This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/J32BC54TOUps-dXCn8BI2QcAuAk.roa File: J32BC54TOUps-dXCn8BI2QcAuAk.roa (raw, json) Hash identifier: fXhrWHP614GKDcqvfN3gZvjxypp00BlLNxmxyn4+I4c= Subject key identifier: 27:7D:81:0B:9E:13:39:4A:6C:F9:D5:C2:9F:C0:48:D9:07:00:B8:09 Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa Certificate serial: 019A5F0837EC948EC3B8A33B866B9638DBFB Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/J32BC54TOUps-dXCn8BI2QcAuAk.roa Signing time: Fri 07 Nov 2025 15:56:05 +0000 ROA not before: Fri 07 Nov 2025 15:56:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25229 IP address blocks: 77.120.0.0/20 maxlen: 24 77.120.4.0/24 maxlen: 24 77.120.6.0/24 maxlen: 24 77.120.8.0/23 maxlen: 24 77.120.9.0/24 maxlen: 24 77.120.16.0/20 maxlen: 21 77.120.32.0/20 maxlen: 21 77.120.52.0/22 maxlen: 23 77.120.60.0/22 maxlen: 23 77.120.64.0/21 maxlen: 22 77.120.72.0/21 maxlen: 22 77.120.80.0/20 maxlen: 21 77.120.96.0/19 maxlen: 20 77.120.112.0/22 maxlen: 22 77.120.128.0/18 maxlen: 24 77.120.192.0/21 maxlen: 24 77.120.208.0/21 maxlen: 24 77.120.211.0/24 maxlen: 24 77.120.212.0/23 maxlen: 24 77.120.214.0/23 maxlen: 24 77.120.216.0/22 maxlen: 23 77.120.220.0/22 maxlen: 24 77.120.224.0/20 maxlen: 21 77.120.240.0/20 maxlen: 24 77.120.248.0/21 maxlen: 22 77.121.0.0/21 maxlen: 22 77.121.8.0/22 maxlen: 23 77.121.12.0/24 maxlen: 24 77.121.13.0/24 maxlen: 24 77.121.15.0/24 maxlen: 24 77.121.16.0/24 maxlen: 24 77.121.17.0/24 maxlen: 24 77.121.18.0/24 maxlen: 24 77.121.19.0/24 maxlen: 24 77.121.20.0/24 maxlen: 24 77.121.21.0/24 maxlen: 24 77.121.22.0/24 maxlen: 24 77.121.23.0/24 maxlen: 24 77.121.24.0/24 maxlen: 24 77.121.25.0/24 maxlen: 24 77.121.26.0/24 maxlen: 24 77.121.27.0/24 maxlen: 24 77.121.28.0/24 maxlen: 24 77.121.29.0/24 maxlen: 24 77.121.30.0/24 maxlen: 24 77.121.64.0/21 maxlen: 24 77.121.70.0/23 maxlen: 24 77.121.72.0/21 maxlen: 22 77.121.80.0/20 maxlen: 21 77.121.96.0/19 maxlen: 20 77.121.96.0/20 maxlen: 21 77.121.100.0/24 maxlen: 24 77.121.101.0/24 maxlen: 24 77.121.112.0/20 maxlen: 21 77.121.127.0/24 maxlen: 24 77.123.128.0/19 maxlen: 20 77.123.144.0/22 maxlen: 22 77.244.32.0/20 maxlen: 21 82.144.192.0/19 maxlen: 20 109.201.224.0/24 maxlen: 24 109.201.225.0/24 maxlen: 24 109.201.226.0/24 maxlen: 24 109.201.227.0/24 maxlen: 24 109.201.228.0/22 maxlen: 23 109.201.232.0/22 maxlen: 23 109.201.236.0/23 maxlen: 24 109.201.238.0/23 maxlen: 24 109.201.240.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5f:08:37:ec:94:8e:c3:b8:a3:3b:86:6b:96:38:db:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa Validity Not Before: Nov 7 15:56:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=277d810b9e13394a6cf9d5c29fc048d90700b809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f4:b2:b3:c9:9d:42:17:8a:ee:4e:f0:04:4b: 4f:00:a5:1a:05:1f:5e:49:1a:88:90:4b:be:66:a5: 3f:1d:a0:01:d3:26:f9:f0:b7:bd:f4:47:8e:49:65: 79:58:13:de:ad:fd:08:b5:e1:31:d8:de:1e:95:31: 69:e7:e8:5e:8c:73:a7:1a:e7:d9:fc:74:28:ab:44: 51:26:f8:05:d6:ee:40:bd:d2:8a:1c:e5:22:86:2d: 8c:a9:fc:f2:d7:a4:3f:b2:f8:b0:13:6a:d8:3e:0d: 35:ab:e8:95:ca:d8:d8:c1:78:cc:6e:f1:b0:f5:bf: 32:9a:46:92:53:57:60:99:8d:1a:40:ad:c6:47:f7: 34:9e:37:da:e8:9b:6f:3b:6c:6e:4a:00:0c:59:07: