This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/Uh329QdqNtbq-rnjzUX67spw_pI.roa File: Uh329QdqNtbq-rnjzUX67spw_pI.roa (raw, json) Hash identifier: KrAiLdJbcCv+UC8InYxWGXAZ6xLFGNzoVLgOGCkNxp0= Subject key identifier: 52:1D:F6:F5:07:6A:36:D6:EA:FA:B9:E3:CD:45:FA:EE:CA:70:FE:92 Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f Certificate serial: 019B7EA664B6D09E5B5101DEA69CBF687BA5 Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/Uh329QdqNtbq-rnjzUX67spw_pI.roa Signing time: Fri 02 Jan 2026 12:19:52 +0000 ROA not before: Fri 02 Jan 2026 12:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16030 IP address blocks: 77.75.176.0/21 maxlen: 24 77.75.176.0/24 maxlen: 24 77.75.177.0/24 maxlen: 24 77.75.178.0/24 maxlen: 24 77.75.179.0/24 maxlen: 24 77.75.181.0/24 maxlen: 24 77.75.182.0/24 maxlen: 24 77.75.183.0/24 maxlen: 24 185.184.148.0/22 maxlen: 24 185.184.149.0/24 maxlen: 24 185.184.150.0/24 maxlen: 24 185.184.151.0/24 maxlen: 24 212.121.224.0/19 maxlen: 24 212.121.225.0/24 maxlen: 24 212.121.226.0/24 maxlen: 24 212.121.227.0/24 maxlen: 24 212.121.228.0/24 maxlen: 24 212.121.229.0/24 maxlen: 24 212.121.230.0/24 maxlen: 24 212.121.231.0/24 maxlen: 24 212.121.232.0/24 maxlen: 24 212.121.233.0/24 maxlen: 24 212.121.234.0/24 maxlen: 24 212.121.235.0/24 maxlen: 24 212.121.236.0/24 maxlen: 24 212.121.237.0/24 maxlen: 24 212.121.238.0/24 maxlen: 24 212.121.239.0/24 maxlen: 24 212.121.240.0/24 maxlen: 24 212.121.241.0/24 maxlen: 24 212.121.242.0/24 maxlen: 24 212.121.243.0/24 maxlen: 24 212.121.244.0/24 maxlen: 24 212.121.245.0/24 maxlen: 24 212.121.246.0/24 maxlen: 24 212.121.247.0/24 maxlen: 24 212.121.248.0/24 maxlen: 24 212.121.249.0/24 maxlen: 24 212.121.250.0/24 maxlen: 24 212.121.251.0/24 maxlen: 24 212.121.252.0/24 maxlen: 24 212.121.253.0/24 maxlen: 24 212.121.254.0/24 maxlen: 24 212.121.255.0/24 maxlen: 24 213.148.192.0/19 maxlen: 24 213.148.192.0/24 maxlen: 24 213.148.193.0/24 maxlen: 24 213.148.194.0/24 maxlen: 24 213.148.195.0/24 maxlen: 24 213.148.196.0/24 maxlen: 24 213.148.197.0/24 maxlen: 24 213.148.198.0/24 maxlen: 24 213.148.199.0/24 maxlen: 24 213.148.200.0/24 maxlen: 24 213.148.201.0/24 maxlen: 24 213.148.202.0/24 maxlen: 24 213.148.203.0/24 maxlen: 24 213.148.204.0/24 maxlen: 24 213.148.205.0/24 maxlen: 24 213.148.206.0/24 maxlen: 24 213.148.207.0/24 maxlen: 24 213.148.208.0/24 maxlen: 24 213.148.209.0/24 maxlen: 24 213.148.210.0/24 maxlen: 24 213.148.211.0/24 maxlen: 24 213.148.212.0/24 maxlen: 24 213.148.213.0/24 maxlen: 24 213.148.214.0/24 maxlen: 24 213.148.215.0/24 maxlen: 24 213.148.216.0/24 maxlen: 24 213.148.217.0/24 maxlen: 24 213.148.218.0/24 maxlen: 24 213.148.219.0/24 maxlen: 24 213.148.220.0/24 maxlen: 24 213.148.221.0/24 maxlen: 24 213.148.222.0/24 maxlen: 24 213.148.223.0/24 maxlen: 24 2001:4d10::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:64:b6:d0:9e:5b:51:01:de:a6:9c:bf:68:7b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f Validity Not Before: Jan 2 12:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=521df6f5076a36d6eafab9e3cd45faeeca70fe92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:34:f2:ea:62:5b:e9:cb:de:24:ee:10:52: e7:da:84:44:1a:10:3c:65:fe:db:18:0f:38:be:e4: 72:73:a9:47:a5:db:c6:b4:2e:c8:01:8d:4c:b6:e1: 87:9d:fd:4a:98:fd:99:13:d1:2e:f2:87:4e:5e:63: 9a:54:bb:27:7a:97:97:0e:e5:b2:c7:61:a3:75:b5: