This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/kTysenkbkKWe_D1O1ipWjUvHdbE.roa File: kTysenkbkKWe_D1O1ipWjUvHdbE.roa (raw, json) Hash identifier: 51caJpg28tZ1bt61ALqvcxctqdrodDJxoGMUWqfaZhY= Subject key identifier: 91:3C:AC:7A:79:1B:90:A5:9E:FC:3D:4E:D6:2A:56:8D:4B:C7:75:B1 Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654 Certificate serial: 019BE67D4E8DB83B44FFF737BB6D8BB032D9 Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/kTysenkbkKWe_D1O1ipWjUvHdbE.roa Signing time: Thu 22 Jan 2026 16:15:30 +0000 ROA not before: Thu 22 Jan 2026 16:15:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43391 IP address blocks: 77.223.128.0/20 maxlen: 20 77.223.128.0/24 maxlen: 24 77.223.129.0/24 maxlen: 24 77.223.130.0/24 maxlen: 24 77.223.131.0/24 maxlen: 24 77.223.132.0/24 maxlen: 24 77.223.133.0/24 maxlen: 24 77.223.134.0/24 maxlen: 24 77.223.135.0/24 maxlen: 24 77.223.136.0/24 maxlen: 24 77.223.137.0/24 maxlen: 24 77.223.138.0/24 maxlen: 24 77.223.139.0/24 maxlen: 24 77.223.140.0/24 maxlen: 24 77.223.141.0/24 maxlen: 24 77.223.142.0/24 maxlen: 24 77.223.143.0/24 maxlen: 24 77.223.146.0/24 maxlen: 24 77.223.147.0/24 maxlen: 24 77.223.148.0/24 maxlen: 24 77.223.149.0/24 maxlen: 24 77.223.151.0/24 maxlen: 24 77.223.152.0/24 maxlen: 24 77.223.153.0/24 maxlen: 24 77.223.154.0/24 maxlen: 24 77.223.155.0/24 maxlen: 24 77.223.156.0/24 maxlen: 24 77.223.157.0/24 maxlen: 24 77.223.158.0/24 maxlen: 24 77.223.159.0/24 maxlen: 24 78.40.224.0/21 maxlen: 21 78.40.224.0/24 maxlen: 24 78.40.225.0/24 maxlen: 24 78.40.226.0/24 maxlen: 24 78.40.227.0/24 maxlen: 24 78.40.228.0/24 maxlen: 24 78.40.229.0/24 maxlen: 24 78.40.230.0/24 maxlen: 24 78.40.231.0/24 maxlen: 24 91.191.160.0/21 maxlen: 21 91.191.160.0/24 maxlen: 24 91.191.161.0/24 maxlen: 24 91.191.162.0/24 maxlen: 24 91.191.163.0/24 maxlen: 24 91.191.164.0/24 maxlen: 24 91.191.165.0/24 maxlen: 24 91.191.166.0/24 maxlen: 24 91.191.167.0/24 maxlen: 24 91.191.168.0/21 maxlen: 21 91.191.168.0/24 maxlen: 24 91.191.169.0/24 maxlen: 24 91.191.170.0/24 maxlen: 24 91.191.171.0/24 maxlen: 24 91.191.172.0/24 maxlen: 24 91.191.173.0/24 maxlen: 24 91.191.174.0/24 maxlen: 24 91.191.175.0/24 maxlen: 24 93.187.200.0/21 maxlen: 21 93.187.200.0/24 maxlen: 24 93.187.201.0/24 maxlen: 24 93.187.202.0/24 maxlen: 24 93.187.203.0/24 maxlen: 24 93.187.204.0/24 maxlen: 24 93.187.205.0/24 maxlen: 24 93.187.206.0/24 maxlen: 24 93.187.207.0/24 maxlen: 24 185.80.72.0/24 maxlen: 24 195.244.32.0/19 maxlen: 19 195.244.32.0/24 maxlen: 24 195.244.33.0/24 maxlen: 24 195.244.34.0/24 