This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nBcoo6l1196QJXDXBrFWhqDxt7k.roa File: nBcoo6l1196QJXDXBrFWhqDxt7k.roa (raw, json) Hash identifier: 4cJF9lIIjJt283wn9OKGoaLi3LGNgq8osFmWRjAuu2k= Subject key identifier: 9C:17:28:A3:A9:75:D7:DE:90:25:70:D7:06:B1:56:86:A0:F1:B7:B9 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B138658331AA3C50AE66ED863EB23B3F9 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nBcoo6l1196QJXDXBrFWhqDxt7k.roa Signing time: Fri 12 Dec 2025 17:05:29 +0000 ROA not before: Fri 12 Dec 2025 17:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29278 IP address blocks: 79.172.196.0/24 maxlen: 24 79.172.199.0/24 maxlen: 24 79.172.203.0/24 maxlen: 24 79.172.209.0/24 maxlen: 24 79.172.211.0/24 maxlen: 24 79.172.213.0/24 maxlen: 24 79.172.216.0/24 maxlen: 24 79.172.225.0/24 maxlen: 24 79.172.236.0/24 maxlen: 24 79.172.238.0/24 maxlen: 24 79.172.240.0/24 maxlen: 24 79.172.241.0/24 maxlen: 24 79.172.243.0/24 maxlen: 24 79.172.248.0/24 maxlen: 24 79.172.253.0/24 maxlen: 24 79.172.255.0/24 maxlen: 24 84.21.0.0/19 maxlen: 19 84.21.7.0/24 maxlen: 24 84.21.8.0/24 maxlen: 24 84.21.18.0/24 maxlen: 24 84.21.19.0/24 maxlen: 24 87.229.15.0/24 maxlen: 24 87.229.26.0/24 maxlen: 24 87.229.32.0/24 maxlen: 24 87.229.33.0/24 maxlen: 24 87.229.45.0/24 maxlen: 24 87.229.53.0/24 maxlen: 24 87.229.54.0/24 maxlen: 24 87.229.55.0/24 maxlen: 24 87.229.58.0/24 maxlen: 24 87.229.59.0/24 maxlen: 24 87.229.65.0/24 maxlen: 24 87.229.66.0/24 maxlen: 24 87.229.73.0/24 maxlen: 24 87.229.74.0/23 maxlen: 23 87.229.78.0/24 maxlen: 24 87.229.83.0/24 maxlen: 24 87.229.93.0/24 maxlen: 24 87.229.94.0/24 maxlen: 24 87.229.96.0/24 maxlen: 24 87.229.105.0/24 maxlen: 24 87.229.113.0/24 maxlen: 24 87.229.114.0/24 maxlen: 24 87.229.116.0/24 maxlen: 24 87.229.118.0/24 maxlen: 24 87.229.121.0/24 maxlen: 24 95.138.192.0/21 maxlen: 21 178.238.208.0/20 maxlen: 20 178.238.208.0/21 maxlen: 21 178.238.214.0/24 maxlen: 24 178.238.216.0/21 maxlen: 21 213.181.196.0/24 maxlen: 24 213.181.197.0/24 maxlen: 24 213.181.198.0/24 maxlen: 24 213.181.200.0/24 maxlen: 24 213.181.204.0/24 maxlen: 24 213.181.207.0/24 maxlen: 24 213.181.210.0/24 maxlen: 24 213.181.219.0/24 maxlen: 24 213.181.221.0/24 maxlen: 24 217.113.50.0/24 maxlen: 24 217.113.51.0/24 maxlen: 24 217.113.52.0/24 maxlen: 24 217.113.59.0/24 maxlen: 24 217.113.61.0/24 maxlen: 24 217.113.63.0/24 maxlen: 24 217.144.48.0/23 maxlen: 23 217.144.50.0/24 maxlen: 24 217.144.56.0/21 