This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/O39MJv57TWbmh-043GG_Y3SPcR0.roa File: O39MJv57TWbmh-043GG_Y3SPcR0.roa (raw, json) Hash identifier: 8nJD+DxVo3QJVLDsiX2c2YfhjphmaMQZAM0s+wFgUgA= Subject key identifier: 3B:7F:4C:26:FE:7B:4D:66:E6:87:ED:38:DC:61:BF:63:74:8F:71:1D Certificate issuer: /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca Certificate serial: 019B7D5B3067297CFB0DA57E2B6F971FCBBA Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/O39MJv57TWbmh-043GG_Y3SPcR0.roa Signing time: Fri 02 Jan 2026 06:18:06 +0000 ROA not before: Fri 02 Jan 2026 06:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15685 IP address blocks: 77.78.76.0/22 maxlen: 22 77.78.76.0/23 maxlen: 23 77.78.76.0/24 maxlen: 24 77.78.94.0/23 maxlen: 23 77.78.95.0/24 maxlen: 24 77.78.96.0/20 maxlen: 20 77.78.112.0/21 maxlen: 21 77.78.118.0/23 maxlen: 23 77.78.123.0/24 maxlen: 24 77.78.124.0/22 maxlen: 22 81.0.192.0/22 maxlen: 22 81.0.199.0/24 maxlen: 24 81.0.206.0/23 maxlen: 23 81.0.208.0/23 maxlen: 23 81.0.212.0/23 maxlen: 23 81.0.214.0/24 maxlen: 24 81.0.217.0/24 maxlen: 24 81.0.225.0/24 maxlen: 24 81.0.226.0/24 maxlen: 24 81.0.228.0/24 maxlen: 24 81.0.230.0/23 maxlen: 23 81.0.231.0/24 maxlen: 24 81.0.232.0/21 maxlen: 21 81.0.240.0/22 maxlen: 22 81.0.240.0/23 maxlen: 23 81.0.250.0/24 maxlen: 24 81.0.254.0/23 maxlen: 23 82.208.4.0/22 maxlen: 22 82.208.6.0/23 maxlen: 23 82.208.8.0/22 maxlen: 22 82.208.12.0/24 maxlen: 24 82.208.14.0/24 maxlen: 24 82.208.16.0/23 maxlen: 23 82.208.16.0/24 maxlen: 24 82.208.17.0/24 maxlen: 24 82.208.18.0/24 maxlen: 24 82.208.26.0/23 maxlen: 23 82.208.27.0/24 maxlen: 24 82.208.28.0/23 maxlen: 23 82.208.32.0/22 maxlen: 22 82.208.34.0/23 maxlen: 23 82.208.39.0/24 maxlen: 24 82.208.40.0/23 maxlen: 23 82.208.44.0/24 maxlen: 24 82.208.46.0/23 maxlen: 23 82.208.48.0/23 maxlen: 23 82.208.50.0/24 maxlen: 24 82.208.56.0/24 maxlen: 24 82.208.58.0/24 maxlen: 24 85.239.227.0/24 maxlen: 24 85.239.252.0/23 maxlen: 23 85.239.252.0/24 maxlen: 24 109.123.192.0/21 maxlen: 24 109.123.202.0/23 maxlen: 24 109.123.205.0/24 maxlen: 24 109.123.206.0/23 maxlen: 24 109.123.208.0/22 maxlen: 24 109.123.210.0/23 maxlen: 23 109.123.214.0/23 maxlen: 24 109.123.216.0/21 maxlen: 24 217.11.224.0/23 maxlen: 23 217.11.227.0/24 maxlen: 24 217.11.228.0/23 maxlen: 23 217.11.230.0/24 maxlen: 24 217.11.232.0/23 maxlen: 23 217.11.235.0/24 maxlen: 24 217.11.236.0/24 maxlen: 24 217.11.242.0/23 maxlen: 23 217.11.242.0/24 maxlen: 24 217.11.246.0/23 maxlen: 23 217.11.248.0/23 maxlen: 23 217.11.249.0/24 maxlen: 24 217.11.251.0/24 