This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/fLM3lMDOIHwMeEuupYXPThUldrU.roa File: fLM3lMDOIHwMeEuupYXPThUldrU.roa (raw, json) Hash identifier: LE/OpJSbb472I3p+Lhs1DmaGG8pkRz+JrIDCohhLEEA= Subject key identifier: 7C:B3:37:94:C0:CE:20:7C:0C:78:4B:AE:A5:85:CF:4E:15:25:76:B5 Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4 Certificate serial: 019B7CEDB620A1E769EFE67A49F7CBFD4E43 Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/fLM3lMDOIHwMeEuupYXPThUldrU.roa Signing time: Fri 02 Jan 2026 04:18:32 +0000 ROA not before: Fri 02 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42003 IP address blocks: 77.42.128.0/19 maxlen: 19 77.42.160.0/19 maxlen: 19 77.42.192.0/19 maxlen: 19 77.42.224.0/21 maxlen: 21 77.42.232.0/21 maxlen: 21 77.42.240.0/21 maxlen: 21 94.187.0.0/21 maxlen: 21 94.187.0.0/24 maxlen: 24 94.187.1.0/24 maxlen: 24 94.187.2.0/24 maxlen: 24 94.187.3.0/24 maxlen: 24 94.187.4.0/24 maxlen: 24 94.187.6.0/24 maxlen: 24 94.187.7.0/24 maxlen: 24 94.187.8.0/24 maxlen: 24 94.187.9.0/24 maxlen: 24 94.187.10.0/24 maxlen: 24 94.187.11.0/24 maxlen: 24 94.187.16.0/21 maxlen: 21 94.187.24.0/21 maxlen: 21 94.187.32.0/21 maxlen: 21 94.187.40.0/21 maxlen: 21 94.187.48.0/21 maxlen: 21 94.187.56.0/21 maxlen: 21 94.187.64.0/21 maxlen: 21 94.187.72.0/21 maxlen: 21 94.187.80.0/21 maxlen: 21 94.187.88.0/21 maxlen: 21 94.187.95.0/24 maxlen: 24 94.187.96.0/21 maxlen: 21 94.187.104.0/21 maxlen: 21 94.187.112.0/21 maxlen: 21 94.187.120.0/21 maxlen: 21 178.135.0.0/24 maxlen: 24 178.135.1.0/24 maxlen: 24 178.135.2.0/24 maxlen: 24 178.135.3.0/24 maxlen: 24 178.135.6.0/24 maxlen: 24 178.135.7.0/24 maxlen: 24 178.135.8.0/21 maxlen: 21 178.135.8.0/24 maxlen: 24 178.135.9.0/24 maxlen: 24 178.135.10.0/24 maxlen: 24 178.135.11.0/24 maxlen: 24 178.135.16.0/21 maxlen: 21 178.135.24.0/21 maxlen: 21 178.135.32.0/21 maxlen: 21 178.135.40.0/21 maxlen: 21 178.135.48.0/21 maxlen: 21 178.135.56.0/21 maxlen: 21 178.135.64.0/21 maxlen: 21 178.135.72.0/21 maxlen: 21 178.135.80.0/21 maxlen: 21 178.135.88.0/21 maxlen: 21 178.135.95.0/24 maxlen: 24 178.135.96.0/21 maxlen: 21 178.135.104.0/21 maxlen: 21 178.135.112.0/21 maxlen: 21 178.135.120.0/21 maxlen: 21 178.135.128.0/21 maxlen: 21 178.135.136.0/21 maxlen: 21 178.135.144.0/21 maxlen: 21 178.135.152.0/21 maxlen: 21 178.135.160.0/21 maxlen: 21 