This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/ihmrebXRZJfViRX4wxqlQD4yY5w.roa File: ihmrebXRZJfViRX4wxqlQD4yY5w.roa (raw, json) Hash identifier: zbtiR4hVHidDupnjoUs6IoiKzo0tQZSkjWxtKWEtK+o= Subject key identifier: 8A:19:AB:79:B5:D1:64:97:D5:89:15:F8:C3:1A:A5:40:3E:32:63:9C Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca Certificate serial: 019B7D5B31D4BFC9F0716275224B309F61A4 Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/ihmrebXRZJfViRX4wxqlQD4yY5w.roa Signing time: Fri 02 Jan 2026 06:18:07 +0000 ROA not before: Fri 02 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204383 IP address blocks: 77.78.77.0/24 maxlen: 24 77.78.78.0/23 maxlen: 23 77.78.94.0/24 maxlen: 24 77.78.112.0/22 maxlen: 22 77.78.116.0/23 maxlen: 23 81.0.230.0/24 maxlen: 24 81.0.242.0/23 maxlen: 23 82.208.4.0/23 maxlen: 23 82.208.26.0/24 maxlen: 24 82.208.32.0/23 maxlen: 23 82.208.60.0/22 maxlen: 22 85.239.253.0/24 maxlen: 24 109.123.206.0/23 maxlen: 23 109.123.208.0/23 maxlen: 23 217.11.232.0/23 maxlen: 23 217.11.243.0/24 maxlen: 24 217.11.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:31:d4:bf:c9:f0:71:62:75:22:4b:30:9f:61:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca Validity Not Before: Jan 2 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a19ab79b5d16497d58915f8c31aa5403e32639c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a6:32:8a:c8:32:dd:8c:26:88:98:37:a8:50: fc:d9:ff:38:71:47:74:b2:9f:40:1c:59:a8:44:0a: d1:ec:f0:88:96:c2:de:8c:31:d9:5b:80:40:12:4a: 50:6a:21:b5:46:6a:1b:8e:ac:8b:f8:6d:e7:97:e5: 3c:e7:e5:d6:c4:70:a0:db:db:d6:ff:5b:10:0c:c0: 8f:d4:60:6a:05:f2:d2:4b:ec:c3:e3:99:e0:af:bb: f1:0d:a5:44:1f:44:2a:15:e6:3e:f4:66:10:76:63: b6:10:88:0c:40:9f:36:5c:b5:17:f4:40:3c:bf:e7: ba:42:b6:ee:08:30:b0:6d:19:e0:ee:5e:5d:a2:91: ca:57:1b:74:83:92:44:be:b8:99:82:e9:fb:28:77: 89:aa:88:71:3d:31:63:d4:e9:d7:79:10:db:27:cc: fe:45:9f:6f:2a:b3:0a:ad:00:32:61:b6:58:2f:d8: 4d:74:b3:65:94:e9:3e:22:b8:49:80:01:2c:03:71: 55:9c:2e:d6:5c:25:9e:6c:e1:81:2e:3d:97:d4:17: b8:4f:c9:1c:62:c6:b3:9b:98:45:46:8f:29:19:f5: a6:4d:df:f2:b2:7e:88:86:d0:6d:23:ba:ac:22:8a: 63:af:3e:9a:ae:5c:96:4f:10:88:7e:18:2b:f1:c5: 04:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:19:AB:79:B5:D1:64:97:D5:89:15:F8:C3:1A:A5:40:3E:32:63:9C X509v3 Authority Key Identifier: keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/ihmrebXRZJfViRX4wxqlQD4yY5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.78.77.0-77.78.79.255 77.78.94.0/24 77.78.112.0-77.78.117.255 81.0.230.0/24 81.0.242.0/23 82.208.4.0/23 82.208.26.0/24 82.208.32.0/23 82.208.60.0/22 85.239.253.0/24 109.123.206.0-109.123.209.255 217.11.232.0/23 217.11.243.0/24 217.11.246.