This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/pZ9C3CmkxrOGsoj0mtQVOZi53qw.roa File: pZ9C3CmkxrOGsoj0mtQVOZi53qw.roa (raw, json) Hash identifier: sgsuQe2msoFiMDKKrbbPAUnLjdv7QmZ0qLU2RSe/3FQ= Subject key identifier: A5:9F:42:DC:29:A4:C6:B3:86:B2:88:F4:9A:D4:15:39:98:B9:DE:AC Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Certificate serial: 019B7CEE43208A9F6E4A998E800A5ACA53E4 Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/pZ9C3CmkxrOGsoj0mtQVOZi53qw.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33874 IP address blocks: 37.75.32.0/19 maxlen: 19 37.75.32.0/20 maxlen: 20 37.75.48.0/20 maxlen: 20 77.25.128.0/17 maxlen: 17 77.25.128.0/19 maxlen: 19 77.25.192.0/22 maxlen: 22 77.25.196.0/22 maxlen: 22 77.25.200.0/22 maxlen: 22 77.25.204.0/22 maxlen: 22 77.25.220.0/22 maxlen: 22 77.25.248.0/22 maxlen: 22 77.243.64.0/22 maxlen: 22 77.243.68.0/23 maxlen: 23 77.243.70.0/23 maxlen: 23 77.243.72.0/22 maxlen: 22 77.243.76.0/23 maxlen: 23 77.243.78.0/23 maxlen: 23 80.85.96.0/20 maxlen: 20 80.85.96.0/23 maxlen: 23 80.85.98.0/24 maxlen: 24 80.85.99.0/24 maxlen: 24 80.85.100.0/24 maxlen: 24 80.85.101.0/24 maxlen: 24 80.85.102.0/24 maxlen: 24 80.85.103.0/24 maxlen: 24 80.85.104.0/24 maxlen: 24 80.85.105.0/24 maxlen: 24 80.85.106.0/24 maxlen: 24 80.85.107.0/24 maxlen: 24 80.85.108.0/24 maxlen: 24 80.85.109.0/24 maxlen: 24 80.85.110.0/24 maxlen: 24 80.85.111.0/24 maxlen: 24 109.200.32.0/19 maxlen: 19 109.200.32.0/20 maxlen: 20 109.200.48.0/21 maxlen: 21 109.200.56.0/22 maxlen: 22 159.20.24.0/21 maxlen: 21 159.20.24.0/24 maxlen: 24 159.20.25.0/24 maxlen: 24 159.20.26.0/24 maxlen: 24 159.20.27.0/24 maxlen: 24 159.20.28.0/24 maxlen: 24 159.20.29.0/24 maxlen: 24 159.20.30.0/24 maxlen: 24 159.20.31.0/24 maxlen: 24 185.5.48.0/24 maxlen: 24 188.172.0.0/19 maxlen: 19 188.172.0.0/20 maxlen: 20 188.172.16.0/21 maxlen: 21 188.172.24.0/22 maxlen: 22 188.172.32.0/19 maxlen: 19 188.172.32.0/20 maxlen: 20 188.172.48.0/21 maxlen: 21 188.172.56.0/22 maxlen: 22 188.172.64.0/19 maxlen: 19 188.172.64.0/21 maxlen: 21 188.172.72.0/22 maxlen: 22 188.172.80.0/21 maxlen: 21 188.172.88.0/22 maxlen: 22 2a10:5500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:43:20:8a:9f:6e:4a:99:8e:80:0a:5a:ca:53:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a59f42dc29a4c6b386b288f49ad4153998b9deac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:ae:59:4f:52:2f:ed:57:fb:0e:df:57:a4: 1b:5e:dd:df:b1:69:0c:fe:6f:32:ec:4b:05:a7:c5: 2f:b7:89:4a:cb:c6:83:3a:98:b8:50:dd:77:b6:10: 13:ba:88:06:94:c7:86:bb:81:e4:cf:6f:c4:85:f3: 92:aa:12:5b:bf:15:94:2e:42:8a:c5:a1:a9:d2:20: 3c:9d:3b:94:43:0e:ce:10:a5:f9:a9:50:ba:b3:c0: 2e:74:30:3d:3d:e1:82:e6:17:87:9b:e8:78:eb:cb: ef:ea:39:4f:8e:e6:b1:ca:ae:c8:e2:de:46:79:22: 3f:20:2f:4a:b2:27:6e:52:2c:b9:ef:f6:2f:1d:91: 6c:e1:1a:86:f0:cd:db:5b:d1:39:7d:2e:e6:85:1f: 0c:f2:a6:a5:e2:f0:24:2b:0e:26:4b:f0:5c:19:a9: 0e:67:1a:43:a6:f3:e8:6c:bd:90:dc:0e:59:36:ee: 82:b3:da:4a:d3:4a:ee:88:93:a1:5a:28:47:23:9c: 