This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/3pF8IhqwUxmlbr6s48L9oPema6M.roa File: 3pF8IhqwUxmlbr6s48L9oPema6M.roa (raw, json) Hash identifier: dwMpIPqTUrQBexVcKq3XaTovbIKuATLe+PvFHdYURt8= Subject key identifier: DE:91:7C:22:1A:B0:53:19:A5:6E:BE:AC:E3:C2:FD:A0:F7:A6:6B:A3 Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a Certificate serial: 019B7910BB2ACF92D12F227F515644592EA4 Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/3pF8IhqwUxmlbr6s48L9oPema6M.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43578 IP address blocks: 77.246.176.0/24 maxlen: 24 77.246.177.0/24 maxlen: 24 77.246.178.0/24 maxlen: 24 77.246.179.0/24 maxlen: 24 77.246.180.0/24 maxlen: 24 77.246.181.0/24 maxlen: 24 77.246.182.0/24 maxlen: 24 77.246.182.128/29 maxlen: 29 77.246.183.0/24 maxlen: 24 77.246.184.0/24 maxlen: 24 77.246.185.0/24 maxlen: 24 77.246.186.0/24 maxlen: 24 77.246.186.96/27 maxlen: 27 77.246.187.0/24 maxlen: 24 77.246.188.0/24 maxlen: 24 77.246.190.0/24 maxlen: 24 77.246.190.160/27 maxlen: 27 77.246.191.0/24 maxlen: 24 185.74.80.0/24 maxlen: 24 185.74.81.0/24 maxlen: 24 2a05:4700:b::/48 maxlen: 48 2a05:4700:50::/48 maxlen: 48 2a05:4700:53::/48 maxlen: 48 2a05:4700:100::/48 maxlen: 48 2a05:4700:101::/48 maxlen: 48 2a05:4700:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bb:2a:cf:92:d1:2f:22:7f:51:56:44:59:2e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de917c221ab05319a56ebeace3c2fda0f7a66ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:85:2e:93:0c:02:5f:27:7b:d6:d8:51:bf: 0c:c8:fa:1c:9a:2c:0a:b0:43:e6:c7:69:0c:29:22: 49:e3:8a:8f:bd:24:ce:87:d1:d7:93:85:f1:de:eb: 55:64:a7:7f:aa:9e:02:e9:12:f5:77:0d:b7:1d:05: 81:d4:52:39:f9:4b:d5:77:ff:07:b9:93:3a:e7:ed: 47:5c:fe:37:6d:e9:7d:b8:40:e4:b4:23:77:3c:fb: e0:28:b3:7b:1b:eb:fe:7d:3d:4b:70:6f:f1:79:fb: a2:9e:d1:01:7e:88:25:00:4f:d7:a4:9d:9e:a2:39: 34:7b:49:27:e9:c5:56:12:9f:34:06:d4:98:ad:13: bd:3b:99:eb:98:de:7a:31:85:9b:ed:22:ea:8e:f7: 82:79:db:f5:1e:54:32:8e:19:95:b4:a4:ce:ab:1b: a5:d8:fc:1e:d9:20:a6:65:5d:60:4b:ab:39:4e:bd: 3d:05:05:54:36:1d:93:7c:07:11:32:16:c9:ab:a7: 7b:78:43:87:5b:2b:02:3e:cc:20:4f:ff:49:0b:61: 97:7e:b7:f6:c6:fa:88:c3:15:bb:70:87:19:89:03: b2:2e:61:47:f3:59:84:bf:39:f6:8d:81:66:2d:8c: 3d:a9:a9:f7:4d:0a:1e:12:ac:87:bb:1e:7d:63:8a: 46:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:91:7C:22:1A:B0:53:19:A5:6E:BE:AC:E3:C2:FD:A0:F7:A6:6B:A3 X509v3 Authority Key Identifier: keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/3pF8IhqwUxmlbr6s48L9oPema6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.176.0-77.246.188.255 