This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rZ7Qz2svopAX4PodAVm9_ouRZDw.roa File: rZ7Qz2svopAX4PodAVm9_ouRZDw.roa (raw, json) Hash identifier: VobZz1M1Ry36LvfTH1n0hCpUDzs1D/xh2au/fKvVyGk= Subject key identifier: AD:9E:D0:CF:6B:2F:A2:90:17:E0:FA:1D:01:59:BD:FE:8B:91:64:3C Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B7F81704B244F89C6013C84906AE2432A Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rZ7Qz2svopAX4PodAVm9_ouRZDw.roa Signing time: Fri 02 Jan 2026 16:19:07 +0000 ROA not before: Fri 02 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 92.50.14.0/24 maxlen: 24 92.50.15.0/24 maxlen: 24 92.50.16.0/24 maxlen: 24 92.50.17.0/24 maxlen: 24 92.50.18.0/24 maxlen: 24 92.50.19.0/24 maxlen: 24 92.50.20.0/24 maxlen: 24 92.50.21.0/24 maxlen: 24 92.50.22.0/24 maxlen: 24 92.50.23.0/24 maxlen: 24 92.50.24.0/24 maxlen: 24 92.50.25.0/24 maxlen: 24 92.50.26.0/24 maxlen: 24 92.50.27.0/24 maxlen: 24 92.50.28.0/24 maxlen: 24 92.50.29.0/24 maxlen: 24 92.50.30.0/24 maxlen: 24 92.50.31.0/24 maxlen: 24 92.50.32.0/24 maxlen: 24 92.50.33.0/24 maxlen: 24 92.50.34.0/24 maxlen: 24 92.50.35.0/24 maxlen: 24 92.50.36.0/24 maxlen: 24 92.50.37.0/24 maxlen: 24 92.50.38.0/24 maxlen: 24 92.50.39.0/24 maxlen: 24 92.50.40.0/24 maxlen: 24 92.50.41.0/24 maxlen: 24 92.50.42.0/24 maxlen: 24 92.50.43.0/24 maxlen: 24 92.50.44.0/24 maxlen: 24 92.50.45.0/24 maxlen: 24 92.50.46.0/24 maxlen: 24 92.50.47.0/24 maxlen: 24 92.50.48.0/24 maxlen: 24 92.50.49.0/24 maxlen: 24 92.50.50.0/24 maxlen: 24 92.50.51.0/24 maxlen: 24 92.50.52.0/24 maxlen: 24 92.50.53.0/24 maxlen: 24 92.50.54.0/24 maxlen: 24 92.50.55.0/24 maxlen: 24 92.50.56.0/24 maxlen: 24 92.50.57.0/24 maxlen: 24 92.50.58.0/24 maxlen: 24 92.50.59.0/24 maxlen: 24 92.50.60.0/24 maxlen: 24 92.50.61.0/24 maxlen: 24 92.50.62.0/24 maxlen: 24 92.50.63.0/24 maxlen: 24 147.136.78.0/24 maxlen: 24 147.136.79.0/24 maxlen: 24 147.136.84.0/24 maxlen: 24 147.136.86.0/24 maxlen: 24 147.136.87.0/24 maxlen: 24 168.199.133.0/24 maxlen: 24 168.199.134.0/24 maxlen: 24 168.199.135.0/24 maxlen: 24 168.199.136.0/24 maxlen: 24 168.199.137.0/24 maxlen: 24 168.199.138.0/24 maxlen: 24 168.199.139.0/24 maxlen: 24 168.199.140.0/24 maxlen: 24 168.199.141.0/24 maxlen: 24 168.199.142.0/24 maxlen: 24 168.199.143.0/24 maxlen: 24 168.199.144.0/24 maxlen: 24 168.199.145.0/24 maxlen: 24 168.199.146.0/24 maxlen: 24 168.199.147.0/24 maxlen: 24 168.199.148.0/24 maxlen: 24 168.199.149.0/24 maxlen: 24 168.199.150.0/24 maxlen: 24 168.199.151.0/24 maxlen: 24 168.199.152.0/24 maxlen: 24 168.199.153.0/24 maxlen: 24 168.199.154.0/24 maxlen: 24 168.199.155.0/24 maxlen: 24 168.199.156.0/24 maxlen: 24 168.199.157.0/24 maxlen: 24 168.199.158.0/24 maxlen: 24 168.199.159.0/24 maxlen: 24 168.199.164.0/24 maxlen: 24 168.199.166.0/24 