This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/U4sjdHd-gX-XqAKv1_i_s77A5sw.roa File: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (raw, json) Hash identifier: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0= Subject key identifier: 53:8B:23:74:77:7E:81:7F:97:A8:02:AF:D7:F8:BF:B3:BE:C0:E6:CC Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Certificate serial: 019B7EA69E16E0C42689950AF89653D7646D Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/U4sjdHd-gX-XqAKv1_i_s77A5sw.roa Signing time: Fri 02 Jan 2026 12:20:07 +0000 ROA not before: Fri 02 Jan 2026 12:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45007 IP address blocks: 77.220.196.0/22 maxlen: 22 185.230.4.0/22 maxlen: 22 185.230.4.0/23 maxlen: 23 185.230.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9e:16:e0:c4:26:89:95:0a:f8:96:53:d7:64:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c Validity Not Before: Jan 2 12:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=538b2374777e817f97a802afd7f8bfb3bec0e6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:7f:d0:58:db:c7:cd:ee:45:ca:1c:8a:a4: 36:d3:ec:db:fc:50:60:f2:af:fb:61:b3:51:6f:3e: 29:10:2c:4c:27:34:f9:c5:4e:55:87:87:90:86:2c: d5:26:17:25:8a:b4:2e:13:86:dd:eb:ca:5c:db:8e: 8b:e7:46:df:f6:34:7c:bd:91:59:82:d4:7d:61:99: 48:51:f5:2f:b2:23:11:ca:22:5a:5e:b2:3e:15:03: 5b:cf:d9:f5:9e:eb:92:58:04:e6:9d:f8:e7:e4:53: 84:35:0d:59:e6:11:73:bb:35:d9:1b:fa:fe:5a:d8: 78:eb:69:a3:42:b4:fd:5e:ab:ab:1a:e7:0c:ea:18: 89:79:58:9d:d3:12:d5:ea:da:2d:11:cd:da:0c:a6: ba:24:6d:1e:9a:4d:a1:78:19:11:f6:de:58:65:9f: ee:5a:a6:66:de:78:07:f6:50:49:61:86:73:d3:f2: 34:ec:8a:4a:df:39:7b:5c:c8:5e:c7:18:35:b3:43: 12:3b:a9:82:83:90:b2:33:c5:24:3d:99:e6:44:95: 7b:40:81:02:1a:c6:06:47:8d:46:04:49:24:16:3c: 67:bf:e1:fd:5c:48:a6:ba:6b:ab:51:f4:45:64:85: 1d:b7:72:f2:22:77:5d:b5:bb:b8:0c:e2:78:71:15: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8B:23:74:77:7E:81:7F:97:A8:02:AF:D7:F8:BF:B3:BE:C0:E6:CC X509v3 Authority Key Identifier: keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/U4sjdHd-gX-XqAKv1_i_s77A5sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.220.196.0/22 185.230.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:c7:94:b2:2a:8c:99:04:39:6c:aa:60:90:62:e3:e8:20:a8: 34:3f:4e:d6:59:41:1d:03:69:dc:64:9e:53:e2:c1:98:38:2d: 07:2a:49:69:c8:f6:17:d7:91:16:df:1c:fe:8d:21:2b:c5:45: a5:69:df:2b:69:06:81:93:4b:39:c8:a3:91:5c:e6:38:70:03: 12:22:50:d7:3f:44:7d:30:4f:6d:d6:93:3b:2d:86:d3:cf:5a: 28:c0:f0:27:1e:0f:e1:33:e4:8b:26:cf:d3:dd:93:8d:b3:17: 60:7c:68:43:15:fd:91:82:d9:89:b1:c1:7c:c9:21:08:da:4d: 9a:e5:2e:0c:38:3a:86:d8:c9:c7:44:d0:55:30:0b:14:20:d5: 29:9d:a7:c0:68:a9:de:0f:de:47:30:7b:1c:d0:30:fe:c3:ef: 15:01:3a:4e:c6:f3:61:70:a8:6b:0e:b3:8f:07:17:d5:ab:38: 46:f8:ad:5a:00:1b:1d:ff:5c:8d:dc:46:08:02:67:1e:d9:af: ef:f8:2e:a8:c0:1b:2e:98:f2:cf:85:8b:6b:71:cc:11:b6:ff: 19:3a:50:dc:7a:7b:68:62:e0:98:b0:96:3e:15:c0:39:a8:75: f5:c4:d6:dc:e4:9e:57:eb:18:a6:6c:fe:c4:da:58:a8:09:07: b6:c6:a1:e1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pp4W4MQmiZUK+JZT12RtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Nzc4MjBlYTYxYjExYjViMzg1OWFiNGE0YmM3ZWMwYTdi NzM4OGMwHhcNMjYwMTAyMTIyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzhiMjM3NDc3N2U4MTdmOTdhODAyYWZkN2Y4YmZiM2JlYzBlNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW9/0Fjbx83uRcociqQ20+zb/FBg 8q/7YbNRbz4pECxMJzT5xU5Vh4eQhizVJhclirQuE4bd68pc246L50bf9jR8vZFZ gtR9YZlIUfUvsiMRyiJaXrI+FQNbz9n1nuuSWATmnfjn5FOENQ1Z5hFzuzXZG/r+ Wth462mjQrT9XqurGucM6hiJeVid0xLV6totEc3aDKa6JG0emk2heBkR9t5YZZ/u WqZm3ngH9lBJYYZz0/I07IpK3zl7XMhexxg1s0MSO6mCg5CyM8UkPZnmRJV7QIEC GsYGR41GBEkkFjxnv+H9XEimumurUfRFZIUdt3LyInddtbu4DOJ4cRW5vwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFOLI3R3foF/l6gCr9f4v7O+wObMMB8GA1UdIwQY MBaAFKl3gg6mGxG1s4WatKS8fsCntziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUt YjE4ZDc2YjAxMmU3LzEvVTRzamRIZC1nWC1YcUFLdjFfaV9zNzdBNXN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUtYjE4ZDc2YjAxMmU3 LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTdzEAwQC ueYEMA0GCSqGSIb3DQEBCwUAA4IBAQBax5SyKoyZBDlsqmCQYuPoIKg0P07WWUEd A2ncZJ5T4sGYOC0HKklpyPYX15EW3xz+jSErxUWlad8raQaBk0s5yKORXOY4cAMS IlDXP0R9ME9t1pM7LYbTz1oowPAnHg/hM+SLJs/T3ZONsxdgfGhDFf2RgtmJscF8 ySEI2k2a5S4MODqG2MnHRNBVMAsUINUpnafAaKneD95HMHsc0DD+w+8VATpOxvNh cKhrDrOPBxfVqzhG+K1aABsd/1yN3EYIAmce2a/v+C6owBsumPLPhYtrccwRtv8Z OlDcentoYuCYsJY+FcA5qHX1xNbc5J5X6ximbP7E2lioCQe2xqHh -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:55 2026 by rpki-client