This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oLiXQdjvQrOVN2F2kTow3JQR19w.roa File: oLiXQdjvQrOVN2F2kTow3JQR19w.roa (raw, json) Hash identifier: zSM9DF6fKY61kOaFPzNk9lZMZ2fvX5vo8+Oi+P/ZNFg= Subject key identifier: A0:B8:97:41:D8:EF:42:B3:95:37:61:76:91:3A:30:DC:94:11:D7:DC Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A917BDCE970225AD26FBCD6D58862 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oLiXQdjvQrOVN2F2kTow3JQR19w.roa Signing time: Thu 01 Jan 2026 16:18:34 +0000 ROA not before: Thu 01 Jan 2026 16:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 37.252.30.0/24 maxlen: 24 77.107.81.0/24 maxlen: 24 77.107.94.0/24 maxlen: 24 77.107.103.0/24 maxlen: 24 77.107.104.0/24 maxlen: 24 77.107.113.0/24 maxlen: 24 77.107.115.0/24 maxlen: 24 77.107.126.0/24 maxlen: 24 81.168.127.0/24 maxlen: 24 82.152.15.0/24 maxlen: 24 82.152.19.0/24 maxlen: 24 82.152.82.0/24 maxlen: 24 82.152.103.0/24 maxlen: 24 82.152.134.0/24 maxlen: 24 82.152.242.0/24 maxlen: 24 82.153.146.0/24 maxlen: 24 82.153.158.0/24 maxlen: 24 89.213.103.0/24 maxlen: 24 109.176.72.0/24 maxlen: 24 109.176.77.0/24 maxlen: 24 109.176.129.0/24 maxlen: 24 109.176.168.0/24 maxlen: 24 109.176.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:91:7b:dc:e9:70:22:5a:d2:6f:bc:d6:d5:88:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0b89741d8ef42b395376176913a30dc9411d7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:dc:b5:3c:41:9a:de:76:49:fa:11:e0:06: 45:e5:79:fa:ae:6b:0e:b1:21:e8:42:57:08:77:97: 28:73:b3:e6:cd:ae:f1:86:9a:04:5b:ba:3a:31:7d: 5e:6f:0f:24:e4:66:fe:c7:ce:0a:b9:ae:85:7d:b5: 72:a8:fb:68:34:1c:a2:a8:ac:28:7d:77:57:4c:1a: d7:3f:c3:2b:01:a0:b0:78:fb:fc:55:50:37:94:46: 7d:b7:1e:13:25:3c:66:4a:7e:7b:80:87:45:f1:73: 92:27:f5:e3:5b:08:9f:61:3b:b6:53:09:e8:e8:29: ca:3c:c8:d9:74:2e:db:aa:19:0b:11:08:fc:03:e9: b3:f6:1c:37:77:79:99:c2:02:a8:0f:05:4a:ee:ca: ae:64:53:3b:b8:a4:88:43:ee:e7:e6:e9:70:41:6f: 7f:47:b9:f1:8e:b5:80:53:d2:b2:51:e7:5c:7f:ba: be:29:bd:53:93:3a:91:04:92:58:a4:f6:1d:57:30: 26:13:10:43:b8:3d:e6:e8:fe:20:6e:9e:c9:82:7f: d7:82:50:43:e8:3a:ac:48:ff:07:de:c8:c4:29:f2: 40:f8:59:53:b0:dd:80:67:80:7a:4f:d8:67:18:66: 3c:de:4b:fd:f0:f6:9e:54:35:65:4e:c6:23:67:64: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B8:97:41:D8:EF:42:B3:95:37:61:76:91:3A:30:DC:94:11:D7:DC X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/oLiXQdjvQrOVN2F2kTow3JQR19w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.30.0/24 77.107.81.0/24 77.107.94.0/24 77.107.103.0-77.107.104.255 77.107.113.0/24 77.107.115.0/24 77.107.126.0/24 81.168.127.0/24 82.152.15.0/24 82.152.19.0/24 82.152.82.0/24 82.152.103.0/24 82.152.134.0/24 82.152.242.0/24 82.153.146.0/24 82.153.158.0/24 89.213.103.0/24 109.176.72.0/24 109.176.77.0/24 109.176.129.0/24 109.176.168.0/24 109.176.171.