This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/O-KPpaLxX3zxTTMaSxOHxWMjPwA.roa File: O-KPpaLxX3zxTTMaSxOHxWMjPwA.roa (raw, json) Hash identifier: 0pQ2h4z2SL8hjYjPnGVnHeMv5KcEmo0XbgSaP9LFvxk= Subject key identifier: 3B:E2:8F:A5:A2:F1:5F:7C:F1:4D:33:1A:4B:13:87:C5:63:23:3F:00 Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e Certificate serial: 019B79ED5B35DF50CEE924E2657AC67E8009 Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/O-KPpaLxX3zxTTMaSxOHxWMjPwA.roa Signing time: Thu 01 Jan 2026 14:19:16 +0000 ROA not before: Thu 01 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41931 IP address blocks: 77.46.4.0/22 maxlen: 22 77.46.8.0/21 maxlen: 21 77.46.16.0/20 maxlen: 20 77.46.32.0/19 maxlen: 19 77.46.64.0/20 maxlen: 20 77.46.80.0/20 maxlen: 20 77.46.96.0/20 maxlen: 20 77.46.112.0/20 maxlen: 20 195.177.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5b:35:df:50:ce:e9:24:e2:65:7a:c6:7e:80:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3be28fa5a2f15f7cf14d331a4b1387c563233f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:81:36:a4:96:73:47:4d:9d:2a:82:a0:9f: 0a:32:3a:6b:fe:ca:ac:d4:17:9c:23:0a:36:60:9d: 83:d4:de:5b:ab:96:79:f4:5f:23:91:58:bc:e2:cc: cd:bb:44:c8:a0:44:f1:5c:5c:a3:54:f1:01:c3:be: 7b:83:cc:c2:94:17:2a:f8:fd:3e:b8:f7:6b:68:7d: d3:ed:ae:7b:80:f3:aa:a3:bc:67:9c:3a:74:d3:6a: c8:1a:30:fd:d4:64:e8:f8:02:d0:f9:7f:db:eb:6d: 13:57:58:24:fb:de:a8:db:13:19:7a:35:5c:ec:9a: 66:98:b4:61:3d:8b:b5:4e:d6:c0:32:3c:2c:2d:3b: 08:34:94:05:c0:f7:37:f0:f0:c6:91:36:7f:85:e7: 79:8d:0a:20:97:e1:53:54:6e:d5:34:18:1b:57:0e: b0:0d:64:2b:86:b4:b1:fb:ee:f9:90:cb:93:90:db: 14:24:60:e2:ca:75:6c:6f:ce:c1:94:6f:39:82:61: 82:c1:1b:5c:62:02:ee:56:06:83:b4:18:35:a3:a5: 69:d2:c8:bf:25:8e:b1:71:c5:cd:37:87:fa:5c:05: 22:9e:fd:b3:97:dc:e2:53:ad:49:5a:c3:b1:cb:03: fd:67:50:66:25:db:f2:90:07:cf:bb:75:3e:a8:19: ef:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E2:8F:A5:A2:F1:5F:7C:F1:4D:33:1A:4B:13:87:C5:63:23:3F:00 X509v3 Authority Key Identifier: keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/O-KPpaLxX3zxTTMaSxOHxWMjPwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.46.4.0-77.46.127.255 195.177.196.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:3f:58:e3:13:11:67:c4:86:0d:f1:d2:3c:0f:56:38:f1:c2: 3c:49:d0:23:37:bf:76:90:2d:ba:1c:6a:75:ea:ce:d6:44:b3: 96:76:22:78:4c:cc:59:c7:e0:fd:c6:93:f5:59:c6:bf:ac:05: 3e:ae:92:37:f1:eb:ad:a3:af:3e:7d:52:d0:00:eb:d9:c0:b9: a9:33:cf:b6:3d:e0:f9:26:8f:70:c3:29:72:af:23:b7:b0:b7: 60:34:e4:3d:d8:1f:2b:0b:32:1c:23:95:2e:be:dd:d4:3d:9e: 8e:53:e6:da:87:f4:d5:fd:c9:51:24:34:9a:ce:1e:fa:38:ad: 6b:14:01:f5:02:87:42:59:7b:b4:f7:54:f3:96:66:6e:9d:02: 85:e8:00:59:e7:2c:47:03:83:1e:cc:b4:04:57:2c:65:65:2c: af:f8:9a:4e:aa:cc:22:23:9e:9e:ec:1f:63:03:c0:e8:5f:5b: 65:69:54:87:1f:5b:96:0d:1b:73:3a:26:35:cd:27:ad:b8:4c: 19:3f:36:e0:f9:3f:9e:06:e3:4f:6f:5a:df:da:71:e4:9c:07: 23:6a:5c:05:59:d9:56:67:d6:de:4c:ce:e8:77:07:a2:fb:d0: 4d:38:8b:54:24:e4:89:d2:77:6c:84:b7:16:8c:3e:2b:1a:43: b5:c7:46:d9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt57Vs131DO6STiZXrGfoAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOGUxNzQxMWUwMTAwYzkxNGIwNDBkNTE0YzI4ZTFkN2Qz Njk5MWUwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmUyOGZhNWEyZjE1ZjdjZjE0ZDMzMWE0YjEzODdjNTYzMjMzZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/+BNqSWc0dNnSqCoJ8KMjpr/sqs 1BecIwo2YJ2D1N5bq5Z59F8jkVi84szNu0TIoETxXFyjVPEBw757g8zClBcq+P0+ uPdraH3T7a57gPOqo7xnnDp002rIGjD91GTo+ALQ+X/b620TV1gk+96o2xMZejVc 7JpmmLRhPYu1TtbAMjwsLTsINJQFwPc38PDGkTZ/hed5jQogl+FTVG7VNBgbVw6w DWQrhrSx++75kMuTkNsUJGDiynVsb87BlG85gmGCwRtcYgLuVgaDtBg1o6Vp0si/ JY6xccXNN4f6XAUinv2zl9ziU61JWsOxywP9Z1BmJdvykAfPu3U+qBnvuQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDvij6Wi8V988U0zGksTh8VjIz8AMB8GA1UdIwQY MBaAFByOF0EeAQDJFLBA1RTCjh19NpkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt NmI0OWEzODkzYzc5LzEvTy1LUHBhTHhYM3p4VFRNYVN4T0h4V01qUHdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5 LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJNLgQD BAdNLgADBAHDscQwDQYJKoZIhvcNAQELBQADggEBADs/WOMTEWfEhg3x0jwPVjjx wjxJ0CM3v3aQLbocanXqztZEs5Z2InhMzFnH4P3Gk/VZxr+sBT6ukjfx662jrz59 UtAA69nAuakzz7Y94Pkmj3DDKXKvI7ewt2A05D3YHysLMhwjlS6+3dQ9no5T5tqH 9NX9yVEkNJrOHvo4rWsUAfUCh0JZe7T3VPOWZm6dAoXoAFnnLEcDgx7MtARXLGVl LK/4mk6qzCIjnp7sH2MDwOhfW2VpVIcfW5YNG3M6JjXNJ624TBk/NuD5P54G409v Wt/aceScByNqXAVZ2VZn1t5Mzuh3B6L70E04i1Qk5InSd2yEtxaMPisaQ7XHRtk= -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:44 2026 by rpki-client