This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7wI4RXlnkefp2sgJKjRsNl5Oz48.roa File: 7wI4RXlnkefp2sgJKjRsNl5Oz48.roa (raw, json) Hash identifier: rqldiP02dvTGyRhc/JWWhvROYz+0lLnQu9cCKYfVNxk= Subject key identifier: EF:02:38:45:79:67:91:E7:E9:DA:C8:09:2A:34:6C:36:5E:4E:CF:8F Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019B7F156C49EDEC6ED454B3CA9132F4AFED Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7wI4RXlnkefp2sgJKjRsNl5Oz48.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 45.137.212.0/24 maxlen: 24 45.137.213.0/24 maxlen: 24 45.137.214.0/24 maxlen: 24 45.137.215.0/24 maxlen: 24 62.197.45.0/24 maxlen: 24 82.117.242.0/23 maxlen: 23 85.90.208.0/24 maxlen: 24 85.90.209.0/24 maxlen: 24 89.187.73.0/24 maxlen: 24 89.187.77.0/24 maxlen: 24 92.63.224.0/24 maxlen: 24 148.222.186.0/24 maxlen: 24 176.98.40.0/24 maxlen: 24 185.93.104.0/24 maxlen: 24 185.93.105.0/24 maxlen: 24 185.93.106.0/24 maxlen: 24 185.109.48.0/24 maxlen: 24 2a02:c6c1:2::/48 maxlen: 48 2a02:c6c1:3::/48 maxlen: 48 2a02:c6c1:e::/48 maxlen: 48 2a02:c6c1:10::/48 maxlen: 48 2a02:c6c1:141::/48 maxlen: 48 2a02:c6c1:142::/48 maxlen: 48 2a02:c6c1:151::/48 maxlen: 48 2a02:c6c1:152::/48 maxlen: 48 2a02:c6c1:153::/48 maxlen: 48 2a02:c6c1:154::/48 maxlen: 48 2a02:c6c1:155::/48 maxlen: 48 2a02:c6c1:156::/48 maxlen: 48 2a02:c6c2::/32 maxlen: 32 2a02:c6c3::/32 maxlen: 32 2a02:c6c7::/32 maxlen: 32 2a0c:6740::/29 maxlen: 29 2a0c:6741::/32 maxlen: 32 2a0e:92c0::/29 maxlen: 29 2a0e:9a40::/29 maxlen: 29 2a0e:a7c0::/29 maxlen: 29 2a0e:a7c0::/32 maxlen: 32 2a0e:a7c1:1::/48 maxlen: 48 2a0f:4b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6c:49:ed:ec:6e:d4:54:b3:ca:91:32:f4:af:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef023845796791e7e9dac8092a346c365e4ecf8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:26:41:c0:bb:bf:31:46:ed:43:5b:2e:00: 8d:0a:62:46:59:70:76:54:21:aa:dd:ce:53:9c:01: 67:60:34:11:da:82:18:14:e5:32:3e:9f:de:63:ee: 5c:ce:9c:5e:dc:3e:23:f0:12:d1:b4:a7:5c:8d:7e: 6a:dd:e3:bb:e6:df:ae:e7:54:c5:e6:53:05:17:e1: 10:b6:ec:41:c7:45:96:87:f3:2a:79:7c:23:b7:94: bb:a1:b2:a7:09:53:c4:72:b2:54:26:e7:e4:29:b7: 81:31:67:87:00:65:ca:17:0b:e0:4a:76:27:c6:ab: 90:bf:ab:0d:45:a6:9e:27:cb:5d:c7:a2:c2:40:28: a2:39:96:d8:95:ad:39:93:ae:82:47:55:cf:03:5f: fa:75:66:90:fd:bb:13:2d:56:54:4e:c7:e9:b3:ab: 73:cb:16:b1:03:9b:47:92:f1:cd:14:aa:4c:5b:00: d2:f9:77:63:b4:71:4c:5e:13:32:ec:c7:2b:ce:c9: d2:29:82:1a:64:97:35:4d:e2:b1:11:62:09:f8:5f: e1:c4:43:64:86:c0:7c:a3:cd:37:9d:34:3c:9a:46: 0f:c5:65:8c:10:2a:f0:ba:1b:05:fd:c9:6a:fb:ca: e3:d9:46:d2:0b:d2:e3:d9:fe:a3:57:73:ca:0c:73: 8c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:02:38:45:79:67:91:E7:E9:DA:C8:09:2A:34:6C:36:5E:4E:CF:8F X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7wI4RXlnkefp2sgJKjRsNl5Oz48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.212.0/22 