This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7ChYGmSfa8x4tDsfCfg1z4uYR78.roa File: 7ChYGmSfa8x4tDsfCfg1z4uYR78.roa (raw, json) Hash identifier: WUoZNcPHIxbgUDWkyCTjDIpldwgUK8E1nXhNl+pFisw= Subject key identifier: EC:28:58:1A:64:9F:6B:CC:78:B4:3B:1F:09:F8:35:CF:8B:98:47:BF Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14662B70B6B03D5F6B6A917910B449 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7ChYGmSfa8x4tDsfCfg1z4uYR78.roa Signing time: Fri 02 Jan 2026 14:20:01 +0000 ROA not before: Fri 02 Jan 2026 14:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210976 IP address blocks: 147.45.101.0/24 maxlen: 24 147.45.111.0/24 maxlen: 24 147.45.132.0/24 maxlen: 24 147.45.133.0/24 maxlen: 24 147.45.134.0/24 maxlen: 24 147.45.135.0/24 maxlen: 24 147.45.136.0/24 maxlen: 24 147.45.137.0/24 maxlen: 24 147.45.139.0/24 maxlen: 24 147.45.142.0/24 maxlen: 24 147.45.145.0/24 maxlen: 24 147.45.149.0/24 maxlen: 24 147.45.152.0/24 maxlen: 24 147.45.156.0/24 maxlen: 24 147.45.162.0/24 maxlen: 24 147.45.165.0/24 maxlen: 24 147.45.166.0/24 maxlen: 24 147.45.167.0/24 maxlen: 24 147.45.169.0/24 maxlen: 24 147.45.170.0/24 maxlen: 24 147.45.171.0/24 maxlen: 24 147.45.173.0/24 maxlen: 24 147.45.174.0/24 maxlen: 24 147.45.180.0/24 maxlen: 24 147.45.181.0/24 maxlen: 24 147.45.186.0/24 maxlen: 24 147.45.187.0/24 maxlen: 24 147.45.224.0/24 maxlen: 24 147.45.225.0/24 maxlen: 24 147.45.226.0/24 maxlen: 24 147.45.227.0/24 maxlen: 24 147.45.228.0/24 maxlen: 24 147.45.229.0/24 maxlen: 24 147.45.230.0/24 maxlen: 24 147.45.231.0/24 maxlen: 24 147.45.232.0/24 maxlen: 24 147.45.233.0/24 maxlen: 24 147.45.234.0/24 maxlen: 24 147.45.238.0/24 maxlen: 24 147.45.240.0/24 maxlen: 24 147.45.241.0/24 maxlen: 24 147.45.242.0/24 maxlen: 24 147.45.243.0/24 maxlen: 24 147.45.244.0/24 maxlen: 24 147.45.248.0/24 maxlen: 24 147.45.252.0/24 maxlen: 24 147.45.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:66:2b:70:b6:b0:3d:5f:6b:6a:91:79:10:b4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec28581a649f6bcc78b43b1f09f835cf8b9847bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:ce:8a:a4:44:f3:5d:5e:df:6a:4e:4a:1b: 3c:c6:96:94:23:3a:aa:93:30:9f:78:c4:85:1b:53: b2:9f:f9:ba:e3:50:e9:2c:28:52:cc:de:54:a2:0c: cf:a5:ea:96:86:d7:e3:4f:de:c3:f8:9c:87:de:ee: 4a:52:1e:2b:7d:8f:9b:40:0e:49:8d:71:f5:ac:47: 2b:af:cd:cb:91:9e:1e:ae:6c:9d:19:7b:7d:0d:9b: 3d:57:2b:7a:d9:99:22:94:73:a7:3c:ca:2a:bf:d2: 70:b2:62:49:54:0d:b5:18:78:cb:7d:6b:ee:4d:bd: d3:ae:e8:a3:f6:fd:a0:d1:4e:2b:fc:b9:03:26:b5: 35:bd:6b:e2:ce:22:f2:57:cd:d1:59:30:7a:ac:f0: 2f:77:72:d7:c3:13:55:90:24:a5:dd:8a:b3:91:ee: 73:65:e4:73:21:1b:ea:d3:58:7c:d9:f5:bf:c0:2a: e5:bc:7b:7c:b6:c0:4d:b2:24:94:80:f4:7b:10:95: b7:fe:7a:e2:87:af:0d:7a:0c:80:a2:53:b4:e0:db: cf:ae:35:a1:e6:a9:c5:75:b6:35:c6:49:af:34:af: 87:dd:4f:e1:bf:6b:a1:0b:e7:1e:10:05:ad:22:58: e9:0d:a3:c1:75:cb:59:6a:d1:0e:04:df:ce:5c:6e: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:28:58:1A:64:9F:6B:CC:78:B4:3B:1F:09:F8:35:CF:8B:98:47:BF