maxlen: 24 217.11.254.0/24 maxlen: 24 2001:1528::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:30:67:29:7c:fb:0d:a5:7e:2b:6f:97:1f:cb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca Validity Not Before: Jan 2 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b7f4c26fe7b4d66e687ed38dc61bf63748f711d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:60:a8:1e:88:8a:5f:60:5e:15:7f:81:d2:af: c9:6e:bc:39:c8:33:83:d3:a6:ba:c2:9c:10:81:cd: a4:eb:c2:d0:04:fc:85:5f:dc:6a:73:92:79:f9:0a: eb:3e:7c:0f:96:c3:18:a3:6d:d7:d4:85:84:28:47: cd:7a:bc:b3:d4:8f:a9:c6:0e:d4:cb:74:40:07:19: a7:26:7e:90:4f:cb:7f:e8:e0:b5:5d:a8:49:42:49: a8:68:43:29:4c:ab:8e:c5:bf:55:3b:4f:e2:87:13: 6b:11:84:dd:17:1c:f3:b9:c8:89:f3:7f:56:f9:db: c3:e8:90:01:2c:96:3d:38:54:bc:be:a7:71:19:d4: e3:c9:8d:26:e8:52:bd:4f:c2:eb:6e:e1:6d:0f:e3: 08:ca:ef:14:07:81:89:0b:b7:4b:04:6c:ec:16:b7: 5f:61:ce:f2:94:9e:90:6d:26:84:6e:2f:ee:fc:ad: 02:b5:3e:9d:03:af:42:f1:d5:33:eb:88:9a:04:11: 7d:37:dc:d6:55:30:a8:99:e5:5c:37:59:3b:af:40: 4b:00:55:37:24:b8:71:10:9a:01:c4:47:97:6e:db: 4e:99:84:71:e3:6b:2d:aa:eb:ea:69:23:d7:ea:2e: be:12:ff:6d:33:8d:fa:e5:0a:8a:16:96:0a:b6:05: 3e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7F:4C:26:FE:7B:4D:66:E6:87:ED:38:DC:61:BF:63:74:8F:71:1D X509v3 Authority Key Identifier: keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/O39MJv57TWbmh-043GG_Y3SPcR0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.78.76.0/22 77.78.94.0-77.78.119.255 77.78.123.0-77.78.127.255 81.0.192.0/22 81.0.199.0/24 81.0.206.0-81.0.209.255 81.0.212.0-81.0.214.255 81.0.217.0/24 81.0.225.0-81.0.226.255 81.0.228.0/24 81.0.230.0-81.0.243.255 81.0.250.0/24 81.0.254.0/23 82.208.4.0-82.208.12.255 82.208.14.0/24 82.208.16.0-82.208.18.255 82.208.26.0-82.208.29.255 82.208.32.0/22 82.208.39.0-82.208.41.255 82.208.44.0/24 82.208.46.0-82.208.50.255 82.208.56.0/24 82.208.58.0/24 85.239.227.0/24 85.239.252.0/23 109.123.192.0/21 109.123.202.0/23 109.123.205.0-109.123.211.255 109.123.214.0-109.123.223.255 217.11.224.0/23 217.11.227.0-217.11.230.255 217.11.232.0/23 217.11.235.0-217.11.236.255 217.11.242.0/23 217.11.246.0-217.11.249.255 217.11.251.0/24 217.11.254.0/24 IPv6: 2001:1528::/32 Signature Algorithm: sha256WithRSAEncryption 6d:ec:f5:91:d0:03:d7:50:52:75:e5:b6:49:78:ad:6d:31:e3: d5:bc:40:88:f6:dc:09:81:de:75:c6:b7:db:87:ca:b6:1e:f8: b8:65:94:9c:51:2a:1d:db:ff:b8:ea:06:a2:6b:2e:da:f4:bd: e0:40:57:8f:be:a3:a8:b3:2c:4e:df:4b:29:49:10:bc:7a:e0: 84:17:79:36:48:64:e4:e1:7b:fe:6e:9d:ff:4d:b5:7f:8f:ea: 95:d4:22:7f:e3:0b:6d:58:bd:a1:9f:5e:bb:74:56:18:36:01: