This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/3jyq5MW1grteoJYvFFdybl0UJQU.roa File: 3jyq5MW1grteoJYvFFdybl0UJQU.roa (raw, json) Hash identifier: H0KXr7qyEoggxZaPjhmB2lgNDi7UaEEg6t6btk6quek= Subject key identifier: DE:3C:AA:E4:C5:B5:82:BB:5E:A0:96:2F:14:57:72:6E:5D:14:25:05 Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a Certificate serial: 019AA1C8AFE4178FB151D74893337CEED2CE Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/3jyq5MW1grteoJYvFFdybl0UJQU.roa Signing time: Thu 20 Nov 2025 15:01:15 +0000 ROA not before: Thu 20 Nov 2025 15:01:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200514 IP address blocks: 77.81.120.0/24 maxlen: 24 77.81.121.0/24 maxlen: 24 185.66.140.0/24 maxlen: 24 185.66.141.0/24 maxlen: 24 185.66.142.0/24 maxlen: 24 185.66.143.0/24 maxlen: 24 185.192.125.0/24 maxlen: 24 185.192.126.0/24 maxlen: 24 185.192.127.0/24 maxlen: 24 194.145.208.0/24 maxlen: 24 194.145.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:c8:af:e4:17:8f:b1:51:d7:48:93:33:7c:ee:d2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a Validity Not Before: Nov 20 15:01:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de3caae4c5b582bb5ea0962f1457726e5d142505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:65:ab:4c:16:e9:49:3f:dd:ce:28:2d:d9:0b: a8:f2:6a:b1:de:ca:9b:17:48:29:34:f0:8e:84:a1: b1:95:1f:6c:3c:08:a5:77:e9:b7:23:ab:6f:46:bb: 00:c6:4a:7a:1d:27:b9:b6:59:7d:e9:22:b7:88:89: b7:62:a5:de:67:8d:d8:3b:98:89:92:2a:c5:2b:14: d6:f2:d1:5d:5f:a6:d4:a7:31:39:49:cc:9b:8d:28: 9d:b3:df:86:3b:74:7c:0d:9c:ba:f1:4b:8b:2e:f7: 2a:ae:e7:39:28:87:cf:23:c7:be:b2:cb:d7:96:44: fd:d6:47:65:f8:75:b8:58:53:3e:ef:8c:6b:66:f4: b8:44:35:d9:09:5e:a2:c7:7f:ed:78:77:8d:89:99: 85:b3:73:3f:f0:5e:93:97:26:90:d0:d3:47:95:34: a6:17:d4:0b:f7:c6:f8:c4:6f:88:aa:f2:e5:22:04: 92:b6:e4:d7:94:53:66:b7:1a:31:47:19:e3:14:c9: 1e:a8:2c:10:94:83:26:c5:d3:74:53:36:e3:4b:de: dc:78:cd:86:b4:0d:11:f2:06:f4:84:0f:33:cc:cb: 37:15:fd:a1:c2:1c:ff:16:94:cd:80:00:ad:35:28: 45:29:16:d6:9d:18:72:a6:0f:9a:7d:f5:fb:ac:36: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3C:AA:E4:C5:B5:82:BB:5E:A0:96:2F:14:57:72:6E:5D:14:25:05 X509v3 Authority Key Identifier: keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/3jyq5MW1grteoJYvFFdybl0UJQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.120.0/23 185.66.140.0/22 185.192.125.0-185.192.127.255 194.145.208.0/23 Signature Algorithm: