This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/wNy3zbz6RfIK66Qb0xMdQ6SF6cM.roa File: wNy3zbz6RfIK66Qb0xMdQ6SF6cM.roa (raw, json) Hash identifier: v3MSVtcDWt9OZuJfHX3SY1kCxjbyzn9ti5kRZ/GXDyc= Subject key identifier: C0:DC:B7:CD:BC:FA:45:F2:0A:EB:A4:1B:D3:13:1D:43:A4:85:E9:C3 Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Certificate serial: 019AC4B3001143D41B366E568C055B7B0813 Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/wNy3zbz6RfIK66Qb0xMdQ6SF6cM.roa Signing time: Thu 27 Nov 2025 09:44:16 +0000 ROA not before: Thu 27 Nov 2025 09:44:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33874 IP address blocks: 37.75.32.0/19 maxlen: 19 37.75.32.0/20 maxlen: 20 37.75.48.0/20 maxlen: 20 77.25.128.0/17 maxlen: 17 77.25.128.0/19 maxlen: 19 77.25.192.0/22 maxlen: 22 77.25.196.0/22 maxlen: 22 77.25.200.0/22 maxlen: 22 77.25.204.0/22 maxlen: 22 77.25.220.0/22 maxlen: 22 77.25.248.0/22 maxlen: 22 77.243.64.0/22 maxlen: 22 77.243.68.0/23 maxlen: 23 77.243.70.0/23 maxlen: 23 77.243.72.0/22 maxlen: 22 77.243.76.0/23 maxlen: 23 77.243.78.0/23 maxlen: 23 80.85.96.0/20 maxlen: 20 80.85.96.0/23 maxlen: 23 80.85.98.0/24 maxlen: 24 80.85.99.0/24 maxlen: 24 80.85.100.0/24 maxlen: 24 80.85.101.0/24 maxlen: 24 80.85.102.0/24 maxlen: 24 80.85.103.0/24 maxlen: 24 80.85.104.0/24 maxlen: 24 80.85.105.0/24 maxlen: 24 80.85.106.0/24 maxlen: 24 80.85.107.0/24 maxlen: 24 80.85.108.0/24 maxlen: 24 80.85.109.0/24 maxlen: 24 80.85.110.0/24 maxlen: 24 80.85.111.0/24 maxlen: 24 109.200.32.0/19 maxlen: 19 109.200.32.0/20 maxlen: 20 109.200.48.0/21 maxlen: 21 109.200.56.0/22 maxlen: 22 159.20.24.0/21 maxlen: 21 159.20.24.0/24 maxlen: 24 159.20.25.0/24 maxlen: 24 159.20.26.0/24 maxlen: 24 159.20.27.0/24 maxlen: 24 159.20.28.0/24 maxlen: 24 159.20.29.0/24 maxlen: 24 159.20.30.0/24 maxlen: 24 159.20.31.0/24 maxlen: 24 185.5.48.0/24 maxlen: 24 188.172.0.0/19 maxlen: 19 188.172.0.0/20 maxlen: 20 188.172.16.0/21 maxlen: 21 188.172.24.0/22 maxlen: 22 188.172.32.0/19 maxlen: 19 188.172.32.0/20 maxlen: 20 188.172.48.0/21 maxlen: 21 188.172.56.0/22 maxlen: 22 188.172.64.0/19 maxlen: 19 188.172.64.0/21 maxlen: 21 188.172.72.0/22 maxlen: 22 188.172.80.0/21 maxlen: 21 188.172.88.0/22 maxlen: 22 2a10:5500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:b3:00:11:43:d4:1b:36:6e:56:8c:05:5b:7b:08:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Validity Not Before: Nov 27 09:44:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c0dcb7cdbcfa45f20aeba41bd3131d43a485e9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:b0:f5:97:db:db:48:3b:08:54:28:cd:8d: f0:cf:32:45:69:9f:f5:a9:88:e9:28:eb:b5:4f:b9: 7c:98:ff:bf:00:de:e3:94:ef:68:59:45:dc:59:3c: c0:83:20:22:39:ca:6a:c5:92:80:a6:df:fa:0e:66: c5:f5:a1:bf:cc:d1:48:14:0d:33:89:6c:b4:f7:98: 39:c4:54:1d:77:ad:96:86:9a:05:c5:50:84:b1:49: 2d:3c:eb:ca:db:66:25:d8:fa:d7:a5:3c:fa:ba:c3: 0d:88:05:6a:82:5f:b0:36:7c:38:e9:0c:6b:51:20: d5:47:35:37:c9:0e:ff:b9:ac:ba:09:cf:36:73:e5: ed:4c:9c:5b:2e:45:da:64:12:57:4e:db:f9:df:a9: c0:22:46:7e:01:94:2a:c8:41:9b:53:dc:d8:e3:a4: 