maxlen: 21 217.144.62.0/24 maxlen: 24 2a02:730::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:86:58:33:1a:a3:c5:0a:e6:6e:d8:63:eb:23:b3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 12 17:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9c1728a3a975d7de902570d706b15686a0f1b7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:63:a2:f2:5d:a9:30:31:60:65:e0:99:da:52: 11:f1:56:ef:65:ef:7a:38:7f:ef:27:05:94:94:00: 9e:f8:81:f2:f2:22:85:f6:f8:54:ba:e4:45:b5:92: fa:b3:8c:f4:e8:73:22:b5:0a:e7:32:15:b2:76:58: ed:d5:1c:a4:73:53:00:c1:5b:0d:a6:33:98:fa:3b: 57:ba:ec:be:09:2c:5c:88:34:9a:37:6e:e4:03:f4: 98:01:4b:30:76:f6:62:d3:8d:ff:6a:05:df:d4:ce: 9e:79:cd:7e:8e:14:cb:e9:88:bf:6f:48:37:67:e5: f1:1f:69:d8:1f:64:04:07:db:6d:ef:e8:7f:78:fe: 85:48:f1:75:82:e5:ca:eb:19:55:65:22:ca:86:ca: 02:54:10:25:b6:66:90:fa:81:29:5f:e9:57:6f:26: f3:ad:18:34:08:77:bc:03:72:c9:9d:9f:c6:b8:a3: 7c:89:5d:37:c9:f6:ce:ef:63:bb:a0:80:55:cb:cb: 1a:7b:68:2e:bb:1c:f4:b2:21:8c:c2:84:5f:20:cb: a1:52:db:23:9f:25:d9:83:2b:cb:c7:08:f5:5a:5a: dc:3f:ca:29:56:27:88:3e:19:d4:6b:96:e6:cf:4e: 47:2c:c2:60:fe:7b:f3:ef:40:3a:83:ec:54:1e:d2: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:17:28:A3:A9:75:D7:DE:90:25:70:D7:06:B1:56:86:A0:F1:B7:B9 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nBcoo6l1196QJXDXBrFWhqDxt7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.196.0/24 79.172.199.0/24 79.172.203.0/24 79.172.209.0/24 79.172.211.0/24 79.172.213.0/24 79.172.216.0/24 79.172.225.0/24 79.172.236.0/24 79.172.238.0/24 79.172.240.0/23 79.172.243.0/24 79.172.248.0/24 79.172.253.0/24 79.172.255.0/24 84.21.0.0/19 87.229.15.0/24 87.229.26.0/24 87.229.32.0/23 87.229.45.0/24 87.229.53.0-87.229.55.255 87.229.58.0/23 87.229.65.0-87.229.66.255 87.229.73.0-87.229.75.255 87.229.78.0/24 87.229.83.0/24 87.229.93.0-87.229.94.255 87.229.96.0/24 87.229.105.0/24 87.229.113.0-87.229.114.255 87.229.116.0/24 87.229.118.0/24 87.229.121.0/24 95.138.192.0/21 178.238.208.0/20 213.181.196.0-213.181.198.255 213.181.200.0/24 213.181.204.0/24 213.181.207.0/24 213.181.210.0/24 213.181.219.0/24 213.181.221.0/24 217.113.50.0-217.113.52.255 217.113.59.0/24 217.113.61.0/24 217.113.63.0/24 217.144.48.0-217.144.50.255 217.144.56.0/21 IPv6: 2a02:730::/32 Signature Algorithm: sha256WithRSAEncryption 18:f8:6a:a8:3b:6e:16:1a:75:90:fe:43:64:22:df:38:e6:fd: 60:53:a5:2c:17:07:0b:f9:8c:91:07:ce:68:2c:a1:5f:ec:eb: 3a:21:62:ae:26:f4:ff:d1:8c:b6:86:09:4f:fd:23:72:3f:98: 