This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/7OfI-VvqbkhBBO8vhNMUjyDjLfY.roa File: 7OfI-VvqbkhBBO8vhNMUjyDjLfY.roa (raw, json) Hash identifier: eTH+b7uyka3O9YkXOpD+DkbzSM2UIMZvJWqni2nrhis= Subject key identifier: EC:E7:C8:F9:5B:EA:6E:48:41:04:EF:2F:84:D3:14:8F:20:E3:2D:F6 Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad Certificate serial: 019B7E38371F46C6EE96F5A16DAFE6BF1C8D Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/7OfI-VvqbkhBBO8vhNMUjyDjLfY.roa Signing time: Fri 02 Jan 2026 10:19:31 +0000 ROA not before: Fri 02 Jan 2026 10:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208909 IP address blocks: 2.57.128.0/22 maxlen: 22 2.57.128.0/24 maxlen: 24 2.57.129.0/24 maxlen: 24 2.57.130.0/24 maxlen: 24 2.57.131.0/24 maxlen: 24 5.183.220.0/22 maxlen: 22 45.15.136.0/24 maxlen: 24 45.15.137.0/24 maxlen: 24 45.15.138.0/24 maxlen: 24 45.15.139.0/24 maxlen: 24 46.253.32.0/24 maxlen: 24 46.253.33.0/24 maxlen: 24 46.253.34.0/24 maxlen: 24 46.253.35.0/24 maxlen: 24 46.253.36.0/24 maxlen: 24 46.253.37.0/24 maxlen: 24 46.253.38.0/24 maxlen: 24 46.253.39.0/24 maxlen: 24 91.204.124.0/22 maxlen: 22 162.213.64.0/24 maxlen: 24 162.213.65.0/24 maxlen: 24 162.213.66.0/24 maxlen: 24 162.213.67.0/24 maxlen: 24 185.38.128.0/22 maxlen: 22 185.41.96.0/24 maxlen: 24 185.41.97.0/24 maxlen: 24 185.41.98.0/24 maxlen: 24 185.41.99.0/24 maxlen: 24 185.58.172.0/24 maxlen: 24 185.58.173.0/24 maxlen: 24 185.58.174.0/24 maxlen: 24 185.58.175.0/24 maxlen: 24 185.87.188.0/22 maxlen: 22 185.132.90.0/24 maxlen: 24 185.219.136.0/22 maxlen: 22 195.211.168.0/22 maxlen: 22 2a00:fde0::/32 maxlen: 32 2a01:57a0::/32 maxlen: 32 2a09:d940::/29 maxlen: 29 2a0e:3c80::/29 maxlen: 29 2a0e:3c80::/31 maxlen: 31 2a0e:3c82::/31 maxlen: 31 2a0e:3c84::/31 maxlen: 31 2a0e:3c86::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:37:1f:46:c6:ee:96:f5:a1:6d:af:e6:bf:1c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ece7c8f95bea6e484104ef2f84d3148f20e32df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:0e:81:dc:69:47:7d:ac:11:25:31:19:38: 5a:fa:1a:6a:45:ad:6d:46:9e:c3:22:a1:ec:7d:ae: f5:cc:a6:8e:97:cf:a3:61:cf:7e:98:ad:83:c8:f7: 3f:66:f8:16:a1:39:4b:0d:0c:3d:60:04:e5:dd:ac: 6b:66:7d:b0:eb:91:af:2b:71:d4:11:63:f2:17:51: c1:2b:26:2c:10:4e:98:0e:a8:c9:86:a3:6b:5b:5a: bd:6f:16:d7:67:cb:2e:be:50:31:6d:23:92:a9:c3: f3:60:27:0b:0b:24:25:05:6d:e4:bb:98:ac:01:4f: 87:3c:13:9b:08:b7:d5:7d:ea:67:73:08:48:c5:da: f9:b5:4f:7d:24:3e:65:e9:73:a2:5c:c2:ed:ee:fd: 6f:6a:fb:d0:27:0a:06:30:0c:da:b3:b7:06:9b:70: 96:c7:18:e4:be:7b:b7:ed:68:a3:84:6a:c4:d9:84: 1d:5b:be:1d:6f:6c:98:ca:d3:a2:6f:98:c0:13:77: 74:17:17:65:97:bd:29:7b:5b:c9:b8:39:56:e3:26: 78:2d:f5:8d:c5:65:bc:5e:e9:c0:02:42:c1:cd:32: 83:a9:68:27:44:07:9e:6d:dd:80:37:63:82:37:d6: 5d:a4:f1:e5:01:cb:58:ef:cd:42:f9:76:b6:60:c1: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E7:C8:F9:5B:EA:6E:48:41:04:EF:2F:84:D3:14:8F:20:E3:2D:F6 