This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w3LwLjk9RU-yUsyXQrFYXLCBcLI.roa File: w3LwLjk9RU-yUsyXQrFYXLCBcLI.roa (raw, json) Hash identifier: VpL6/ylrFbgLzq9sg91xJwbVjU8AJfuqSFqkNa39PEI= Subject key identifier: C3:72:F0:2E:39:3D:45:4F:B2:52:CC:97:42:B1:58:5C:B0:81:70:B2 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B9D1A2E0FCE5083CB88C9D62F0E250C61 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w3LwLjk9RU-yUsyXQrFYXLCBcLI.roa Signing time: Thu 08 Jan 2026 10:14:57 +0000 ROA not before: Thu 08 Jan 2026 10:14:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 77.93.136.0/24 maxlen: 24 77.93.138.0/24 maxlen: 24 77.93.140.0/24 maxlen: 24 77.93.143.0/24 maxlen: 24 77.107.95.0/24 maxlen: 24 82.152.142.0/24 maxlen: 24 89.213.49.0/24 maxlen: 24 89.213.52.0/24 maxlen: 24 213.130.154.0/24 maxlen: 24 217.145.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:1a:2e:0f:ce:50:83:cb:88:c9:d6:2f:0e:25:0c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 8 10:14:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c372f02e393d454fb252cc9742b1585cb08170b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:31:15:ed:9f:f3:6c:70:98:63:22:de:a9:06: 2b:d5:c9:2e:77:69:b5:95:51:29:9c:65:df:65:cd: 5e:4b:ba:86:fc:24:75:87:e3:87:78:34:75:fc:3c: 5b:06:da:b1:42:31:b7:5e:9b:48:25:62:52:25:4e: 9b:35:5d:e1:6a:af:40:c7:3f:52:fe:b5:77:7b:69: 8d:5d:da:c4:12:3c:ae:70:2e:62:c1:b8:5c:2e:ac: 57:d4:bc:8c:b5:57:43:c7:56:8a:02:4a:85:ae:bb: 63:75:99:c2:e4:e4:82:b7:cf:e1:e6:1d:ac:b3:27: 0a:d3:fe:42:61:2e:00:1d:55:74:a4:a8:65:88:d7: b8:b1:03:de:2c:31:e2:4d:77:42:dd:0a:c8:4f:fe: b5:20:b2:dc:76:ae:58:5f:19:6d:84:be:9b:57:c8: b7:20:a6:a9:5f:62:7b:ec:83:4f:96:d5:5c:0b:79: 2d:24:67:31:2c:20:7e:a6:cd:a3:83:1a:9f:17:66: 53:f0:e0:b6:51:57:87:5c:6a:4b:a2:93:0b:99:c3: 0c:8e:45:63:ed:23:1c:36:41:38:f8:13:50:9e:9d: b6:ff:8c:49:68:44:5f:af:49:70:12:c0:36:b9:6a: ef:35:e8:17:50:39:3d:06:31:dd:fa:be:06:a7:ee: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:72:F0:2E:39:3D:45:4F:B2:52:CC:97:42:B1:58:5C:B0:81:70:B2 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/w3LwLjk9RU-yUsyXQrFYXLCBcLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.136.0/24 77.93.138.0/24 77.93.140.0/24 77.93.143.0/24 77.107.95.0/24 82.152.142.0/24 89.213.49.0/24 89.213.52.0/24 213.130.154.0/24 217.145.65.0/24 Signature Algorithm: sha256WithRSAEncryption 82:ef:a5:46:10:17:b6:ee:36:cd:34:29:95:82:9b:b1:3f:1f: 9a:1e:e6:eb:c0:be:44:64:df:c1:2e:7f:c1:d5:ab:60:32:11: c1:ec:f4:98:10:84:59:93:87:5e:27:34:98:97:f5:ad:ec:21: 21:6e:20:6b:5d:dc:69:93:92:8e:70:33:c3:49:f0:3a:7d:b1: 07:e1:f6:3f:a2:b7:5b:aa:48:27:a0:df:d1:85:b7:17:a0:1a: e7:33:ca:af:19:71:d9:86:c8:8c:18:c1:de:69:14:b6:a5:f5: d8:a0:4e:68:73:de:1d:c6:33:3b:93:b0:7a:c2:99:a1:d6:61: 2c:08:be:2c:09:01:00:a0:ca:ab:21:15:db:9e:10:8e:7d:c5: 4a:86:ae:a0:16:07:8e:b4:29:89:63:9b:31:8a:1b:af:58:b6: 87:4d:24:ca:7d:f1:f0:5a:aa:f8:99:5d:ce:e6:b7:fb:fd:92: 3d:eb:72:fd:60:da:0a:08:ab:fe:a8:c3:36:3e:40:15:84:dd: cc:9f:0a:9e:76:67:8c:41:ae:d1:1e:66:fc:a8:03:7c:dd:fc: c6:45:3a:38:03:4b:74:b6:5c:9b:cd:66:de:af:b7:4c:b4:fa: 29:d9:35:ed:c9:3a:e0:48:f5:59:46:2b:80:2c:c6:fa:4b:c0: 21:ef:83:4f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZudGi4PzlCDy4jJ1i8OJQxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTA4MTAxNDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzcyZjAyZTM5M2Q0NTRmYjI1MmNjOTc0MmIxNTg1Y2IwODE3MGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDEV7Z/zbHCYYyLeqQYr1ckud2m1 lVEpnGXfZc1eS7qG/CR1h+OHeDR1/DxbBtqxQjG3XptIJWJSJU6bNV3haq9Axz9S /rV3e2mNXdrEEjyucC5iwbhcLqxX1LyMtVdDx1aKAkqFrrtjdZnC5OSCt8/h5h2s sycK0/5CYS4AHVV0pKhliNe4sQPeLDHiTXdC3QrIT/61ILLcdq5YXxlthL6bV8i3 IKapX2J77INPltVcC3ktJGcxLCB+ps2jgxqfF2ZT8OC2UVeHXGpLopMLmcMMjkVj 7SMcNkE4+BNQnp22/4xJaERfr0lwEsA2uWrvNegXUDk9BjHd+r4Gp+7mLwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFMNy8C45PUVPslLMl0KxWFywgXCyMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdzNMd0xqazlSVS15VXN5WFFyRllYTENCY0xJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQATV2IAwQA TV2KAwQATV2MAwQATV2PAwQATWtfAwQAUpiOAwQAWdUxAwQAWdU0AwQA1YKaAwQA 2ZFBMA0GCSqGSIb3DQEBCwUAA4IBAQCC76VGEBe27jbNNCmVgpuxPx+aHubrwL5E ZN/BLn/B1atgMhHB7PSYEIRZk4deJzSYl/Wt7CEhbiBrXdxpk5KOcDPDSfA6fbEH 4fY/ordbqkgnoN/RhbcXoBrnM8qvGXHZhsiMGMHeaRS2pfXYoE5oc94dxjM7k7B6 wpmh1mEsCL4sCQEAoMqrIRXbnhCOfcVKhq6gFgeOtCmJY5sxihuvWLaHTSTKffHw Wqr4mV3O5rf7/ZI963L9YNoKCKv+qMM2PkAVhN3MnwqedmeMQa7RHmb8qAN83fzG RTo4A0t0tlybzWber7dMtPop2TXtyTrgSPVZRiuALMb6S8Ah74NP -----END CERTIFICATE-----Generated at Mon Jan 19 05:23:11 2026 by rpki-client