This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/DU8OixuQSBT4wDmFxWVtjuElegU.roa File: DU8OixuQSBT4wDmFxWVtjuElegU.roa (raw, json) Hash identifier: fAA3Up2hh08gKhdkTQ9YAofCRj3IfUFUPtWpnzTKD+E= Subject key identifier: 0D:4F:0E:8B:1B:90:48:14:F8:C0:39:85:C5:65:6D:8E:E1:25:7A:05 Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968 Certificate serial: 019B797E293D2DAE9EFD15EB50371DC1F646 Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/DU8OixuQSBT4wDmFxWVtjuElegU.roa Signing time: Thu 01 Jan 2026 12:17:49 +0000 ROA not before: Thu 01 Jan 2026 12:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197876 IP address blocks: 77.73.80.0/21 maxlen: 24 2a03:ab80::/32 maxlen: 32 2a03:ab80:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:29:3d:2d:ae:9e:fd:15:eb:50:37:1d:c1:f6:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968 Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d4f0e8b1b904814f8c03985c5656d8ee1257a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:75:9f:b0:a7:df:07:c8:cc:86:b4:6f:86: bd:79:17:64:da:14:15:41:0d:7f:11:7c:b2:ae:33: d4:53:9b:11:fc:d8:a9:f7:9c:71:72:10:2d:ef:3a: 19:e6:ad:37:57:ab:1c:2e:54:77:fa:ee:c2:8a:4c: 9a:4d:d2:2d:80:6d:5f:e4:96:a8:b2:86:39:08:1a: b7:0b:a9:eb:27:84:2c:ca:b5:e4:e9:3b:3d:37:d2: ee:c1:e2:4e:2a:b4:fa:bb:c9:b2:ad:29:ee:7d:0e: 54:78:b4:db:43:57:d2:c3:d3:c0:e8:e1:c7:73:3e: 0c:33:ad:2b:24:ea:86:03:42:9b:83:45:8a:57:64: 3a:fe:4f:10:64:5b:1b:5d:11:57:bd:06:7f:b2:be: c2:2d:4b:d6:7f:67:6e:45:7b:cd:c3:7f:24:25:ac: 7f:f4:59:e5:81:27:49:fd:1b:15:b7:f7:32:d1:30: 31:53:82:0e:bf:26:5a:16:e0:02:27:e9:cc:35:5b: a3:62:11:10:fa:fc:be:73:a5:16:4a:6a:58:56:5d: 6c:69:54:67:82:e6:e8:26:66:1c:2d:08:5b:91:77: aa:fd:8d:40:1a:fb:20:d9:86:5f:6c:ad:bf:4b:94: ff:d8:56:8b:56:82:45:29:6a:f3:28:dd:d9:53:c5: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4F:0E:8B:1B:90:48:14:F8:C0:39:85:C5:65:6D:8E:E1:25:7A:05 X509v3 Authority Key Identifier: keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/DU8OixuQSBT4wDmFxWVtjuElegU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.80.0/21 IPv6: 2a03:ab80::/32 Signature Algorithm: sha256WithRSAEncryption 1c:82:10:0b:9e:c9:85:2f:1f:12:87:45:e0:0f:99:33:3d:13: 2d:bc:ee:3b:69:07:2d:1e:17:7f:90:fa:3d:df:a5:71:dd:30: e9:72:8e:93:21:38:be:f6:52:96:2e:3b:98:9e:94:13:a3:c2: d4:70:ee:6d:1f:d9:34:cc:bb:23:c4:23:3f:76:2c:d1:ac:47: d1:64:20:92:9b:8c:ec:4c:64:3a:f8:e6:a7:5f:11:95:6e:50: 01:c6:96:e9:a2:fa:44:fa:12:68:d6:7d:8d:f1:96:4c:a8:48: 6e:26:c1:ce:d0:44:bd:b7:a8:9a:dd:9b:67:93:4a:3e:ce:3d: dc:09:b2:81:07:37:de:f2:cc:dc:fc:82:0d:3e:2a:df:72:59: 1c:40:de:b8:e5:75:21:80:cc:76:83:75:e9:e6:47:ce:83:20: cf:47:cf:f0:f0:34:a4:db:9a:76:d4:1d:99:c1:40:02:2b:28: b5:d0:e9:98:74:cf:23:5c:b4:17:86:17:f4:ce:bc:38:32:d2: 03:41:cc:00:ab:3b:4f:68:2a:da:a2:c0:13:2c:52:a7:c4:4e: e7:f5:ea:c9:7b:07:13:f0:b2:98:b1:58:cd:9d:c8:56:4b:a7: 79:7c:91:d9:ea:52:49:1f:66:0e:e7:77:40:d0:5a:23:4e:f8: 02:dc:9a:35 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fik9La6e/RXrUDcdwfZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MGIxZjg3NzJjNmVmNDg0ZTJjZDJkNjYyNjNmMmVmOThm YTM5NjgwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDRmMGU4YjFiOTA0ODE0ZjhjMDM5ODVjNTY1NmQ4ZWUxMjU3YTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXl1n7Cn3wfIzIa0b4a9eRdk2hQV QQ1/EXyyrjPUU5sR/Nip95xxchAt7zoZ5q03V6scLlR3+u7CikyaTdItgG1f5Jao soY5CBq3C6nrJ4QsyrXk6Ts9N9LuweJOKrT6u8myrSnufQ5UeLTbQ1fSw9PA6OHH cz4MM60rJOqGA0Kbg0WKV2Q6/k8QZFsbXRFXvQZ/sr7CLUvWf2duRXvNw38kJax/ 9FnlgSdJ/RsVt/cy0TAxU4IOvyZaFuACJ+nMNVujYhEQ+vy+c6UWSmpYVl1saVRn guboJmYcLQhbkXeq/Y1AGvsg2YZfbK2/S5T/2FaLVoJFKWrzKN3ZU8Xt4wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA1PDosbkEgU+MA5hcVlbY7hJXoFMB8GA1UdIwQY MBaAFGQLH4dyxu9ITizS1mJj8u+Y+jloMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQt Mzg3YWZhMGE1MzRmLzEvRFU4T2l4dVFTQlQ0d0RtRnhXVnRqdUVsZWdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQtMzg3YWZhMGE1MzRm LzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDTUlQMA0E AgACMAcDBQAqA6uAMA0GCSqGSIb3DQEBCwUAA4IBAQAcghALnsmFLx8Sh0XgD5kz PRMtvO47aQctHhd/kPo936Vx3TDpco6TITi+9lKWLjuYnpQTo8LUcO5tH9k0zLsj xCM/dizRrEfRZCCSm4zsTGQ6+OanXxGVblABxpbpovpE+hJo1n2N8ZZMqEhuJsHO 0ES9t6ia3Ztnk0o+zj3cCbKBBzfe8szc/IINPirfclkcQN645XUhgMx2g3Xp5kfO gyDPR8/w8DSk25p21B2ZwUACKyi10OmYdM8jXLQXhhf0zrw4MtIDQcwAqztPaCra osATLFKnxE7n9erJewcT8LKYsVjNnchWS6d5fJHZ6lJJH2YO53dA0FojTvgC3Jo1 -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:52 2026 by rpki-client