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:5b:7e:63:0c:4c:45:88:46:51:42:1c:a0:65:83:6d:71:9c: 3c:db:c2:3e:45:38:88:b8:4c:dc:0c:1e:d1:99:3b:2f:0c:81: 32:2d:67:35:64:0c:16:64:8e:c2:7b:6a:49:a4:ce:fb:08:af: 07:82:ca:d2:82:ec:e3:24:75:7b:22:7f:fe:27:d7:9c:63:ec: 94:02:4b:05:56:ab:9b:71:f3:a3:36:ec:42:e9:cf:ab:b7:f0: f5:85:1a:b8:c5:e5:f0:5d:0f:9a:77:a3:43:74:e6:51:1a:33: 36:8c:e3:75:4b:ed:3e:1e:1c:f9:41:a1:56:7c:82:6a:72:24: da:25:bc:24:a7:78:b7:2f:29:f4:76:e4:5d:b4:ff:e5:29:15: 99:92:8f:2d:b9:39:c7:16:fc:49:03:0a:64:57:6d:1f:a7:b1: 97:ae:eb:b2:61:bf:6e:50:8f:9b:f8:1e:b5:dd:f6:5d:49:7c: de:bd:05:27:55:4f:bc:47:d2:8f:1f:de:de:89:b1:a1:ff:8b: 88:90:17:cf:1f:8c:d6:10:13:e4:ec:62:82:5a:81:f4:bb:42: fd:9c:48:32:15:d3:cd:2e:71:ee:96:16:60:1a:bf:1e:f2:03: a9:14:32:65:97:90:0d:fe:e1:9c:27:92:71:b1:c2:08:3e:c6: 8b:dc:7b:e2 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt9WzHUv8nwcWJ1Ikswn2GkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NDg0N2Y4NjY3ZDUyZmEyY2Y5Y2Y5YWZjYzQzYTA3OTE1 NTc1Y2EwHhcNMjYwMTAyMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTE5YWI3OWI1ZDE2NDk3ZDU4OTE1ZjhjMzFhYTU0MDNlMzI2MzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16Yyisgy3YwmiJg3qFD82f84cUd0 sp9AHFmoRArR7PCIlsLejDHZW4BAEkpQaiG1RmobjqyL+G3nl+U85+XWxHCg29vW /1sQDMCP1GBqBfLSS+zD45ngr7vxDaVEH0QqFeY+9GYQdmO2EIgMQJ82XLUX9EA8 v+e6QrbuCDCwbRng7l5dopHKVxt0g5JEvriZgun7KHeJqohxPTFj1OnXeRDbJ8z+ RZ9vKrMKrQAyYbZYL9hNdLNllOk+IrhJgAEsA3FVnC7WXCWebOGBLj2X1Be4T8kc Ysazm5hFRo8pGfWmTd/ysn6IhtBtI7qsIopjrz6arlyWTxCIfhgr8cUEwwIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFIoZq3m10WSX1YkV+MMapUA+MmOcMB8GA1UdIwQY MBaAFBdIR/hmfVL6LPnPmvzEOgeRVXXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2Ut MTQ1NGZmZTYxODJjLzEvaWhtcmViWFJaSmZWaVJYNHd4cWxRRDR5WTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2UtMTQ1NGZmZTYxODJj LzEvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbDAMAwQATU5N AwQETU5AAwQATU5eMAwDBARNTnADBAFNTnQDBABRAOYDBAFRAPIDBAFS0AQDBABS 0BoDBAFS0CADBAJS0DwDBABV7/0wDAMEAW17zgMEAW170AMEAdkL6AMEANkL8wME AdkL9jANBgkqhkiG9w0BAQsFAAOCAQEAjlt+YwxMRYhGUUIcoGWDbXGcPNvCPkU4 iLhM3Awe0Zk7LwyBMi1nNWQMFmSOwntqSaTO+wivB4LK0oLs4yR1eyJ//ifXnGPs lAJLBVarm3HzozbsQunPq7fw9YUauMXl8F0PmnejQ3TmURozNozjdUvtPh4c+UGh VnyCanIk2iW8JKd4ty8p9HbkXbT/5SkVmZKPLbk5xxb8SQMKZFdtH6exl67rsmG/ blCPm/getd32XUl83r0FJ1VPvEfSjx/e3omxof+LiJAXzx+M1hAT5OxiglqB9LtC /ZxIMhXTzS5x7pYWYBq/HvIDqRQyZZeQDf7hnCeScbHCCD7Gi9x74g== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:01 2026 by rpki-client