This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ub3_xXCqSDb4kN9wMdlzsI7oPxQ.roa File: ub3_xXCqSDb4kN9wMdlzsI7oPxQ.roa (raw, json) Hash identifier: GJO6QjXLjOfr5Iv9d1ph8RhzI9Z4NmCWHQkusa8M8lI= Subject key identifier: B9:BD:FF:C5:70:AA:48:36:F8:90:DF:70:31:D9:73:B0:8E:E8:3F:14 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84E478903B49743F74E9957C39E585 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ub3_xXCqSDb4kN9wMdlzsI7oPxQ.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 77.242.145.0/24 maxlen: 24 77.242.149.0/24 maxlen: 24 77.242.157.0/24 maxlen: 24 88.209.200.0/24 maxlen: 24 88.209.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e4:78:90:3b:49:74:3f:74:e9:95:7c:39:e5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9bdffc570aa4836f890df7031d973b08ee83f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:68:94:f1:87:de:36:85:59:4f:79:2b:79: ae:b7:20:c2:34:bd:95:2b:8d:32:c6:3d:70:e0:ee: 5f:08:be:96:75:76:31:4f:5c:2a:5a:1d:ea:b7:eb: 17:72:37:1d:c7:5e:bf:1b:82:91:65:d8:73:84:ef: e3:91:79:0e:77:a2:ab:56:a5:09:98:a4:ea:6a:c9: 3a:8d:f3:08:14:d1:98:75:b0:04:0f:a5:46:44:90: 83:c4:bc:20:9f:d5:33:92:05:61:3c:6f:13:2f:5c: c8:e4:1b:f0:03:aa:51:f3:b0:f3:92:0e:16:b0:b6: 3c:99:51:ac:e2:de:8a:5c:17:b7:ca:c7:46:7b:02: f8:f9:12:f0:6f:b1:5d:b9:47:64:e4:4f:77:42:87: 4b:4a:7c:94:79:aa:82:c6:e7:d9:d7:e7:ce:bd:e8: f0:05:a6:60:6f:04:8a:12:f0:f8:8f:df:61:41:73: 03:da:ab:b9:ee:6a:e2:2f:34:af:e4:dd:68:27:05: 87:88:a7:9e:00:a7:43:88:c4:14:3e:8f:b5:1b:d1: f5:9e:de:1e:64:0e:bc:69:80:65:e1:51:9d:ab:8e: 0a:e5:29:3c:9a:e6:6a:21:d5:d9:51:47:dd:da:94: f5:3a:1d:86:06:3e:d7:30:94:ec:28:28:f2:61:1e: ab:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BD:FF:C5:70:AA:48:36:F8:90:DF:70:31:D9:73:B0:8E:E8:3F:14 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/ub3_xXCqSDb4kN9wMdlzsI7oPxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.242.145.0/24 77.242.149.0/24 77.242.157.0/24 88.209.200.0/24 88.209.220.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:78:45:43:de:1a:59:0e:37:00:3b:31:91:0a:92:3b:35:6e: 69:02:10:16:08:92:ae:63:8f:39:fc:0a:6c:67:71:44:cf:98: 66:87:01:f1:7d:02:b6:2c:44:34:a2:90:bd:73:0c:65:bf:ef: 87:8d:ac:52:56:90:ef:44:46:75:27:27:25:cc:6c:50:83:fa: 69:95:22:37:45:d0:72:10:f0:da:0f:e0:e9:e3:ed:a6:dd:f5: 76:a0:3e:56:8e:4d:7e:57:30:1c:5b:b9:37:7e:e5:ae:60:2f: f4:ac:74:08:b7:29:72:30:44:4d:a4:8d:9c:8b:ef:51:0d:2e: 67:6c:17:15:3f:c4:65:84:4f:e2:b9:9a:a8:f2:f9:e8:86:5a: 46:2a:31:27:64:33:a0:99:aa:d9:53:2a:16:9f:05:be:54:54: 50:e5:1c:b3:7e:fd:c1:e3:b9:97:a9:db:ab:c4:9b:d9:d8:7f: 66:eb:8b:0d:f5:b8:fa:4d:aa:b5:d5:4d:3a:f6:14:7f:2e:bb: 06:92:31:78:a7:81:f4:ff:04:d6:26:96:f8:47:2e:68:f4:59: 82:7b:45:e4:f5:c5:9d:9c:cc:03:4a:61:ba:af:3d:1e:7e:d3: 45:c5:d8:2d:93:9e:e0:b3:08:82:09:ad:85:ad:0f:a4:e5:c0: dd:6a:79:9e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/hOR4kDtJdD906ZV8OeWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWJkZmZjNTcwYWE0ODM2Zjg5MGRmNzAzMWQ5NzNiMDhlZTgzZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcxolPGH3jaFWU95K3mutyDCNL2V K40yxj1w4O5fCL6WdXYxT1wqWh3qt+sXcjcdx16/G4KRZdhzhO/jkXkOd6KrVqUJ mKTqask6jfMIFNGYdbAED6VGRJCDxLwgn9UzkgVhPG8TL1zI5BvwA6pR87Dzkg4W sLY8mVGs4t6KXBe3ysdGewL4+RLwb7FduUdk5E93QodLSnyUeaqCxufZ1+fOvejw BaZgbwSKEvD4j99hQXMD2qu57mriLzSv5N1oJwWHiKeeAKdDiMQUPo+1G9H1nt4e ZA68aYBl4VGdq44K5Sk8muZqIdXZUUfd2pT1Oh2GBj7XMJTsKCjyYR6rcQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLm9/8Vwqkg2+JDfcDHZc7CO6D8UMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvdWIzX3hYQ3FTRGI0a045d01kbHpzSTdvUHhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATfKRAwQA TfKVAwQATfKdAwQAWNHIAwQAWNHcMA0GCSqGSIb3DQEBCwUAA4IBAQCdeEVD3hpZ DjcAOzGRCpI7NW5pAhAWCJKuY485/ApsZ3FEz5hmhwHxfQK2LEQ0opC9cwxlv++H jaxSVpDvREZ1JyclzGxQg/pplSI3RdByEPDaD+Dp4+2m3fV2oD5Wjk1+VzAcW7k3 fuWuYC/0rHQItylyMERNpI2ci+9RDS5nbBcVP8RlhE/iuZqo8vnohlpGKjEnZDOg marZUyoWnwW+VFRQ5Ryzfv3B47mXqdurxJvZ2H9m64sN9bj6Taq11U069hR/LrsG kjF4p4H0/wTWJpb4Ry5o9FmCe0Xk9cWdnMwDSmG6rz0eftNFxdgtk57gswiCCa2F rQ+k5cDdanme -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:50 2026 by rpki-client