This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/3zbGyukfQlvWlz1rIu3MF0i9ZQA.roa File: 3zbGyukfQlvWlz1rIu3MF0i9ZQA.roa (raw, json) Hash identifier: C8VCXrjogu4GEXHN+4VlV1RhYCbxfqeG8eCfQQqvC/8= Subject key identifier: DF:36:C6:CA:E9:1F:42:5B:D6:97:3D:6B:22:ED:CC:17:48:BD:65:00 Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5 Certificate serial: 019B7AC88E9FAB260201DFA0E49662C15EDE Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/3zbGyukfQlvWlz1rIu3MF0i9ZQA.roa Signing time: Thu 01 Jan 2026 18:18:42 +0000 ROA not before: Thu 01 Jan 2026 18:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8674 IP address blocks: 77.72.224.0/21 maxlen: 21 185.42.136.0/23 maxlen: 23 194.58.192.0/22 maxlen: 22 194.58.192.0/24 maxlen: 24 194.58.193.0/24 maxlen: 24 194.58.194.0/23 maxlen: 23 194.58.194.0/24 maxlen: 24 194.58.195.0/24 maxlen: 24 194.58.196.0/24 maxlen: 24 194.58.197.0/24 maxlen: 24 194.58.198.0/24 maxlen: 24 194.58.199.0/24 maxlen: 24 194.146.105.0/24 maxlen: 24 194.146.106.0/23 maxlen: 24 194.146.106.0/24 maxlen: 24 194.146.107.0/24 maxlen: 24 212.237.194.0/24 maxlen: 24 212.237.195.0/24 maxlen: 24 212.237.196.0/22 maxlen: 22 213.32.232.0/21 maxlen: 21 2001:67c:1010::/47 maxlen: 47 2001:67c:1010::/48 maxlen: 48 2001:67c:1011::/48 maxlen: 48 2001:67c:254c::/48 maxlen: 48 2001:67c:2550::/48 maxlen: 48 2001:67c:2554::/48 maxlen: 48 2001:67c:2558::/48 maxlen: 48 2a01:3f0::/32 maxlen: 32 2a01:3f1::/32 maxlen: 32 2a01:3f1::/38 maxlen: 38 2a01:3f1:400::/38 maxlen: 38 2a01:3f1:800::/38 maxlen: 38 2a01:3f1:3000::/38 maxlen: 38 2a01:3f1:5000::/38 maxlen: 38 2a01:3f1:8000::/38 maxlen: 38 2a01:3f1:a000::/38 maxlen: 38 2a01:3f1:c000::/38 maxlen: 38 2a01:3f1:f000::/36 maxlen: 48 2a01:3f2::/32 maxlen: 48 2a01:3f3::/32 maxlen: 48 2a01:3f4::/32 maxlen: 48 2a01:3f5::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8e:9f:ab:26:02:01:df:a0:e4:96:62:c1:5e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df36c6cae91f425bd6973d6b22edcc1748bd6500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:d2:d9:89:b0:01:53:27:d6:c2:55:54:77: 70:44:37:26:22:f9:a9:25:18:7a:12:80:71:64:f5: e5:94:af:06:42:a7:a3:6c:ac:c7:34:6e:27:f8:8d: 13:ad:ca:d7:4d:38:37:99:d0:16:23:47:db:3f:68: 95:96:89:4f:0a:35:cc:7a:7c:7c:2f:96:37:62:e9: 89:e2:b9:2a:4f:6e:ba:bb:2f:cd:2f:6b:a8:05:eb: b1:2a:d4:70:e6:7b:7d:76:48:78:12:20:f7:f1:a8: d9:ae:6f:b7:45:66:97:2b:33:71:ba:9b:69:4b:00: 11:ea:6b:95:5e:a7:75:bb:ae:57:94:81:ea:dd:16: 7c:b5:3a:5b:4d:6f:17:2d:ab:1c:4e:d4:5f:28:35: b8:3a:a1:d5:99:b0:04:52:41:64:df:27:1b:82:25: 82:36:17:51:59:c7:12:ed:7a:17:49:89:24:5b:44: ac:a0:d2:72:61:bb:c5:05:9a:d4:e9:97:1f:56:c7: 6f:e3:32:db:21:06:f1:fb:ef:0c:a7:f9:e2:d5:72: f5:c9:2d:2d:05:6a:b9:a7:06:6f:7e:56:3f:d6:62: 6b:77:81:2f:88:fe:3f:28:9e:c3:f4:e8:5a:6c:4a: c6:0b:03:28:a9:5e:12:4d:fd:79:4d:e5:36:74:25: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:36:C6:CA:E9:1F:42:5B:D6:97:3D:6B:22:ED:CC:17:48:BD:65:00 