This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/O5-viCq097sF3_cL7F4wSdYUS9U.roa File: O5-viCq097sF3_cL7F4wSdYUS9U.roa (raw, json) Hash identifier: eSmerYP3We0BPChWFCRb6LjkZ9xAJBhVg995TBWuALU= Subject key identifier: 3B:9F:AF:88:2A:B4:F7:BB:05:DF:F7:0B:EC:5E:30:49:D6:14:4B:D5 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84D249DC5294E76E96B1542EBA4B94 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/O5-viCq097sF3_cL7F4wSdYUS9U.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216271 IP address blocks: 77.95.172.0/24 maxlen: 24 185.168.28.0/22 maxlen: 22 185.201.136.0/22 maxlen: 22 2a06:b3c0::/29 maxlen: 29 2a06:b440::/29 maxlen: 29 2a06:cac0::/29 maxlen: 29 2a0e:7780::/29 maxlen: 29 2a0f:d480::/29 maxlen: 29 2a0f:e000::/29 maxlen: 29 2a11:1140::/29 maxlen: 29 2a11:2f40::/29 maxlen: 29 2a11:3b40::/29 maxlen: 29 2a11:7240::/29 maxlen: 29 2a11:9600::/29 maxlen: 29 2a11:dcc0::/29 maxlen: 29 2a11:f140::/29 maxlen: 29 2a12:440::/29 maxlen: 29 2a12:ec0::/29 maxlen: 29 2a12:1900::/29 maxlen: 29 2a12:28c0::/29 maxlen: 29 2a12:6640::/29 maxlen: 29 2a12:6740::/29 maxlen: 29 2a12:6b80::/29 maxlen: 29 2a12:6f40::/29 maxlen: 29 2a12:8ec0::/29 maxlen: 29 2a12:ccc0::/29 maxlen: 29 2a12:e240::/29 maxlen: 29 2a12:f0c0::/29 maxlen: 29 2a13:ba00::/29 maxlen: 29 2a13:dac0::/29 maxlen: 29 2a14:c0::/29 maxlen: 29 2a14:140::/29 maxlen: 29 2a14:1c0::/29 maxlen: 29 2a14:800::/29 maxlen: 29 2a14:f40::/29 maxlen: 29 2a14:7e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d2:49:dc:52:94:e7:6e:96:b1:54:2e:ba:4b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b9faf882ab4f7bb05dff70bec5e3049d6144bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:f4:68:c6:d2:33:39:4b:b8:9b:e3:c0:16: fe:0c:7b:10:fa:a8:4b:b2:ae:5d:0c:07:aa:7d:da: 83:08:e2:30:12:e3:26:69:5d:f4:16:8a:d6:a0:32: 50:10:c4:48:37:60:43:26:f7:db:36:2f:7e:09:49: 5a:53:3e:c3:51:9e:b7:0b:19:b9:ba:7e:af:3d:8b: 28:70:71:d1:09:2b:da:f3:6c:02:0e:4a:f4:ce:67: f6:e0:9d:6f:5e:36:53:66:7e:ac:33:fd:ad:29:23: 05:dd:b6:98:32:7e:c6:dc:26:a9:8f:01:ff:cf:88: ad:18:d2:48:d5:be:4d:40:91:27:bf:5f:25:54:5e: 4d:d7:42:3c:c5:08:6b:c6:7f:a6:29:3b:6b:50:3b: 5d:6b:16:f8:d2:f7:5a:6b:a5:78:25:14:da:01:4d: 2a:77:bb:0c:e8:8c:97:45:fa:d2:3e:ff:15:2e:50: 9c:78:d2:57:9e:3a:b0:14:54:6c:b0:09:b0:ee:ab: 0f:3b:1d:a8:80:af:3e:56:c3:40:77:29:90:5f:d2: ca:9e:7f:5e:db:93:b3:7d:1a:45:ed:83:08:d2:30: 4a:e0:54:ce:0f:76:cc:6e:05:ff:02:12:ac:d9:88: 34:aa:e3:47:54:14:87:36:69:76:67:7d:84:e3:48: 12:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9F:AF:88:2A:B4:F7:BB:05:DF:F7:0B:EC:5E:30:49:D6:14:4B:D5 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/O5-viCq097sF3_cL7F4wSdYUS9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.172.0/24 185.168.28.0/22 185.201.136.0/22 IPv6: 2a06:b3c0::/29 2a06:b440::/29 2a06:cac0::/29 2a0e:7780::/29 2a0f:d480::/29 2a0f:e000::/29 2a11:1140::/29 