d6:9b:2c:53:2c:62:09:cb:60:44:2f:a5:9f:63:2f: 97:42:f5:9f:f6:52:51:98:23:2b:12:b8:c7:ed:94: 32:08:33:40:81:ec:6d:40:50:ca:a8:bb:53:01:57: 34:55:46:b9:8a:c1:45:17:88:cf:1a:23:73:f2:61: 5f:dd:3e:d1:b7:f4:e5:16:a5:55:ff:29:0e:07:f7: cc:1b:96:17:ba:6c:4a:ef:03:cc:21:8e:f3:d9:85: 6c:6b:33:b4:fe:ee:05:c5:0f:16:bd:b2:ab:98:38: 28:15:8a:24:67:2e:7e:2e:a3:b2:f4:0f:7d:fb:a5: 9f:a6:a0:1e:b0:fb:b9:c1:28:31:48:78:36:dc:2d: 0a:18:55:ef:8c:f9:28:12:d5:59:d9:fc:85:55:c2: f9:f3:bb:a9:59:b0:89:27:4d:20:46:96:d8:e6:4e: 05:c0:51:44:dc:d3:4e:bf:aa:0f:30:f9:5f:56:00: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1D:F6:F5:07:6A:36:D6:EA:FA:B9:E3:CD:45:FA:EE:CA:70:FE:92 X509v3 Authority Key Identifier: keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/Uh329QdqNtbq-rnjzUX67spw_pI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.176.0/21 185.184.148.0/22 212.121.224.0/19 213.148.192.0/19 IPv6: 2001:4d10::/32 Signature Algorithm: sha256WithRSAEncryption 58:f1:83:f0:3e:4e:46:bd:94:81:37:9c:6d:ea:eb:14:09:f7: 05:af:89:75:fc:06:c5:56:ff:58:c6:2f:5d:fc:8e:e0:2a:19: a4:0f:3d:e9:8d:42:fc:93:cc:84:ca:f7:fe:de:45:f5:ab:93: 1d:f6:e5:f3:59:fd:51:f1:fb:d1:3b:05:94:e9:67:49:32:3f: 97:0e:ab:01:3d:15:48:58:4b:33:f4:d0:09:fd:2b:40:3f:5c: 3c:c2:25:a7:f2:7e:55:af:18:9f:66:e7:70:70:d6:90:a7:fc: c1:f2:29:aa:8f:5d:22:14:dc:47:be:a9:02:03:62:6b:bb:c3: c8:78:c4:d4:77:02:71:b6:bc:e8:0b:4e:59:60:b4:fa:f5:47: 13:03:e1:63:5c:ad:44:0f:20:46:6f:55:ac:69:71:f2:aa:8b: d4:97:f3:bc:ae:0c:57:9b:ea:a3:95:92:ad:4b:0d:21:74:ea: 9f:2a:e1:3c:c7:17:ff:f6:e3:21:d1:5d:9c:32:c3:0c:14:49: 2b:0a:66:c9:25:99:8a:80:47:44:89:0d:5d:60:5f:46:4d:50: 33:68:c1:a5:d4:8f:96:f2:5c:50:a2:b1:7b:07:37:ee:6b:95: d9:d1:4a:e2:40:8a:16:cc:68:38:20:e8:02:f7:5b:3a:3e:0f: c3:fd:89:c7 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+pmS20J5bUQHeppy/aHulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzdjZGE3NWY0ZTE1ZTQ4NmRlZTVhNjUwMWNiZTIwMThi YzBlMGYwHhcNMjYwMTAyMTIxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjFkZjZmNTA3NmEzNmQ2ZWFmYWI5ZTNjZDQ1ZmFlZWNhNzBmZTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtQ08upiW+nL3iTuEFLn2oREGhA8 Zf7bGA84vuRyc6lHpdvGtC7IAY1MtuGHnf1KmP2ZE9Eu8odOXmOaVLsnepeXDuWy x2GjdbXWmyxTLGIJy2BEL6WfYy+XQvWf9lJRmCMrErjH7ZQyCDNAgextQFDKqLtT AVc0VUa5isFFF4jPGiNz8mFf3T7Rt/TlFqVV/ykOB/fMG5YXumxK7wPMIY7z2YVs azO0/u4FxQ8WvbKrmDgoFYokZy5+LqOy9A99+6WfpqAesPu5wSgxSHg23C0KGFXv jPkoEtVZ2fyFVcL587upWbCJJ00gRpbY5k4FwFFE3NNOv6oPMPlfVgCh5wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFFId9vUHajbW6vq5481F+u7KcP6SMB8GA1UdIwQY MBaAFCLHzadfThXkht7lplAcviAYvA4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5Nzgt NzUxYjE3ZDFjNDM3LzEvVWgzMjlRZHFOdGJxLXJuanpVWDY3c3B3X3BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iOTIzMzEtMmJiNC00YTU5LTk5NzgtNzUxYjE3ZDFjNDM3 LzEvSXNmTnAxOU9GZVNHM3VXbVVCeS1JQmk4RGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDTUuwAwQC ubiUAwQF1HngAwQF1ZTAMA0EAgACMAcDBQAgAU0QMA0GCSqGSIb3DQEBCwUAA4IB AQBY8YPwPk5GvZSBN5xt6usUCfcFr4l1/AbFVv9Yxi9d/I7gKhmkDz3pjUL8k8yE yvf+3kX1q5Md9uXzWf1R8fvROwWU6WdJMj+XDqsBPRVIWEsz9NAJ/StAP1w8wiWn 8n5VrxifZudwcNaQp/zB8imqj10iFNxHvqkCA2Jru8PIeMTUdwJxtrzoC05ZYLT6 9UcTA+FjXK1EDyBGb1WsaXHyqovUl/O8rgxXm+qjlZKtSw0hdOqfKuE8xxf/9uMh 0V2cMsMMFEkrCmbJJZmKgEdEiQ1dYF9GTVAzaMGl1I+W8lxQorF7Bzfua5XZ0Uri QIoWzGg4IOgC91s6Pg/D/YnH -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:58 2026 by rpki-client