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:5d:5b:0a:c2:9c:e6:e5:8a:91:f2:a6:69:7b:eb:89:96:12: f3:fe:f8:81:6d:d4:5d:f7:5f:f2:10:b6:35:d7:82:e4:9d:ef: 16:9f:27:d9:39:42:5e:b3:4f:8b:94:b4:99:71:a6:ec:34:41: 97:4a:2e:27:1c:12:f5:9d:c9:16:73:19:c7:3a:11:67:64:2b: 95:0a:fd:25:e5:37:c7:4c:64:22:b0:8a:ae:d1:cd:56:12:02: 11:23:e0:d4:f8:ab:14:2f:20:28:28:c0:a8:02:04:24:e6:54: d4:90:04:93:07:ae:32:2a:66:8d:77:e7:e7:c3:2a:ec:af:a8: 1d:54:ef:b4:9a:86:95:76:ea:6b:04:58:49:81:bb:bc:23:39: 62:1b:d4:17:25:eb:41:6c:d2:22:14:42:37:1d:70:30:ba:50: 7d:29:a7:30:0e:18:0c:ea:57:a6:f2:5e:98:57:68:31:7e:48: 12:5c:7b:45:dd:89:e4:09:5b:46:66:7c:63:73:42:13:be:09: 65:90:c2:c7:63:3e:92:5a:28:fa:98:94:f6:65:46:24:48:29: e4:67:5b:76:e3:29:d7:11:47:8e:ec:e0:d9:5c:c2:b8:2a:ab: 6c:6e:8b:b5:ed:ca:68:2d:d3:a4:51:34:d5:21:ef:01:ba:ec: f2:be:df:e9 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgISAZt6WpF73OlwIlrSb7zW1YhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGI4OTc0MWQ4ZWY0MmIzOTUzNzYxNzY5MTNhMzBkYzk0MTFkN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5vctTxBmt52SfoR4AZF5Xn6rmsO sSHoQlcId5coc7Pmza7xhpoEW7o6MX1ebw8k5Gb+x84Kua6FfbVyqPtoNByiqKwo fXdXTBrXP8MrAaCwePv8VVA3lEZ9tx4TJTxmSn57gIdF8XOSJ/XjWwifYTu2Uwno 6CnKPMjZdC7bqhkLEQj8A+mz9hw3d3mZwgKoDwVK7squZFM7uKSIQ+7n5ulwQW9/ R7nxjrWAU9KyUedcf7q+Kb1TkzqRBJJYpPYdVzAmExBDuD3m6P4gbp7Jgn/XglBD 6DqsSP8H3sjEKfJA+FlTsN2AZ4B6T9hnGGY83kv98PaeVDVlTsYjZ2REKwIDAQAB o4IClDCCApAwHQYDVR0OBBYEFKC4l0HY70KzlTdhdpE6MNyUEdfcMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvb0xpWFFkanZRck9WTjJGMmtUb3czSlFSMTl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAAl /B4DBABNa1EDBABNa14wDAMEAE1rZwMEAE1raAMEAE1rcQMEAE1rcwMEAE1rfgME AFGofwMEAFKYDwMEAFKYEwMEAFKYUgMEAFKYZwMEAFKYhgMEAFKY8gMEAFKZkgME AFKZngMEAFnVZwMEAG2wSAMEAG2wTQMEAG2wgQMEAG2wqAMEAG2wqzANBgkqhkiG 9w0BAQsFAAOCAQEAa11bCsKc5uWKkfKmaXvriZYS8/74gW3UXfdf8hC2NdeC5J3v Fp8n2TlCXrNPi5S0mXGm7DRBl0ouJxwS9Z3JFnMZxzoRZ2QrlQr9JeU3x0xkIrCK rtHNVhICESPg1PirFC8gKCjAqAIEJOZU1JAEkweuMipmjXfn58Mq7K+oHVTvtJqG lXbqawRYSYG7vCM5YhvUFyXrQWzSIhRCNx1wMLpQfSmnMA4YDOpXpvJemFdoMX5I Elx7Rd2J5AlbRmZ8Y3NCE74JZZDCx2M+kloo+piU9mVGJEgp5GdbduMp1xFHjuzg 2VzCuCqrbG6Lte3KaC3TpFE01SHvAbrs8r7f6Q== -----END CERTIFICATE-----Generated at Fri Jan 2 16:25:52 2026 by rpki-client