03:6c:41:07:00:60:7e:b3:fc:4d:ad:44:61:5c:19: d2:30:4f:10:59:5d:db:89:dc:f6:1e:48:0b:8b:9f: 17:de:fd:ba:27:1f:1e:de:09:2a:47:2b:51:9d:a5: b1:84:04:fd:3c:29:0a:c0:f2:67:4a:8e:91:3f:62: 21:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9F:42:DC:29:A4:C6:B3:86:B2:88:F4:9A:D4:15:39:98:B9:DE:AC X509v3 Authority Key Identifier: keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/pZ9C3CmkxrOGsoj0mtQVOZi53qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.32.0/19 77.25.128.0/17 77.243.64.0/20 80.85.96.0/20 109.200.32.0/19 159.20.24.0/21 185.5.48.0/24 188.172.0.0-188.172.95.255 IPv6: 2a10:5500::/32 Signature Algorithm: sha256WithRSAEncryption 68:a9:0b:69:e1:2c:9b:f5:09:5b:39:29:c7:bd:87:f9:95:99: 7a:db:5c:67:9a:9d:2a:03:f3:9c:2e:e4:79:4c:63:3e:7f:c8: 3c:2a:51:37:5e:a3:c0:2e:58:59:c5:b5:9c:1d:3a:a9:84:55: ec:14:d8:a5:ea:62:d8:b9:f6:a3:25:1c:18:51:5d:f8:9a:ff: 49:6d:ed:6e:19:27:8e:8e:0e:9c:ad:ff:c1:ac:da:21:ac:2d: 72:ec:db:34:d6:eb:e1:43:81:32:6f:5f:fb:65:32:6b:6f:e0: 35:e9:47:d8:f2:bf:d3:67:8e:1d:5e:65:08:27:f2:2b:60:ca: 3c:c9:2b:a5:6a:d1:c7:63:f3:61:fc:f8:91:f8:3e:9b:94:93: 3f:a5:34:44:65:7a:dd:74:c5:2f:23:ee:2a:7c:ab:e4:5f:b3: 61:b2:74:b3:69:64:30:41:60:51:f1:8d:97:9c:57:9f:68:32: 68:21:9b:51:7f:e9:1b:ce:9a:e3:03:82:96:1d:8d:59:d1:cd: d6:a2:34:4b:3f:46:70:43:b5:2a:72:10:b6:45:53:1a:c1:d3: 96:73:12:70:5a:12:e9:61:bd:88:39:4b:24:66:74:c0:47:0f: e3:3e:0b:d5:f7:23:57:71:6e:69:63:52:ea:52:d8:d9:ac:b2: c3:1d:19:3d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt87kMgip9uSpmOgApaylPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm MWNjZTEwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTlmNDJkYzI5YTRjNmIzODZiMjg4ZjQ5YWQ0MTUzOTk4YjlkZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPquWU9SL+1X+w7fV6QbXt3fsWkM /m8y7EsFp8Uvt4lKy8aDOpi4UN13thATuogGlMeGu4Hkz2/EhfOSqhJbvxWULkKK xaGp0iA8nTuUQw7OEKX5qVC6s8AudDA9PeGC5heHm+h468vv6jlPjuaxyq7I4t5G eSI/IC9KsiduUiy57/YvHZFs4RqG8M3bW9E5fS7mhR8M8qal4vAkKw4mS/BcGakO ZxpDpvPobL2Q3A5ZNu6Cs9pK00ruiJOhWihHI5wDbEEHAGB+s/xNrURhXBnSME8Q WV3bidz2HkgLi58X3v26Jx8e3gkqRytRnaWxhAT9PCkKwPJnSo6RP2IhkwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFKWfQtwppMazhrKI9JrUFTmYud6sMB8GA1UdIwQY MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt NWI4YmM1OTBiMTk3LzEvcFo5QzNDbWt4ck9Hc29qMG10UVZPWmk1M3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3 LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA9BAIAATA3AwQFJUsgAwQH TRmAAwQETfNAAwQEUFVgAwQFbcggAwQDnxQYAwQAuQUwMAsDAwK8rAMEBbysQDAN BAIAAjAHAwUAKhBVADANBgkqhkiG9w0BAQsFAAOCAQEAaKkLaeEsm/UJWzkpx72H +ZWZettcZ5qdKgPznC7keUxjPn/IPCpRN16jwC5YWcW1nB06qYRV7BTYpepi2Ln2 oyUcGFFd+Jr/SW3tbhknjo4OnK3/wazaIawtcuzbNNbr4UOBMm9f+2Uya2/gNelH 2PK/02eOHV5lCCfyK2DKPMkrpWrRx2PzYfz4kfg+m5STP6U0RGV63XTFLyPuKnyr 5F+zYbJ0s2lkMEFgUfGNl5xXn2gyaCGbUX/pG86a4wOClh2NWdHN1qI0Sz9GcEO1 KnIQtkVTGsHTlnMScFoS6WG9iDlLJGZ0wEcP4z4L1fcjV3FuaWNS6lLY2ayywx0Z PQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:04 2026 by rpki-client