This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/2W3yWm1HMzPskIDqOBKTk5NLDnk.roa File: 2W3yWm1HMzPskIDqOBKTk5NLDnk.roa (raw, json) Hash identifier: zkzysD/L4UIm9OcLl6P6Mv4weJO+FXhHhd0t2XLROjI= Subject key identifier: D9:6D:F2:5A:6D:47:33:33:EC:90:80:EA:38:12:93:93:93:4B:0E:79 Certificate issuer: /CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10 Certificate serial: 019B7F14C86AC2C326D32F0F78809F924AD7 Authority key identifier: DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/2W3yWm1HMzPskIDqOBKTk5NLDnk.roa Signing time: Fri 02 Jan 2026 14:20:26 +0000 ROA not before: Fri 02 Jan 2026 14:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202366 IP address blocks: 37.77.64.0/20 maxlen: 20 37.77.64.0/21 maxlen: 21 37.77.64.0/22 maxlen: 22 37.77.64.0/23 maxlen: 23 37.77.64.0/24 maxlen: 24 37.77.65.0/24 maxlen: 24 37.77.66.0/23 maxlen: 23 37.77.66.0/24 maxlen: 24 37.77.67.0/24 maxlen: 24 37.77.68.0/22 maxlen: 22 37.77.68.0/23 maxlen: 23 37.77.68.0/24 maxlen: 24 37.77.69.0/24 maxlen: 24 37.77.70.0/23 maxlen: 23 37.77.70.0/24 maxlen: 24 37.77.71.0/24 maxlen: 24 37.77.72.0/21 maxlen: 21 37.77.72.0/22 maxlen: 22 37.77.72.0/23 maxlen: 23 37.77.72.0/24 maxlen: 24 37.77.73.0/24 maxlen: 24 37.77.74.0/23 maxlen: 23 37.77.74.0/24 maxlen: 24 37.77.75.0/24 maxlen: 24 37.77.76.0/22 maxlen: 22 37.77.76.0/23 maxlen: 23 37.77.76.0/24 maxlen: 24 37.77.77.0/24 maxlen: 24 37.77.78.0/23 maxlen: 23 37.77.78.0/24 maxlen: 24 37.77.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.mft rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c8:6a:c2:c3:26:d3:2f:0f:78:80:9f:92:4a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcb65a90ed3cf4ae0452554ee34b92a8476dcf10 Validity Not Before: Jan 2 14:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d96df25a6d473333ec9080ea38129393934b0e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:70:fe:22:7f:e1:ab:a1:2a:71:e1:7f:38: 6a:cd:3f:75:32:c5:c3:c8:e1:22:16:36:cb:63:0e: 18:9a:41:a9:5b:5c:72:c5:69:19:4d:4a:04:61:11: f2:93:61:54:68:5b:50:8f:0a:28:c9:de:ef:bc:29: 56:24:19:a7:33:98:dd:a6:65:01:73:f7:e8:15:e9: ab:3b:21:67:27:86:ec:17:f3:cc:e0:6b:79:a0:84: 32:be:75:71:66:ff:4d:b3:82:16:1e:b3:4d:b6:14: ea:aa:69:6c:6d:73:41:ec:85:35:c5:00:5d:f6:51: ee:01:fe:3f:30:e0:a7:65:98:1f:86:91:47:29:f0: a7:7d:b3:9c:bd:cd:7f:f8:6b:62:fa:9a:2c:4f:33: 4f:de:21:71:1f:d7:09:56:78:be:01:e6:7d:23:b6: 9a:53:d9:a9:00:c3:bb:30:d8:98:8c:b6:ce:5b:19: 07:db:bd:aa:88:1f:0b:4c:b8:ad:e8:43:a8:a1:11: 1a:3b:4d:67:93:97:8d:ed:0c:c5:56:90:45:96:02: dd:b5:a0:f6:7f:33:f8:2b:e3:8e:7d:7b:3e:cc:bc: d5:66:f7:d2:e4:c2:5f:ce:aa:3a:d2:12:a9:e0:7b: c4:d1:6d:90:70:fa:3c:77:1d:2c:98:39:38:a6:9a: 1a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6D:F2:5A:6D:47:33:33:EC:90:80:EA:38:12:93:93:93:4B:0E:79 X509v3 Authority Key Identifier: keyid:DC:B6:5A:90:ED:3C:F4:AE:04:52:55:4E:E3:4B:92:A8:47:6D:CF:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LZakO089K4EUlVO40uSqEdtzxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/2W3yWm1HMzPskIDqOBKTk5NLDnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/09200e-999d-4b45-a741-85a955f2163b/1/3LZakO089K4EUlVO40uSqEdtzxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.64.0/20 Signature Algorithm: sha256WithRSAEncryption 62:9d:b3:1e:38:ed:52:5f:97:1b:f7:ac:28:09:43:0e:f6:b3: 13:ae:37:79:64:1c:81:a0:31:b6:b0:5b:43:bf:0c:ea:99:de: af:e1:d0:fe:e1:80:0b:13:5c:00:e0:2c:9a:d9:46:0d:54:48: ac:34:84:cd:3c:bb:1c:50:09:dc:e6:b7:c0:eb:b7:72:b4:a0: 99:09:b8:4e:6d:a4:44:5e:d8:ef:cf:90:7c:00:b0:56:2b:d2: 10:ef:74:a2:b7:3a:9a:20:ec:05:99:72:69:4e:22:b8:11:49: d1:67:de:ab:ed:35:51:4d:5e:f5:ce:ed:99:91:7e:63:57:55: 63:ad:d2:38:a0:a8:87:f3:a1:a5:5c:22:19:e7:6a:fc:0d:5f: 12:ed:cc:8e:99:32:f9:2b:2d:bd:a1:a5:9a:74:42:da:b3:cb: f7:77:04:d1:01:1c:9e:12:f0:7f:2b:e3:ef:84:72:39:b9:6b: 9b:e8:b2:80:09:ab:e3:4d:c5:51:6f:90:72:9b:26:ab:fd:7c: 62:c4:57:b5:71:2f:88:1d:e5:23:7b:eb:9f:24:08:02:43:c4: dd:c7:44:00:f3:46:0e:4b:f6:50:f6:6d:68:4e:fe:45:78:3d: 16:3c:96:bb:77:87:5e:1f:f7:e3:ea:d1:4a:80:a2:ef:24:81: e8:40:57:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FMhqwsMm0y8PeICfkkrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYjY1YTkwZWQzY2Y0YWUwNDUyNTU0ZWUzNGI5MmE4NDc2 ZGNmMTAwHhcNMjYwMTAyMTQyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTZkZjI1YTZkNDczMzMzZWM5MDgwZWEzODEyOTM5MzkzNGIwZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKpw/iJ/4auhKnHhfzhqzT91MsXD yOEiFjbLYw4YmkGpW1xyxWkZTUoEYRHyk2FUaFtQjwooyd7vvClWJBmnM5jdpmUB c/foFemrOyFnJ4bsF/PM4Gt5oIQyvnVxZv9Ns4IWHrNNthTqqmlsbXNB7IU1xQBd 9lHuAf4/MOCnZZgfhpFHKfCnfbOcvc1/+Gti+posTzNP3iFxH9cJVni+AeZ9I7aa U9mpAMO7MNiYjLbOWxkH272qiB8LTLit6EOooREaO01nk5eN7QzFVpBFlgLdtaD2 fzP4K+OOfXs+zLzVZvfS5MJfzqo60hKp4HvE0W2QcPo8dx0smDk4ppoa6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNlt8lptRzMz7JCA6jgSk5OTSw55MB8GA1UdIwQY MBaAFNy2WpDtPPSuBFJVTuNLkqhHbc8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEt ODVhOTU1ZjIxNjNiLzEvMlczeVdtMUhNelBza0lEcU9CS1RrNU5MRG5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wOTIwMGUtOTk5ZC00YjQ1LWE3NDEtODVhOTU1ZjIxNjNi LzEvM0xaYWtPMDg5SzRFVWxWTzQwdVNxRWR0enhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEJU1AMA0G CSqGSIb3DQEBCwUAA4IBAQBinbMeOO1SX5cb96woCUMO9rMTrjd5ZByBoDG2sFtD vwzqmd6v4dD+4YALE1wA4Cya2UYNVEisNITNPLscUAnc5rfA67dytKCZCbhObaRE Xtjvz5B8ALBWK9IQ73SitzqaIOwFmXJpTiK4EUnRZ96r7TVRTV71zu2ZkX5jV1Vj rdI4oKiH86GlXCIZ52r8DV8S7cyOmTL5Ky29oaWadELas8v3dwTRARyeEvB/K+Pv hHI5uWub6LKACavjTcVRb5Bymyar/XxixFe1cS+IHeUje+ufJAgCQ8Tdx0QA80YO S/ZQ9m1oTv5FeD0WPJa7d4deH/fj6tFKgKLvJIHoQFeL -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:51 2026 by rpki-client