This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/7bMPlZft64LLOc44WXpuvWHCxYI.roa File: 7bMPlZft64LLOc44WXpuvWHCxYI.roa (raw, json) Hash identifier: ovhICafylNUsoU6ggOnBn0FV5ld7QtZ9TQT1cYD5STo= Subject key identifier: ED:B3:0F:95:97:ED:EB:82:CB:39:CE:38:59:7A:6E:BD:61:C2:C5:82 Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Certificate serial: 019B78A2E28580C23AC9BADA9126B43F8943 Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/7bMPlZft64LLOc44WXpuvWHCxYI.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204601 IP address blocks: 45.81.224.0/22 maxlen: 22 45.82.68.0/22 maxlen: 22 45.82.176.0/22 maxlen: 22 45.87.0.0/22 maxlen: 22 45.136.84.0/24 maxlen: 24 45.136.85.0/24 maxlen: 24 45.136.86.0/24 maxlen: 24 45.136.87.0/24 maxlen: 24 45.137.64.0/22 maxlen: 22 46.18.107.0/24 maxlen: 24 46.21.250.0/24 maxlen: 24 77.220.214.0/24 maxlen: 24 77.220.215.0/24 maxlen: 24 81.31.197.0/24 maxlen: 24 91.201.25.0/24 maxlen: 24 91.208.127.0/24 maxlen: 24 91.209.226.0/24 maxlen: 24 91.228.56.0/24 maxlen: 24 94.124.78.0/24 maxlen: 24 178.159.38.0/24 maxlen: 24 178.159.39.0/24 maxlen: 24 178.159.42.0/24 maxlen: 24 185.23.108.0/24 maxlen: 24 185.51.121.0/24 maxlen: 24 185.51.246.0/24 maxlen: 24 185.51.247.0/24 maxlen: 24 185.107.237.0/24 maxlen: 24 185.204.109.0/24 maxlen: 24 185.232.164.0/24 maxlen: 24 185.235.129.0/24 maxlen: 24 185.235.130.0/24 maxlen: 24 185.235.131.0/24 maxlen: 24 185.241.52.0/24 maxlen: 24 185.241.53.0/24 maxlen: 24 185.241.54.0/24 maxlen: 24 185.241.55.0/24 maxlen: 24 185.244.216.0/22 maxlen: 22 185.244.216.0/24 maxlen: 24 185.244.217.0/24 maxlen: 24 185.250.204.0/24 maxlen: 24 185.250.205.0/24 maxlen: 24 185.250.206.0/24 maxlen: 24 193.22.21.0/24 maxlen: 24 193.56.8.0/24 maxlen: 24 193.163.7.0/24 maxlen: 24 193.163.113.0/24 maxlen: 24 194.29.53.0/24 maxlen: 24 212.8.244.0/24 maxlen: 24 212.8.246.0/24 maxlen: 24 212.23.221.0/24 maxlen: 24 212.86.101.0/24 maxlen: 24 212.86.102.0/24 maxlen: 24 212.86.108.0/24 maxlen: 24 212.86.109.0/24 maxlen: 24 212.162.152.0/24 maxlen: 24 212.162.153.0/24 maxlen: 24 212.162.155.0/24 maxlen: 24 213.166.68.0/24 maxlen: 24 213.166.69.0/24 maxlen: 24 213.166.70.0/24 maxlen: 24 213.166.71.0/24 maxlen: 24 2a07:5980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e2:85:80:c2:3a:c9:ba:da:91:26:b4:3f:89:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edb30f9597edeb82cb39ce38597a6ebd61c2c582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:c8:64:26:bf:7e:1c:01:14:4b:c1:5d:f7: 3c:ec:07:f3:ca:7d:25:c9:32:e4:40:31:35:d6:f9: 6c:ef:40:09:0e:79:a2:98:17:1d:73:d1:44:37:2c: c6:3b:fe:ac:34:c6:0a:e9:90:7a:8f:f0:ba:e6:fd: a7:d5:80:17:11:f6:59:15:5c:81:6c:04:d7:03:85: d2:29:0f:9d:7e:d3:e8:cb:17:c6:01:92:3a:b7:0f: fb:31:0d:e3:63:11:e6:c9:1f:b8:e4:06:af:f2:53: e9:b3:9a:62:c5:0d:e9:e4:8f:80:ed:d9:53:30:97: 9f:4c:fe:c1:88:1b:f9:51:dc:7b:b9:d2:79:d5:ae: df:a1:00:75:23:e9:a3:74:29:66:52:06:b0:3a:c7: a4:95:e7:b2:4c:40:6f:33:77:f9:3d:7d:1d:57:df: d3:bc:20:c4:14:7a:26:1f:79:60:d3:20:de:ad:a1: d1:bd:3d:a3:75:f9:80:05:a4:ea:8b:37:71:2f:15: ef:33:e2:1c:e3:d5:63:8a:30:79:33:43:99:29:76: 00:f6:1a:c8:8e:20:07:e8:a2:85:7a:69:5a:ba:a8: 47:03:f8:f1:9e:60:95:16:b6:c9:1e:6c:e4:5f:b6: 3b:f1:5c:8b:ca:fc:53:ef:90:bf:1a:f9:86:b9:0c: 75:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B3:0F:95:97:ED:EB:82:CB:39:CE:38:59:7A:6E:BD:61:C2:C5:82 X509v3 Authority Key Identifier: keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/7bMPlZft64LLOc44WXpuvWHCxYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.224.0/22 45.82.68.0/22 45.82.176.0/22 45.87.0.0/22 45.136.84.0/22 45.137.64.0/22 46.18.107.0/24 46.21.250.0/24 77.220.214.0/23 81.31.197.0/24 91.201.25.0/24 91.208.127.0/24 91.209.226.0/24 91.228.56.0/24 94.124.78.0/24 178.159.38.0/23 178.159.42.0/24 185.23.108.0/24 185.51.121.0/24 185.51.246.0/23 185.107.237.0/24 185.204.109.0/24 185.232.164.0/24 185.235.129.0-185.235.131.255 185.241.52.0/22 185.244.216.0/22 185.250.204.0-185.250.206.255 193.22.21.0/24 193.56.8.0/24 193.163.7.0/24 193.163.113.0/24 194.29.53.0/24 212.8.244.0/24 212.8.246.0/24 212.23.221.0/24 212.86.101.0-212.86.102.255 212.86.108.0/23 212.162.152.0/23 212.162.155.0/24 213.166.68.0/22 IPv6: 2a07:5980::/29 Signature Algorithm: sha256WithRSAEncryption 9b:77:58:6c:00:21:5d:9e:31:bd:73:40:cb:99:9a:2c:d4:88: f0:8a:34:ac:92:8b:25:c7:6f:77:b3:71:0b:68:56:21:a5:97: 12:b2:86:f4:01:16:7c:27:01:b9:be:8e:f1:64:c5:48:53:77: b6:da:da:0f:98:5b:43:63:78:44:5b:09:e2:83:12:e9:1f:3e: d8:94:cb:3c:22:65:02:ef:8b:ad:ff:b5:df:2e:23:a1:9a:e5: 8e:ff:40:34:c0:e6:ba:02:b1:e9:0d:e5:2e:9b:f6:7f:e9:41: 28:58:61:cd:f8:21:78:ba:ca:b3:57:96:c5:ae:e2:f6:f1:0b: db:36:e8:ee:86:3d:7c:e0:cc:cb:fb:c9:4d:84:5f:24:e3:64: a1:ff:a8:bb:85:b9:45:ba:5e:66:9d:dc:c0:97:5a:75:90:e9: d3:9b:70:af:f9:f5:a1:b3:55:90:d4:95:5f:43:d6:4c:bf:d4: 81:8a:cf:b8:b0:21:cf:85:14:e1:45:d7:3d:78:a8:2c:b3:5f: 9a:37:6e:97:b8:aa:ca:4f:ad:ef:41:0e:9a:b5:d4:50:41:0e: 7c:4b:b1:f7:ec:24:f7:2c:52:ba:a0:38:3b:4a:e9:b9:db:05: be:49:cc:b3:6f:70:59:66:20:34:c3:55:50:17:3d:57:c8:0a: 6c:d0:c7:68 -----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISAZt4ouKFgMI6ybrakSa0P4lDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw Mjc1MzMwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGIzMGY5NTk3ZWRlYjgyY2IzOWNlMzg1OTdhNmViZDYxYzJjNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQfIZCa/fhwBFEvBXfc87Afzyn0l yTLkQDE11vls70AJDnmimBcdc9FENyzGO/6sNMYK6ZB6j/C65v2n1YAXEfZZFVyB bATXA4XSKQ+dftPoyxfGAZI6tw/7MQ3jYxHmyR+45Aav8lPps5pixQ3p5I+A7dlT MJefTP7BiBv5Udx7udJ51a7foQB1I+mjdClmUgawOsekleeyTEBvM3f5PX0dV9/T vCDEFHomH3lg0yDeraHRvT2jdfmABaTqizdxLxXvM+Ic49VjijB5M0OZKXYA9hrI jiAH6KKFemlauqhHA/jxnmCVFrbJHmzkX7Y78VyLyvxT75C/GvmGuQx1wQIDAQAB o4IDJDCCAyAwHQYDVR0OBBYEFO2zD5WX7euCyznOOFl6br1hwsWCMB8GA1UdIwQY MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt MDE1ZDlmMWI0YjUwLzEvN2JNUGxaZnQ2NExMT2M0NFdYcHV2V0hDeFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBOAYIKwYBBQUHAQcBAf8EggEnMIIBIzCCARAEAgABMIIB CAMEAi1R4AMEAi1SRAMEAi1SsAMEAi1XAAMEAi2IVAMEAi2JQAMEAC4SawMEAC4V +gMEAU3c1gMEAFEfxQMEAFvJGQMEAFvQfwMEAFvR4gMEAFvkOAMEAF58TgMEAbKf JgMEALKfKgMEALkXbAMEALkzeQMEAbkz9gMEALlr7QMEALnMbQMEALnopDAMAwQA ueuBAwQCueuAAwQCufE0AwQCufTYMAwDBAK5+swDBAC5+s4DBADBFhUDBADBOAgD BADBowcDBADBo3EDBADCHTUDBADUCPQDBADUCPYDBADUF90wDAMEANRWZQMEANRW ZgMEAdRWbAMEAdSimAMEANSimwMEAtWmRDANBAIAAjAHAwUDKgdZgDANBgkqhkiG 9w0BAQsFAAOCAQEAm3dYbAAhXZ4xvXNAy5maLNSI8Io0rJKLJcdvd7NxC2hWIaWX ErKG9AEWfCcBub6O8WTFSFN3ttraD5hbQ2N4RFsJ4oMS6R8+2JTLPCJlAu+Lrf+1 3y4joZrljv9ANMDmugKx6Q3lLpv2f+lBKFhhzfgheLrKs1eWxa7i9vEL2zbo7oY9 fODMy/vJTYRfJONkof+ou4W5RbpeZp3cwJdadZDp05twr/n1obNVkNSVX0PWTL/U gYrPuLAhz4UU4UXXPXioLLNfmjdul7iqyk+t70EOmrXUUEEOfEux9+wk9yxSuqA4 O0rpudsFvknMs29wWWYgNMNVUBc9V8gKbNDHaA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:11 2026 by rpki-client