This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/PF9i7XAg4IftQ0nhvDD8LLQN09U.roa File: PF9i7XAg4IftQ0nhvDD8LLQN09U.roa (raw, json) Hash identifier: LpN8DuqSJnQx5JIJmOW6tiIYW4UUORtYauIsvCBkUrg= Subject key identifier: 3C:5F:62:ED:70:20:E0:87:ED:43:49:E1:BC:30:FC:2C:B4:0D:D3:D5 Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Certificate serial: 019B499F8560FB407697D57D0A201F5A201C Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/PF9i7XAg4IftQ0nhvDD8LLQN09U.roa Signing time: Tue 23 Dec 2025 05:12:29 +0000 ROA not before: Tue 23 Dec 2025 05:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39582 IP address blocks: 37.77.0.0/19 maxlen: 24 37.77.1.0/24 maxlen: 24 37.77.2.0/24 maxlen: 24 37.77.3.0/24 maxlen: 24 37.77.4.0/24 maxlen: 24 37.77.5.0/24 maxlen: 24 37.77.6.0/24 maxlen: 24 37.77.7.0/24 maxlen: 24 37.77.8.0/24 maxlen: 24 37.77.9.0/24 maxlen: 24 37.77.10.0/24 maxlen: 24 37.77.12.0/24 maxlen: 24 37.77.13.0/24 maxlen: 24 37.77.14.0/24 maxlen: 24 37.77.15.0/24 maxlen: 24 37.77.16.0/24 maxlen: 24 37.77.17.0/24 maxlen: 24 37.77.18.0/24 maxlen: 24 37.77.20.0/24 maxlen: 24 37.77.21.0/24 maxlen: 24 37.77.22.0/24 maxlen: 24 37.77.23.0/24 maxlen: 24 37.77.24.0/24 maxlen: 24 37.77.26.0/24 maxlen: 24 37.77.30.0/24 maxlen: 24 2a02:4300::/29 maxlen: 29 2a02:4300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.mft rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:9f:85:60:fb:40:76:97:d5:7d:0a:20:1f:5a:20:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8 Validity Not Before: Dec 23 05:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3c5f62ed7020e087ed4349e1bc30fc2cb40dd3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:54:7b:f8:a4:40:2e:d3:15:e1:7e:93:a4: 3e:33:fe:e0:89:88:bb:2d:55:fe:38:ac:a8:68:93: df:e9:38:af:bf:87:4d:dc:e3:14:78:d6:54:ab:24: 5a:16:1e:a4:9a:86:9a:ae:74:92:a2:81:3a:ce:0e: 10:c7:c8:9a:45:52:eb:81:9e:68:ea:d9:16:60:c8: c5:71:73:88:7a:21:04:ef:1e:b2:33:43:49:d3:37: 11:8c:77:1b:68:e1:0f:6c:ae:2a:a7:cd:8f:53:29: 0c:4b:6c:28:59:68:ea:05:d8:7a:c6:2e:c9:84:d2: 90:ce:1b:e6:ba:f4:95:97:e3:b2:b2:01:2f:9e:ed: 14:69:c4:a9:86:04:47:d7:8b:0e:cc:fb:de:2a:c7: df:39:17:09:40:1d:79:77:be:c1:8c:3d:c2:c8:2b: 0a:2a:60:45:90:bd:cd:0b:6b:0b:f8:a4:48:59:15: 1d:1c:aa:15:d8:ff:4c:41:23:5e:fd:32:35:72:12: 1c:84:76:87:9a:cc:7a:16:4d:08:7a:84:b0:b6:4f: 5d:81:47:c4:f8:26:bc:55:c7:67:d6:f7:74:e9:84: a1:7e:98:df:0c:26:11:d7:75:d3:32:80:41:73:57: 4b:91:8a:42:51:a1:4f:cf:5a:72:46:fd:59:10:22: e4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5F:62:ED:70:20:E0:87:ED:43:49:E1:BC:30:FC:2C:B4:0D:D3:D5 X509v3 Authority Key Identifier: keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/PF9i7XAg4IftQ0nhvDD8LLQN09U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.0.0/19 IPv6: 2a02:4300::/29 Signature Algorithm: sha256WithRSAEncryption 19:eb:ed:2d:62:a1:bc:62:3d:a0:c8:35:be:82:fb:2a:f3:f4: e1:13:69:08:2f:e0:13:6d:e2:a5:31:5f:6b:e7:0d:7e:b9:f0: 11:98:ad:af:dc:45:bc:01:e0:da:30:8c:87:75:fd:c4:c3:8e: 1a:93:23:28:5e:44:6a:0e:e0:8e:ae:41:e6:aa:4d:5a:b5:a4: 99:b8:0e:03:98:ec:d8:81:34:af:fc:bb:7e:78:18:83:90:c2: ca:32:12:42:07:86:69:53:b6:33:2c:58:4d:b7:1a:a4:7a:dc: 2d:0e:75:a8:1b:8d:0e:d4:ee:99:70:75:40:ed:eb:e0:9d:79: 66:e4:d2:f7:15:9e:b1:5a:fd:93:b1:1a:e6:5a:66:4d:77:e5: d5:0f:01:4e:e1:e4:15:96:f4:c9:31:63:bb:ef:7d:d3:f5:62: e9:c3:39:52:d7:ca:67:9e:2f:13:f9:cc:36:c7:8a:34:1f:8e: 77:11:5a:37:65:e4:6d:0b:e0:21:ff:69:0d:08:16:45:fb:66: 40:62:58:c7:96:b8:d8:0d:5e:9c:e8:77:60:6d:b5:e6:c5:29: e3:02:33:cc:33:4b:11:6f:72:98:f9:90:41:ef:22:f6:bb:23: 03:de:5c:7f:74:12:74:77:fa:b5:3f:db:83:e2:a3:cb:f4:ea: 39:6b:ea:ec -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZtJn4Vg+0B2l9V9CiAfWiAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTkzMDA3YzdjOTJkZjYxNzhlN2NiNDMxODNmZDdmNTJh NTI2ZDgwHhcNMjUxMjIzMDUxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzVmNjJlZDcwMjBlMDg3ZWQ0MzQ5ZTFiYzMwZmMyY2I0MGRkM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyexUe/ikQC7TFeF+k6Q+M/7giYi7 LVX+OKyoaJPf6Tivv4dN3OMUeNZUqyRaFh6kmoaarnSSooE6zg4Qx8iaRVLrgZ5o 6tkWYMjFcXOIeiEE7x6yM0NJ0zcRjHcbaOEPbK4qp82PUykMS2woWWjqBdh6xi7J hNKQzhvmuvSVl+OysgEvnu0UacSphgRH14sOzPveKsffORcJQB15d77BjD3CyCsK KmBFkL3NC2sL+KRIWRUdHKoV2P9MQSNe/TI1chIchHaHmsx6Fk0IeoSwtk9dgUfE +Ca8Vcdn1vd06YShfpjfDCYR13XTMoBBc1dLkYpCUaFPz1pyRv1ZECLkhwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDxfYu1wIOCH7UNJ4bww/Cy0DdPVMB8GA1UdIwQY MBaAFCmZMAfHyS32F458tDGD/X9SpSbYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODkt MWU4MjlmZmExYzNhLzEvUEY5aTdYQWc0SWZ0UTBuaHZERDhMTFFOMDlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kYzliNmYtM2E2ZC00NDlmLThiODktMWU4MjlmZmExYzNh LzEvS1prd0I4ZkpMZllYam55ME1ZUDlmMUtsSnRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFJU0AMA0E AgACMAcDBQMqAkMAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ6+0tYqG8Yj2gyDW+gvsq 8/ThE2kIL+ATbeKlMV9r5w1+ufARmK2v3EW8AeDaMIyHdf3Ew44akyMoXkRqDuCO rkHmqk1ataSZuA4DmOzYgTSv/Lt+eBiDkMLKMhJCB4ZpU7YzLFhNtxqketwtDnWo G40O1O6ZcHVA7evgnXlm5NL3FZ6xWv2TsRrmWmZNd+XVDwFO4eQVlvTJMWO7733T 9WLpwzlS18pnni8T+cw2x4o0H453EVo3ZeRtC+Ah/2kNCBZF+2ZAYljHlrjYDV6c 6HdgbbXmxSnjAjPMM0sRb3KY+ZBB7yL2uyMD3lx/dBJ0d/q1P9uD4qPL9Oo5a+rs -----END CERTIFICATE-----Generated at Fri Dec 26 22:42:49 2025 by rpki-client