This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/4nwTdSMvC3B2lG2I0a3z0eITR_U.roa File: 4nwTdSMvC3B2lG2I0a3z0eITR_U.roa (raw, json) Hash identifier: 4Uf7fHPsn5qiTNzR/kEHf1yHK5kxq37/oLZT2/BjakQ= Subject key identifier: E2:7C:13:75:23:2F:0B:70:76:94:6D:88:D1:AD:F3:D1:E2:13:47:F5 Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755 Certificate serial: 019B78A2F56FDF043EDCBC1FF400549DA4D5 Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/4nwTdSMvC3B2lG2I0a3z0eITR_U.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43272 IP address blocks: 77.247.248.0/21 maxlen: 21 77.247.248.0/24 maxlen: 24 77.247.249.0/24 maxlen: 24 77.247.250.0/24 maxlen: 24 77.247.251.0/24 maxlen: 24 77.247.252.0/24 maxlen: 24 77.247.253.0/24 maxlen: 24 77.247.254.0/24 maxlen: 24 77.247.255.0/24 maxlen: 24 185.177.28.0/22 maxlen: 22 185.177.28.0/24 maxlen: 24 185.177.29.0/24 maxlen: 24 185.177.30.0/24 maxlen: 24 185.177.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f5:6f:df:04:3e:dc:bc:1f:f4:00:54:9d:a4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e27c1375232f0b7076946d88d1adf3d1e21347f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:16:d4:b2:2a:6e:1f:80:a5:a5:29:8a:2f: e6:1e:ae:c3:a7:a7:62:ef:f7:1c:23:ac:5c:00:04: 9d:a8:83:0a:c1:5a:12:56:ff:4b:7c:ee:cf:6e:39: a5:6a:e7:d4:30:26:6d:21:12:dc:20:fe:9b:a1:75: 45:72:7c:ef:ed:15:7b:fe:32:5d:0a:56:75:1c:10: 3b:d0:8b:82:23:28:99:f7:49:04:f6:57:a4:5d:33: 6c:42:8a:e5:f0:44:f5:8d:07:97:41:9c:52:d2:d1: 63:f9:83:32:7c:09:8e:05:51:35:87:49:5e:54:d9: f9:46:ce:b7:41:02:67:18:cb:7a:5e:59:56:60:38: 36:03:59:7c:3e:f4:96:8e:10:f4:2f:2d:12:7c:09: e8:1f:68:bd:8a:39:39:75:0c:36:b6:9e:ec:26:60: d9:6d:61:7e:b7:65:db:8f:2e:bc:fa:39:f6:ba:26: 9f:d4:d9:d6:7c:9a:a3:c4:1f:16:23:ce:c4:4c:4c: 4e:0d:cc:e7:1d:35:1b:dd:aa:34:67:e5:e3:97:3c: b5:19:51:a7:aa:13:fe:ed:60:66:bb:a4:f5:dd:97: 06:dd:8c:20:fb:78:d3:27:28:cc:e7:d8:ef:6f:4b: 64:39:d1:71:eb:de:f9:80:c8:4e:96:53:78:a4:0a: ee:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7C:13:75:23:2F:0B:70:76:94:6D:88:D1:AD:F3:D1:E2:13:47:F5 X509v3 Authority Key Identifier: keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/4nwTdSMvC3B2lG2I0a3z0eITR_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.247.248.0/21 185.177.28.0/22 Signature Algorithm: sha256WithRSAEncryption a9:5c:1b:66:da:07:71:22:0c:8a:7f:df:99:6d:f2:0d:18:82: eb:eb:86:e9:6d:74:76:47:5e:ba:88:79:1d:e1:59:81:b9:f2: 37:1e:7e:0c:d6:89:0a:e5:6b:fe:a4:08:fb:7a:85:3e:5b:11: 9c:fc:d3:97:7f:53:7f:5a:a2:f7:97:5e:5b:da:55:66:72:91: 3b:95:7b:0f:f9:1f:c9:90:07:0e:fb:2b:2e:50:83:2e:63:80: 02:14:25:94:31:35:4f:c0:5f:ff:71:70:64:60:88:d9:50:4a: 36:b3:dc:2f:0d:36:a3:40:3c:a3:b8:84:46:98:4c:ee:47:1e: e0:d1:38:62:8e:1f:fc:61:74:3d:c3:4b:23:61:c6:8a:64:fd: f0:18:94:84:18:28:bb:d7:94:32:f0:5e:23:30:26:4f:b8:92: f6:05:60:ce:bf:92:1d:48:99:9d:00:77:6a:ab:0d:44:2a:c1: 59:6d:fd:ce:4d:99:75:aa:b3:e4:13:71:35:ef:a2:61:eb:29: 11:6f:e2:96:a2:dd:71:4b:c7:48:2c:f4:4a:3d:e0:03:8c:52: 11:db:a0:f0:b9:44:57:79:0a:53:c7:a3:bc:66:d5:00:e3:23: fe:f2:20:af:1d:32:9d:96:61:fa:06:bb:39:56:0e:0a:c2:39: 75:88:9d:c8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ovVv3wQ+3Lwf9ABUnaTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMTZkY2JmNzhjNjJkNTFkYTkwNzZhMGQwNmFkYWQzNmVl M2I3NTUwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjdjMTM3NTIzMmYwYjcwNzY5NDZkODhkMWFkZjNkMWUyMTM0N2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AUW1LIqbh+ApaUpii/mHq7Dp6di 7/ccI6xcAASdqIMKwVoSVv9LfO7PbjmlaufUMCZtIRLcIP6boXVFcnzv7RV7/jJd ClZ1HBA70IuCIyiZ90kE9lekXTNsQorl8ET1jQeXQZxS0tFj+YMyfAmOBVE1h0le VNn5Rs63QQJnGMt6XllWYDg2A1l8PvSWjhD0Ly0SfAnoH2i9ijk5dQw2tp7sJmDZ bWF+t2Xbjy68+jn2uiaf1NnWfJqjxB8WI87ETExODcznHTUb3ao0Z+Xjlzy1GVGn qhP+7WBmu6T13ZcG3Ywg+3jTJyjM59jvb0tkOdFx6975gMhOllN4pArumwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOJ8E3UjLwtwdpRtiNGt89HiE0f1MB8GA1UdIwQY MBaAFJEW3L94xi1R2pB2oNBq2tNu47dVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xMmY1ZDEtZTc2MC00MTAxLWFmMjUt N2ZjNDlkYTUzZDEzLzEvNG53VGRTTXZDM0IybEcySTBhM3owZUlUUl9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xMmY1ZDEtZTc2MC00MTAxLWFmMjUtN2ZjNDlkYTUzZDEz LzEva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDTff4AwQC ubEcMA0GCSqGSIb3DQEBCwUAA4IBAQCpXBtm2gdxIgyKf9+ZbfINGILr64bpbXR2 R166iHkd4VmBufI3Hn4M1okK5Wv+pAj7eoU+WxGc/NOXf1N/WqL3l15b2lVmcpE7 lXsP+R/JkAcO+ysuUIMuY4ACFCWUMTVPwF//cXBkYIjZUEo2s9wvDTajQDyjuIRG mEzuRx7g0Thijh/8YXQ9w0sjYcaKZP3wGJSEGCi715Qy8F4jMCZPuJL2BWDOv5Id SJmdAHdqqw1EKsFZbf3OTZl1qrPkE3E176Jh6ykRb+KWot1xS8dILPRKPeADjFIR 26DwuURXeQpTx6O8ZtUA4yP+8iCvHTKdlmH6Brs5Vg4Kwjl1iJ3I -----END CERTIFICATE-----Generated at Tue Feb 10 07:22:34 2026 by rpki-client