This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w7Kcm6A0xrJ58OhypEoOxvqlT90.roa File: w7Kcm6A0xrJ58OhypEoOxvqlT90.roa (raw, json) Hash identifier: HATUlndIzTIkaW1J9tWO1A8DjsGq7nTUStB9VAZaWMg= Subject key identifier: C3:B2:9C:9B:A0:34:C6:B2:79:F0:E8:72:A4:4A:0E:C6:FA:A5:4F:DD Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B8D8765AEF17E396482DDB5F34CAA14C0 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w7Kcm6A0xrJ58OhypEoOxvqlT90.roa Signing time: Mon 05 Jan 2026 09:40:19 +0000 ROA not before: Mon 05 Jan 2026 09:40:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 77.93.137.0/24 maxlen: 24 77.93.149.0/24 maxlen: 24 82.153.208.0/22 maxlen: 22 82.163.19.0/24 maxlen: 24 89.213.58.0/24 maxlen: 24 89.213.108.0/23 maxlen: 24 89.213.110.0/24 maxlen: 24 89.213.122.0/24 maxlen: 24 89.213.126.0/24 maxlen: 24 89.213.194.0/23 maxlen: 24 89.213.228.0/24 maxlen: 24 89.213.240.0/23 maxlen: 24 89.213.250.0/24 maxlen: 24 213.210.16.0/24 maxlen: 24 213.210.18.0/24 maxlen: 24 213.210.33.0/24 maxlen: 24 213.210.51.0/24 maxlen: 24 213.218.220.0/24 maxlen: 24 217.144.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:87:65:ae:f1:7e:39:64:82:dd:b5:f3:4c:aa:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 5 09:40:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3b29c9ba034c6b279f0e872a44a0ec6faa54fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:54:da:19:a8:a4:39:23:97:cf:ef:ff:88: fc:c2:91:5e:22:6b:58:9f:8f:da:c7:5f:f6:b1:3f: ed:87:08:4f:04:ac:78:b9:d8:8a:10:3d:6d:fe:35: c2:32:b7:fd:31:7a:e5:0d:fc:3e:6e:7d:7f:33:79: 04:6f:55:61:41:9f:fd:d4:e8:6c:35:ee:be:0c:83: 92:8d:d8:ad:fe:ad:4b:c7:b5:6b:0c:0a:aa:7c:0c: c6:3e:af:b8:fc:c6:34:e5:cc:9d:73:7c:64:c2:b2: c0:a0:5e:07:bc:de:ef:8f:04:df:cc:97:10:87:3d: ba:fb:06:88:5a:ce:a1:94:40:c6:66:d8:82:4c:e9: 7b:fd:23:9a:f6:5a:55:50:1c:e1:48:d6:a6:13:f5: 99:47:b1:be:40:1b:59:ba:9e:f1:87:22:23:60:52: d4:bd:77:9f:34:aa:b5:c9:d9:67:39:d7:87:36:aa: 8b:e8:14:7a:6d:1c:13:e6:4e:40:d6:5d:e9:5d:8e: c8:4d:d6:67:b8:c4:c7:49:92:73:a6:2c:3f:8f:d9: 03:50:fc:1e:6e:ee:22:55:71:41:4c:ef:04:a1:c7: 64:96:6a:4f:9d:c7:24:01:34:f7:ae:23:82:c4:80: d4:6c:21:e4:d1:69:4c:c3:98:0d:3e:da:68:de:bf: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B2:9C:9B:A0:34:C6:B2:79:F0:E8:72:A4:4A:0E:C6:FA:A5:4F:DD X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w7Kcm6A0xrJ58OhypEoOxvqlT90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.137.0/24 77.93.149.0/24 82.153.208.0/22 82.163.19.0/24 89.213.58.0/24 89.213.108.0-89.213.110.255 