3d:c6:87:98:01:d9:7d:ca:7f:6e:45:d1:50:f3:64: df:8f:07:90:09:91:f6:c8:1d:fd:0e:d7:84:f3:6c: a6:f6:d4:01:33:50:9a:8f:be:b9:11:c6:79:d5:a8: fc:9e:2a:c5:71:67:60:0f:a3:1b:0f:6e:da:c7:4e: 04:82:58:48:0b:78:69:ed:05:0d:4a:ab:7d:2a:77: b3:e5:a7:21:24:a1:c5:73:58:4b:7e:a6:32:2e:53: f6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DC:B7:CD:BC:FA:45:F2:0A:EB:A4:1B:D3:13:1D:43:A4:85:E9:C3 X509v3 Authority Key Identifier: keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/wNy3zbz6RfIK66Qb0xMdQ6SF6cM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.32.0/19 77.25.128.0/17 77.243.64.0/20 80.85.96.0/20 109.200.32.0/19 159.20.24.0/21 185.5.48.0/24 188.172.0.0-188.172.95.255 IPv6: 2a10:5500::/32 Signature Algorithm: sha256WithRSAEncryption 30:eb:c1:dc:0e:e1:42:ce:93:72:20:8c:42:d6:cc:6b:7c:2e: f6:5b:76:95:6e:f6:36:f5:a6:f1:fa:1a:32:be:80:af:8f:27: cf:4f:d1:a6:e1:93:d8:a0:37:4d:ac:a3:a7:f2:8f:8c:f3:7f: 27:c1:fc:70:9a:c4:fd:a2:33:88:88:9a:9b:82:bd:41:15:04: 8a:fb:e4:d2:69:76:6b:a2:29:9b:df:b8:3e:6d:6b:bf:fa:45: 6e:2d:05:5d:74:2e:48:62:c7:d9:32:f2:94:9f:07:f6:f9:75: 36:aa:ec:d9:7e:be:5d:9c:ef:cb:29:d6:3d:06:94:90:36:b5: cb:2b:35:ce:af:50:d0:1d:8f:e0:1c:00:39:3c:0b:5e:a0:b8: 50:0a:a2:b5:d2:e4:f2:11:76:c7:c4:2e:0e:1b:39:30:71:b7: 64:0d:f6:ab:1c:e9:f7:a5:07:53:07:b4:45:50:cc:3e:e7:a4: 1e:1a:21:8c:3a:fc:f1:a6:bb:3b:cd:66:de:f5:0d:b7:ee:bc: c2:6f:08:cb:17:dc:48:f1:e5:8b:e9:e0:e4:4a:1b:f7:ff:64: 23:53:44:06:9b:3d:ec:0b:49:94:9a:11:93:2f:bb:cd:89:5e: d2:cc:b3:97:6d:72:c1:2e:ec:ef:ad:2a:d5:a5:cc:fe:21:c5: 02:9a:22:ff -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZrEswARQ9QbNm5WjAVbewgTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm MWNjZTEwHhcNMjUxMTI3MDk0NDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGRjYjdjZGJjZmE0NWYyMGFlYmE0MWJkMzEzMWQ0M2E0ODVlOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqqw9Zfb20g7CFQozY3wzzJFaZ/1 qYjpKOu1T7l8mP+/AN7jlO9oWUXcWTzAgyAiOcpqxZKApt/6DmbF9aG/zNFIFA0z iWy095g5xFQdd62WhpoFxVCEsUktPOvK22Yl2PrXpTz6usMNiAVqgl+wNnw46Qxr USDVRzU3yQ7/uay6Cc82c+XtTJxbLkXaZBJXTtv536nAIkZ+AZQqyEGbU9zY46Q9 xoeYAdl9yn9uRdFQ82TfjweQCZH2yB39DteE82ym9tQBM1Caj765EcZ51aj8nirF cWdgD6MbD27ax04EglhIC3hp7QUNSqt9Knez5achJKHFc1hLfqYyLlP2sQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFMDct828+kXyCuukG9MTHUOkhenDMB8GA1UdIwQY MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt NWI4YmM1OTBiMTk3LzEvd055M3piejZSZklLNjZRYjB4TWRRNlNGNmNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3 LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA9BAIAATA3AwQFJUsgAwQH TRmAAwQETfNAAwQEUFVgAwQFbcggAwQDnxQYAwQAuQUwMAsDAwK8rAMEBbysQDAN BAIAAjAHAwUAKhBVADANBgkqhkiG9w0BAQsFAAOCAQEAMOvB3A7hQs6TciCMQtbM a3wu9lt2lW72NvWm8foaMr6Ar48nz0/RpuGT2KA3Tayjp/KPjPN/J8H8cJrE/aIz iIiam4K9QRUEivvk0ml2a6Ipm9+4Pm1rv/pFbi0FXXQuSGLH2TLylJ8H9vl1Nqrs 2X6+XZzvyynWPQaUkDa1yys1zq9Q0B2P4BwAOTwLXqC4UAqitdLk8hF2x8QuDhs5 MHG3ZA32qxzp96UHUwe0RVDMPuekHhohjDr88aa7O81m3vUNt+68wm8IyxfcSPHl i+ng5Eob9/9kI1NEBps97AtJlJoRky+7zYle0syzl21ywS7s760q1aXM/iHFApoi /w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:50:24 2025 by rpki-client