This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3WuKXT8ZbRI8SMwrwMi73RoVZFw.roa File: 3WuKXT8ZbRI8SMwrwMi73RoVZFw.roa (raw, json) Hash identifier: wYdo8Lk8vZgmkn1dcp3b4y96YyntX2TkFJCs4UkABdQ= Subject key identifier: DD:6B:8A:5D:3F:19:6D:12:3C:48:CC:2B:C0:C8:BB:DD:1A:15:64:5C Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F149FF91BC5738194A402F91802EE01 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3WuKXT8ZbRI8SMwrwMi73RoVZFw.roa Signing time: Fri 02 Jan 2026 14:20:16 +0000 ROA not before: Fri 02 Jan 2026 14:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8866 IP address blocks: 77.77.164.0/22 maxlen: 22 77.77.167.0/24 maxlen: 24 87.119.64.0/21 maxlen: 21 87.119.100.0/22 maxlen: 22 87.119.104.0/23 maxlen: 23 87.119.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:9f:f9:1b:c5:73:81:94:a4:02:f9:18:02:ee:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd6b8a5d3f196d123c48cc2bc0c8bbdd1a15645c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:3d:27:22:07:f6:13:50:e3:dd:a5:ab:44: 5d:e2:32:eb:ed:b8:2a:66:fd:7a:50:cc:dc:ca:7c: 68:d8:3f:a1:b5:a1:2d:f5:4c:d3:d0:53:3f:8c:c0: 7a:43:c6:a0:27:22:e4:75:22:2c:f4:ab:d5:af:d7: e7:fb:7b:f9:70:a8:bc:5b:5a:fc:7a:d1:36:2e:39: b0:ec:30:43:a3:ad:e7:53:12:c0:d8:90:c0:6a:71: 51:0e:90:f6:55:11:2c:67:41:c7:15:58:53:29:f7: 4a:46:5e:77:c1:b5:fa:a2:36:35:f6:6a:4b:87:c7: 1e:4c:c6:ed:04:85:44:3c:b3:76:4f:5f:f2:f4:df: fd:4e:b6:d7:1e:c6:c7:82:38:5d:a4:22:d8:ce:0c: 55:28:98:20:c5:cb:98:2b:69:b2:4d:29:96:88:d7: 75:65:c9:bc:63:22:d9:e7:49:62:b7:de:5b:d1:e8: d8:01:d6:1d:57:a5:ef:54:4b:87:ce:94:54:eb:67: e2:c0:28:11:a9:be:31:16:7b:b2:b0:92:e3:5f:c7: 4a:30:60:a0:3e:dc:70:6d:10:ab:22:ef:3e:5d:d6: f8:5d:47:5b:21:05:c8:4d:1a:58:b4:90:c2:fa:21: 4f:d2:07:91:69:b3:87:3f:29:92:ea:49:5f:a7:a6: db:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:8A:5D:3F:19:6D:12:3C:48:CC:2B:C0:C8:BB:DD:1A:15:64:5C X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/3WuKXT8ZbRI8SMwrwMi73RoVZFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.77.164.0/22 87.119.64.0/21 87.119.100.0-87.119.105.255 87.119.127.0/24 Signature Algorithm: sha256WithRSAEncryption c5:52:d2:ef:9c:36:56:94:12:54:8a:a6:e8:fa:e5:37:e4:5b: ec:a0:5a:50:af:47:5d:f8:7d:5f:07:c2:fc:db:e7:fa:26:71: 10:c3:09:d7:9f:51:bb:94:ff:0a:3b:d7:be:e8:81:18:f2:c4: df:1c:74:96:0a:3c:66:f1:a1:ac:5f:8f:e6:3b:27:bc:b6:8c: 31:a7:30:6b:a4:43:6a:08:77:62:32:8e:61:2e:5e:01:8c:4a: 73:20:dd:21:2b:32:bb:6c:1e:57:a0:c7:69:28:62:7f:a5:1f: 32:fa:0c:3a:28:df:73:e7:be:6b:b7:84:44:89:d8:a2:6c:74: 89:df:7d:f0:c2:f6:76:58:65:02:54:38:af:2a:2b:49:95:e3: 8e:1a:73:b1:71:19:87:8a:d5:e0:8e:23:4e:fc:91:4f:77:20: 01:99:eb:94:02:82:ba:6d:89:00:f5:ab:8e:19:a2:19:54:74: d5:5a:1c:eb:83:4d:d1:64:9a:27:c0:8c:e1:04:cd:6f:ca:ae: 89:ed:a0:21:83:5a:cd:43:d2:2d:ab:02:28:3b:fa:6c:20:ec: cb:c7:ec:37:39:aa:25:07:5e:61:63:dd:3a:7f:b5:53:19:44: f9:2b:55:35:cb:ce:8a:22:86:3a:46:a5:6a:3e:b3:2f:13:fa: 16:65:71:bb -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FJ/5G8VzgZSkAvkYAu4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDZiOGE1ZDNmMTk2ZDEyM2M0OGNjMmJjMGM4YmJkZDFhMTU2NDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TE9JyIH9hNQ492lq0Rd4jLr7bgq Zv16UMzcynxo2D+htaEt9UzT0FM/jMB6Q8agJyLkdSIs9KvVr9fn+3v5cKi8W1r8 etE2Ljmw7DBDo63nUxLA2JDAanFRDpD2VREsZ0HHFVhTKfdKRl53wbX6ojY19mpL h8ceTMbtBIVEPLN2T1/y9N/9TrbXHsbHgjhdpCLYzgxVKJggxcuYK2myTSmWiNd1 Zcm8YyLZ50lit95b0ejYAdYdV6XvVEuHzpRU62fiwCgRqb4xFnuysJLjX8dKMGCg PtxwbRCrIu8+Xdb4XUdbIQXITRpYtJDC+iFP0geRabOHPymS6klfp6bbBQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFN1ril0/GW0SPEjMK8DIu90aFWRcMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvM1d1S1hUOFpiUkk4U013cndNaTczUm9WWkZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCTU2kAwQD V3dAMAwDBAJXd2QDBAFXd2gDBABXd38wDQYJKoZIhvcNAQELBQADggEBAMVS0u+c NlaUElSKpuj65TfkW+ygWlCvR134fV8Hwvzb5/omcRDDCdefUbuU/wo7177ogRjy xN8cdJYKPGbxoaxfj+Y7J7y2jDGnMGukQ2oId2IyjmEuXgGMSnMg3SErMrtsHleg x2koYn+lHzL6DDoo33Pnvmu3hESJ2KJsdInfffDC9nZYZQJUOK8qK0mV444ac7Fx GYeK1eCOI078kU93IAGZ65QCgrptiQD1q44ZohlUdNVaHOuDTdFkmifAjOEEzW/K rontoCGDWs1D0i2rAig7+mwg7MvH7Dc5qiUHXmFj3Tp/tVMZRPkrVTXLzooihjpG pWo+sy8T+hZlcbs= -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:27 2026 by rpki-client