This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/4OGXKSCe69WbBAqnHrdUacn2xvY.roa File: 4OGXKSCe69WbBAqnHrdUacn2xvY.roa (raw, json) Hash identifier: Bo3VASp3hqdpjkuTRhHGGHpuPELAAuy1usZK3W9YkB0= Subject key identifier: E0:E1:97:29:20:9E:EB:D5:9B:04:0A:A7:1E:B7:54:69:C9:F6:C6:F6 Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Certificate serial: 019B7F855F3515C7C18EF13E4DE4123EB0F3 Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/4OGXKSCe69WbBAqnHrdUacn2xvY.roa Signing time: Fri 02 Jan 2026 16:23:25 +0000 ROA not before: Fri 02 Jan 2026 16:23:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43019 IP address blocks: 77.75.88.0/24 maxlen: 24 77.75.89.0/24 maxlen: 24 77.75.90.0/24 maxlen: 24 77.75.91.0/24 maxlen: 24 77.75.91.128/26 maxlen: 26 77.75.92.0/24 maxlen: 24 77.75.92.32/27 maxlen: 27 77.75.93.0/24 maxlen: 24 77.75.94.0/24 maxlen: 24 77.75.95.0/24 maxlen: 24 77.75.95.64/26 maxlen: 26 77.75.95.128/27 maxlen: 27 185.206.200.0/24 maxlen: 24 185.206.201.0/24 maxlen: 24 185.206.201.144/28 maxlen: 28 185.206.201.212/30 maxlen: 30 185.206.202.0/24 maxlen: 24 185.206.203.0/24 maxlen: 24 2a0b:3f80::/29 maxlen: 29 2a0b:3f80::/32 maxlen: 32 2a0b:3f80:0:201::/64 maxlen: 64 2a0b:3f80:0:202::/64 maxlen: 64 2a0b:3f80:0:203::/64 maxlen: 64 2a0b:3f80:0:204::/64 maxlen: 64 2a0b:3f80:2::/126 maxlen: 126 2a0b:3f80:3::/126 maxlen: 126 2a0b:3f80:15::/48 maxlen: 48 2a0b:3f81::/32 maxlen: 32 2a0b:3f81::/48 maxlen: 48 2a0b:3f82::/32 maxlen: 32 2a0b:3f83::/32 maxlen: 32 2a0b:3f84::/32 maxlen: 32 2a0b:3f85::/32 maxlen: 32 2a0b:3f85:0:202::/64 maxlen: 64 2a0b:3f85:3::/126 maxlen: 126 2a0b:3f85:aebd:201::/64 maxlen: 64 2a0b:3f86::/32 maxlen: 32 2a0b:3f87::/32 maxlen: 32 2a0b:3f87:fc18::/48 maxlen: 48 2a0b:3f87:fc19::/48 maxlen: 48 2a0b:3f87:fc1a::/48 maxlen: 48 2a0b:3f87:fc1b::/48 maxlen: 48 2a0b:3f87:fc20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5f:35:15:c7:c1:8e:f1:3e:4d:e4:12:3e:b0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Validity Not Before: Jan 2 16:23:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0e19729209eebd59b040aa71eb75469c9f6c6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:b4:82:5e:e3:7f:23:8d:6a:5b:46:fb:94: 4d:aa:e8:f1:c9:81:01:5e:d2:c2:f4:a0:ef:25:cc: 9c:cd:6f:80:bf:f3:13:25:0d:8d:0e:ab:6a:69:5d: 15:f4:3c:cb:ae:1e:70:66:ec:b8:46:87:bc:01:6e: bd:fe:af:6f:db:05:68:53:cb:a6:a9:82:de:5b:7c: 0a:61:6a:b1:0d:9c:e9:b0:81:36:e2:eb:91:59:85: 98:70:21:ce:ac:32:46:13:63:83:30:e5:7c:13:2f: cd:6b:23:7c:4d:3e:f7:c8:3a:39:de:e7:5f:c6:77: 14:f9:0f:1f:8e:56:13:1d:8e:ec:59:bc:03:28:21: 5c:d6:35:ab:5c:98:2c:34:04:55:4e:8f:50:1f:15: 98:72:cc:be:f5:2c:a6:91:1b:84:c1:c8:de:5d:dd: c2:60:81:0d:f8:85:fe:05:f6:09:56:70:68:98:2f: e4:0c:57:87:6d:b1:2f:22:27:1f:a4:1c:81:ff:3e: 01:eb:86:b4:4a:1f:39:69:b8:dd:bd:e6:3c:58:e1: 