maxlen: 24 168.199.167.0/24 maxlen: 24 168.199.168.0/24 maxlen: 24 168.199.174.0/24 maxlen: 24 168.199.192.0/24 maxlen: 24 168.199.193.0/24 maxlen: 24 168.199.202.0/24 maxlen: 24 168.199.203.0/24 maxlen: 24 168.199.204.0/24 maxlen: 24 168.199.206.0/24 maxlen: 24 168.199.208.0/24 maxlen: 24 168.199.211.0/24 maxlen: 24 168.199.216.0/24 maxlen: 24 168.199.217.0/24 maxlen: 24 168.199.218.0/24 maxlen: 24 168.199.219.0/24 maxlen: 24 168.199.220.0/24 maxlen: 24 168.199.221.0/24 maxlen: 24 168.199.222.0/24 maxlen: 24 168.199.223.0/24 maxlen: 24 168.199.224.0/24 maxlen: 24 168.199.226.0/24 maxlen: 24 168.199.228.0/24 maxlen: 24 168.199.229.0/24 maxlen: 24 168.199.230.0/24 maxlen: 24 168.199.232.0/24 maxlen: 24 168.199.240.0/24 maxlen: 24 168.199.241.0/24 maxlen: 24 168.199.242.0/24 maxlen: 24 168.199.243.0/24 maxlen: 24 168.199.244.0/24 maxlen: 24 168.199.245.0/24 maxlen: 24 168.199.246.0/24 maxlen: 24 168.199.247.0/24 maxlen: 24 168.199.248.0/24 maxlen: 24 168.199.249.0/24 maxlen: 24 168.199.250.0/24 maxlen: 24 168.199.251.0/24 maxlen: 24 168.199.252.0/24 maxlen: 24 168.199.253.0/24 maxlen: 24 168.199.254.0/24 maxlen: 24 168.199.255.0/24 maxlen: 24 185.100.58.0/24 maxlen: 24 192.95.85.0/24 maxlen: 24 192.95.86.0/24 maxlen: 24 192.95.91.0/24 maxlen: 24 2001:678:8b4::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:70:4b:24:4f:89:c6:01:3c:84:90:6a:e2:43:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Jan 2 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad9ed0cf6b2fa29017e0fa1d0159bdfe8b91643c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0c:69:8d:87:4f:9e:39:84:a4:0c:a1:94:9c: ee:36:67:43:b3:08:4c:42:a5:54:cc:6c:57:d5:2c: ab:a9:31:ee:21:fd:30:40:cb:64:3e:9e:15:04:e0: eb:f9:67:5a:e2:7b:0f:a2:6c:0b:a5:6b:a6:de:3d: dc:f8:f3:87:fd:e6:f5:53:a6:2c:51:94:a7:22:6c: b1:13:4b:33:a0:5d:b9:a2:4d:21:8c:0c:f2:7c:83: d6:0d:29:73:01:a1:08:05:c6:15:5f:7d:33:d5:48: 92:1a:2b:05:bc:4c:9e:5c:bc:ee:ff:ee:26:03:6a: c6:2d:ba:db:a4:41:40:95:fe:cd:b9:05:c5:82:09: 43:64:77:0f:97:00:1f:7b:35:db:7c:e9:17:b7:6a: cf:b9:23:8a:4f:23:bf:59:79:0f:e4:2d:3d:80:66: 2c:3f:f3:4b:ea:b2:c7:f2:67:e4:95:cb:bd:9e:68: 81:21:05:1b:1c:54:4e:69:b7:8e:57:d9:1d:6d:ac: aa:be:92:07:8a:07:1d:89:ec:f0:7e:71:8f:b1:b9: aa:5e:8c:17:31:0c:14:aa:b7:61:16:d6:2d:09:fc: 63:da:be:67:92:f7:fe:80:1e:40:54:36:73:cf:03: 2b:a0:d9:8c:72:4f:2b:8b:c8:45:54:3a:9f:2e:de: d7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9E:D0:CF:6B:2F:A2:90:17:E0:FA:1D:01:59:BD:FE:8B:91:64:3C X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rZ7Qz2svopAX4PodAVm9_ouRZDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.50.14.0-92.50.63.255 147.136.78.0/23 147.136.84.0/24 147.136.86.0/23 168.199.133.0-168.199.159.255 168.199.164.0/24 168.199.166.0-168.199.168.255 