maxlen: 24 195.244.35.0/24 maxlen: 24 195.244.36.0/24 maxlen: 24 195.244.37.0/24 maxlen: 24 195.244.38.0/24 maxlen: 24 195.244.39.0/24 maxlen: 24 195.244.40.0/24 maxlen: 24 195.244.41.0/24 maxlen: 24 195.244.42.0/24 maxlen: 24 195.244.43.0/24 maxlen: 24 195.244.44.0/24 maxlen: 24 195.244.45.0/24 maxlen: 24 195.244.46.0/24 maxlen: 24 195.244.47.0/24 maxlen: 24 195.244.48.0/24 maxlen: 24 195.244.49.0/24 maxlen: 24 195.244.50.0/24 maxlen: 24 195.244.51.0/24 maxlen: 24 195.244.52.0/24 maxlen: 24 195.244.53.0/24 maxlen: 24 195.244.54.0/24 maxlen: 24 195.244.55.0/24 maxlen: 24 195.244.56.0/24 maxlen: 24 195.244.57.0/24 maxlen: 24 195.244.58.0/24 maxlen: 24 195.244.59.0/24 maxlen: 24 195.244.60.0/24 maxlen: 24 195.244.61.0/24 maxlen: 24 195.244.62.0/24 maxlen: 24 195.244.63.0/24 maxlen: 24 2a01:aac0::/32 maxlen: 32 2a0a:be80::/29 maxlen: 29 2a0a:be80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:7d:4e:8d:b8:3b:44:ff:f7:37:bb:6d:8b:b0:32:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654 Validity Not Before: Jan 22 16:15:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=913cac7a791b90a59efc3d4ed62a568d4bc775b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:fa:e6:3a:35:4f:b5:d2:00:cd:7c:da:4f: d2:29:64:9b:90:58:d8:b9:12:4c:fb:91:72:4d:c3: 12:da:1c:e2:47:3a:5d:0e:c5:19:96:86:b7:3b:45: a3:44:e1:67:d7:5c:8c:c1:2f:61:15:e4:bf:f5:37: 10:ac:5c:98:24:0b:7e:0c:6b:45:0a:05:ec:a0:18: 35:b1:a8:8a:90:f8:cd:2e:4e:f4:41:19:8d:d1:ae: 8e:ef:12:39:e4:74:7d:cb:4f:93:92:e3:87:c8:1a: 6e:58:85:f0:df:a2:86:af:22:39:50:a7:08:71:44: 0f:76:c1:5d:9f:b7:35:e3:32:b0:5a:27:23:62:7d: b5:ef:ef:90:f9:77:4c:25:4b:f1:50:c0:fd:2a:41: b5:bc:bc:61:3b:37:a4:30:54:af:a6:10:ea:9c:39: 4b:22:52:8f:62:77:19:09:48:23:26:b2:94:53:0a: 09:04:e4:17:b6:1c:e6:19:0a:59:f1:85:0d:1e:36: a1:45:dc:9f:36:2c:56:25:cb:b5:37:ba:c3:ce:d0: fe:52:bd:f4:8d:07:b0:5a:53:93:c1:ba:96:c1:09: 21:a6:60:93:75:35:da:4a:ab:3e:43:3a:9c:95:c3: 53:6f:22:13:a3:f4:25:7c:5c:34:5d:13:e3:16:71: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3C:AC:7A:79:1B:90:A5:9E:FC:3D:4E:D6:2A:56:8D:4B:C7:75:B1 X509v3 Authority Key Identifier: keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/kTysenkbkKWe_D1O1ipWjUvHdbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.223.128.0/20 77.223.146.0-77.223.149.255 77.223.151.0-77.223.159.255 78.40.224.0/21 91.191.160.0/20 93.187.200.0/21 185.80.72.0/24 195.244.32.0/19 IPv6: 2a01:aac0::/32 2a0a:be80::/29 Signature Algorithm: sha256WithRSAEncryption 61:25:a5:a0:74:5e:82:b9:c7:4f:df:b4:6d:59:10:48:b6:65: 