178.135.168.0/21 maxlen: 21 178.135.176.0/21 maxlen: 21 178.135.184.0/21 maxlen: 21 178.135.192.0/21 maxlen: 21 178.135.200.0/21 maxlen: 21 178.135.208.0/21 maxlen: 21 178.135.216.0/21 maxlen: 21 178.135.224.0/21 maxlen: 21 178.135.232.0/21 maxlen: 21 178.135.240.0/21 maxlen: 21 178.135.248.0/21 maxlen: 21 2a00:6920:d000::/40 maxlen: 40 2a00:6920:e000::/40 maxlen: 40 2a00:6920:e100::/40 maxlen: 40 2a00:6920:e100::/42 maxlen: 42 2a00:6920:e140::/42 maxlen: 42 2a00:6920:e180::/42 maxlen: 42 2a00:6920:e1c0::/42 maxlen: 42 2a00:6920:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b6:20:a1:e7:69:ef:e6:7a:49:f7:cb:fd:4e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4 Validity Not Before: Jan 2 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cb33794c0ce207c0c784baea585cf4e152576b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fe:bc:54:a6:0a:86:59:06:de:7d:da:62:cf: 72:f2:6f:fb:67:e9:f7:e8:52:50:f2:5e:79:0e:07: 83:f0:e8:39:29:ae:ca:63:2d:fa:f4:3c:d3:d5:a5: e5:e4:a1:aa:8b:38:ca:a8:c4:96:60:ec:81:2f:e8: e8:24:06:0d:25:e4:4b:0e:37:80:22:4c:7c:af:f4: 83:9a:38:ae:25:a1:41:4a:6d:56:9f:0d:32:c4:fb: c0:bd:2c:ea:bb:4f:12:1c:93:74:98:e7:3e:60:08: 6b:87:26:b7:3f:4b:01:c0:a6:87:b3:0d:57:ff:1c: e6:3e:ba:b0:ff:2c:4c:4a:c3:24:ff:9a:29:80:9a: d1:40:53:7f:a6:42:23:b3:cd:db:09:22:02:06:88: 60:fe:60:ed:d6:8d:39:0f:a1:ff:47:fd:06:ca:ad: fb:0b:28:71:74:8f:ef:ad:04:18:c2:cc:e8:5e:9c: 3a:d7:cd:4c:d5:39:da:83:b2:24:c2:8f:c6:81:60: 9b:fb:cf:47:b7:33:f5:f7:3f:14:46:27:15:c5:28: 07:57:27:9c:8c:ee:7f:d1:75:31:cf:f0:b3:ed:36: e8:9d:0c:e9:7c:08:0c:40:81:1d:aa:6f:26:b4:08: 4d:07:06:5c:e3:af:bd:06:91:c0:6f:cd:0a:96:62: 98:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B3:37:94:C0:CE:20:7C:0C:78:4B:AE:A5:85:CF:4E:15:25:76:B5 X509v3 Authority Key Identifier: keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/fLM3lMDOIHwMeEuupYXPThUldrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.42.128.0-77.42.247.255 94.187.0.0-94.187.11.255 94.187.16.0-94.187.127.255 178.135.0.0/22 178.135.6.0-178.135.255.255 IPv6: 2a00:6920:d000::/40 2a00:6920:e000::/39 2a00:6920:f000::/40 Signature Algorithm: sha256WithRSAEncryption 2f:ac:53:2a:2e:da:9f:6a:48:af:42:96:79:c6:bb:53:ff:a6: e7:12:c9:c2:17:a0:49:5e:31:e9:f6:1e:66:3c:2d:10:99:09: e4:5e:42:44:de:ad:f9:4f:aa:e5:23:02:cc:58:9c:25:8e:eb: c3:aa:84:55:5f:8d:88:c1:e6:ea:2b:8d:2c:21:a5:5c:ef:74: 