168.199.174.0/24 168.199.192.0/23 168.199.202.0-168.199.204.255 168.199.206.0/24 168.199.208.0/24 168.199.211.0/24 168.199.216.0-168.199.224.255 168.199.226.0/24 168.199.228.0-168.199.230.255 168.199.232.0/24 168.199.240.0/20 185.100.58.0/24 192.95.85.0-192.95.86.255 192.95.91.0/24 IPv6: 2001:678:8b4::/48 Signature Algorithm: sha256WithRSAEncryption 30:1c:03:15:15:c5:f7:7e:5c:29:03:34:77:cf:be:35:19:c1: 66:f5:4b:dd:58:23:3d:14:be:21:bb:45:26:fd:83:d8:32:ed: a6:1e:e7:09:37:fb:c0:3b:1e:71:bf:b4:a8:84:79:cf:07:00: 9b:38:5a:f1:ca:8c:92:47:0f:bb:df:cc:5b:cd:5f:78:78:1a: 7e:8e:b1:cd:94:17:e2:53:45:a5:65:0a:9e:59:73:27:ff:fd: 07:90:a7:db:cd:eb:12:a4:b2:f0:44:a9:57:4b:70:4e:52:70: cb:02:db:ac:f1:50:f2:f2:f2:26:02:20:0b:c3:7b:d3:20:49: b7:37:45:9f:54:75:03:af:46:d4:1c:be:13:1a:87:8c:0b:3d: 42:70:e7:de:88:d0:e6:b9:97:da:b4:36:00:8a:71:60:0f:33: ba:8e:7c:33:f9:0c:fa:7f:ab:83:fe:0f:91:a9:3d:d7:47:d9: 04:46:fc:01:ce:c9:82:6d:e8:21:14:d9:9c:b4:0d:44:c1:85: 55:f6:60:3f:7f:bd:d4:56:c2:13:0d:16:5e:d8:0d:ed:19:e0: ae:bb:75:71:e0:9b:ba:23:7b:a1:46:d3:3b:5b:24:05:37:2f: c2:87:b7:82:95:f3:5b:56:67:25:af:a2:35:07:d3:ff:68:2d: 15:bc:b7:21 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt/gXBLJE+JxgE8hJBq4kMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjYwMTAyMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDllZDBjZjZiMmZhMjkwMTdlMGZhMWQwMTU5YmRmZThiOTE2NDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgxpjYdPnjmEpAyhlJzuNmdDswhM QqVUzGxX1SyrqTHuIf0wQMtkPp4VBODr+Wda4nsPomwLpWum3j3c+POH/eb1U6Ys UZSnImyxE0szoF25ok0hjAzyfIPWDSlzAaEIBcYVX30z1UiSGisFvEyeXLzu/+4m A2rGLbrbpEFAlf7NuQXFgglDZHcPlwAfezXbfOkXt2rPuSOKTyO/WXkP5C09gGYs P/NL6rLH8mfklcu9nmiBIQUbHFROabeOV9kdbayqvpIHigcdiezwfnGPsbmqXowX MQwUqrdhFtYtCfxj2r5nkvf+gB5AVDZzzwMroNmMck8ri8hFVDqfLt7XEwIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFK2e0M9rL6KQF+D6HQFZvf6LkWQ8MB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvclo3UXoyc3ZvcEFYNFBvZEFWbTlfb3VSWkR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHkBggrBgEFBQcBBwEB/wSB1DCB0TCBvQQCAAEwgbYwDAME AVwyDgMEBlwyAAMEAZOITgMEAJOIVAMEAZOIVjAMAwQAqMeFAwQFqMeAAwQAqMek MAwDBAGox6YDBACox6gDBACox64DBAGox8AwDAMEAajHygMEAKjHzAMEAKjHzgME AKjH0AMEAKjH0zAMAwQDqMfYAwQAqMfgAwQAqMfiMAwDBAKox+QDBACox+YDBACo x+gDBASox/ADBAC5ZDowDAMEAMBfVQMEAMBfVgMEAMBfWzAPBAIAAjAJAwcAIAEG eAi0MA0GCSqGSIb3DQEBCwUAA4IBAQAwHAMVFcX3flwpAzR3z741GcFm9UvdWCM9 FL4hu0Um/YPYMu2mHucJN/vAOx5xv7SohHnPBwCbOFrxyoySRw+738xbzV94eBp+ jrHNlBfiU0WlZQqeWXMn//0HkKfbzesSpLLwRKlXS3BOUnDLAtus8VDy8vImAiAL w3vTIEm3N0WfVHUDr0bUHL4TGoeMCz1CcOfeiNDmuZfatDYAinFgDzO6jnwz+Qz6 f6uD/g+RqT3XR9kERvwBzsmCbeghFNmctA1EwYVV9mA/f73UVsITDRZe2A3tGeCu u3Vx4Ju6I3uhRtM7WyQFNy/Ch7eClfNbVmclr6I1B9P/aC0VvLch -----END CERTIFICATE-----Generated at Fri Jan 9 16:51:09 2026 by rpki-client