ce:12:80:48:8d:9e:f3:ea:45:5a:ce:66:78:b8:ea: 3c:b4:e5:1f:94:ef:9e:19:09:a4:f2:07:27:5b:15: 4f:19:9d:36:da:73:b7:20:89:24:8a:5d:40:3a:49: 36:b0:d2:53:e7:d3:a8:8d:99:75:c6:e3:a5:8e:49: ef:fc:82:68:ac:7c:62:d0:97:8c:46:3d:c0:76:18: 1a:ec:4d:a6:44:c0:2e:fc:ea:1a:bf:ef:ca:2e:73: c9:1b:5b:3f:1e:54:7b:be:5d:de:4a:9a:63:6f:1d: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7D:81:0B:9E:13:39:4A:6C:F9:D5:C2:9F:C0:48:D9:07:00:B8:09 X509v3 Authority Key Identifier: keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/J32BC54TOUps-dXCn8BI2QcAuAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.120.0.0-77.120.47.255 77.120.52.0/22 77.120.60.0-77.120.199.255 77.120.208.0-77.121.13.255 77.121.15.0-77.121.30.255 77.121.64.0/18 77.123.128.0/19 77.244.32.0/20 82.144.192.0/19 109.201.224.0/19 Signature Algorithm: sha256WithRSAEncryption 17:0b:e3:d6:92:64:99:5f:47:08:77:20:02:9a:0c:8d:73:96: 33:d1:22:46:59:5b:cc:6e:64:dd:29:66:74:bc:5b:02:12:11: 7e:14:8a:ce:89:91:43:7d:56:8f:18:6c:ad:50:8e:42:d6:dd: f2:37:cc:2a:64:e2:a1:d5:89:af:6a:0b:7d:8d:66:eb:c3:26: cd:8c:e1:03:82:c0:e5:3c:41:58:b1:2c:b1:10:f7:9b:fc:44: 3a:e7:64:da:b0:13:20:f6:d9:88:64:7a:77:41:15:22:fc:67: 3d:61:5f:34:3f:5f:36:bb:66:15:e2:a6:66:f8:8f:41:f4:33: c5:c2:c6:71:40:5d:c5:20:90:22:83:c7:cc:54:5f:16:81:af: 42:11:cc:2b:30:31:bc:fd:ab:8a:33:f1:df:2b:1e:f7:ec:e5: cd:53:08:47:d0:9e:bc:2d:41:af:9a:d2:b3:19:ca:33:4d:19: 31:e7:19:3b:81:4a:a1:87:1a:73:0d:fc:55:8c:09:a1:ae:d3: 31:7d:76:2c:b4:65:cc:7c:91:56:a4:a4:ec:93:9a:29:6d:1e: 57:37:7f:38:47:9c:0b:30:e3:c1:4a:ee:16:34:31:a7:f3:03: e9:4e:f7:40:04:c8:9e:20:16:c9:94:6e:a3:dd:37:a7:1b:dc: d5:31:57:80 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZpfCDfslI7DuKM7hmuWONv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz YjY3YWEwHhcNMjUxMTA3MTU1NjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzdkODEwYjllMTMzOTRhNmNmOWQ1YzI5ZmMwNDhkOTA3MDBiODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvSys8mdQheK7k7wBEtPAKUaBR9e SRqIkEu+ZqU/HaAB0yb58Le99EeOSWV5WBPerf0IteEx2N4elTFp5+hejHOnGufZ /HQoq0RRJvgF1u5AvdKKHOUihi2Mqfzy16Q/sviwE2rYPg01q+iVytjYwXjMbvGw 9b8ymkaSU1dgmY0aQK3GR/c0njfa6JtvO2xuSgAMWQfOEoBIjZ7z6kVazmZ4uOo8 tOUflO+eGQmk8gcnWxVPGZ022nO3IIkkil1AOkk2sNJT59OojZl1xuOljknv/IJo rHxi0JeMRj3Adhga7E2mRMAu/Ooav+/KLnPJG1s/HlR7vl3eSppjbx0yMwIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFCd9gQueEzlKbPnVwp/ASNkHALgJMB8GA1UdIwQY MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt OTQ0Y2U3ZWViMTU0LzEvSjMyQkM1NFRPVXBzLWRYQ244QkkyUWNBdUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0 LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBhBAIAATBbMAsDAwNNeAME BE14IAMEAk14NDAMAwQCTXg8AwQDTXjAMAwDBARNeNADBAFNeQwwDAMEAE15DwME AE15HgMEBk15QAMEBU17gAMEBE30IAMEBVKQwAMEBW3J4DANBgkqhkiG9w0BAQsF AAOCAQEAFwvj1pJkmV9HCHcgApoMjXOWM9EiRllbzG5k3SlmdLxbAhIRfhSKzomR Q31WjxhsrVCOQtbd8jfMKmTiodWJr2oLfY1m68MmzYzhA4LA5TxBWLEssRD3m/xE Oudk2rATIPbZiGR6d0EVIvxnPWFfND9fNrtmFeKmZviPQfQzxcLGcUBdxSCQIoPH zFRfFoGvQhHMKzAxvP2rijPx3yse9+zlzVMIR9CevC1Br5rSsxnKM00ZMecZO4FK oYcacw38VYwJoa7TMX12LLRlzHyRVqSk7JOaKW0eVzd/OEecCzDjwUruFjQxp/MD 6U73QATIniAWyZRuo903pxvc1TFXgA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:26 2025 by rpki-client