c2:df:d3:97:70:08:aa:f8:71:fc:dd:be:48:29:1c:b3:c8:e6: 4a:b2:a7:78:50:f6:b2:7e:d3:f5:03:17:52:38:dd:6d:3f:e6: d3:30:70:4f:1d:87:2b:5a:bc:e6:26:2d:44:31:a3:71:2a:76: 5a:42:7c:4b:75:c9:3e:5a:81:92:bf:2d:3b:f6:f4:a5:f2:98: c2:51:8b:93:dd:30:9a:8e:a7:57:1a:76:55:33:e4:fe:a6:3c: b2:6d:ca:fe:4b:94:72:00:f9:9d:2b:9d:89:bc:35:71:ad:f6: 55:5e:c5:c2:58:14:13:27:83:83:96:50:63:c3:aa:81:86:6c: 9e:6c:b0:3e:a8:97:c7:cc:30:10:f5:a7:9e:e1:3a:50:80:bb: 91:19:c2:98 -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgISAZt9WzBnKXz7DaV+K2+XH8u6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NDg0N2Y4NjY3ZDUyZmEyY2Y5Y2Y5YWZjYzQzYTA3OTE1 NTc1Y2EwHhcNMjYwMTAyMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjdmNGMyNmZlN2I0ZDY2ZTY4N2VkMzhkYzYxYmY2Mzc0OGY3MTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWCoHoiKX2BeFX+B0q/Jbrw5yDOD 06a6wpwQgc2k68LQBPyFX9xqc5J5+QrrPnwPlsMYo23X1IWEKEfNeryz1I+pxg7U y3RABxmnJn6QT8t/6OC1XahJQkmoaEMpTKuOxb9VO0/ihxNrEYTdFxzzuciJ839W +dvD6JABLJY9OFS8vqdxGdTjyY0m6FK9T8LrbuFtD+MIyu8UB4GJC7dLBGzsFrdf Yc7ylJ6QbSaEbi/u/K0CtT6dA69C8dUz64iaBBF9N9zWVTComeVcN1k7r0BLAFU3 JLhxEJoBxEeXbttOmYRx42stquvqaSPX6i6+Ev9tM4365QqKFpYKtgU+uwIDAQAB o4IDejCCA3YwHQYDVR0OBBYEFDt/TCb+e01m5oftONxhv2N0j3EdMB8GA1UdIwQY MBaAFBdIR/hmfVL6LPnPmvzEOgeRVXXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2Ut MTQ1NGZmZTYxODJjLzEvTzM5TUp2NTdUV2JtaC0wNDNHR19ZM1NQY1IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My83MmNjNGEtMmQ5Yy00ODA4LTgyM2UtMTQ1NGZmZTYxODJj LzEvRjBoSC1HWjlVdm9zLWMtYV9NUTZCNUZWZGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBjgYIKwYBBQUHAQcBAf8EggF9MIIBeTCCAWYEAgABMIIB XgMEAk1OTDAMAwQBTU5eAwQDTU5wMAwDBABNTnsDBAdNTgADBAJRAMADBABRAMcw DAMEAVEAzgMEAVEA0DAMAwQCUQDUAwQAUQDWAwQAUQDZMAwDBABRAOEDBABRAOID BABRAOQwDAMEAVEA5gMEAlEA8AMEAFEA+gMEAVEA/jAMAwQCUtAEAwQAUtAMAwQA UtAOMAwDBARS0BADBABS0BIwDAMEAVLQGgMEAVLQHAMEAlLQIDAMAwQAUtAnAwQB UtAoAwQAUtAsMAwDBAFS0C4DBABS0DIDBABS0DgDBABS0DoDBABV7+MDBAFV7/wD BANte8ADBAFte8owDAMEAG17zQMEAm170DAMAwQBbXvWAwQFbXvAAwQB2QvgMAwD BADZC+MDBADZC+YDBAHZC+gwDAMEANkL6wMEANkL7AMEAdkL8jAMAwQB2Qv2AwQB 2Qv4AwQA2Qv7AwQA2Qv+MA0EAgACMAcDBQAgARUoMA0GCSqGSIb3DQEBCwUAA4IB AQBt7PWR0APXUFJ15bZJeK1tMePVvECI9twJgd51xrfbh8q2Hvi4ZZScUSod2/+4 6gaiay7a9L3gQFePvqOosyxO30spSRC8euCEF3k2SGTk4Xv+bp3/TbV/j+qV1CJ/ 4wttWL2hn167dFYYNgHC39OXcAiq+HH83b5IKRyzyOZKsqd4UPayftP1AxdSON1t P+bTMHBPHYcrWrzmJi1EMaNxKnZaQnxLdck+WoGSvy079vSl8pjCUYuT3TCajqdX GnZVM+T+pjyybcr+S5RyAPmdK52JvDVxrfZVXsXCWBQTJ4ODllBjw6qBhmyebLA+ qJfHzDAQ9aee4TpQgLuRGcKY -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:32 2026 by rpki-client