This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dV1c-Dhg0_1Y_4MKRRa02xeIe5s.roa File: dV1c-Dhg0_1Y_4MKRRa02xeIe5s.roa (raw, json) Hash identifier: ptRPcVCgVfiPNp66hcSPp0ZX3t1hhqtsPX4x8xCX6JE= Subject key identifier: 75:5D:5C:F8:38:60:D3:FD:58:FF:83:0A:45:16:B4:DB:17:88:7B:9B Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76D9E8CB13286D4481316823C838F Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dV1c-Dhg0_1Y_4MKRRa02xeIe5s.roa Signing time: Fri 02 Jan 2026 12:21:00 +0000 ROA not before: Fri 02 Jan 2026 12:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34584 IP address blocks: 77.82.128.0/20 maxlen: 20 85.114.64.0/19 maxlen: 19 85.114.80.0/21 maxlen: 21 85.114.84.0/22 maxlen: 22 85.114.85.0/24 maxlen: 24 87.225.0.0/17 maxlen: 17 87.225.0.0/18 maxlen: 18 87.225.44.0/23 maxlen: 23 87.225.48.0/21 maxlen: 21 87.225.64.0/18 maxlen: 18 87.225.72.0/21 maxlen: 21 87.225.80.0/20 maxlen: 20 87.225.122.0/24 maxlen: 24 92.37.128.0/17 maxlen: 17 92.37.128.0/18 maxlen: 18 92.37.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6d:9e:8c:b1:32:86:d4:48:13:16:82:3c:83:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=755d5cf83860d3fd58ff830a4516b4db17887b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:ea:15:16:31:ff:d9:55:b5:a7:fd:37:0a: e8:8c:f4:11:27:e5:7e:e7:ca:4f:ab:dc:bf:16:d1: f8:9e:35:48:08:9f:1f:00:dd:3d:91:7a:ce:93:c4: 65:6e:8d:6e:67:19:15:29:b6:0a:a0:74:65:78:81: 8b:da:b6:77:7d:f8:0a:e6:5b:07:43:75:b7:25:ae: 87:d5:9b:bc:d1:fe:a9:78:32:3b:1c:af:83:86:33: 20:f6:d3:e0:3c:cf:de:07:c4:27:5a:5c:cd:d5:5f: f5:a1:2e:5e:e7:50:0c:28:77:61:12:f7:7c:b2:76: d2:3a:78:cd:85:a4:b3:5b:5e:6b:01:48:b1:db:6d: 5c:9e:dd:b7:ef:8e:c4:61:53:a1:76:aa:75:f3:dd: ed:e0:cd:db:c5:01:93:81:4e:a1:3e:44:1a:a4:08: e8:21:04:29:71:e0:50:d6:77:2f:1c:98:bc:8b:d7: 78:dd:39:39:45:dc:2d:67:59:d2:88:12:ea:44:15: 46:56:08:db:9e:7c:81:dc:48:ca:30:f3:a9:18:18: d0:5f:57:5f:fa:b6:e7:ba:6b:1a:70:48:4e:4c:bb: 87:0e:bd:2e:e6:21:51:46:f1:ed:4a:0d:7a:41:47: 05:0f:a6:d2:3d:a3:2a:5c:7c:a4:d5:be:21:30:ea: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5D:5C:F8:38:60:D3:FD:58:FF:83:0A:45:16:B4:DB:17:88:7B:9B X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/dV1c-Dhg0_1Y_4MKRRa02xeIe5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.82.128.0/20 85.114.64.0/19 87.225.0.0/17 92.37.128.0/17 Signature Algorithm: sha256WithRSAEncryption 49:d8:4d:9a:fc:90:1b:5a:08:da:7f:64:05:35:91:f6:4f:95: 9f:42:40:68:d3:37:84:8f:bb:25:eb:c5:6c:2d:a1:ec:07:6f: 85:64:9b:58:c0:ee:37:c8:3e:b0:85:5e:1e:b0:c4:4e:08:3f: 2e:96:b9:f1:2b:81:8a:42:dc:49:ad:8c:24:2b:ba:b4:36:96: f4:95:37:06:ff:a2:20:c2:ba:fc:18:73:97:fb:97:0e:1d:56: 80:23:fc:5c:66:9b:95:e4:67:e5:3d:aa:2a:de:c5:24:cf:39: b1:63:b7:8e:5c:15:c5:3d:15:00:9e:4f:7c:05:8f:91:71:4a: aa:1d:2a:24:08:33:74:de:34:da:5f:8d:b7:cf:67:d9:a4:13: bb:34:f2:3f:16:ad:f6:81:4f:0a:02:67:c6:ea:56:0f:77:4b: 29:fe:92:d3:ab:ad:00:9b:db:43:5c:12:ca:77:80:16:d0:c1: d6:0c:cd:e9:25:ef:30:7c:e9:16:43:42:92:e8:45:4f:c4:8b: 38:36:63:40:7b:27:47:1a:ba:49:60:5c:c8:6b:2b:7e:b9:39: 35:48:e5:07:d3:4e:a3:4d:c6:f3:a0:6f:18:98:7e:62:c4:f9: 5a:ec:1f:04:80:84:08:dd:78:c7:e2:f2:1c:f1:85:7c:ec:1a: af:e2:83:83 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+p22ejLEyhtRIExaCPIOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTVkNWNmODM4NjBkM2ZkNThmZjgzMGE0NTE2YjRkYjE3ODg3YjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YnqFRYx/9lVtaf9NwrojPQRJ+V+ 58pPq9y/FtH4njVICJ8fAN09kXrOk8Rlbo1uZxkVKbYKoHRleIGL2rZ3ffgK5lsH Q3W3Ja6H1Zu80f6peDI7HK+DhjMg9tPgPM/eB8QnWlzN1V/1oS5e51AMKHdhEvd8 snbSOnjNhaSzW15rAUix221cnt23747EYVOhdqp1893t4M3bxQGTgU6hPkQapAjo IQQpceBQ1ncvHJi8i9d43Tk5RdwtZ1nSiBLqRBVGVgjbnnyB3EjKMPOpGBjQX1df +rbnumsacEhOTLuHDr0u5iFRRvHtSg16QUcFD6bSPaMqXHyk1b4hMOqHMQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHVdXPg4YNP9WP+DCkUWtNsXiHubMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvZFYxYy1EaGcwXzFZXzRNS1JSYTAyeGVJZTVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQETVKAAwQF VXJAAwQHV+EAAwQHXCWAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ2E2a/JAbWgjaf2QF NZH2T5WfQkBo0zeEj7sl68VsLaHsB2+FZJtYwO43yD6whV4esMROCD8ulrnxK4GK QtxJrYwkK7q0Npb0lTcG/6Igwrr8GHOX+5cOHVaAI/xcZpuV5GflPaoq3sUkzzmx Y7eOXBXFPRUAnk98BY+RcUqqHSokCDN03jTaX423z2fZpBO7NPI/Fq32gU8KAmfG 6lYPd0sp/pLTq60Am9tDXBLKd4AW0MHWDM3pJe8wfOkWQ0KS6EVPxIs4NmNAeydH GrpJYFzIayt+uTk1SOUH006jTcbzoG8YmH5ixPla7B8EgIQI3XjH4vIc8YV87Bqv 4oOD -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:29 2026 by rpki-client