This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/wur7LoBXGPmpSWYqNcKF64RczZc.roa File: wur7LoBXGPmpSWYqNcKF64RczZc.roa (raw, json) Hash identifier: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ= Subject key identifier: C2:EA:FB:2E:80:57:18:F9:A9:49:66:2A:35:C2:85:EB:84:5C:CD:97 Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019B79ED26635CDCE924CACA0D87C69765A6 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/wur7LoBXGPmpSWYqNcKF64RczZc.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 77.110.112.0/24 maxlen: 24 77.110.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:26:63:5c:dc:e9:24:ca:ca:0d:87:c6:97:65:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2eafb2e805718f9a949662a35c285eb845ccd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b3:5e:27:d9:88:70:f6:7a:72:41:45:af:d4: 46:10:1e:25:1e:5f:49:53:6a:f4:d2:b4:88:26:2e: 40:87:33:af:42:16:a3:8b:fe:60:bc:18:84:0d:53: 05:d1:39:3b:e8:0b:82:6f:c4:a2:d6:35:79:6c:d8: c3:b1:a2:ee:7c:54:bf:2d:33:3d:f7:cb:b6:74:74: 52:51:61:bd:44:1a:2d:40:37:86:2b:cd:ca:2a:5f: 1d:d7:bf:63:6a:4d:da:ad:8a:95:9a:6e:aa:10:aa: 73:de:ed:8b:4a:db:73:ec:e5:99:86:a4:94:86:c1: 73:92:ed:04:46:5e:45:7e:71:b0:e4:42:f4:c9:f5: 48:5b:d4:33:1a:c2:3c:3b:a4:58:51:d2:a7:27:52: a3:5f:a1:ee:2b:a8:24:c6:83:ba:33:42:6e:c6:16: 17:eb:ce:57:4a:1d:b1:9f:19:f4:71:49:6f:81:62: d6:8e:d2:1f:7e:15:75:74:57:89:39:72:13:91:ca: ec:96:d8:66:85:d0:c7:06:86:cb:3e:f0:db:12:91: d6:fc:c4:b0:d2:4f:e1:3a:12:07:a2:de:0f:c8:b6: 5b:56:7e:ae:a5:bc:57:31:df:63:04:ae:23:d9:43: 4a:d4:c1:84:08:6e:ee:c1:cf:a2:b1:af:44:95:2d: 93:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EA:FB:2E:80:57:18:F9:A9:49:66:2A:35:C2:85:EB:84:5C:CD:97 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/wur7LoBXGPmpSWYqNcKF64RczZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.110.112.0/23 Signature Algorithm: sha256WithRSAEncryption 58:d5:05:f7:09:d9:6c:90:c4:ec:62:76:06:3e:38:29:b2:10: 05:65:b2:b0:95:ca:c4:36:89:1e:4d:de:25:e7:cd:a6:20:d2: 34:be:dd:34:91:f8:43:b4:db:66:2a:02:0e:4d:6f:02:00:68: 08:43:7e:14:cd:3e:95:06:04:28:2c:75:6d:c6:53:29:72:73: 2c:84:3c:41:39:b2:a4:3a:77:dc:8f:f4:dd:5f:b2:d1:f4:ad: 70:da:79:c9:32:eb:6b:e7:18:04:37:ba:9c:bc:f3:79:64:41: 13:f1:ce:a3:4f:dc:46:2d:9a:ac:97:07:48:82:2e:e2:56:c2: 1b:8e:65:c3:ed:54:51:39:7f:2c:18:a1:c2:3b:65:86:a0:40: 8f:46:b6:52:cb:ca:81:e6:5a:f3:82:b3:42:db:fe:ba:7b:72: c0:63:e9:fd:92:4f:85:dc:8a:f4:2d:73:26:49:c2:23:5f:3e: 81:7c:4d:95:b3:5a:a6:46:c4:7a:22:82:1f:9b:48:ab:93:cd: 82:a3:2a:11:4e:d3:c4:e5:8b:9f:7a:c7:48:2f:3e:d4:41:12: c0:8c:d8:d9:d5:32:ec:b3:f9:39:d6:1a:41:86:da:42:b2:5d: aa:8e:64:e0:8c:b9:5d:42:de:b6:95:07:89:5a:b2:e2:04:1f: 6f:95:3d:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SZjXNzpJMrKDYfGl2WmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmVhZmIyZTgwNTcxOGY5YTk0OTY2MmEzNWMyODVlYjg0NWNjZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97NeJ9mIcPZ6ckFFr9RGEB4lHl9J U2r00rSIJi5AhzOvQhaji/5gvBiEDVMF0Tk76AuCb8Si1jV5bNjDsaLufFS/LTM9 98u2dHRSUWG9RBotQDeGK83KKl8d179jak3arYqVmm6qEKpz3u2LSttz7OWZhqSU hsFzku0ERl5FfnGw5EL0yfVIW9QzGsI8O6RYUdKnJ1KjX6HuK6gkxoO6M0JuxhYX 685XSh2xnxn0cUlvgWLWjtIffhV1dFeJOXITkcrslthmhdDHBobLPvDbEpHW/MSw 0k/hOhIHot4PyLZbVn6upbxXMd9jBK4j2UNK1MGECG7uwc+isa9ElS2ThQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLq+y6AVxj5qUlmKjXCheuEXM2XMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvd3VyN0xvQlhHUG1wU1dZcU5jS0Y2NFJjelpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTW5wMA0G CSqGSIb3DQEBCwUAA4IBAQBY1QX3CdlskMTsYnYGPjgpshAFZbKwlcrENokeTd4l 582mINI0vt00kfhDtNtmKgIOTW8CAGgIQ34UzT6VBgQoLHVtxlMpcnMshDxBObKk Onfcj/TdX7LR9K1w2nnJMutr5xgEN7qcvPN5ZEET8c6jT9xGLZqslwdIgi7iVsIb jmXD7VRROX8sGKHCO2WGoECPRrZSy8qB5lrzgrNC2/66e3LAY+n9kk+F3Ir0LXMm ScIjXz6BfE2Vs1qmRsR6IoIfm0irk82CoyoRTtPE5YufesdILz7UQRLAjNjZ1TLs s/k51hpBhtpCsl2qjmTgjLldQt62lQeJWrLiBB9vlT1s -----END CERTIFICATE-----Generated at Sat Jan 10 03:16:39 2026 by rpki-client