This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa File: 3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa (raw, json) Hash identifier: P5VCL1xp51uhegWvbhWmEVzPBE26QsXY7i6bNOoE28E= Subject key identifier: DD:73:DB:39:53:F9:2D:99:BD:81:BB:DB:C5:E6:17:BC:4F:94:5C:D6 Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc Certificate serial: 019B7AC935F4E25BB462DCE3160A934B8703 Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20912 IP address blocks: 77.39.192.0/20 maxlen: 24 77.39.216.0/22 maxlen: 24 85.119.176.0/21 maxlen: 24 185.109.188.0/22 maxlen: 24 212.66.96.0/19 maxlen: 24 2001:40d0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:35:f4:e2:5b:b4:62:dc:e3:16:0a:93:4b:87:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd73db3953f92d99bd81bbdbc5e617bc4f945cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:b9:dd:a9:f5:c6:16:c7:fe:63:66:dc:12: dc:2f:fa:27:4d:04:21:9d:28:3b:0e:ae:35:c8:82: e1:93:9b:18:73:a3:eb:df:94:f2:7a:28:06:d7:a7: c7:9b:c0:27:58:fc:64:e6:a2:cc:d7:7c:d4:70:6d: 8e:2d:4a:9d:9c:bf:ab:2e:9c:f4:78:1f:27:5a:3c: cb:97:45:4b:e1:cf:b3:4e:22:43:37:5b:8b:39:53: 1a:43:11:ea:d2:b7:8c:14:ce:a1:05:24:77:30:8f: 0a:9c:92:6f:50:0e:62:25:5e:5a:41:10:64:f6:d7: 5a:bb:75:23:56:38:46:20:7d:d2:26:4e:e3:2c:73: 5b:13:52:b3:f5:b6:79:8a:02:84:9f:8b:17:ed:80: 43:db:28:80:87:a6:ac:4f:53:cc:e3:d2:4e:57:3a: 57:4f:6e:6a:da:8f:40:8b:ef:33:48:50:16:f7:26: 3c:ea:43:4f:5c:59:a1:dc:1e:b3:58:7d:7a:a9:4d: da:76:2b:6e:86:df:02:3f:2f:d3:cd:95:5c:09:4e: f9:c1:9f:68:35:d1:b0:ab:53:a0:9a:af:1f:b9:f6: b6:5b:76:bf:31:1c:29:71:95:4d:65:4c:f0:58:b3: 7f:55:a2:66:db:7e:72:0c:f8:cf:13:b6:ed:be:43: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:73:DB:39:53:F9:2D:99:BD:81:BB:DB:C5:E6:17:BC:4F:94:5C:D6 X509v3 Authority Key Identifier: keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/3XPbOVP5LZm9gbvbxeYXvE-UXNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.39.192.0/20 77.39.216.0/22 85.119.176.0/21 185.109.188.0/22 212.66.96.0/19 IPv6: 2001:40d0::/32 Signature Algorithm: sha256WithRSAEncryption 69:1f:bb:47:36:1a:81:8e:0f:36:b6:2c:ae:c7:d7:8a:55:d4: ad:82:72:72:b9:72:77:f4:21:83:8e:76:2e:03:58:4d:4a:dc: cd:8c:47:12:fd:48:c2:2a:68:73:e0:36:e8:68:c0:f4:66:3e: da:c2:28:90:d4:d3:85:7c:ae:55:9d:d3:d8:58:36:b6:ed:90: ed:d3:0e:1a:6d:c0:c9:49:9d:c5:0c:6f:58:bb:fe:93:4e:41: 50:5c:77:92:2e:b4:54:a4:6d:20:35:ba:2e:af:f7:79:85:b1: 84:7c:2c:bf:5d:71:67:03:81:09:d6:c2:d5:d3:2f:06:41:33: 43:ec:c4:e2:4f:46:6c:29:b4:48:a2:79:c4:5b:a3:69:6f:b3: 59:85:54:3c:84:ce:41:08:b4:75:03:28:71:fa:20:65:04:05: 08:ed:63:63:f4:fb:7d:57:01:fd:fe:13:2f:de:ab:3e:91:a9: 1a:b2:ba:af:5c:71:b4:7f:4b:d5:42:2a:fd:3c:1a:25:aa:1e: 9e:d5:f9:ca:9b:b4:ad:6b:08:32:67:00:5e:77:21:4c:93:33: 88:fa:ad:e7:d3:a9:3d:1b:48:6e:a9:53:54:38:3d:0c:00:2d: c9:83:73:0d:31:ef:1c:37:f5:20:f4:42:39:0e:53:fa:98:d9: 8d:a7:3d:aa -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt6yTX04lu0YtzjFgqTS4cDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMGU3N2Q5YzZmZjY4ZGNhNjhmMDVkZjhmNDY3NWVlN2Jk Y2IwYmMwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDczZGIzOTUzZjkyZDk5YmQ4MWJiZGJjNWU2MTdiYzRmOTQ1Y2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZK53an1xhbH/mNm3BLcL/onTQQh nSg7Dq41yILhk5sYc6Pr35TyeigG16fHm8AnWPxk5qLM13zUcG2OLUqdnL+rLpz0 eB8nWjzLl0VL4c+zTiJDN1uLOVMaQxHq0reMFM6hBSR3MI8KnJJvUA5iJV5aQRBk 9tdau3UjVjhGIH3SJk7jLHNbE1Kz9bZ5igKEn4sX7YBD2yiAh6asT1PM49JOVzpX T25q2o9Ai+8zSFAW9yY86kNPXFmh3B6zWH16qU3adituht8CPy/TzZVcCU75wZ9o NdGwq1Ogmq8fufa2W3a/MRwpcZVNZUzwWLN/VaJm235yDPjPE7btvkNXMQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFN1z2zlT+S2ZvYG728XmF7xPlFzWMB8GA1UdIwQY MBaAFE8Od9nG/2jcpo8F349Gde573LC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAt NDU1YjE5Zjc2NmNjLzEvM1hQYk9WUDVMWm05Z2J2YnhlWVh2RS1VWE5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAtNDU1YjE5Zjc2NmNj LzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQETSfAAwQC TSfYAwQDVXewAwQCuW28AwQF1EJgMA0EAgACMAcDBQAgAUDQMA0GCSqGSIb3DQEB CwUAA4IBAQBpH7tHNhqBjg82tiyux9eKVdStgnJyuXJ39CGDjnYuA1hNStzNjEcS /UjCKmhz4DboaMD0Zj7awiiQ1NOFfK5VndPYWDa27ZDt0w4abcDJSZ3FDG9Yu/6T TkFQXHeSLrRUpG0gNbour/d5hbGEfCy/XXFnA4EJ1sLV0y8GQTND7MTiT0ZsKbRI onnEW6Npb7NZhVQ8hM5BCLR1Ayhx+iBlBAUI7WNj9Pt9VwH9/hMv3qs+kakasrqv XHG0f0vVQir9PBolqh6e1fnKm7StawgyZwBedyFMkzOI+q3n06k9G0huqVNUOD0M AC3Jg3MNMe8cN/Ug9EI5DlP6mNmNpz2q -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:30 2026 by rpki-client