This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/QTnflRDqAKg81BhqTfvGF5Pz_xM.roa File: QTnflRDqAKg81BhqTfvGF5Pz_xM.roa (raw, json) Hash identifier: GASWvWT0LzhuKAbwvS1EOgovlGNitmvN7JCqe3mF9OI= Subject key identifier: 41:39:DF:95:10:EA:00:A8:3C:D4:18:6A:4D:FB:C6:17:93:F3:FF:13 Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019B7F14673CB7FEABCC8D0B6616DF753744 Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/QTnflRDqAKg81BhqTfvGF5Pz_xM.roa Signing time: Fri 02 Jan 2026 14:20:02 +0000 ROA not before: Fri 02 Jan 2026 14:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 77.221.136.0/22 maxlen: 22 77.221.140.0/22 maxlen: 22 77.221.148.0/24 maxlen: 24 77.221.149.0/24 maxlen: 24 77.221.152.0/23 maxlen: 23 77.221.154.0/23 maxlen: 23 77.221.156.0/23 maxlen: 23 77.221.158.0/23 maxlen: 23 109.120.132.0/23 maxlen: 23 109.120.134.0/23 maxlen: 23 109.120.138.0/24 maxlen: 24 109.120.139.0/24 maxlen: 24 109.120.140.0/24 maxlen: 24 109.120.149.0/24 maxlen: 24 109.120.150.0/24 maxlen: 24 109.120.151.0/24 maxlen: 24 109.120.155.0/24 maxlen: 24 109.120.156.0/23 maxlen: 24 109.120.176.0/23 maxlen: 23 109.120.178.0/23 maxlen: 23 109.120.184.0/23 maxlen: 23 109.120.186.0/23 maxlen: 23 109.120.186.0/24 maxlen: 24 109.120.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:67:3c:b7:fe:ab:cc:8d:0b:66:16:df:75:37:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Jan 2 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4139df9510ea00a83cd4186a4dfbc61793f3ff13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:a4:0b:13:09:f9:2a:77:5f:a6:24:69:06: 59:cc:59:f6:35:4d:b8:bb:68:14:74:b4:7b:94:0d: ba:55:87:ad:45:fc:64:a5:98:4b:be:f0:30:66:41: cd:34:bd:15:64:2b:f4:da:5a:09:78:80:bd:ac:f5: 96:68:dd:94:69:a9:b8:e5:62:6e:2c:ad:55:a0:f8: b9:2b:90:e8:fd:eb:9d:24:a6:ad:26:d9:e1:ab:a4: 9d:00:77:f3:2e:bb:8c:16:99:53:0a:c1:09:c4:b5: 09:c0:42:23:5f:1f:3e:f0:5d:dc:29:78:1f:ed:34: 6b:79:71:44:8d:04:7a:d5:89:a1:03:15:21:95:56: 7b:7f:48:eb:b3:d7:7d:24:5d:38:e0:63:eb:ed:f9: e0:51:cd:f6:5c:78:9f:85:8b:28:ee:d6:f7:e4:bc: 0c:64:b0:27:85:89:37:4d:97:71:e5:ae:ac:9e:b2: 17:e9:08:b8:af:69:94:67:49:6f:46:c5:2a:e3:c9: a6:2e:87:07:ea:cf:df:d8:5e:94:23:50:bd:3d:db: 20:e7:a2:a1:85:02:66:d8:29:93:f7:c4:b1:c4:14: 4f:5e:c3:1b:f8:f2:9a:6a:15:53:b5:88:cf:08:13: d7:13:e8:4a:fc:9f:45:09:52:7d:22:ac:1f:d4:ea: 85:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:39:DF:95:10:EA:00:A8:3C:D4:18:6A:4D:FB:C6:17:93:F3:FF:13 X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/QTnflRDqAKg81BhqTfvGF5Pz_xM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.221.136.0/21 77.221.148.0/23 77.221.152.0/21 109.120.132.0/22 109.120.138.0-109.120.140.255 109.120.149.0-109.120.151.255 109.120.155.0-109.120.157.255 109.120.176.0/22 109.120.184.