This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/0HK9dF4eWzljAyAebYpaTc8u8tY.roa File: 0HK9dF4eWzljAyAebYpaTc8u8tY.roa (raw, json) Hash identifier: I0vU4WfKD7pZCsPBLobl6jL+dlt/Fg81XoZQCKBBTX8= Subject key identifier: D0:72:BD:74:5E:1E:5B:39:63:03:20:1E:6D:8A:5A:4D:CF:2E:F2:D6 Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Certificate serial: 019B7EA6FD0C8BE36A1E75B47C1ED97A58F9 Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/0HK9dF4eWzljAyAebYpaTc8u8tY.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35703 IP address blocks: 77.75.208.0/21 maxlen: 21 193.160.156.0/23 maxlen: 23 193.227.204.0/23 maxlen: 23 2a00:e48::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fd:0c:8b:e3:6a:1e:75:b4:7c:1e:d9:7a:58:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d072bd745e1e5b396303201e6d8a5a4dcf2ef2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:b3:82:e9:9f:78:14:48:31:8f:a8:3b:51: c4:48:c3:bc:c1:98:e8:ea:d5:f4:5e:12:19:46:4c: 95:26:45:62:5b:b8:f9:dd:f0:4a:29:f3:94:73:2d: fd:62:7b:5e:42:15:86:de:64:8c:5e:58:24:8a:fe: 97:19:d8:a1:c0:e7:c5:08:f2:9d:de:bf:b0:e8:2e: 3a:d3:5b:c8:10:45:c0:0d:72:03:c9:ee:a5:c5:25: 0a:b2:3e:16:7e:52:3f:d3:dc:25:9c:bd:c2:68:f3: cd:f8:df:41:49:e0:5e:b7:32:1b:70:0b:59:9c:19: a1:7d:04:3f:dc:40:a9:e1:34:41:97:7e:c9:b3:15: f0:74:7c:98:e8:52:e1:30:4d:6f:ef:c7:11:b5:88: 9b:ce:0f:83:74:80:52:b0:ba:ee:78:b1:1a:f0:ae: 5d:c6:99:03:7f:19:05:20:0a:20:a8:6e:39:c5:61: ad:5a:45:ea:90:fd:e0:13:cb:6e:b7:50:b3:b8:d3: 28:8b:14:ba:a7:27:46:03:91:65:d8:b3:53:fa:9c: 9e:42:b6:3e:4c:38:ad:70:1c:d9:d4:df:3e:e0:d9: 89:7f:92:df:7d:24:1d:83:1d:46:e5:3b:18:37:3e: be:49:1a:0e:9d:5e:3e:2c:a0:0b:12:7d:86:2e:21: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:72:BD:74:5E:1E:5B:39:63:03:20:1E:6D:8A:5A:4D:CF:2E:F2:D6 X509v3 Authority Key Identifier: keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/0HK9dF4eWzljAyAebYpaTc8u8tY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.208.0/21 193.160.156.0/23 193.227.204.0/23 IPv6: 2a00:e48::/33 Signature Algorithm: sha256WithRSAEncryption 7b:8c:4c:b9:22:0d:54:ca:cf:96:59:5c:73:5f:35:de:7a:42: fc:d3:d9:42:a1:c8:d8:9d:88:89:f5:ca:11:8a:ea:63:eb:b1: 31:6d:62:dc:90:9c:34:c4:35:18:45:d4:63:9b:7d:20:f6:9f: a9:52:a4:f8:02:fa:54:85:98:1c:82:d1:e8:b1:d0:eb:69:1a: 78:e3:8c:15:87:2c:cb:dc:f2:77:0d:68:a9:31:46:15:7b:64: 2f:9c:6d:76:77:2f:4d:28:ba:05:ec:96:77:d1:c1:10:f9:8b: 23:74:12:be:99:1a:a9:48:b9:ac:52:73:93:d4:7e:93:fb:f1: 53:01:be:8f:00:3b:13:a3:75:ba:13:7b:67:4d:f2:89:9a:36: ad:d0:e8:4a:ab:0f:4d:1e:97:1b:2a:64:3c:6c:7d:19:35:76: 28:24:b2:a4:6f:a0:7e:c9:f5:f9:6a:4b:60:fb:92:10:d7:2e: a5:96:ce:a4:e9:21:be:b7:7c:9a:db:26:13:0c:8c:a4:49:3e: 1c:22:ce:79:2f:70:45:6b:36:27:ce:e4:78:b1:5f:83:56:1c: 3f:2b:26:82:39:ec:18:27:a6:69:a2:56:c0:12:d1:95:bd:8c: 97:5b:27:d0:ba:e5:2e:82:5a:ca:34:ed:5c:07:6d:96:4b:f9: 29:88:75:df -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt+pv0Mi+NqHnW0fB7Zelj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMDI0YjljNjNkYjVjMWExY2Y0YzU1ODFkYmU1YjM4MWNi OTUwODcwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDcyYmQ3NDVlMWU1YjM5NjMwMzIwMWU2ZDhhNWE0ZGNmMmVmMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya6zgumfeBRIMY+oO1HESMO8wZjo 6tX0XhIZRkyVJkViW7j53fBKKfOUcy39YnteQhWG3mSMXlgkiv6XGdihwOfFCPKd 3r+w6C4601vIEEXADXIDye6lxSUKsj4WflI/09wlnL3CaPPN+N9BSeBetzIbcAtZ nBmhfQQ/3ECp4TRBl37JsxXwdHyY6FLhME1v78cRtYibzg+DdIBSsLrueLEa8K5d xpkDfxkFIAogqG45xWGtWkXqkP3gE8tut1CzuNMoixS6pydGA5Fl2LNT+pyeQrY+ TDitcBzZ1N8+4NmJf5LffSQdgx1G5TsYNz6+SRoOnV4+LKALEn2GLiHMAwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNByvXReHls5YwMgHm2KWk3PLvLWMB8GA1UdIwQY MBaAFNoCS5xj21waHPTFWB2+WzgcuVCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYt NzEyYjFhNzk2OGU2LzEvMEhLOWRGNGVXemxqQXlBZWJZcGFUYzh1OHRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81ZDdjZGEtMGE5OC00M2FjLTkxMzYtNzEyYjFhNzk2OGU2 LzEvMmdKTG5HUGJYQm9jOU1WWUhiNWJPQnk1VUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQDTUvQAwQB waCcAwQBwePMMA4EAgACMAgDBgcqAA5IADANBgkqhkiG9w0BAQsFAAOCAQEAe4xM uSINVMrPlllcc1813npC/NPZQqHI2J2IifXKEYrqY+uxMW1i3JCcNMQ1GEXUY5t9 IPafqVKk+AL6VIWYHILR6LHQ62kaeOOMFYcsy9zydw1oqTFGFXtkL5xtdncvTSi6 BeyWd9HBEPmLI3QSvpkaqUi5rFJzk9R+k/vxUwG+jwA7E6N1uhN7Z03yiZo2rdDo SqsPTR6XGypkPGx9GTV2KCSypG+gfsn1+WpLYPuSENcupZbOpOkhvrd8mtsmEwyM pEk+HCLOeS9wRWs2J87keLFfg1YcPysmgjnsGCemaaJWwBLRlb2Ml1sn0LrlLoJa yjTtXAdtlkv5KYh13w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:39 2026 by rpki-client