2a11:2f40::/29 2a11:3b40::/29 2a11:7240::/29 2a11:9600::/29 2a11:dcc0::/29 2a11:f140::/29 2a12:440::/29 2a12:ec0::/29 2a12:1900::/29 2a12:28c0::/29 2a12:6640::/29 2a12:6740::/29 2a12:6b80::/29 2a12:6f40::/29 2a12:8ec0::/29 2a12:ccc0::/29 2a12:e240::/29 2a12:f0c0::/29 2a13:ba00::/29 2a13:dac0::/29 2a14:c0::/29 2a14:140::/29 2a14:1c0::/29 2a14:800::/29 2a14:f40::/29 2a14:7e00::/29 Signature Algorithm: sha256WithRSAEncryption 04:70:e7:ee:4a:fa:17:3a:6a:21:0f:de:1f:84:2e:f6:7c:7d: 70:42:27:72:03:ec:b2:e3:65:26:45:3e:58:bc:8e:0e:10:0e: 91:e2:83:34:35:e7:8e:2a:56:dc:2c:0b:36:1a:73:78:6f:a7: 7b:ef:f3:1f:c2:8c:9a:bb:df:a8:7f:87:8a:e6:c9:ca:8d:fe: e9:1e:a1:38:0b:23:68:6a:ce:98:85:b6:a9:9d:b1:44:db:b0: ea:91:16:89:f0:bd:1c:9f:75:c0:c8:d3:d0:0b:a1:a0:c4:12: 4f:72:80:22:ea:d0:01:5e:55:d7:fa:f3:13:62:b5:d5:bc:c4: 88:a9:cd:3e:8e:03:6a:a8:4d:17:2c:9f:2a:54:58:d0:99:36: 17:91:8a:5e:36:36:a1:47:0d:d5:8a:8f:a6:8e:bf:ed:aa:f8: 24:43:b1:e9:e1:4c:dc:45:af:f3:14:1e:45:0f:b2:f7:d0:0c: bf:b7:3b:85:4f:91:d2:0f:a4:00:9b:cf:54:cb:01:03:37:8e: f3:ee:a3:75:13:90:3b:d0:9f:4f:16:c7:02:66:9e:d1:37:ca: 57:54:c2:20:ab:38:fd:0c:4e:d5:3b:e8:1a:ef:fa:3d:69:0b: 13:f8:3d:65:2e:f0:3c:6b:db:e2:2c:1d:1c:14:b6:e1:8a:53: c6:f4:89:76 -----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgISAZt/hNJJ3FKU526WsVQuukuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjlmYWY4ODJhYjRmN2JiMDVkZmY3MGJlYzVlMzA0OWQ2MTQ0YmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FL0aMbSMzlLuJvjwBb+DHsQ+qhL sq5dDAeqfdqDCOIwEuMmaV30ForWoDJQEMRIN2BDJvfbNi9+CUlaUz7DUZ63Cxm5 un6vPYsocHHRCSva82wCDkr0zmf24J1vXjZTZn6sM/2tKSMF3baYMn7G3CapjwH/ z4itGNJI1b5NQJEnv18lVF5N10I8xQhrxn+mKTtrUDtdaxb40vdaa6V4JRTaAU0q d7sM6IyXRfrSPv8VLlCceNJXnjqwFFRssAmw7qsPOx2ogK8+VsNAdymQX9LKnn9e 25OzfRpF7YMI0jBK4FTOD3bMbgX/AhKs2Yg0quNHVBSHNml2Z32E40gSywIDAQAB o4IDDDCCAwgwHQYDVR0OBBYEFDufr4gqtPe7Bd/3C+xeMEnWFEvVMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvTzUtdmlDcTA5N3NGM19jTDdGNHdTZFlVUzlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIAYIKwYBBQUHAQcBAf8EggEPMIIBCzAYBAIAATASAwQA TV+sAwQCuagcAwQCucmIMIHuBAIAAjCB5wMFAyoGs8ADBQMqBrRAAwUDKgbKwAMF AyoOd4ADBQMqD9SAAwUDKg/gAAMFAyoREUADBQMqES9AAwUDKhE7QAMFAyoRckAD BQMqEZYAAwUDKhHcwAMFAyoR8UADBQMqEgRAAwUDKhIOwAMFAyoSGQADBQMqEijA AwUDKhJmQAMFAyoSZ0ADBQMqEmuAAwUDKhJvQAMFAyoSjsADBQMqEszAAwUDKhLi QAMFAyoS8MADBQMqE7oAAwUDKhPawAMFAyoUAMADBQMqFAFAAwUDKhQBwAMFAyoU CAADBQMqFA9AAwUDKhR+ADANBgkqhkiG9w0BAQsFAAOCAQEABHDn7kr6FzpqIQ/e H4Qu9nx9cEIncgPssuNlJkU+WLyODhAOkeKDNDXnjipW3CwLNhpzeG+ne+/zH8KM mrvfqH+HiubJyo3+6R6hOAsjaGrOmIW2qZ2xRNuw6pEWifC9HJ91wMjT0AuhoMQS T3KAIurQAV5V1/rzE2K11bzEiKnNPo4DaqhNFyyfKlRY0Jk2F5GKXjY2oUcN1YqP po6/7ar4JEOx6eFM3EWv8xQeRQ+y99AMv7c7hU+R0g+kAJvPVMsBAzeO8+6jdROQ O9CfTxbHAmae0TfKV1TCIKs4/QxO1TvoGu/6PWkLE/g9ZS7wPGvb4iwdHBS24YpT xvSJdg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:32 2026 by rpki-client