This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/88Ep4sB7AT24dHj0wOBkm20Qc98.roa File: 88Ep4sB7AT24dHj0wOBkm20Qc98.roa (raw, json) Hash identifier: +Tc166MSSO0xFflm016KEMW6FrFPduRqEtRuQCxP4z0= Subject key identifier: F3:C1:29:E2:C0:7B:01:3D:B8:74:78:F4:C0:E0:64:9B:6D:10:73:DF Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa Certificate serial: 019B7F151C14B3FE2FCE69F99CBA4969CD3A Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/88Ep4sB7AT24dHj0wOBkm20Qc98.roa Signing time: Fri 02 Jan 2026 14:20:48 +0000 ROA not before: Fri 02 Jan 2026 14:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25229 IP address blocks: 77.120.0.0/20 maxlen: 24 77.120.4.0/24 maxlen: 24 77.120.6.0/24 maxlen: 24 77.120.8.0/23 maxlen: 24 77.120.9.0/24 maxlen: 24 77.120.16.0/20 maxlen: 21 77.120.32.0/20 maxlen: 21 77.120.52.0/22 maxlen: 23 77.120.60.0/22 maxlen: 23 77.120.64.0/21 maxlen: 22 77.120.72.0/21 maxlen: 22 77.120.80.0/20 maxlen: 21 77.120.96.0/19 maxlen: 20 77.120.112.0/22 maxlen: 22 77.120.128.0/18 maxlen: 24 77.120.192.0/21 maxlen: 24 77.120.208.0/21 maxlen: 24 77.120.211.0/24 maxlen: 24 77.120.212.0/23 maxlen: 24 77.120.214.0/23 maxlen: 24 77.120.216.0/22 maxlen: 23 77.120.220.0/22 maxlen: 24 77.120.224.0/20 maxlen: 21 77.120.240.0/20 maxlen: 24 77.120.248.0/21 maxlen: 22 77.121.0.0/21 maxlen: 22 77.121.8.0/22 maxlen: 23 77.121.12.0/24 maxlen: 24 77.121.13.0/24 maxlen: 24 77.121.15.0/24 maxlen: 24 77.121.16.0/24 maxlen: 24 77.121.17.0/24 maxlen: 24 77.121.18.0/24 maxlen: 24 77.121.19.0/24 maxlen: 24 77.121.20.0/24 maxlen: 24 77.121.21.0/24 maxlen: 24 77.121.22.0/24 maxlen: 24 77.121.23.0/24 maxlen: 24 77.121.24.0/24 maxlen: 24 77.121.25.0/24 maxlen: 24 77.121.26.0/24 maxlen: 24 77.121.27.0/24 maxlen: 24 77.121.28.0/24 maxlen: 24 77.121.29.0/24 maxlen: 24 77.121.30.0/24 maxlen: 24 77.121.64.0/21 maxlen: 24 77.121.70.0/23 maxlen: 24 77.121.72.0/21 maxlen: 22 77.121.80.0/20 maxlen: 21 77.121.96.0/19 maxlen: 20 77.121.96.0/20 maxlen: 21 77.121.100.0/24 maxlen: 24 77.121.101.0/24 maxlen: 24 77.121.112.0/20 maxlen: 21 77.121.127.0/24 maxlen: 24 77.123.128.0/19 maxlen: 20 77.123.144.0/22 maxlen: 22 77.244.32.0/20 maxlen: 21 82.144.192.0/19 maxlen: 20 109.201.224.0/24 maxlen: 24 109.201.225.0/24 maxlen: 24 109.201.226.0/24 maxlen: 24 109.201.227.0/24 maxlen: 24 109.201.228.0/22 maxlen: 23 109.201.232.0/22 maxlen: 23 109.201.236.0/23 maxlen: 24 109.201.238.0/23 maxlen: 24 109.201.240.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1c:14:b3:fe:2f:ce:69:f9:9c:ba:49:69:cd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa Validity Not Before: Jan 2 14:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3c129e2c07b013db87478f4c0e0649b6d1073df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:7f:3b:60:20:de:47:75:a3:a3:9f:d3:14: 94:32:03:94:a5:5a:ef:3d:b3:8c:c8:b5:5b:f0:a4: e7:28:33:18:5f:6a:b3:f6:84:ac:cf:cc:63:a1:c0: ed:06:48:f5:ef:ba:9c:d9:e0:1c:26:9e:8d:99:11: 52:f7:68:44:fe:f0:41:8a:75:cf:fb:d0:69:0b:db: cf:98:d1:10:f8:76:66:74:34:b0:78:8a:fc:ee:56: 5d:7e:7d:9a:3c:7c:20:f3:ae:18:41:a0:71:fa:e6: e0:a9:64:90:2a:22:22:b1:f6:33:8c:94:5a:f4:aa: 73:7e:ff:79:11:65:ca:0f:16:33:61:51:25:bf:f3: e2:96:2f:97:2e:a4:4d:8f:42:26:44:2a:49:8a:47: