This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/gOKSWetg3BIZaPeNqA4kgAoYAhE.roa File: gOKSWetg3BIZaPeNqA4kgAoYAhE.roa (raw, json) Hash identifier: hxJCWQ7RrJOG2jqFDCsrVhnOZ/e0q0OcuJr0xguoGEY= Subject key identifier: 80:E2:92:59:EB:60:DC:12:19:68:F7:8D:A8:0E:24:80:0A:18:02:11 Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019BF62D281576A36A329F88E0060017903D Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/gOKSWetg3BIZaPeNqA4kgAoYAhE.roa Signing time: Sun 25 Jan 2026 17:21:53 +0000 ROA not before: Sun 25 Jan 2026 17:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 77.110.64.0/24 maxlen: 24 77.110.65.0/24 maxlen: 24 77.110.68.0/24 maxlen: 24 77.110.70.0/24 maxlen: 24 77.110.71.0/24 maxlen: 24 77.110.72.0/24 maxlen: 24 77.110.74.0/24 maxlen: 24 77.110.75.0/24 maxlen: 24 77.110.77.0/24 maxlen: 24 77.110.79.0/24 maxlen: 24 77.110.80.0/24 maxlen: 24 77.110.82.0/24 maxlen: 24 77.110.83.0/24 maxlen: 24 77.110.85.0/24 maxlen: 24 77.110.87.0/24 maxlen: 24 77.110.88.0/24 maxlen: 24 77.110.90.0/24 maxlen: 24 77.110.91.0/24 maxlen: 24 77.110.93.0/24 maxlen: 24 77.110.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:2d:28:15:76:a3:6a:32:9f:88:e0:06:00:17:90:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jan 25 17:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80e29259eb60dc121968f78da80e24800a180211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:78:92:23:cd:b0:82:6b:ff:cb:06:55:e5: 32:56:26:b9:d0:a6:fd:41:a4:e4:d8:78:6c:80:ac: f7:f6:f8:73:55:12:25:e5:29:9f:df:f8:4a:22:25: 1a:47:80:c5:6b:b0:ac:50:d5:3a:e6:1a:a3:c2:59: ac:3f:90:22:61:9d:af:80:82:81:3a:77:2a:e3:12: da:e0:ba:6e:44:0e:a7:c4:19:04:f4:ec:2f:be:06: cb:08:aa:5c:e2:db:56:01:6c:83:37:c1:2c:89:c7: f8:dd:e0:fc:8b:64:22:7c:3e:93:b4:89:30:11:74: ae:b4:f1:ea:28:83:eb:2b:4c:7f:ff:a3:4c:79:f4: 97:dc:c3:a2:c4:ec:f1:d3:07:ed:8c:51:b5:ea:1e: a3:71:59:55:75:b5:27:db:83:37:b2:44:f4:2a:b9: e2:07:47:bd:41:1c:e3:d5:3c:12:41:95:a5:ee:7b: 4c:b0:bf:a5:6c:cd:93:9a:89:61:99:b9:06:9b:7c: 2a:d7:c7:4d:8c:34:57:a1:57:c7:e0:53:97:0a:21: 56:6d:1f:6a:98:2a:91:7a:21:e5:40:94:54:94:ec: 0e:c2:59:e1:d3:e6:20:de:58:b1:e6:a4:e1:1e:72: cc:c3:cd:b9:0d:54:be:26:db:dd:5b:73:41:87:b8: 11:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E2:92:59:EB:60:DC:12:19:68:F7:8D:A8:0E:24:80:0A:18:02:11 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/gOKSWetg3BIZaPeNqA4kgAoYAhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.110.64.0/23 77.110.68.0/24 77.110.70.0-77.110.72.255 77.110.74.0/23 77.110.77.0/24 77.110.79.0-77.110.80.255 77.110.82.0/23 77.110.85.0/24 77.110.87.0-77.110.88.255 77.110.90.0/23 77.110.93.0/24 77.110.95.