6f:92:c1:63:11:57:90:50:4d:d9:c8:af:4a:04:32:25:66:bd: bb:95:ee:2e:87:6b:42:a1:70:e7:d1:82:ce:7d:5e:19:d1:89: 74:43:cf:70:bf:16:64:c8:51:52:93:13:a8:42:64:5d:78:92: 58:21:86:25:e2:94:9e:f3:6e:1c:c4:35:84:71:fa:30:55:63: 36:2c:c8:00:e4:9d:bc:c2:cc:60:dc:ef:36:be:b6:4e:d9:c6: 34:f1:53:82:80:96:ec:ab:a0:79:23:c1:09:d5:a9:c8:b8:33: 49:94:75:53:2a:6e:2c:5d:ac:a0:cd:e0:a3:e0:23:f2:80:09: 7a:b1:6f:33:c5:86:9c:bc:66:49:17:f3:1d:ac:85:9e:a3:95: 02:3b:76:6e:f1:e9:ba:61:f0:cd:4f:b2:24:43:0f:fe:e9:4e: 89:c4:94:b9:ae:ed:28:98:0d:1f:b6:5a:7e:f0:82:b5:1f:32: f6:48:06:fc -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt87bYgoedp7+Z6SffL/U5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NjZlMDVkMTUyNzUwZGZhYWRlNWZhZjc5MWJhZDM5MWRj NmQyZDQwHhcNMjYwMTAyMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2IzMzc5NGMwY2UyMDdjMGM3ODRiYWVhNTg1Y2Y0ZTE1MjU3NmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP68VKYKhlkG3n3aYs9y8m/7Z+n3 6FJQ8l55DgeD8Og5Ka7KYy369DzT1aXl5KGqizjKqMSWYOyBL+joJAYNJeRLDjeA Ikx8r/SDmjiuJaFBSm1Wnw0yxPvAvSzqu08SHJN0mOc+YAhrhya3P0sBwKaHsw1X /xzmPrqw/yxMSsMk/5opgJrRQFN/pkIjs83bCSICBohg/mDt1o05D6H/R/0Gyq37 CyhxdI/vrQQYwszoXpw6181M1Tnag7Ikwo/GgWCb+89HtzP19z8URicVxSgHVyec jO5/0XUxz/Cz7TbonQzpfAgMQIEdqm8mtAhNBwZc46+9BpHAb80KlmKYMwIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFHyzN5TAziB8DHhLrqWFz04VJXa1MB8GA1UdIwQY MBaAFAlm4F0VJ1Dfqt5fr3kbrTkdxtLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80ZTFiYzgtZjgxMC00MTgyLWE2ZTMt NzIxYmI0ZmM4YzE2LzEvZkxNM2xNRE9JSHdNZUV1dXBZWFBUaFVsZHJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80ZTFiYzgtZjgxMC00MTgyLWE2ZTMtNzIxYmI0ZmM4YzE2 LzEvQ1diZ1hSVW5VTi1xM2wtdmVSdXRPUjNHMHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBCBAIAATA8MAwDBAdNKoAD BANNKvAwCwMDAF67AwQCXrsIMAwDBAReuxADBAdeuwADBAKyhwAwCwMEAbKHBgMD A7KAMB4EAgACMBgDBgAqAGkg0AMGASoAaSDgAwYAKgBpIPAwDQYJKoZIhvcNAQEL BQADggEBAC+sUyou2p9qSK9ClnnGu1P/pucSycIXoEleMen2HmY8LRCZCeReQkTe rflPquUjAsxYnCWO68OqhFVfjYjB5uorjSwhpVzvdG+SwWMRV5BQTdnIr0oEMiVm vbuV7i6Ha0KhcOfRgs59XhnRiXRDz3C/FmTIUVKTE6hCZF14klghhiXilJ7zbhzE NYRx+jBVYzYsyADknbzCzGDc7za+tk7ZxjTxU4KAluyroHkjwQnVqci4M0mUdVMq bixdrKDN4KPgI/KACXqxbzPFhpy8ZkkX8x2shZ6jlQI7dm7x6bph8M1PsiRDD/7p TonElLmu7SiYDR+2Wn7wgrUfMvZIBvw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:32 2026 by rpki-client