89.213.122.0/24 89.213.126.0/24 89.213.194.0/23 89.213.228.0/24 89.213.240.0/23 89.213.250.0/24 213.210.16.0/24 213.210.18.0/24 213.210.33.0/24 213.210.51.0/24 213.218.220.0/24 217.144.151.0/24 Signature Algorithm: sha256WithRSAEncryption 14:3c:b4:fa:26:9b:f7:54:c8:7e:2a:ce:80:59:57:5d:9e:bd: 75:34:4f:d0:cb:d9:ed:0e:26:d6:e6:a6:47:38:e2:45:39:ce: de:2c:4b:94:4c:34:9e:5e:7e:9b:3b:86:e7:78:08:e4:af:02: 44:7d:0e:2d:a2:7b:3e:e9:db:e0:ad:b0:e5:2f:7c:e0:f0:d0: 36:ad:59:a7:c5:a2:6a:28:db:ee:03:f4:29:0e:5f:37:9a:b2: d1:6a:08:c0:3d:e9:6c:1b:84:06:9e:c3:68:5f:a0:e0:d2:00: 7b:ea:90:9c:5e:6a:89:82:33:88:02:c3:3c:4c:2e:a9:05:d5: 40:96:47:d1:6a:e8:63:dc:ba:f8:54:15:90:2f:ff:af:ff:47: ca:5b:1e:ec:dd:ae:da:ef:77:8c:d2:81:4c:8d:f3:96:f2:e4: 61:2d:a6:88:20:7f:1e:91:ed:1d:29:d3:3e:ab:34:6a:ee:f4: 1d:04:af:b7:0f:e5:9c:ee:b6:46:62:21:f8:7c:13:24:2b:6e: dd:a5:84:a2:0e:30:71:8a:3c:01:2e:d8:d8:5f:dd:50:73:b4: c9:ec:14:22:24:55:47:af:b7:92:c4:7c:41:78:78:bc:f2:88: fc:d3:e7:fb:7f:85:5b:ea:42:76:87:bb:e4:18:c0:e4:ce:3e: f1:14:78:9b -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZuNh2Wu8X45ZILdtfNMqhTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTA1MDk0MDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2IyOWM5YmEwMzRjNmIyNzlmMGU4NzJhNDRhMGVjNmZhYTU0ZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuABU2hmopDkjl8/v/4j8wpFeImtY n4/ax1/2sT/thwhPBKx4udiKED1t/jXCMrf9MXrlDfw+bn1/M3kEb1VhQZ/91Ohs Ne6+DIOSjdit/q1Lx7VrDAqqfAzGPq+4/MY05cydc3xkwrLAoF4HvN7vjwTfzJcQ hz26+waIWs6hlEDGZtiCTOl7/SOa9lpVUBzhSNamE/WZR7G+QBtZup7xhyIjYFLU vXefNKq1ydlnOdeHNqqL6BR6bRwT5k5A1l3pXY7ITdZnuMTHSZJzpiw/j9kDUPwe bu4iVXFBTO8EocdklmpPncckATT3riOCxIDUbCHk0WlMw5gNPtpo3r/o+QIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFMOynJugNMayefDocqRKDsb6pU/dMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdzdLY202QTB4cko1OE9oeXBFb094dnFsVDkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAE1diQME AE1dlQMEAlKZ0AMEAFKjEwMEAFnVOjAMAwQCWdVsAwQAWdVuAwQAWdV6AwQAWdV+ AwQBWdXCAwQAWdXkAwQBWdXwAwQAWdX6AwQA1dIQAwQA1dISAwQA1dIhAwQA1dIz AwQA1drcAwQA2ZCXMA0GCSqGSIb3DQEBCwUAA4IBAQAUPLT6Jpv3VMh+Ks6AWVdd nr11NE/Qy9ntDibW5qZHOOJFOc7eLEuUTDSeXn6bO4bneAjkrwJEfQ4tons+6dvg rbDlL3zg8NA2rVmnxaJqKNvuA/QpDl83mrLRagjAPelsG4QGnsNoX6Dg0gB76pCc XmqJgjOIAsM8TC6pBdVAlkfRauhj3Lr4VBWQL/+v/0fKWx7s3a7a73eM0oFMjfOW 8uRhLaaIIH8eke0dKdM+qzRq7vQdBK+3D+Wc7rZGYiH4fBMkK27dpYSiDjBxijwB LtjYX91Qc7TJ7BQiJFVHr7eSxHxBeHi88oj80+f7f4Vb6kJ2h7vkGMDkzj7xFHib -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:24 2026 by rpki-client