69:05:82:51:bc:f1:e4:83:8e:b8:34:09:f4:1b:76:7f:9d:c1: 66:a0:97:0e:db:47:64:c2:b3:60:43:57:7d:f0:17:4d:bd:4a: c5:96:fb:c5:11:ef:bd:68:71:dd:9e:3f:85:8d:bd:78:ec:09: 90:26:96:33:da:ce:7a:05:95:d9:7f:df:78:d9:d3:5c:60:29: 99:17:02:c5:50:36:42:47:b1:07:01:70:c9:8d:0c:6c:14:ce: cf:ff:7e:24:81:65:39:fc:af:f4:4e:cc:09:91:d0:1a:5d:38: 91:51:7e:3b:c8:95:ef:0d:36:2c:a5:c0:03:50:59:1a:60:b7: db:f7:0d:1e:f1:c2:d0:85:e4:fc:e5:0c:fb:5d:56:19:c8:5a: b5:8a:9f:34:38:98:a9:85:4c:25:05:26:2f:4e:d3:9e:ca:f8: f2:6a:89:a5:53:1b:4c:26:80:af:10:36:dd:68:d6:71:ee:b6: 62:c7:d6:9e:b7:ac:70:d0:e8:9e:d3:c0:a5:11:b4:a4:b0:77: f6:da:e8:5e:15:ae:f3:c1:de:86:b2:23:28:2d:65:ca:ab:52: 84:71:db:e3:6c:5b:bd:08:8f:ed:43:fb:0d:f6:ae:67:b5:37: f4:2f:c2:3d -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZvmfU6NuDtE//c3u22LsDLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMDJjZGMyOWZkY2EwOWU5YTBmM2Y3ZDIxMTNkYTg1YTdl MWQ2NTQwHhcNMjYwMTIyMTYxNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTNjYWM3YTc5MWI5MGE1OWVmYzNkNGVkNjJhNTY4ZDRiYzc3NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4365jo1T7XSAM182k/SKWSbkFjY uRJM+5FyTcMS2hziRzpdDsUZloa3O0WjROFn11yMwS9hFeS/9TcQrFyYJAt+DGtF CgXsoBg1saiKkPjNLk70QRmN0a6O7xI55HR9y0+TkuOHyBpuWIXw36KGryI5UKcI cUQPdsFdn7c14zKwWicjYn217++Q+XdMJUvxUMD9KkG1vLxhOzekMFSvphDqnDlL IlKPYncZCUgjJrKUUwoJBOQXthzmGQpZ8YUNHjahRdyfNixWJcu1N7rDztD+Ur30 jQewWlOTwbqWwQkhpmCTdTXaSqs+QzqclcNTbyITo/QlfFw0XRPjFnFNMQIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFJE8rHp5G5Clnvw9TtYqVo1Lx3WxMB8GA1UdIwQY MBaAFHMCzcKf3KCemg8/fSET2oWn4dZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3dMTndwX2NvSjZhRHo5OUlSUGFoYWZoMWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83NzIxN2QtODE0Yi00ODZhLThlZjIt ZmUwMzMzZWQwMDVmLzEva1R5c2Vua2JrS1dlX0QxTzFpcFdqVXZIZGJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83NzIxN2QtODE0Yi00ODZhLThlZjItZmUwMzMzZWQwMDVm LzEvY3dMTndwX2NvSjZhRHo5OUlSUGFoYWZoMWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBGBAIAATBAAwQETd+AMAwD BAFN35IDBAFN35QwDAMEAE3flwMEBU3fgAMEA04o4AMEBFu/oAMEA127yAMEALlQ SAMEBcP0IDAUBAIAAjAOAwUAKgGqwAMFAyoKvoAwDQYJKoZIhvcNAQELBQADggEB AGElpaB0XoK5x0/ftG1ZEEi2ZWkFglG88eSDjrg0CfQbdn+dwWaglw7bR2TCs2BD V33wF029SsWW+8UR771ocd2eP4WNvXjsCZAmljPaznoFldl/33jZ01xgKZkXAsVQ NkJHsQcBcMmNDGwUzs//fiSBZTn8r/ROzAmR0BpdOJFRfjvIle8NNiylwANQWRpg t9v3DR7xwtCF5PzlDPtdVhnIWrWKnzQ4mKmFTCUFJi9O057K+PJqiaVTG0wmgK8Q Nt1o1nHutmLH1p63rHDQ6J7TwKURtKSwd/ba6F4VrvPB3oayIygtZcqrUoRx2+Ns W70Ij+1D+w32rme1N/Qvwj0= -----END CERTIFICATE-----Generated at Mon Jan 26 11:40:02 2026 by rpki-client