81:ca:61:14:55:cc:2d:e3:df:3d:1b:a3:44:fc:b3:78:cf:5f: 3f:c0:b7:61:7c:f9:73:b9:0b:8e:3a:28:fe:be:5c:e0:08:3d: e4:05:a2:6f:76:be:f6:a9:fb:57:60:5a:0b:e1:25:85:b0:ce: 36:66:fb:13:b1:ba:7b:2b:9b:07:57:ec:40:e4:36:3c:4e:cf: 72:86:14:35:4a:84:ae:34:55:a6:47:d6:d1:0c:c8:d5:9c:3f: 3e:6b:dc:e2:c7:ef:83:a8:3c:26:1f:ad:ec:53:fa:d5:6b:fa: 1c:12:93:5d:e2:90:fe:4d:78:15:df:f7:5d:9f:d5:66:80:fe: 68:cd:04:71:80:85:b0:63:ec:27:81:a9:cb:2a:f9:13:a2:3c: e5:05:0a:66:e6:46:5b:9a:10:ac:f2:c4:81:39:5b:b4:1f:59: ce:56:02:db:7b:06:c9:d7:69:8f:9d:32:83:92:57:a7:90:24: 45:58:00:10:51:c5:49:84:c4:e8:ff:85:57:91:2f:08:1d:e9: d3:87:bd:91 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgISAZsThlgzGqPFCuZu2GPrI7P5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjEyMTcwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzE3MjhhM2E5NzVkN2RlOTAyNTcwZDcwNmIxNTY4NmEwZjFiN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWOi8l2pMDFgZeCZ2lIR8VbvZe96 OH/vJwWUlACe+IHy8iKF9vhUuuRFtZL6s4z06HMitQrnMhWydljt1Rykc1MAwVsN pjOY+jtXuuy+CSxciDSaN27kA/SYAUswdvZi043/agXf1M6eec1+jhTL6Yi/b0g3 Z+XxH2nYH2QEB9tt7+h/eP6FSPF1guXK6xlVZSLKhsoCVBAltmaQ+oEpX+lXbybz rRg0CHe8A3LJnZ/GuKN8iV03yfbO72O7oIBVy8sae2guuxz0siGMwoRfIMuhUtsj nyXZgyvLxwj1WlrcP8opVieIPhnUa5bmz05HLMJg/nvz70A6g+xUHtKOHwIDAQAB o4IDfDCCA3gwHQYDVR0OBBYEFJwXKKOpddfekCVw1waxVoag8be5MB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvbkJjb282bDExOTZRSlhEWEJyRldocUR4dDdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBkAYIKwYBBQUHAQcBAf8EggF/MIIBezCCAWgEAgABMIIB YAMEAE+sxAMEAE+sxwMEAE+sywMEAE+s0QMEAE+s0wMEAE+s1QMEAE+s2AMEAE+s 4QMEAE+s7AMEAE+s7gMEAU+s8AMEAE+s8wMEAE+s+AMEAE+s/QMEAE+s/wMEBVQV AAMEAFflDwMEAFflGgMEAVflIAMEAFflLTAMAwQAV+U1AwQDV+UwAwQBV+U6MAwD BABX5UEDBABX5UIwDAMEAFflSQMEAlflSAMEAFflTgMEAFflUzAMAwQAV+VdAwQA V+VeAwQAV+VgAwQAV+VpMAwDBABX5XEDBABX5XIDBABX5XQDBABX5XYDBABX5XkD BANfisADBASy7tAwDAMEAtW1xAMEANW1xgMEANW1yAMEANW1zAMEANW1zwMEANW1 0gMEANW12wMEANW13TAMAwQB2XEyAwQA2XE0AwQA2XE7AwQA2XE9AwQA2XE/MAwD BATZkDADBADZkDIDBAPZkDgwDQQCAAIwBwMFACoCBzAwDQYJKoZIhvcNAQELBQAD ggEBABj4aqg7bhYadZD+Q2Qi3zjm/WBTpSwXBwv5jJEHzmgsoV/s6zohYq4m9P/R jLaGCU/9I3I/mIHKYRRVzC3j3z0bo0T8s3jPXz/At2F8+XO5C446KP6+XOAIPeQF om92vvap+1dgWgvhJYWwzjZm+xOxunsrmwdX7EDkNjxOz3KGFDVKhK40VaZH1tEM yNWcPz5r3OLH74OoPCYfrexT+tVr+hwSk13ikP5NeBXf912f1WaA/mjNBHGAhbBj 7CeBqcsq+ROiPOUFCmbmRluaEKzyxIE5W7QfWc5WAtt7BsnXaY+dMoOSV6eQJEVY ABBRxUmExOj/hVeRLwgd6dOHvZE= -----END CERTIFICATE-----Generated at Thu Dec 18 20:01:18 2025 by rpki-client