: 99:c9:f3:04:33:2e:28:9c:0f:e3:91:89:7b:5b:20: c4:95:02:7a:ca:e4:1a:b7:d1:1a:59:09:bd:ec:15: 0a:f7:35:da:70:f4:e3:51:0e:70:b5:76:69:e9:ff: d8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AA:AB:BF:DB:03:67:59:C0:53:B2:75:1E:B5:DD:18:C7:66:7D:E7 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.110.96.0-77.110.106.255 77.110.108.0-77.110.110.255 77.110.114.0-77.110.116.255 77.110.118.0-77.110.127.255 Signature Algorithm: sha256WithRSAEncryption 35:18:ee:30:09:96:f7:3c:f7:a3:77:58:d6:b1:e7:ca:b7:bc: c9:bb:d2:1f:7f:39:d8:0f:e8:53:24:f4:4e:70:c4:a6:88:c3: f4:83:a2:15:9c:d3:4a:d5:68:27:03:ba:35:3d:26:a7:8b:27: be:87:80:cb:d7:3a:94:f5:91:0e:53:d1:00:8e:75:1d:3e:e4: 46:02:62:71:a7:c1:4f:19:1c:84:27:8c:1f:a4:dd:a9:03:d5: 62:e8:00:b8:ab:10:98:02:57:04:5e:2e:aa:18:3c:f9:77:1b: b9:9d:17:b0:be:63:8a:44:65:a8:1d:2d:03:f4:ba:d2:bb:67: 4c:35:d1:2c:b3:69:ee:61:93:44:32:5d:8c:36:fb:9a:65:15: 70:83:88:ad:48:70:89:f5:a6:7c:f0:8c:db:b9:ef:10:36:f2: c4:8f:6e:f9:59:3e:4f:f0:b1:ee:06:72:87:9c:7d:08:05:65: 2a:5e:7e:2e:b5:04:73:da:26:81:55:8c:43:1b:4f:ac:f2:fd: 9f:82:4c:7d:a4:cb:2a:74:0e:c9:05:9d:b5:05:1f:c2:b4:95: af:51:69:29:b8:2f:c5:60:90:04:15:5a:6d:83:bf:92:d5:de: 3e:60:fa:3c:15:da:35:17:29:7c:31:0d:7a:6b:46:cf:6c:44: 5f:0d:61:4e -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt57Sa0M2d/ygE4X0qQgnkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGFhYWJiZmRiMDM2NzU5YzA1M2IyNzUxZWI1ZGQxOGM3NjY3ZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45lV5xY2JvL/yVwZztIhtD6AGshM 3YDqhdoU6T1vBAWkdgLPYUAm/eWukVjCW9kO2JWdtn/U5zvfYkw+o9XxDCrYcK+l 53WUY9mCY8wMMt4+tNhckmRJcdq2M0hHlvziDQhPdVX0pGVYyXRs7+P0yTPZNY4R H3+6gef6fKWp6RFywkEyLJWWK6oUOQrVmA0C5paWIblOzI3O/u3QqVF4QjC71CVS t4j39zG9mQGW0hq27vDVKjlbrq9ibvrshIHJVuFOMoPN/xuUVlwkv3au2A+ZyfME My4onA/jkYl7WyDElQJ6yuQat9EaWQm97BUK9zXacPTjUQ5wtXZp6f/YgQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFDSqq7/bA2dZwFOydR613RjHZn3nMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvTktxcnY5c0RaMW5BVTdKMUhyWGRHTWRtZmVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBAVNbmAD BABNbmowDAMEAk1ubAMEAE1ubjAMAwQBTW5yAwQATW50MAwDBAFNbnYDBAdNbgAw DQYJKoZIhvcNAQELBQADggEBADUY7jAJlvc896N3WNax58q3vMm70h9/OdgP6FMk 9E5wxKaIw/SDohWc00rVaCcDujU9JqeLJ76HgMvXOpT1kQ5T0QCOdR0+5EYCYnGn wU8ZHIQnjB+k3akD1WLoALirEJgCVwReLqoYPPl3G7mdF7C+Y4pEZagdLQP0utK7 Z0w10Syzae5hk0QyXYw2+5plFXCDiK1IcIn1pnzwjNu57xA28sSPbvlZPk/wse4G coecfQgFZSpefi61BHPaJoFVjEMbT6zy/Z+CTH2kyyp0DskFnbUFH8K0la9RaSm4 L8VgkAQVWm2Dv5LV3j5g+jwV2jUXKXwxDXprRs9sRF8NYU4= -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:14 2026 by rpki-client