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:01:8f:54:42:a6:5a:84:f5:73:06:4f:d1:62:d0:59:73:b1: 5e:03:4b:4d:df:0a:3d:35:47:db:e3:5f:23:3f:13:27:e8:b5: 2c:53:ce:c4:22:e4:6d:b7:94:53:19:99:38:8e:69:b0:e6:35: 27:57:8b:94:9e:6a:d5:64:a5:6a:84:74:9f:b2:c3:bb:3b:d3: 24:77:93:a9:c6:d4:5c:15:1d:79:2e:da:47:26:61:33:ed:62: db:74:b1:93:bd:d2:50:cd:c3:08:99:a8:53:1e:67:e7:65:2d: a2:f9:ec:e5:bb:73:90:0a:99:43:13:df:9b:5b:34:0a:1e:c3: 54:2e:8c:da:cc:3a:5b:40:a7:d9:ae:eb:ae:54:0f:93:a4:58: dd:f4:20:52:f6:dd:4d:da:2e:5a:c9:3e:58:d4:c3:2d:ce:36: 89:1a:fa:97:14:27:ce:3f:93:07:be:0b:98:ab:f0:2c:12:a6: 97:10:d8:b0:91:aa:cf:76:69:3f:2e:6c:03:89:1b:ce:41:44: a8:ef:17:f0:65:fe:a9:c5:6f:5a:5f:26:5e:02:25:c3:eb:78: e7:fc:35:2b:3a:55:74:7a:a2:91:3f:8d:f0:03:2b:c2:91:e6: 50:29:cf:16:2b:8a:31:5f:0f:b4:5f:62:ce:ea:fd:d9:fe:9f: 36:81:16:4d -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZv2LSgVdqNqMp+I4AYAF5A9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMTI1MTcyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGUyOTI1OWViNjBkYzEyMTk2OGY3OGRhODBlMjQ4MDBhMTgwMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZl4kiPNsIJr/8sGVeUyVia50Kb9 QaTk2HhsgKz39vhzVRIl5Smf3/hKIiUaR4DFa7CsUNU65hqjwlmsP5AiYZ2vgIKB Oncq4xLa4LpuRA6nxBkE9OwvvgbLCKpc4ttWAWyDN8Esicf43eD8i2QifD6TtIkw EXSutPHqKIPrK0x//6NMefSX3MOixOzx0wftjFG16h6jcVlVdbUn24M3skT0Krni B0e9QRzj1TwSQZWl7ntMsL+lbM2TmolhmbkGm3wq18dNjDRXoVfH4FOXCiFWbR9q mCqReiHlQJRUlOwOwlnh0+Yg3lix5qThHnLMw825DVS+JtvdW3NBh7gROwIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFIDiklnrYNwSGWj3jagOJIAKGAIRMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvZ09LU1dldGczQklaYVBlTnFBNGtnQW9ZQWhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQBTW5AAwQA TW5EMAwDBAFNbkYDBABNbkgDBAFNbkoDBABNbk0wDAMEAE1uTwMEAE1uUAMEAU1u UgMEAE1uVTAMAwQATW5XAwQATW5YAwQBTW5aAwQATW5dAwQATW5fMA0GCSqGSIb3 DQEBCwUAA4IBAQCaAY9UQqZahPVzBk/RYtBZc7FeA0tN3wo9NUfb418jPxMn6LUs U87EIuRtt5RTGZk4jmmw5jUnV4uUnmrVZKVqhHSfssO7O9Mkd5OpxtRcFR15LtpH JmEz7WLbdLGTvdJQzcMImahTHmfnZS2i+ezlu3OQCplDE9+bWzQKHsNULozazDpb QKfZruuuVA+TpFjd9CBS9t1N2i5ayT5Y1MMtzjaJGvqXFCfOP5MHvguYq/AsEqaX ENiwkarPdmk/LmwDiRvOQUSo7xfwZf6pxW9aXyZeAiXD63jn/DUrOlV0eqKRP43w AyvCkeZQKc8WK4oxXw+0X2LO6v3Z/p82gRZN -----END CERTIFICATE-----Generated at Mon Jan 26 13:31:29 2026 by rpki-client