This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7RHbCuZd5rmQWnvXFQbftTnLIRE.roa File: 7RHbCuZd5rmQWnvXFQbftTnLIRE.roa (raw, json) Hash identifier: s4uPitwQUDms/fMNBjzIeFUwQ0ZAq15Qn4cPRq+BVMs= Subject key identifier: ED:11:DB:0A:E6:5D:E6:B9:90:5A:7B:D7:15:06:DF:B5:39:CB:21:11 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AA5ADB79A8A22257B596B43B96F6B72D0 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7RHbCuZd5rmQWnvXFQbftTnLIRE.roa Signing time: Fri 21 Nov 2025 09:10:16 +0000 ROA not before: Fri 21 Nov 2025 09:10:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 77.93.137.0/24 maxlen: 24 77.93.149.0/24 maxlen: 24 82.152.174.0/23 maxlen: 23 82.153.208.0/22 maxlen: 22 82.163.19.0/24 maxlen: 24 89.213.58.0/24 maxlen: 24 89.213.60.0/23 maxlen: 24 89.213.108.0/23 maxlen: 24 89.213.110.0/24 maxlen: 24 89.213.122.0/24 maxlen: 24 89.213.126.0/24 maxlen: 24 89.213.194.0/23 maxlen: 24 89.213.228.0/24 maxlen: 24 89.213.240.0/23 maxlen: 24 89.213.250.0/24 maxlen: 24 213.210.16.0/24 maxlen: 24 213.210.18.0/24 maxlen: 24 213.210.33.0/24 maxlen: 24 213.210.51.0/24 maxlen: 24 213.218.220.0/24 maxlen: 24 217.144.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:ad:b7:9a:8a:22:25:7b:59:6b:43:b9:6f:6b:72:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 21 09:10:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed11db0ae65de6b9905a7bd71506dfb539cb2111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:5d:62:bf:51:a4:a7:7f:8d:da:bb:70:d3: c5:e0:55:ce:72:14:03:fd:8d:6c:ca:eb:01:47:f0: 25:9d:f2:df:fb:4e:69:ff:f3:3f:ca:0e:64:18:8c: 66:7d:8d:0e:72:aa:6f:21:e0:92:84:fb:6e:ea:2d: 1c:71:f7:f0:f3:0e:36:7b:c7:f2:04:87:1d:81:35: 9a:54:56:79:76:cc:23:eb:5a:1d:ba:3c:c5:3e:74: 52:ef:86:7d:f1:11:b4:5e:06:2f:fa:4a:52:10:57: 4f:df:1d:45:d4:ac:15:4f:2c:ec:85:16:7e:ad:f0: f7:23:f0:52:b5:0d:bc:27:e1:4f:5f:19:4e:07:9a: f8:10:56:49:ac:28:bd:f4:37:ee:d0:f6:33:98:16: f4:4a:2b:4d:47:21:bf:d9:79:8a:7c:f1:0e:7b:db: bc:dd:e0:12:8e:08:88:7a:df:0e:40:b7:14:3e:3b: 7d:cc:e6:2e:36:85:b2:9d:d4:dc:6d:f7:37:31:28: 30:68:9c:56:f2:2b:57:48:b1:2a:76:59:6d:91:82: fd:de:b8:54:9a:f1:f2:7e:6b:4d:64:ba:5e:9e:3f: 2d:f6:33:a5:40:3b:44:f7:57:9e:f0:ea:d2:ba:82: e4:42:d4:01:08:ea:12:e3:d6:2e:44:77:eb:32:09: 83:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:11:DB:0A:E6:5D:E6:B9:90:5A:7B:D7:15:06:DF:B5:39:CB:21:11 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7RHbCuZd5rmQWnvXFQbftTnLIRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.137.0/24 77.93.149.0/24 82.152.174.0/23 82.153.208.0/22 82.163.19.0/24 89.213.58.0/24 