1b:71:c1:7a:2c:4a:7d:1c:65:0c:21:95:19:8e:da: 2b:06:f0:c7:60:4b:2d:4e:24:6d:a9:d0:c6:f1:c7: 06:2f:6a:70:f1:72:e9:af:a7:68:0e:ed:6b:07:5f: 50:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E1:97:29:20:9E:EB:D5:9B:04:0A:A7:1E:B7:54:69:C9:F6:C6:F6 X509v3 Authority Key Identifier: keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/4OGXKSCe69WbBAqnHrdUacn2xvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.88.0/21 185.206.200.0/22 IPv6: 2a0b:3f80::/29 Signature Algorithm: sha256WithRSAEncryption b9:5a:d4:e7:0a:b3:21:54:a7:4d:dd:cf:25:8a:39:82:a9:b0: 86:8d:27:d6:a7:b3:b6:d4:db:e4:7c:70:1e:43:92:f6:ca:4a: 2b:ec:45:b7:0f:f9:bd:4b:6a:1b:63:45:c2:44:85:4e:cb:8d: f5:fd:da:da:75:59:64:d3:f0:c4:c1:c9:db:b1:b1:94:e4:af: 89:40:fc:a9:c4:4d:19:81:ba:d7:dc:8b:76:da:08:e4:2d:29: 69:48:58:ab:ff:93:1f:94:42:36:cf:0d:22:68:ac:dc:eb:e4: 6f:96:f6:1f:bb:a1:29:ef:9b:9b:b2:d2:83:2b:ed:ec:36:9e: d0:8b:74:b6:5b:30:ea:84:38:95:aa:d9:5b:5c:f8:04:34:1d: a6:0b:06:08:fc:f4:1e:97:77:0d:58:83:07:11:ca:ad:ea:c5: 31:60:da:e6:c2:3a:27:a4:c0:0e:b1:4f:60:5a:3a:0f:41:3b: 4b:70:a0:79:42:c9:6d:48:84:15:05:6e:88:b8:fe:8f:44:c5: 06:84:43:f7:b5:1c:a5:fc:b9:cd:25:7e:0b:a4:9f:5d:92:cb: 9d:41:a1:15:97:40:a5:9f:3a:db:e8:79:bd:84:48:87:6e:4b: e0:a5:60:09:94:62:50:7a:26:89:eb:c3:8b:11:bf:05:70:d1: 97:c2:e2:7d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/hV81FcfBjvE+TeQSPrDzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh OWQzNzAwHhcNMjYwMTAyMTYyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGUxOTcyOTIwOWVlYmQ1OWIwNDBhYTcxZWI3NTQ2OWM5ZjZjNmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud+0gl7jfyONaltG+5RNqujxyYEB XtLC9KDvJcyczW+Av/MTJQ2NDqtqaV0V9DzLrh5wZuy4Roe8AW69/q9v2wVoU8um qYLeW3wKYWqxDZzpsIE24uuRWYWYcCHOrDJGE2ODMOV8Ey/NayN8TT73yDo53udf xncU+Q8fjlYTHY7sWbwDKCFc1jWrXJgsNARVTo9QHxWYcsy+9SymkRuEwcjeXd3C YIEN+IX+BfYJVnBomC/kDFeHbbEvIicfpByB/z4B64a0Sh85abjdveY8WOEbccF6 LEp9HGUMIZUZjtorBvDHYEstTiRtqdDG8ccGL2pw8XLpr6doDu1rB19Q3QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFODhlykgnuvVmwQKpx63VGnJ9sb2MB8GA1UdIwQY MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt YzZkMmI4ZDFmNTY2LzEvNE9HWEtTQ2U2OVdiQkFxbkhyZFVhY24yeHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2 LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTUtYAwQC uc7IMA0EAgACMAcDBQMqCz+AMA0GCSqGSIb3DQEBCwUAA4IBAQC5WtTnCrMhVKdN 3c8lijmCqbCGjSfWp7O21NvkfHAeQ5L2ykor7EW3D/m9S2obY0XCRIVOy431/dra dVlk0/DEwcnbsbGU5K+JQPypxE0ZgbrX3It22gjkLSlpSFir/5MflEI2zw0iaKzc 6+RvlvYfu6Ep75ubstKDK+3sNp7Qi3S2WzDqhDiVqtlbXPgENB2mCwYI/PQel3cN WIMHEcqt6sUxYNrmwjonpMAOsU9gWjoPQTtLcKB5QsltSIQVBW6IuP6PRMUGhEP3 tRyl/LnNJX4LpJ9dksudQaEVl0Clnzrb6Hm9hEiHbkvgpWAJlGJQeiaJ68OLEb8F cNGXwuJ9 -----END CERTIFICATE-----Generated at Wed Jan 21 19:30:16 2026 by rpki-client