62.197.45.0/24 82.117.242.0/23 85.90.208.0/23 89.187.73.0/24 89.187.77.0/24 92.63.224.0/24 148.222.186.0/24 176.98.40.0/24 185.93.104.0-185.93.106.255 185.109.48.0/24 IPv6: 2a02:c6c1:2::/47 2a02:c6c1:e::/48 2a02:c6c1:10::/48 2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff 2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff 2a02:c6c2::/31 2a02:c6c7::/32 2a0c:6740::/29 2a0e:92c0::/29 2a0e:9a40::/29 2a0e:a7c0::/29 2a0f:4b40::/29 Signature Algorithm: sha256WithRSAEncryption 4f:33:9c:fe:20:8e:49:2e:72:e5:28:98:3e:ae:1b:e1:ad:c4: 8b:b1:20:df:5c:51:26:bc:a5:28:18:3d:e1:46:f0:33:50:fc: ca:9f:c0:a8:d6:4a:0a:62:42:61:b2:b4:81:04:09:26:8e:98: 37:9c:07:f7:51:c6:fa:d2:0a:c7:59:f7:ee:86:b5:27:ff:15: f1:40:4e:e5:66:0f:79:7b:59:75:48:23:00:13:1b:ea:81:0f: 17:c5:12:24:85:2b:c7:ad:cd:c1:f6:4c:a3:ed:3c:85:d0:9b: b3:d9:84:7f:81:6b:8d:89:a5:cf:2f:8b:06:4d:f2:29:b6:ef: 1b:df:a6:33:f1:34:9b:c2:93:a6:f1:f3:7f:f2:71:3e:ed:21: e3:59:c8:2c:41:bf:e2:60:ea:59:02:52:94:c2:f8:91:2e:71: 8d:46:30:82:0b:88:7f:ce:10:a4:38:5e:81:c6:1c:57:50:02: fb:3c:3e:ec:ec:86:6e:e6:76:93:92:0a:b5:29:63:07:2d:92: fa:15:b2:6e:8d:c0:48:9b:a6:fa:ab:20:f4:0e:af:5c:3f:36: 6d:61:3a:29:ab:aa:ec:21:7c:ff:0a:63:21:98:9c:ae:aa:31: 59:b7:21:6e:c9:54:6a:c7:9e:e6:c7:d1:a4:81:05:80:c9:52: 38:0f:8a:15 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt/FWxJ7exu1FSzypEy9K/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjAyMzg0NTc5Njc5MWU3ZTlkYWM4MDkyYTM0NmMzNjVlNGVjZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSwmQcC7vzFG7UNbLgCNCmJGWXB2 VCGq3c5TnAFnYDQR2oIYFOUyPp/eY+5czpxe3D4j8BLRtKdcjX5q3eO75t+u51TF 5lMFF+EQtuxBx0WWh/MqeXwjt5S7obKnCVPEcrJUJufkKbeBMWeHAGXKFwvgSnYn xquQv6sNRaaeJ8tdx6LCQCiiOZbYla05k66CR1XPA1/6dWaQ/bsTLVZUTsfps6tz yxaxA5tHkvHNFKpMWwDS+XdjtHFMXhMy7McrzsnSKYIaZJc1TeKxEWIJ+F/hxENk hsB8o803nTQ8mkYPxWWMECrwuhsF/clq+8rj2UbSC9Lj2f6jV3PKDHOMywIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFO8COEV5Z5Hn6drICSo0bDZeTs+PMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvN3dJNFJYbG5rZWZwMnNnSktqUnNObDVPejQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHhBggrBgEFBQcBBwEB/wSB0TCBzjBQBAIAATBKAwQCLYnU AwQAPsUtAwQBUnXyAwQBVVrQAwQAWbtJAwQAWbtNAwQAXD/gAwQAlN66AwQAsGIo MAwDBAO5XWgDBAC5XWoDBAC5bTAwegQCAAIwdAMHASoCxsEAAgMHACoCxsEADgMH ACoCxsEAEDASAwcAKgLGwQFBAwcAKgLGwQFCMBIDBwAqAsbBAVEDBwAqAsbBAVYD BQEqAsbCAwUAKgLGxwMFAyoMZ0ADBQMqDpLAAwUDKg6aQAMFAyoOp8ADBQMqD0tA MA0GCSqGSIb3DQEBCwUAA4IBAQBPM5z+II5JLnLlKJg+rhvhrcSLsSDfXFEmvKUo GD3hRvAzUPzKn8Co1koKYkJhsrSBBAkmjpg3nAf3Ucb60grHWffuhrUn/xXxQE7l Zg95e1l1SCMAExvqgQ8XxRIkhSvHrc3B9kyj7TyF0Juz2YR/gWuNiaXPL4sGTfIp tu8b36Yz8TSbwpOm8fN/8nE+7SHjWcgsQb/iYOpZAlKUwviRLnGNRjCCC4h/zhCk OF6BxhxXUAL7PD7s7IZu5naTkgq1KWMHLZL6FbJujcBIm6b6qyD0Dq9cPzZtYTop q6rsIXz/CmMhmJyuqjFZtyFuyVRqx57mx9GkgQWAyVI4D4oV -----END CERTIFICATE-----Generated at Thu Jan 22 21:39:30 2026 by rpki-client