89.213.60.0/23 89.213.108.0-89.213.110.255 89.213.122.0/24 89.213.126.0/24 89.213.194.0/23 89.213.228.0/24 89.213.240.0/23 89.213.250.0/24 213.210.16.0/24 213.210.18.0/24 213.210.33.0/24 213.210.51.0/24 213.218.220.0/24 217.144.151.0/24 Signature Algorithm: sha256WithRSAEncryption 29:56:9d:31:64:e0:b4:64:22:99:f8:9e:f8:8d:c8:7f:91:a7: ef:3b:1c:dd:1a:26:ab:80:42:6a:d2:f1:bb:56:fe:57:41:20: 5c:7a:40:3d:f7:22:0b:56:2d:09:57:05:ca:a6:2a:d8:76:e4: 84:48:e7:f4:16:89:1b:5c:04:8d:4a:9e:4f:8f:34:6b:b2:41: b8:ef:af:33:55:83:f1:5a:2d:2a:68:4b:50:25:86:84:f2:9d: 7c:82:99:7f:a8:60:de:fd:12:12:57:31:81:92:83:7e:c0:fd: 01:03:83:ef:2e:aa:56:48:35:23:f2:0d:ed:72:6f:d3:9b:8c: b7:ac:89:b2:c8:fd:99:ef:4c:ff:3e:a8:28:fa:ef:08:47:8b: 00:58:49:6c:e5:58:ed:a5:58:f4:24:b8:40:6d:dc:c6:3b:b5: 96:9b:26:81:08:7a:fb:a2:c9:7f:b8:e5:41:8b:ba:66:3d:9d: 93:de:8d:1e:3a:76:32:67:05:78:79:85:63:d7:de:c2:3c:7f: e3:43:94:fe:3c:a4:bc:a5:7d:d8:44:fc:fb:97:7a:74:b0:4d: ed:05:c5:95:92:74:d7:7d:ab:3e:a0:ae:65:73:17:fc:13:e8: 01:60:a0:fe:70:a9:3d:a9:3c:a5:5c:7e:90:5d:3f:db:d1:08: 0b:bf:09:d8 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZqlrbeaiiIle1lrQ7lva3LQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTIxMDkxMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDExZGIwYWU2NWRlNmI5OTA1YTdiZDcxNTA2ZGZiNTM5Y2IyMTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBxdYr9RpKd/jdq7cNPF4FXOchQD /Y1syusBR/AlnfLf+05p//M/yg5kGIxmfY0OcqpvIeCShPtu6i0ccffw8w42e8fy BIcdgTWaVFZ5dswj61odujzFPnRS74Z98RG0XgYv+kpSEFdP3x1F1KwVTyzshRZ+ rfD3I/BStQ28J+FPXxlOB5r4EFZJrCi99Dfu0PYzmBb0SitNRyG/2XmKfPEOe9u8 3eASjgiIet8OQLcUPjt9zOYuNoWyndTcbfc3MSgwaJxW8itXSLEqdlltkYL93rhU mvHyfmtNZLpenj8t9jOlQDtE91ee8OrSuoLkQtQBCOoS49YuRHfrMgmDGwIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFO0R2wrmXea5kFp71xUG37U5yyERMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvN1JIYkN1WmQ1cm1RV252WEZRYmZ0VG5MSVJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBABN XYkDBABNXZUDBAFSmK4DBAJSmdADBABSoxMDBABZ1ToDBAFZ1TwwDAMEAlnVbAME AFnVbgMEAFnVegMEAFnVfgMEAVnVwgMEAFnV5AMEAVnV8AMEAFnV+gMEANXSEAME ANXSEgMEANXSIQMEANXSMwMEANXa3AMEANmQlzANBgkqhkiG9w0BAQsFAAOCAQEA KVadMWTgtGQimfie+I3If5Gn7zsc3Romq4BCatLxu1b+V0EgXHpAPfciC1YtCVcF yqYq2HbkhEjn9BaJG1wEjUqeT480a7JBuO+vM1WD8VotKmhLUCWGhPKdfIKZf6hg 3v0SElcxgZKDfsD9AQOD7y6qVkg1I/IN7XJv05uMt6yJssj9me9M/z6oKPrvCEeL AFhJbOVY7aVY9CS4QG3cxju1lpsmgQh6+6LJf7jlQYu6Zj2dk96NHjp2MmcFeHmF Y9fewjx/40OU/jykvKV92ET8+5d6dLBN7QXFlZJ0132rPqCuZXMX/BPoAWCg/nCp Pak8pVx+kF0/29EIC78J2A== -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:12 2025 by rpki-client