This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/XuHYtXTJlwVBCGN3yungnO5pdQI.roa File: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (raw, json) Hash identifier: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio= Subject key identifier: 5E:E1:D8:B5:74:C9:97:05:41:08:63:77:CA:E9:E0:9C:EE:69:75:02 Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019B79ED28358FB70CB0DC51920EF18C3B09 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/XuHYtXTJlwVBCGN3yungnO5pdQI.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216246 IP address blocks: 77.110.104.0/24 maxlen: 24 77.110.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:28:35:8f:b7:0c:b0:dc:51:92:0e:f1:8c:3b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ee1d8b574c9970541086377cae9e09cee697502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:2d:db:d4:25:a6:82:47:bd:cd:89:dd:ad: 52:ba:eb:3f:51:c0:df:a5:80:be:b9:9f:ae:52:62: 55:93:6d:4e:16:11:5b:56:fd:4a:a7:a4:66:e0:fe: 25:18:f3:71:0c:2e:bf:1e:2e:2f:19:fa:8c:5c:4c: 02:3c:05:38:85:84:0f:d8:6c:9b:af:d1:9c:f1:a8: 41:2a:b9:18:13:0e:5f:06:6f:df:7d:f8:bc:ea:89: f1:39:0c:7e:2a:6a:90:9f:7e:5f:2d:48:12:00:bc: 7b:47:2a:28:d8:52:34:60:51:55:10:79:4f:bb:56: 87:93:88:48:e6:0f:75:7b:f8:11:c4:7c:5c:77:13: 15:ef:85:e1:4a:71:7c:f2:da:da:a4:e3:8a:9a:40: 0a:79:a4:87:7f:ff:6b:82:d1:0e:0d:da:d6:f7:e7: 18:6f:8a:ab:01:8e:63:8a:ca:17:b7:25:ef:1b:dd: 64:b5:cf:a4:c4:88:5c:52:74:4e:f0:22:e4:90:a8: 26:e8:ab:08:68:30:24:d8:9c:22:75:ca:54:67:cc: a6:66:ad:45:09:32:1b:37:27:3a:ac:9f:98:4a:92: 34:ac:b9:54:81:e7:69:0b:09:5d:06:74:4a:b9:0a: 25:61:a0:84:84:66:e3:56:fc:dd:0b:30:96:fc:86: 84:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E1:D8:B5:74:C9:97:05:41:08:63:77:CA:E9:E0:9C:EE:69:75:02 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/XuHYtXTJlwVBCGN3yungnO5pdQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.110.104.0/23 Signature Algorithm: sha256WithRSAEncryption 40:73:66:27:17:89:13:1b:cb:bb:13:da:24:86:fc:b2:be:4d: 13:25:55:35:59:86:34:32:59:a1:52:25:e8:82:4e:10:3b:45: 87:98:b2:b2:a1:5e:cc:fa:f6:32:31:2c:c0:55:a0:f9:c6:cf: b9:0f:2b:59:02:2a:82:ef:27:47:36:a1:db:d9:db:fe:fb:34: 02:3e:b4:99:76:aa:e5:7a:79:37:62:78:3b:b5:44:a1:39:98: b0:46:03:33:8c:a9:31:66:00:0e:9c:97:ef:6d:02:13:e4:c7: 2a:d0:9d:bd:c1:8c:a2:d7:f7:8d:80:e6:de:5c:f2:b8:15:93: 0e:ba:c3:8b:e0:d9:37:f9:18:a1:ea:ea:2b:48:d1:52:01:d2: c1:44:53:07:d4:24:31:5a:91:11:2a:d8:9d:1b:46:47:e0:43: 0d:3b:88:66:bb:2a:39:2d:5d:e2:46:3e:d8:ac:39:4d:31:b3: 20:5a:65:47:2e:53:0f:8f:af:39:4b:c5:4e:a3:16:75:1a:2e: 95:b7:18:9e:f4:d7:23:f9:ee:06:fb:3f:b2:08:8b:e1:5d:5f: 52:cb:69:49:2e:1a:b3:f3:b6:c8:95:07:ca:9f:d4:e1:99:32: 79:73:30:81:ff:10:0c:a3:f1:0d:0c:3b:4c:5e:d6:ec:6c:ce: e0:eb:ba:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Sg1j7cMsNxRkg7xjDsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWUxZDhiNTc0Yzk5NzA1NDEwODYzNzdjYWU5ZTA5Y2VlNjk3NTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkgt29QlpoJHvc2J3a1Suus/UcDf pYC+uZ+uUmJVk21OFhFbVv1Kp6Rm4P4lGPNxDC6/Hi4vGfqMXEwCPAU4hYQP2Gyb r9Gc8ahBKrkYEw5fBm/fffi86onxOQx+KmqQn35fLUgSALx7Ryoo2FI0YFFVEHlP u1aHk4hI5g91e/gRxHxcdxMV74XhSnF88trapOOKmkAKeaSHf/9rgtEODdrW9+cY b4qrAY5jisoXtyXvG91ktc+kxIhcUnRO8CLkkKgm6KsIaDAk2JwidcpUZ8ymZq1F CTIbNyc6rJ+YSpI0rLlUgedpCwldBnRKuQolYaCEhGbjVvzdCzCW/IaEfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF7h2LV0yZcFQQhjd8rp4JzuaXUCMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvWHVIWXRYVEpsd1ZCQ0dOM3l1bmduTzVwZFFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTW5oMA0G CSqGSIb3DQEBCwUAA4IBAQBAc2YnF4kTG8u7E9okhvyyvk0TJVU1WYY0MlmhUiXo gk4QO0WHmLKyoV7M+vYyMSzAVaD5xs+5DytZAiqC7ydHNqHb2dv++zQCPrSZdqrl enk3Yng7tUShOZiwRgMzjKkxZgAOnJfvbQIT5Mcq0J29wYyi1/eNgObeXPK4FZMO usOL4Nk3+Rih6uorSNFSAdLBRFMH1CQxWpERKtidG0ZH4EMNO4hmuyo5LV3iRj7Y rDlNMbMgWmVHLlMPj685S8VOoxZ1Gi6Vtxie9Ncj+e4G+z+yCIvhXV9Sy2lJLhqz 87bIlQfKn9ThmTJ5czCB/xAMo/ENDDtMXtbsbM7g67pJ -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:57 2026 by rpki-client