f8:25:53:c0:68:28:c0:23:16:a1:bf:b5:5e:26:ea: b8:15:6a:8e:43:1b:15:46:31:6f:75:88:f7:77:f2: 23:30:8b:ca:fc:d1:26:45:96:4e:b1:dc:fd:3e:65: bf:e6:36:ff:cf:ec:db:f2:cc:5f:d9:c6:c6:82:f4: e0:f2:fc:56:ef:1c:ae:5b:40:d2:cc:be:52:6f:c6: e6:e8:80:11:84:35:c0:35:4a:a1:48:7d:c6:69:91: b6:81:bc:f8:a4:15:91:5d:84:ad:b6:25:80:86:cf: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C1:29:E2:C0:7B:01:3D:B8:74:78:F4:C0:E0:64:9B:6D:10:73:DF X509v3 Authority Key Identifier: keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/88Ep4sB7AT24dHj0wOBkm20Qc98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.120.0.0-77.120.47.255 77.120.52.0/22 77.120.60.0-77.120.199.255 77.120.208.0-77.121.13.255 77.121.15.0-77.121.30.255 77.121.64.0/18 77.123.128.0/19 77.244.32.0/20 82.144.192.0/19 109.201.224.0/19 Signature Algorithm: sha256WithRSAEncryption 71:71:d0:36:5d:ea:b8:7a:5b:7e:58:bd:65:50:03:96:64:55: 32:ac:52:d2:0f:e7:a5:c1:8c:9e:86:b4:db:05:b4:52:03:f5: a2:6d:e5:71:e0:fb:21:f7:3f:b0:d7:97:3a:cf:78:db:16:19: bd:1c:ab:09:db:90:31:6f:72:95:da:90:fe:21:c2:9f:cb:2e: a3:ee:d1:23:77:c2:80:cb:90:b6:94:b8:a1:83:7a:67:08:49: de:c1:fb:96:a2:6c:ce:7e:ae:5b:60:77:3d:69:71:0d:3e:92: 0f:b0:4f:7a:63:0e:98:9f:c5:72:cd:0f:47:e7:ab:a9:72:6e: a3:b1:c0:7a:76:cc:78:70:53:f9:56:f5:3f:21:59:45:6c:40: 57:7b:ce:8a:10:9e:4f:81:8b:aa:57:09:ef:08:aa:b5:ef:7e: 58:6f:57:b4:f2:f6:ec:fa:7b:86:17:60:90:d2:b6:40:e2:12: 6e:a9:b1:eb:f2:18:33:18:5e:36:7b:26:97:87:02:8a:4a:84: c6:fa:99:dc:7d:bb:a2:68:f3:3a:70:12:c7:77:30:92:4f:bf: fa:d5:f1:78:17:69:cd:7d:f3:f3:91:c5:7e:05:9e:cc:cc:14: 74:28:60:a8:77:ca:e9:c5:0a:39:e6:b5:cf:8a:56:38:68:46: 7a:7e:a9:69 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZt/FRwUs/4vzmn5nLpJac06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz YjY3YWEwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2MxMjllMmMwN2IwMTNkYjg3NDc4ZjRjMGUwNjQ5YjZkMTA3M2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuR/O2Ag3kd1o6Of0xSUMgOUpVrv PbOMyLVb8KTnKDMYX2qz9oSsz8xjocDtBkj177qc2eAcJp6NmRFS92hE/vBBinXP +9BpC9vPmNEQ+HZmdDSweIr87lZdfn2aPHwg864YQaBx+ubgqWSQKiIisfYzjJRa 9Kpzfv95EWXKDxYzYVElv/Pili+XLqRNj0ImRCpJikf4JVPAaCjAIxahv7VeJuq4 FWqOQxsVRjFvdYj3d/IjMIvK/NEmRZZOsdz9PmW/5jb/z+zb8sxf2cbGgvTg8vxW 7xyuW0DSzL5Sb8bm6IARhDXANUqhSH3GaZG2gbz4pBWRXYSttiWAhs9VvwIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFPPBKeLAewE9uHR49MDgZJttEHPfMB8GA1UdIwQY MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt OTQ0Y2U3ZWViMTU0LzEvODhFcDRzQjdBVDI0ZEhqMHdPQmttMjBRYzk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0 LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBhBAIAATBbMAsDAwNNeAME BE14IAMEAk14NDAMAwQCTXg8AwQDTXjAMAwDBARNeNADBAFNeQwwDAMEAE15DwME AE15HgMEBk15QAMEBU17gAMEBE30IAMEBVKQwAMEBW3J4DANBgkqhkiG9w0BAQsF AAOCAQEAcXHQNl3quHpbfli9ZVADlmRVMqxS0g/npcGMnoa02wW0UgP1om3lceD7 Ifc/sNeXOs942xYZvRyrCduQMW9yldqQ/iHCn8suo+7RI3fCgMuQtpS4oYN6ZwhJ 3sH7lqJszn6uW2B3PWlxDT6SD7BPemMOmJ/Fcs0PR+erqXJuo7HAenbMeHBT+Vb1 PyFZRWxAV3vOihCeT4GLqlcJ7wiqte9+WG9XtPL27Pp7hhdgkNK2QOISbqmx6/IY MxheNnsml4cCikqExvqZ3H27omjzOnASx3cwkk+/+tXxeBdpzX3z85HFfgWezMwU dChgqHfK6cUKOea1z4pWOGhGen6paQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:57 2026 by rpki-client