This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/K9ufri5Q3nxAmvyjVpiYmaZvuoI.roa File: K9ufri5Q3nxAmvyjVpiYmaZvuoI.roa (raw, json) Hash identifier: Hhm0xrjFo9cETa5OmcI6x/TS+dETw7mzeiNdYxg8IA4= Subject key identifier: 2B:DB:9F:AE:2E:50:DE:7C:40:9A:FC:A3:56:98:98:99:A6:6F:BA:82 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA54D91FF0664C001C1D5B7FBCA603A Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/K9ufri5Q3nxAmvyjVpiYmaZvuoI.roa Signing time: Thu 01 Jan 2026 22:19:49 +0000 ROA not before: Thu 01 Jan 2026 22:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207371 IP address blocks: 77.85.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:4d:91:ff:06:64:c0:01:c1:d5:b7:fb:ca:60:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bdb9fae2e50de7c409afca356989899a66fba82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:4d:33:9e:fd:65:bc:2f:16:f0:34:7f:8a: df:d9:69:fa:84:7f:94:94:72:cc:a3:15:c3:c3:b1: ef:59:9d:ee:9b:35:74:9a:8a:86:22:20:c6:aa:23: 52:05:da:ed:a2:4e:2d:b6:b2:c5:6b:a8:bd:38:6a: 71:ef:7e:0f:38:d9:b5:a0:39:9e:3a:97:49:07:a1: 52:36:17:5d:7b:18:09:d6:d5:36:e9:33:b5:ca:dd: e1:8e:95:0a:c2:c8:f5:1c:b2:07:38:9f:29:f5:be: ee:fc:5a:96:8d:a2:d9:1e:40:70:de:42:5b:2f:57: 5c:45:f4:c8:b4:df:93:fe:0f:ea:5a:7e:16:2d:0c: c8:02:07:d9:de:9d:ee:4a:cf:92:85:b4:53:43:22: 1a:10:e9:38:4d:d0:d2:6f:c3:58:d7:84:52:cf:4c: e5:f1:1f:8b:20:30:53:50:60:a0:33:a6:f3:5b:37: 24:dd:80:75:21:7e:13:2c:a0:0b:91:5e:2e:42:02: 63:2a:c1:f7:75:f3:74:8b:e4:6f:34:14:a0:4d:ba: 2f:67:bb:09:ed:8c:f4:53:9b:91:b2:1c:0f:7d:1c: a1:99:de:43:65:42:8b:4b:db:14:e8:70:c2:d9:54: 2e:0b:79:60:aa:75:90:37:7e:c3:6f:0a:a4:69:39: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DB:9F:AE:2E:50:DE:7C:40:9A:FC:A3:56:98:98:99:A6:6F:BA:82 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/K9ufri5Q3nxAmvyjVpiYmaZvuoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.85.171.0/24 Signature Algorithm: sha256WithRSAEncryption 28:88:7b:0d:90:b6:6b:eb:be:69:4d:61:5c:a5:7c:f1:bf:67: 05:d9:a3:cc:13:98:44:a2:f0:c7:83:fe:94:a4:7c:37:2e:99: 54:00:18:24:70:05:e5:d0:1a:5a:c2:87:18:fa:e7:aa:4f:3b: 8c:8f:4b:99:61:14:14:a1:72:c7:52:a9:64:97:83:76:e5:89: b0:76:f4:47:05:c6:7d:c3:0c:d9:bb:b1:88:f4:0e:6f:39:c4: eb:21:fb:67:30:08:82:db:26:0b:e6:58:42:0f:2e:30:00:29: ae:66:da:0a:92:33:61:1e:a4:80:3c:b0:92:e5:18:82:7b:c4: ae:93:85:16:97:fb:7d:7a:95:31:b3:02:53:19:6e:7e:5a:23: 3d:8e:8c:59:47:db:50:3f:09:0f:1a:8f:b7:f4:5e:16:2e:77: cc:66:6f:ab:b2:0b:33:6c:08:42:95:d1:99:91:57:4b:5e:91: 6d:47:9f:ec:56:22:bb:e2:09:ba:09:b7:e4:3d:1e:14:92:91: 03:e1:07:c0:c2:aa:13:c1:c5:79:5f:4d:5d:db:09:4e:2f:79: af:f2:08:ba:7c:fd:8a:91:b5:99:72:77:c3:20:66:f2:f3:8e: 79:49:ea:f7:18:29:61:40:65:86:40:62:c7:3a:d3:74:a7:12: 7c:50:58:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pU2R/wZkwAHB1bf7ymA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmRiOWZhZTJlNTBkZTdjNDA5YWZjYTM1Njk4OTg5OWE2NmZiYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst1NM579ZbwvFvA0f4rf2Wn6hH+U lHLMoxXDw7HvWZ3umzV0moqGIiDGqiNSBdrtok4ttrLFa6i9OGpx734PONm1oDme OpdJB6FSNhddexgJ1tU26TO1yt3hjpUKwsj1HLIHOJ8p9b7u/FqWjaLZHkBw3kJb L1dcRfTItN+T/g/qWn4WLQzIAgfZ3p3uSs+ShbRTQyIaEOk4TdDSb8NY14RSz0zl 8R+LIDBTUGCgM6bzWzck3YB1IX4TLKALkV4uQgJjKsH3dfN0i+RvNBSgTbovZ7sJ 7Yz0U5uRshwPfRyhmd5DZUKLS9sU6HDC2VQuC3lgqnWQN37DbwqkaTk3gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCvbn64uUN58QJr8o1aYmJmmb7qCMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvSzl1ZnJpNVEzbnhBbXZ5alZwaVltYVp2dW9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVWrMA0G CSqGSIb3DQEBCwUAA4IBAQAoiHsNkLZr675pTWFcpXzxv2cF2aPME5hEovDHg/6U pHw3LplUABgkcAXl0BpawocY+ueqTzuMj0uZYRQUoXLHUqlkl4N25YmwdvRHBcZ9 wwzZu7GI9A5vOcTrIftnMAiC2yYL5lhCDy4wACmuZtoKkjNhHqSAPLCS5RiCe8Su k4UWl/t9epUxswJTGW5+WiM9joxZR9tQPwkPGo+39F4WLnfMZm+rsgszbAhCldGZ kVdLXpFtR5/sViK74gm6CbfkPR4UkpED4QfAwqoTwcV5X01d2wlOL3mv8gi6fP2K kbWZcnfDIGby8455Ser3GClhQGWGQGLHOtN0pxJ8UFg1 -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:58 2026 by rpki-client