This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/1I5pS-KyF91INpSvz4UTgvSLQM0.roa File: 1I5pS-KyF91INpSvz4UTgvSLQM0.roa (raw, json) Hash identifier: kUre6FGJxo0oVZmAH7QT5SEnqBChJ7h9HJs3PKswLaY= Subject key identifier: D4:8E:69:4B:E2:B2:17:DD:48:36:94:AF:CF:85:13:82:F4:8B:40:CD Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9 Certificate serial: 019B7EA6954723E062561B64246713B960DC Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/1I5pS-KyF91INpSvz4UTgvSLQM0.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42943 IP address blocks: 77.240.80.0/22 maxlen: 22 77.240.80.0/24 maxlen: 24 77.240.81.0/24 maxlen: 24 77.240.82.0/24 maxlen: 24 77.240.83.0/24 maxlen: 24 77.240.86.0/23 maxlen: 23 77.240.86.0/24 maxlen: 24 77.240.87.0/24 maxlen: 24 77.240.88.0/21 maxlen: 21 77.240.88.0/24 maxlen: 24 77.240.89.0/24 maxlen: 24 77.240.90.0/24 maxlen: 24 77.240.91.0/24 maxlen: 24 77.240.92.0/24 maxlen: 24 77.240.93.0/24 maxlen: 24 77.240.94.0/24 maxlen: 24 77.240.95.0/24 maxlen: 24 85.184.232.0/22 maxlen: 22 85.184.232.0/24 maxlen: 24 85.184.233.0/24 maxlen: 24 85.184.234.0/24 maxlen: 24 85.184.235.0/24 maxlen: 24 85.184.236.0/23 maxlen: 23 185.109.176.0/22 maxlen: 22 185.109.176.0/24 maxlen: 24 185.109.177.0/24 maxlen: 24 185.109.178.0/24 maxlen: 24 185.109.179.0/24 maxlen: 24 2a0c:1a40::/29 maxlen: 29 2a0c:1a40::/31 maxlen: 31 2a0c:1a40:1000::/36 maxlen: 36 2a0c:1a40:2000::/36 maxlen: 36 2a0c:1a41:1000::/36 maxlen: 36 2a0c:1a41:2000::/36 maxlen: 36 2a0c:1a42::/31 maxlen: 31 2a0c:1a44::/31 maxlen: 31 2a0c:1a46::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:95:47:23:e0:62:56:1b:64:24:67:13:b9:60:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d48e694be2b217dd483694afcf851382f48b40cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:88:a2:25:94:f1:98:7c:71:d5:e2:c5:fd: b8:9b:25:68:25:a1:2d:d3:e3:db:ee:21:24:32:d6: 51:2b:ad:e0:e6:08:da:03:97:91:7e:37:c3:42:28: f7:93:da:54:16:83:01:00:ad:f7:3f:31:a4:f2:d7: 72:7b:89:98:b1:3c:d2:09:fd:f9:c3:50:5d:27:81: 27:a0:d8:f8:36:9d:6d:30:e4:13:43:e1:cd:6b:ac: 8c:2a:3b:2f:7a:a7:03:ed:87:6c:ea:7d:93:11:55: c0:61:5a:76:41:ab:e4:52:e5:ed:2f:3b:7d:4f:7b: ca:eb:38:60:3f:c0:4f:8c:e7:13:42:bd:04:22:4f: 38:24:fe:64:11:61:51:5a:58:83:b9:e3:12:ca:8f: 23:1a:80:3c:90:c5:e3:64:19:f3:0c:a9:05:32:0a: 9b:77:56:1b:a6:1a:40:61:23:f6:61:5b:90:45:f9: 66:3a:e6:15:29:4d:08:0b:c2:ee:fb:1e:23:d8:ae: 54:16:94:4f:10:7f:40:84:aa:c8:70:a2:97:49:7c: b8:25:f0:cb:a3:bf:b6:a9:e5:d4:a1:be:65:bf:69: 81:9d:ea:35:db:59:c7:0b:77:ba:e8:8a:16:08:d0: fe:1e:c8:3a:ae:e0:b0:cb:0a:b7:3c:69:b9:94:a6: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8E:69:4B:E2:B2:17:DD:48:36:94:AF:CF:85:13:82:F4:8B:40:CD X509v3 Authority Key Identifier: keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/1I5pS-KyF91INpSvz4UTgvSLQM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.80.0/22 77.240.86.0-77.240.95.255 85.184.232.0-85.184.237.255 185.109.176.0/22 IPv6: 2a0c:1a40::/29 Signature Algorithm: sha256WithRSAEncryption 39:6f:9f:84:88:da:1f:97:42:46:40:e3:52:b6:d0:36:ad:f7: e7:de:7b:c2:f1:d4:07:f0:a0:ed:d0:d4:5b:17:5d:d5:9e:fe: d4:7b:cd:03:8d:77:4f:f5:52:d5:6e:de:6b:8a:46:37:59:6e: 9b:77:7f:be:1c:74:76:98:af:6f:39:ce:a1:db:21:25:97:45: be:b6:93:61:cd:fa:74:2e:c9:8c:16:95:1f:2c:d0:3d:83:6e: e5:6d:d1:67:68:2e:58:e5:9c:8e:be:2c:3b:c8:ab:7e:e0:be: 5c:5a:bb:69:cc:0e:83:e1:d6:f5:68:e3:76:a4:b1:3c:43:32: 72:ed:e2:17:66:32:73:6c:df:9a:1e:09:84:a8:9d:ce:6d:70: ad:99:f5:74:82:1f:4c:29:ce:a1:43:d5:25:f3:1a:31:a3:08: f4:de:80:13:e6:10:be:8e:eb:50:54:4c:0b:a5:88:d6:01:3d: 55:f4:d1:a2:18:a8:bd:29:51:5d:3b:93:ae:98:b9:b7:1c:82: d6:b1:07:df:42:72:44:09:df:01:e2:8f:5a:5f:41:22:83:14: ca:34:fa:75:92:0e:61:74:f4:ba:83:9a:d6:28:28:5c:70:95: 3c:93:ed:3d:52:f4:cd:dc:06:5d:f1:74:49:81:d3:d8:a5:ce: aa:1d:72:b3 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt+ppVHI+BiVhtkJGcTuWDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZGNiNjk1YzcwZGI0Yjk2MzcwNjAwNzUwOTE4YTRiM2E4 YTIxYTkwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDhlNjk0YmUyYjIxN2RkNDgzNjk0YWZjZjg1MTM4MmY0OGI0MGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUqIoiWU8Zh8cdXixf24myVoJaEt 0+Pb7iEkMtZRK63g5gjaA5eRfjfDQij3k9pUFoMBAK33PzGk8tdye4mYsTzSCf35 w1BdJ4EnoNj4Np1tMOQTQ+HNa6yMKjsveqcD7Yds6n2TEVXAYVp2QavkUuXtLzt9 T3vK6zhgP8BPjOcTQr0EIk84JP5kEWFRWliDueMSyo8jGoA8kMXjZBnzDKkFMgqb d1YbphpAYSP2YVuQRflmOuYVKU0IC8Lu+x4j2K5UFpRPEH9AhKrIcKKXSXy4JfDL o7+2qeXUob5lv2mBneo121nHC3e66IoWCND+Hsg6ruCwywq3PGm5lKYZUQIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFNSOaUvishfdSDaUr8+FE4L0i0DNMB8GA1UdIwQY MBaAFMnctpXHDbS5Y3BgB1CRiks6iiGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTIt ZWNhOTc4YzNjYjg1LzEvMUk1cFMtS3lGOTFJTnBTdno0VVRndlNMUU0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wMjIyZmUtZGNjOC00YTdkLWJmYTItZWNhOTc4YzNjYjg1 LzEveWR5MmxjY050TGxqY0dBSFVKR0tTenFLSWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAuBAIAATAoAwQCTfBQMAwD BAFN8FYDBAVN8EAwDAMEA1W46AMEAVW47AMEArltsDANBAIAAjAHAwUDKgwaQDAN BgkqhkiG9w0BAQsFAAOCAQEAOW+fhIjaH5dCRkDjUrbQNq335957wvHUB/Cg7dDU Wxdd1Z7+1HvNA413T/VS1W7ea4pGN1lum3d/vhx0dpivbznOodshJZdFvraTYc36 dC7JjBaVHyzQPYNu5W3RZ2guWOWcjr4sO8irfuC+XFq7acwOg+HW9WjjdqSxPEMy cu3iF2Yyc2zfmh4JhKidzm1wrZn1dIIfTCnOoUPVJfMaMaMI9N6AE+YQvo7rUFRM C6WI1gE9VfTRohiovSlRXTuTrpi5txyC1rEH30JyRAnfAeKPWl9BIoMUyjT6dZIO YXT0uoOa1igoXHCVPJPtPVL0zdwGXfF0SYHT2KXOqh1ysw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:50 2026 by rpki-client