X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7ChYGmSfa8x4tDsfCfg1z4uYR78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.101.0/24 147.45.111.0/24 147.45.132.0-147.45.137.255 147.45.139.0/24 147.45.142.0/24 147.45.145.0/24 147.45.149.0/24 147.45.152.0/24 147.45.156.0/24 147.45.162.0/24 147.45.165.0-147.45.167.255 147.45.169.0-147.45.171.255 147.45.173.0-147.45.174.255 147.45.180.0/23 147.45.186.0/23 147.45.224.0-147.45.234.255 147.45.238.0/24 147.45.240.0-147.45.244.255 147.45.248.0/24 147.45.252.0/24 147.45.255.0/24 Signature Algorithm: sha256WithRSAEncryption 42:c3:59:20:78:f9:2a:3b:72:d9:52:3e:44:79:77:18:23:d3: bf:c1:a5:6d:73:37:59:22:13:9b:be:23:76:c2:5a:a3:0e:a8: 60:ea:bd:1d:d9:fd:2f:c0:ce:90:00:a2:55:44:fb:bd:4e:e0: dd:b5:04:6d:bf:dc:8b:a7:9c:16:b8:37:2c:33:c7:0d:5b:35: 3a:f5:35:6a:0b:cb:93:5f:cd:b6:be:bc:13:f6:b4:9f:5e:dd: 61:d2:bd:43:93:43:05:96:c8:76:eb:ec:eb:21:e9:55:3d:db: d2:61:a1:b1:ec:2e:db:73:89:58:29:89:c1:0f:5c:dd:b1:74: 85:01:b6:dd:1b:5f:ea:8a:4d:89:2f:29:26:14:ec:df:48:8f: 05:3d:89:06:9a:d8:f1:75:c7:48:b0:46:a8:19:1c:9d:44:b9: 46:fd:2d:59:29:c5:37:c8:09:22:b5:d5:0a:8f:e0:ad:f1:9d: 73:3e:57:4a:6e:34:3f:ff:5f:80:b1:ac:6f:34:af:9f:ca:51: 08:c1:bc:eb:1f:ef:ad:8e:2b:59:cf:84:d9:96:37:1a:46:a7: 7c:4e:20:51:9b:c8:1a:28:11:ca:bb:e7:f2:0c:01:ff:cf:a7: 28:5d:f5:a4:af:81:2f:53:da:a1:77:24:5c:f8:81:39:19:97: a5:fd:ae:24 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgISAZt/FGYrcLawPV9rapF5ELRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzI4NTgxYTY0OWY2YmNjNzhiNDNiMWYwOWY4MzVjZjhiOTg0N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk/OiqRE811e32pOShs8xpaUIzqq kzCfeMSFG1Oyn/m641DpLChSzN5UogzPpeqWhtfjT97D+JyH3u5KUh4rfY+bQA5J jXH1rEcrr83LkZ4ermydGXt9DZs9Vyt62ZkilHOnPMoqv9JwsmJJVA21GHjLfWvu Tb3Truij9v2g0U4r/LkDJrU1vWviziLyV83RWTB6rPAvd3LXwxNVkCSl3Yqzke5z ZeRzIRvq01h82fW/wCrlvHt8tsBNsiSUgPR7EJW3/nrih68NegyAolO04NvPrjWh 5qnFdbY1xkmvNK+H3U/hv2uhC+ceEAWtIljpDaPBdctZatEOBN/OXG6bnwIDAQAB o4ICtjCCArIwHQYDVR0OBBYEFOwoWBpkn2vMeLQ7Hwn4Nc+LmEe/MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvN0NoWUdtU2ZhOHg0dERzZkNmZzF6NHVZUjc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4DBACT LWUDBACTLW8wDAMEApMthAMEAZMtiAMEAJMtiwMEAJMtjgMEAJMtkQMEAJMtlQME AJMtmAMEAJMtnAMEAJMtojAMAwQAky2lAwQDky2gMAwDBACTLakDBAKTLagwDAME AJMtrQMEAJMtrgMEAZMttAMEAZMtujAMAwQFky3gAwQAky3qAwQAky3uMAwDBAST LfADBACTLfQDBACTLfgDBACTLfwDBACTLf8wDQYJKoZIhvcNAQELBQADggEBAELD WSB4+So7ctlSPkR5dxgj07/BpW1zN1kiE5u+I3bCWqMOqGDqvR3Z/S/AzpAAolVE +71O4N21BG2/3IunnBa4Nywzxw1bNTr1NWoLy5Nfzba+vBP2tJ9e3WHSvUOTQwWW yHbr7Osh6VU929JhobHsLttziVgpicEPXN2xdIUBtt0bX+qKTYkvKSYU7N9IjwU9 iQaa2PF1x0iwRqgZHJ1EuUb9LVkpxTfICSK11QqP4K3xnXM+V0puND//X4CxrG80 r5/KUQjBvOsf762OK1nPhNmWNxpGp3xOIFGbyBooEcq75/IMAf/Ppyhd9aSvgS9T 2qF3JFz4gTkZl6X9riQ= -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:47 2026 by rpki-client