sha256WithRSAEncryption af:7d:77:cd:17:27:4b:ff:9c:07:f9:d3:3a:3e:3d:77:1e:12: bb:ee:33:37:72:2a:00:9c:84:67:af:51:13:a9:ec:ae:ab:d0: 10:61:af:e2:5c:9d:f7:dd:6a:01:30:4e:2d:8c:6d:4c:4d:ff: d3:8e:6f:81:06:1a:16:f8:7e:2a:eb:24:50:36:7d:b9:47:83: 7a:a1:f0:87:2e:e7:2b:9c:f5:12:ee:96:42:44:e7:2c:94:57: 11:82:d7:aa:c9:ac:15:b0:7d:e6:33:9a:73:86:93:8d:d8:20: 2c:68:df:aa:cc:2d:29:f2:65:fe:d8:26:a6:6f:c5:3f:f6:6a: f0:25:3d:e2:0a:fe:26:4e:26:7e:25:0b:ce:ae:96:78:99:d1: 8a:c2:58:cf:a6:44:ad:48:0b:41:0b:0a:63:f7:50:47:f9:1a: e6:b1:c0:0b:b4:17:3f:1d:1f:a7:15:b8:b8:bb:b8:39:0c:27: 6e:18:05:13:99:55:2f:e4:22:4b:a9:78:dd:da:1f:c8:c1:49: 50:3b:6d:c1:0e:26:ad:4a:8b:ee:ff:62:ad:6e:1f:74:b3:2d: 5c:ff:91:7f:74:dc:bb:e4:92:63:97:ed:b6:07:f2:ea:5b:b7: bb:69:d0:8f:ca:e0:81:f5:ac:d7:30:e0:a8:44:d0:a5:24:d0: 3f:a9:28:05 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZqhyK/kF4+xUddIkzN87tLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDkwYjRkYjA2YTRkNjU5MzUxNDFiYWM5ODA5ODEyN2E4 YjhmNWEwHhcNMjUxMTIwMTUwMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTNjYWFlNGM1YjU4MmJiNWVhMDk2MmYxNDU3NzI2ZTVkMTQyNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWWrTBbpST/dzigt2Quo8mqx3sqb F0gpNPCOhKGxlR9sPAild+m3I6tvRrsAxkp6HSe5tll96SK3iIm3YqXeZ43YO5iJ kirFKxTW8tFdX6bUpzE5ScybjSids9+GO3R8DZy68UuLLvcqruc5KIfPI8e+ssvX lkT91kdl+HW4WFM+74xrZvS4RDXZCV6ix3/teHeNiZmFs3M/8F6TlyaQ0NNHlTSm F9QL98b4xG+IqvLlIgSStuTXlFNmtxoxRxnjFMkeqCwQlIMmxdN0UzbjS97ceM2G tA0R8gb0hA8zzMs3Ff2hwhz/FpTNgACtNShFKRbWnRhypg+affX7rDaOgQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFN48quTFtYK7XqCWLxRXcm5dFCUFMB8GA1UdIwQY MBaAFPYJC02wak1lk1FBusmAmBJ6i49aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAt NGUxZGMxNTA1MjYwLzEvM2p5cTVNVzFncnRlb0pZdkZGZHlibDBVSlFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZGM3YWYtMmM4Yy00NTdiLWFlYjAtNGUxZGMxNTA1MjYw LzEvOWdrTFRiQnFUV1dUVVVHNnlZQ1lFbnFMajFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBTVF4AwQC uUKMMAwDBAC5wH0DBAe5wAADBAHCkdAwDQYJKoZIhvcNAQELBQADggEBAK99d80X J0v/nAf50zo+PXceErvuMzdyKgCchGevUROp7K6r0BBhr+JcnffdagEwTi2MbUxN /9OOb4EGGhb4firrJFA2fblHg3qh8Icu5yuc9RLulkJE5yyUVxGC16rJrBWwfeYz mnOGk43YICxo36rMLSnyZf7YJqZvxT/2avAlPeIK/iZOJn4lC86ulniZ0YrCWM+m RK1IC0ELCmP3UEf5GuaxwAu0Fz8dH6cVuLi7uDkMJ24YBROZVS/kIkupeN3aH8jB SVA7bcEOJq1Ki+7/Yq1uH3SzLVz/kX903LvkkmOX7bYH8upbt7tp0I/K4IH1rNcw 4KhE0KUk0D+pKAU= -----END CERTIFICATE-----Generated at Sun Dec 7 04:11:09 2025 by rpki-client