77.246.190.0/23 185.74.80.0/23 IPv6: 2a05:4700:b::/48 2a05:4700:50::/48 2a05:4700:53::/48 2a05:4700:100::/47 2a05:4700:200::/48 Signature Algorithm: sha256WithRSAEncryption 88:2f:77:35:5d:c2:4c:66:78:6a:ef:b8:e7:13:f8:b4:db:85: e5:2a:3f:5a:4d:b9:56:ae:fb:60:9c:b8:e7:68:0a:8e:d3:2e: b9:09:f4:bf:94:a2:64:31:aa:0b:41:38:48:0b:da:48:94:8a: 76:84:9a:f4:6b:b5:51:34:21:27:b5:b7:12:06:12:26:52:57: be:c5:66:47:f8:75:96:04:79:83:32:bd:a6:1a:32:f0:a4:a2: 3f:59:04:20:6f:c5:5d:45:41:3d:b4:85:2b:1b:e2:69:32:97: c9:21:b3:86:59:3f:00:c4:0a:ff:b8:3d:61:a3:44:94:b7:09: 84:a4:6d:44:f7:dc:7b:19:c3:53:6c:65:aa:83:0c:94:d7:0d: f3:44:70:23:49:c0:a6:f3:b1:cd:af:bf:6c:9a:4a:53:8f:ed: 41:9b:6e:9a:13:28:54:5e:2f:2d:1c:72:30:54:fa:0f:ee:88: 57:3d:7d:63:c1:5b:55:cf:04:aa:f3:50:ce:86:04:75:52:3d: e7:7f:bc:92:3c:96:9d:e9:0e:e8:ba:85:b2:d5:a4:46:69:1c: d0:8b:55:8e:93:1e:a8:10:19:7b:00:0a:ac:ac:71:ff:0b:41: 67:cc:f8:b4:82:4c:94:d0:a4:cd:8c:ce:60:f6:32:d5:b7:5c: a8:6d:f8:a8 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt5ELsqz5LRLyJ/UVZEWS6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MDBiMjA2MDYzMTQ4NThhN2IzZjJhOTc1ZThlOWQ5MTll Yzc1M2EwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTkxN2MyMjFhYjA1MzE5YTU2ZWJlYWNlM2MyZmRhMGY3YTY2YmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tOFLpMMAl8ne9bYUb8MyPocmiwK sEPmx2kMKSJJ44qPvSTOh9HXk4Xx3utVZKd/qp4C6RL1dw23HQWB1FI5+UvVd/8H uZM65+1HXP43bel9uEDktCN3PPvgKLN7G+v+fT1LcG/xefuintEBfoglAE/XpJ2e ojk0e0kn6cVWEp80BtSYrRO9O5nrmN56MYWb7SLqjveCedv1HlQyjhmVtKTOqxul 2Pwe2SCmZV1gS6s5Tr09BQVUNh2TfAcRMhbJq6d7eEOHWysCPswgT/9JC2GXfrf2 xvqIwxW7cIcZiQOyLmFH81mEvzn2jYFmLYw9qan3TQoeEqyHux59Y4pGEQIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFN6RfCIasFMZpW6+rOPC/aD3pmujMB8GA1UdIwQY MBaAFCQAsgYGMUhYp7PyqXXo6dkZ7HU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTkt OWM1ZTFkZWIyYzMzLzEvM3BGOElocXdVeG1sYnI2czQ4TDlvUGVtYTZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTktOWM1ZTFkZWIyYzMz LzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzAgBAIAATAaMAwDBARN9rAD BABN9rwDBAFN9r4DBAG5SlAwMwQCAAIwLQMHACoFRwAACwMHACoFRwAAUAMHACoF RwAAUwMHASoFRwABAAMHACoFRwACADANBgkqhkiG9w0BAQsFAAOCAQEAiC93NV3C TGZ4au+45xP4tNuF5So/Wk25Vq77YJy452gKjtMuuQn0v5SiZDGqC0E4SAvaSJSK doSa9Gu1UTQhJ7W3EgYSJlJXvsVmR/h1lgR5gzK9phoy8KSiP1kEIG/FXUVBPbSF KxviaTKXySGzhlk/AMQK/7g9YaNElLcJhKRtRPfcexnDU2xlqoMMlNcN80RwI0nA pvOxza+/bJpKU4/tQZtumhMoVF4vLRxyMFT6D+6IVz19Y8FbVc8EqvNQzoYEdVI9 53+8kjyWnekO6LqFstWkRmkc0ItVjpMeqBAZewAKrKxx/wtBZ8z4tIJMlNCkzYzO YPYy1bdcqG34qA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:01 2026 by rpki-client