This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/P77WX7NkoBtYUW9Zj0hOm_NZQsg.roa File: P77WX7NkoBtYUW9Zj0hOm_NZQsg.roa (raw, json) Hash identifier: ZmxTADBDBcdVSd0ydXvKv1zAmFoyy7NrjZN7xgCiqr8= Subject key identifier: 3F:BE:D6:5F:B3:64:A0:1B:58:51:6F:59:8F:48:4E:9B:F3:59:42:C8 Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a Certificate serial: 019B7EA7133796F446BF8B2375B202B911DA Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/P77WX7NkoBtYUW9Zj0hOm_NZQsg.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207900 IP address blocks: 185.160.184.0/24 maxlen: 24 185.160.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:13:37:96:f4:46:bf:8b:23:75:b2:02:b9:11:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fbed65fb364a01b58516f598f484e9bf35942c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:62:b5:17:a9:d4:30:a4:be:b3:1d:83:6e:5e: 15:bc:20:44:dc:37:18:8c:02:66:e5:65:6c:17:5a: 3d:3d:ec:09:9d:54:25:e0:a9:96:d5:60:c5:b9:b2: 28:58:13:ee:8c:e0:41:f9:59:40:45:cd:5f:5e:3e: d6:8d:92:e0:f1:d7:4d:23:57:a7:69:bd:fd:07:75: de:d9:95:9c:ab:63:10:6f:b4:13:cd:5d:3e:6f:ae: 60:fc:cf:d6:1f:01:39:7c:fe:0a:e0:79:4f:b5:9f: ef:25:28:08:41:2c:f6:2f:cb:b4:3c:01:00:06:7f: 5d:a8:2d:04:27:ba:8a:71:5c:05:b5:da:81:44:3f: c7:1e:a5:86:1c:0e:ad:30:d1:f1:14:8f:51:93:db: a0:45:4c:c9:7b:f0:f7:f4:82:68:14:c4:ae:aa:93: 57:d8:21:18:d8:84:2f:e9:51:59:52:81:fd:a4:f8: 98:3b:95:fe:d2:a7:07:9a:6e:86:87:01:43:df:b5: c3:f5:c1:59:f7:72:ba:a6:cd:8a:12:88:22:cb:49: d6:b6:22:a3:3d:e0:ad:7b:f9:2c:49:c3:42:55:72: 9e:6f:56:ee:e6:0e:a1:cf:d8:bc:0d:f3:2f:64:80: 21:14:5f:2b:79:a3:1e:f2:bc:da:a5:3d:f7:d2:7b: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BE:D6:5F:B3:64:A0:1B:58:51:6F:59:8F:48:4E:9B:F3:59:42:C8 X509v3 Authority Key Identifier: keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/P77WX7NkoBtYUW9Zj0hOm_NZQsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.184.0/23 Signature Algorithm: sha256WithRSAEncryption 24:8b:08:c9:40:12:c8:33:d0:da:b2:8b:b9:40:6d:59:0f:25: 43:cf:b7:19:3d:38:60:a9:25:3d:ec:ee:6f:c0:09:37:20:37: e4:13:68:cb:78:c1:30:74:04:e7:5e:ac:76:22:bb:c2:75:46: 74:98:0e:47:0a:22:84:9d:e8:6c:d7:3f:0d:8b:96:66:68:24: c5:73:fd:85:ed:db:2f:c1:5c:4e:72:21:41:b3:b9:d5:b2:82: 14:8d:72:12:4e:23:99:63:35:24:33:d9:c8:55:c5:b2:25:34: 35:8c:35:8c:57:31:5b:ac:b6:95:2b:d0:53:a7:f9:df:6b:45: e0:8f:20:f0:73:50:39:cd:6d:aa:ba:31:6f:a9:03:52:a6:b2: 4f:83:41:32:67:cd:c5:7e:0d:a5:39:60:19:ce:29:ae:a4:c4: bd:0d:5f:d6:c3:5f:59:6e:88:db:71:d6:d5:69:4b:fb:f5:7f: 4f:5e:b4:12:f5:fd:8e:ea:5b:d1:21:dd:67:ba:60:9a:00:1a: d1:70:7d:6f:69:9e:ff:2d:9d:db:38:ce:41:c9:e1:01:58:0c: 05:e9:02:7f:6c:5c:6a:68:ac:34:41:7d:be:7d:ee:54:56:87: 9c:ef:52:9f:d5:18:24:9b:07:ed:2e:6e:85:30:8f:33:57:15: bc:d9:b7:b3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pxM3lvRGv4sjdbICuRHaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Yjc2MDBlNzgxZjkzMDViODhjYTQ5MzFhN2RiMDA5Zjhj NzJiM2EwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmJlZDY1ZmIzNjRhMDFiNTg1MTZmNTk4ZjQ4NGU5YmYzNTk0MmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2K1F6nUMKS+sx2Dbl4VvCBE3DcY jAJm5WVsF1o9PewJnVQl4KmW1WDFubIoWBPujOBB+VlARc1fXj7WjZLg8ddNI1en ab39B3Xe2ZWcq2MQb7QTzV0+b65g/M/WHwE5fP4K4HlPtZ/vJSgIQSz2L8u0PAEA Bn9dqC0EJ7qKcVwFtdqBRD/HHqWGHA6tMNHxFI9Rk9ugRUzJe/D39IJoFMSuqpNX 2CEY2IQv6VFZUoH9pPiYO5X+0qcHmm6GhwFD37XD9cFZ93K6ps2KEogiy0nWtiKj PeCte/ksScNCVXKeb1bu5g6hz9i8DfMvZIAhFF8reaMe8rzapT330nt33wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFD++1l+zZKAbWFFvWY9ITpvzWULIMB8GA1UdIwQY MBaAFPi3YA54H5MFuIykkxp9sAn4xys6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1MZGdEbmdma3dXNGpLU1RHbjJ3Q2ZqSEt6by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvYjNmZWNlLTkwNWYtNGNiMy05YTlh LWU1YWZlMjYzZjBhMi8xL1A3N1dYN05rb0J0WVVXOVpqMGhPbV9OWlFzZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTIvYjNmZWNlLTkwNWYtNGNiMy05YTlhLWU1YWZlMjYzZjBh Mi8xLzEtTGRnRG5nZmt3VzRqS1NUR24yd0NmakhLem8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG5oLgw DQYJKoZIhvcNAQELBQADggEBACSLCMlAEsgz0Nqyi7lAbVkPJUPPtxk9OGCpJT3s 7m/ACTcgN+QTaMt4wTB0BOderHYiu8J1RnSYDkcKIoSd6GzXPw2LlmZoJMVz/YXt 2y/BXE5yIUGzudWyghSNchJOI5ljNSQz2chVxbIlNDWMNYxXMVustpUr0FOn+d9r ReCPIPBzUDnNbaq6MW+pA1Kmsk+DQTJnzcV+DaU5YBnOKa6kxL0NX9bDX1luiNtx 1tVpS/v1f09etBL1/Y7qW9Eh3We6YJoAGtFwfW9pnv8tnds4zkHJ4QFYDAXpAn9s XGporDRBfb597lRWh5zvUp/VGCSbB+0uboUwjzNXFbzZt7M= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:40 2026 by rpki-client