X509v3 Authority Key Identifier: keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/3zbGyukfQlvWlz1rIu3MF0i9ZQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.224.0/21 185.42.136.0/23 194.58.192.0/21 194.146.105.0-194.146.107.255 212.237.194.0-212.237.199.255 213.32.232.0/21 IPv6: 2001:67c:1010::/47 2001:67c:254c::/48 2001:67c:2550::/48 2001:67c:2554::/48 2001:67c:2558::/48 2a01:3f0::-2a01:3f5:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b1:e4:25:3b:8d:b6:d7:a1:5d:05:0a:87:b6:6a:b4:dc:9c:fa: 50:fd:0a:55:55:2c:fe:50:52:ed:dd:07:e7:5e:57:d2:50:c8: 46:22:b8:65:b6:56:41:96:f8:4c:e0:09:3f:a1:3c:24:3a:2e: 03:d5:63:89:a2:41:a6:e5:e2:ab:ae:72:47:74:d0:09:45:f7: e8:34:82:6f:1f:51:20:25:29:f0:2f:76:c6:d2:93:ad:e6:be: 21:94:39:82:fc:52:7f:83:83:cb:99:74:e3:12:d2:7a:d2:5e: f4:d1:00:15:b5:90:8f:47:aa:f5:d4:88:ef:b7:ff:34:9b:c5: 46:65:33:d6:da:5d:45:da:e0:89:de:5f:bb:a2:55:56:a2:0a: 43:ba:8c:1f:15:dd:75:50:8d:8a:16:0e:de:f1:e1:24:84:95: 7d:60:46:da:19:49:50:17:c8:0d:99:61:01:7f:72:ed:7b:9a: 8a:09:8b:7d:93:41:fd:de:b4:ab:6e:35:d5:a7:56:a7:a1:be: 9e:ee:ba:fb:cf:6c:92:fb:ee:18:a3:4a:c0:db:0d:5f:be:b3: d9:93:09:68:40:3a:a0:e8:d4:2d:eb:a5:d1:91:21:ad:fc:01: 06:e4:59:d1:f7:e6:64:7e:ac:41:ad:f2:3f:cb:9b:20:92:f0: 88:08:bc:16 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt6yI6fqyYCAd+g5JZiwV7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWM4MjgwNDcwMGFkMzY1MzhiZjg2ZjM0YzA3M2U5NzE0 MzBkYTUwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjM2YzZjYWU5MWY0MjViZDY5NzNkNmIyMmVkY2MxNzQ4YmQ2NTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpzS2YmwAVMn1sJVVHdwRDcmIvmp JRh6EoBxZPXllK8GQqejbKzHNG4n+I0TrcrXTTg3mdAWI0fbP2iVlolPCjXMenx8 L5Y3YumJ4rkqT266uy/NL2uoBeuxKtRw5nt9dkh4EiD38ajZrm+3RWaXKzNxuptp SwAR6muVXqd1u65XlIHq3RZ8tTpbTW8XLascTtRfKDW4OqHVmbAEUkFk3ycbgiWC NhdRWccS7XoXSYkkW0SsoNJyYbvFBZrU6ZcfVsdv4zLbIQbx++8Mp/ni1XL1yS0t BWq5pwZvflY/1mJrd4EviP4/KJ7D9OhabErGCwMoqV4STf15TeU2dCW7ewIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFN82xsrpH0Jb1pc9ayLtzBdIvWUAMB8GA1UdIwQY MBaAFAusgoBHAK02U4v4bzTAc+lxQw2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEt NDNmNjRiY2VhOTlkLzEvM3piR3l1a2ZRbHZXbHoxckl1M01GMGk5WlFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEtNDNmNjRiY2VhOTlk LzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTA6BAIAATA0AwQDTUjg AwQBuSqIAwQDwjrAMAwDBADCkmkDBALCkmgwDAMEAdTtwgMEA9TtwAMEA9Ug6DBD BAIAAjA9AwcBIAEGfBAQAwcAIAEGfCVMAwcAIAEGfCVQAwcAIAEGfCVUAwcAIAEG fCVYMA4DBQQqAQPwAwUBKgED9DANBgkqhkiG9w0BAQsFAAOCAQEAseQlO42216Fd BQqHtmq03Jz6UP0KVVUs/lBS7d0H515X0lDIRiK4ZbZWQZb4TOAJP6E8JDouA9Vj iaJBpuXiq65yR3TQCUX36DSCbx9RICUp8C92xtKTrea+IZQ5gvxSf4ODy5l04xLS etJe9NEAFbWQj0eq9dSI77f/NJvFRmUz1tpdRdrgid5fu6JVVqIKQ7qMHxXddVCN ihYO3vHhJISVfWBG2hlJUBfIDZlhAX9y7XuaigmLfZNB/d60q2411adWp6G+nu66 +89skvvuGKNKwNsNX76z2ZMJaEA6oOjULeul0ZEhrfwBBuRZ0ffmZH6sQa3yP8ub IJLwiAi8Fg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:24 2026 by rpki-client