This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1uidBuAGq_h4h6xoN-4Zm3GuRiA.roa File: 1uidBuAGq_h4h6xoN-4Zm3GuRiA.roa (raw, json) Hash identifier: mfQXjH1H8dgh7mrr3eaGTkde5/Q+VlqBMu/n/tKiwzY= Subject key identifier: D6:E8:9D:06:E0:06:AB:F8:78:87:AC:68:37:EE:19:9B:71:AE:46:20 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA54FD4E5EC1ED018695DFDEC19C75A Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1uidBuAGq_h4h6xoN-4Zm3GuRiA.roa Signing time: Thu 01 Jan 2026 22:19:50 +0000 ROA not before: Thu 01 Jan 2026 22:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208579 IP address blocks: 77.85.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:4f:d4:e5:ec:1e:d0:18:69:5d:fd:ec:19:c7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6e89d06e006abf87887ac6837ee199b71ae4620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:dc:52:2d:da:4e:78:02:ad:74:ec:08:a7: 92:ed:a4:51:f0:00:d2:43:f3:48:f3:f5:18:8b:11: ed:8f:4f:a8:5e:65:0d:35:47:f4:28:83:76:99:7f: 71:eb:f6:db:47:a2:cb:b9:b4:f1:26:2d:d1:16:d5: 6a:30:35:4e:b2:5e:09:31:4f:51:60:69:7e:5e:04: 40:23:74:d4:ba:a7:48:a6:62:3b:02:6d:20:05:4c: db:31:d7:ed:fe:69:8d:ee:1f:ad:c8:a7:ab:d1:52: 19:e3:f1:11:3a:32:69:b4:29:67:f0:df:90:4b:71: 67:54:c9:34:5a:10:50:4a:97:98:54:d2:19:c5:25: 4b:1d:5b:36:9b:3b:b3:7b:9d:19:36:2a:5a:4d:af: 49:b3:78:45:9a:8d:21:09:03:43:63:ee:b0:cc:bc: 82:93:8c:6e:f2:3e:13:2a:b3:4d:f9:62:7b:b8:b9: 8b:7e:88:a5:85:4a:5c:1b:d9:31:b6:fa:74:a9:07: 75:6b:6d:1d:25:ac:74:b8:80:66:eb:40:73:b1:c5: 4f:66:81:24:7e:18:d7:31:72:78:d9:35:10:eb:61: 61:01:11:43:1e:44:5f:f1:62:00:60:31:60:7d:bc: cc:58:fd:00:ad:f0:06:97:65:8f:93:51:1d:d7:0a: e8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E8:9D:06:E0:06:AB:F8:78:87:AC:68:37:EE:19:9B:71:AE:46:20 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/1uidBuAGq_h4h6xoN-4Zm3GuRiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.85.206.0/24 Signature Algorithm: sha256WithRSAEncryption ae:65:a0:e6:ed:83:ce:e7:54:8c:5d:a7:74:fb:12:7f:33:51: 40:3e:1b:88:9b:29:fc:9b:cb:36:b9:58:24:49:45:9d:b4:c6: 67:5b:8c:24:81:b0:cb:42:2b:a3:8c:a1:0b:98:eb:4c:89:8c: 75:57:70:ba:8c:a3:6e:f0:a6:93:ec:d0:94:c4:d9:54:3b:d1: 82:63:a1:0c:28:02:22:59:df:88:c0:3b:15:8b:9b:98:28:63: 27:a7:d1:74:09:22:1f:57:77:73:c7:6a:0a:a6:76:02:77:29: 26:cf:ee:87:79:d5:f3:19:7b:d8:1a:cb:0a:47:7a:7d:90:1f: 09:26:9a:a1:58:7e:be:2c:fb:29:71:fb:fd:9d:8e:d9:09:87: c7:41:35:fd:8d:95:b9:bd:c1:5e:07:64:9e:3f:45:cc:57:29: 36:2f:3f:0a:39:3a:71:fd:51:01:17:79:d2:f6:0e:5b:ee:3c: 31:05:7b:55:ae:74:5e:14:23:dc:1e:3d:b8:70:7c:0c:49:3f: 4a:41:f9:b2:9d:65:58:e2:01:95:a3:4b:d9:11:73:48:c1:ea: b4:9d:eb:fd:ee:24:f1:14:d3:cb:23:38:dc:5c:82:3a:56:83: c2:c5:f1:ab:8b:87:f2:26:83:d3:69:2e:b7:58:3a:52:eb:78: 96:66:e4:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pU/U5ewe0BhpXf3sGcdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmU4OWQwNmUwMDZhYmY4Nzg4N2FjNjgzN2VlMTk5YjcxYWU0NjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzancUi3aTngCrXTsCKeS7aRR8ADS Q/NI8/UYixHtj0+oXmUNNUf0KIN2mX9x6/bbR6LLubTxJi3RFtVqMDVOsl4JMU9R YGl+XgRAI3TUuqdIpmI7Am0gBUzbMdft/mmN7h+tyKer0VIZ4/EROjJptCln8N+Q S3FnVMk0WhBQSpeYVNIZxSVLHVs2mzuze50ZNipaTa9Js3hFmo0hCQNDY+6wzLyC k4xu8j4TKrNN+WJ7uLmLfoilhUpcG9kxtvp0qQd1a20dJax0uIBm60BzscVPZoEk fhjXMXJ42TUQ62FhARFDHkRf8WIAYDFgfbzMWP0ArfAGl2WPk1Ed1wroUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbonQbgBqv4eIesaDfuGZtxrkYgMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvMXVpZEJ1QUdxX2g0aDZ4b04tNFptM0d1UmlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVXOMA0G CSqGSIb3DQEBCwUAA4IBAQCuZaDm7YPO51SMXad0+xJ/M1FAPhuImyn8m8s2uVgk SUWdtMZnW4wkgbDLQiujjKELmOtMiYx1V3C6jKNu8KaT7NCUxNlUO9GCY6EMKAIi Wd+IwDsVi5uYKGMnp9F0CSIfV3dzx2oKpnYCdykmz+6HedXzGXvYGssKR3p9kB8J JpqhWH6+LPspcfv9nY7ZCYfHQTX9jZW5vcFeB2SeP0XMVyk2Lz8KOTpx/VEBF3nS 9g5b7jwxBXtVrnReFCPcHj24cHwMST9KQfmynWVY4gGVo0vZEXNIweq0nev97iTx FNPLIzjcXII6VoPCxfGri4fyJoPTaS63WDpS63iWZuQL -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:53 2026 by rpki-client