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:b6:21:db:0a:56:b6:bc:d8:14:b0:7a:8b:00:e6:72:3c:d0: 88:c1:e7:8c:21:62:b8:d2:66:c2:31:79:17:89:af:d7:a4:2e: 21:30:24:d1:2d:4a:ef:4f:ee:bb:32:73:a5:4a:15:6e:57:e3: 95:09:80:14:5a:68:da:8d:f1:5c:56:0d:d8:fd:10:b3:3a:69: 3b:9a:3f:4d:32:6b:96:54:d3:15:3e:ab:15:bb:b9:e5:a5:8d: 32:5e:d7:a8:77:83:b7:0d:dc:74:06:32:dc:59:47:cb:82:8d: 36:c9:29:5f:50:6c:72:86:28:fc:b0:87:d4:d0:cb:e3:53:d3: ce:19:e0:2f:5b:d9:64:3a:10:8f:02:28:c1:d0:75:34:99:3a: 48:cf:96:c9:a2:95:d2:10:17:29:8e:69:96:84:1b:6b:28:f8: 19:02:3f:8b:da:d0:f7:e0:cd:c0:8f:16:54:d9:7d:50:73:14: eb:d8:49:87:2b:17:10:51:fb:c5:30:ec:a4:c4:4f:13:75:b2: 0e:d4:7b:84:43:4b:de:1a:e8:c5:89:22:4f:bc:df:e0:6c:65: e8:3b:8a:e1:1a:4f:74:65:70:bd:9d:35:4b:bd:0f:33:d4:ae: 1c:78:af:07:66:de:d6:22:1f:02:d6:da:28:55:5a:3a:0c:93: c6:b9:c7:2b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt/FGc8t/6rzI0LZhbfdTdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjYwMTAyMTQyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MTM5ZGY5NTEwZWEwMGE4M2NkNDE4NmE0ZGZiYzYxNzkzZjNmZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TOkCxMJ+Sp3X6YkaQZZzFn2NU24 u2gUdLR7lA26VYetRfxkpZhLvvAwZkHNNL0VZCv02loJeIC9rPWWaN2Uaam45WJu LK1VoPi5K5Do/eudJKatJtnhq6SdAHfzLruMFplTCsEJxLUJwEIjXx8+8F3cKXgf 7TRreXFEjQR61YmhAxUhlVZ7f0jrs9d9JF044GPr7fngUc32XHifhYso7tb35LwM ZLAnhYk3TZdx5a6snrIX6Qi4r2mUZ0lvRsUq48mmLocH6s/f2F6UI1C9Pdsg56Kh hQJm2CmT98SxxBRPXsMb+PKaahVTtYjPCBPXE+hK/J9FCVJ9Iqwf1OqFlwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFEE535UQ6gCoPNQYak37xheT8/8TMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvUVRuZmxSRHFBS2c4MUJocVRmdkdGNVB6X3hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQDTd2IAwQB Td2UAwQDTd2YAwQCbXiEMAwDBAFteIoDBABteIwwDAMEAG14lQMEA214kDAMAwQA bXibAwQBbXicAwQCbXiwAwQCbXi4MA0GCSqGSIb3DQEBCwUAA4IBAQBctiHbCla2 vNgUsHqLAOZyPNCIweeMIWK40mbCMXkXia/XpC4hMCTRLUrvT+67MnOlShVuV+OV CYAUWmjajfFcVg3Y/RCzOmk7mj9NMmuWVNMVPqsVu7nlpY0yXteod4O3Ddx0BjLc WUfLgo02ySlfUGxyhij8sIfU0MvjU9POGeAvW9lkOhCPAijB0HU0mTpIz5bJopXS EBcpjmmWhBtrKPgZAj+L2tD34M3AjxZU2X1QcxTr2EmHKxcQUfvFMOykxE8TdbIO 1HuEQ0veGujFiSJPvN/gbGXoO4rhGk90ZXC9nTVLvQ8z1K4ceK8HZt7WIh8C1too VVo6DJPGuccr -----END CERTIFICATE-----Generated at Tue Jan 20 06:04:28 2026 by rpki-client