X509v3 Authority Key Identifier: keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/7OfI-VvqbkhBBO8vhNMUjyDjLfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.128.0/22 5.183.220.0/22 45.15.136.0/22 46.253.32.0/21 91.204.124.0/22 162.213.64.0/22 185.38.128.0/22 185.41.96.0/22 185.58.172.0/22 185.87.188.0/22 185.132.90.0/24 185.219.136.0/22 195.211.168.0/22 IPv6: 2a00:fde0::/32 2a01:57a0::/32 2a09:d940::/29 2a0e:3c80::/29 Signature Algorithm: sha256WithRSAEncryption 41:95:16:6e:7e:e2:fe:41:97:82:df:13:f5:f8:71:4e:f6:46: c0:64:c0:59:f0:a8:cc:d9:7f:aa:2f:34:69:b7:49:55:19:5e: 18:0e:be:2f:69:c8:98:31:43:ba:49:1e:3e:c9:62:75:34:60: af:33:3a:12:93:85:49:fd:ac:1e:b4:d1:2e:65:ae:a4:a7:37: dc:04:3b:a0:14:03:d5:2a:35:31:0a:10:49:0b:3c:a9:aa:da: a2:2c:3d:ff:a3:08:f7:05:db:2c:f1:44:ce:94:4b:38:0a:44: 0d:91:7c:7e:a4:b9:f0:e7:a2:43:11:07:a8:3d:2a:e1:27:6c: f8:20:22:32:0e:93:e5:d0:40:2c:2c:65:5a:46:fa:81:78:6e: 97:ad:9d:5f:c2:61:dc:85:05:36:e9:24:a7:3c:1a:af:b3:fe: 08:d8:67:af:92:ff:81:1d:71:d6:a4:fc:2b:99:99:6d:f3:39: b3:34:3c:ff:a2:15:23:70:1b:57:e2:4c:02:a6:ba:91:e0:d2: 3e:b7:65:f9:2d:ef:b9:06:7c:a1:7b:8b:87:7c:00:41:d8:83: 5f:d3:81:a1:e5:e9:22:3b:47:82:88:63:96:9e:1e:aa:43:c9: 4b:cf:55:3a:59:98:da:d6:c0:79:7f:e4:c4:f3:57:70:a6:fe: 4d:e7:4a:6f -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZt+ODcfRsbulvWhba/mvxyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZThlNTZiMThkNDVjNjQ2ZjAzY2I2ZjkwNjlkYTBjOGIz Yzc0YWQwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2U3YzhmOTViZWE2ZTQ4NDEwNGVmMmY4NGQzMTQ4ZjIwZTMyZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBwOgdxpR32sESUxGTha+hpqRa1t Rp7DIqHsfa71zKaOl8+jYc9+mK2DyPc/ZvgWoTlLDQw9YATl3axrZn2w65GvK3HU EWPyF1HBKyYsEE6YDqjJhqNrW1q9bxbXZ8suvlAxbSOSqcPzYCcLCyQlBW3ku5is AU+HPBObCLfVfepncwhIxdr5tU99JD5l6XOiXMLt7v1vavvQJwoGMAzas7cGm3CW xxjkvnu37WijhGrE2YQdW74db2yYytOib5jAE3d0Fxdll70pe1vJuDlW4yZ4LfWN xWW8XunAAkLBzTKDqWgnRAeebd2AN2OCN9ZdpPHlActY781C+Xa2YMEJ0wIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFOznyPlb6m5IQQTvL4TTFI8g4y32MB8GA1UdIwQY MBaAFMDo5WsY1FxkbwPLb5Bp2gyLPHStMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09qbGF4alVYR1J2QTh0dmtHbmFESXM4ZEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYWJlYTItMzBkMC00NjU0LWE4MzQt NzQ1YmNlMzA2MGM5LzEvN09mSS1WdnFia2hCQk84dmhOTVVqeURqTGZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yYWJlYTItMzBkMC00NjU0LWE4MzQtNzQ1YmNlMzA2MGM5 LzEvd09qbGF4alVYR1J2QTh0dmtHbmFESXM4ZEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHowVAQCAAEwTgMEAgI5gAME AgW33AMEAi0PiAMEAy79IAMEAlvMfAMEAqLVQAMEArkmgAMEArkpYAMEArk6rAME ArlXvAMEALmEWgMEArnbiAMEAsPTqDAiBAIAAjAcAwUAKgD94AMFACoBV6ADBQMq CdlAAwUDKg48gDANBgkqhkiG9w0BAQsFAAOCAQEAQZUWbn7i/kGXgt8T9fhxTvZG wGTAWfCozNl/qi80abdJVRleGA6+L2nImDFDukkePslidTRgrzM6EpOFSf2sHrTR LmWupKc33AQ7oBQD1So1MQoQSQs8qaraoiw9/6MI9wXbLPFEzpRLOApEDZF8fqS5 8OeiQxEHqD0q4Sds+CAiMg6T5dBALCxlWkb6gXhul62dX8Jh3IUFNukkpzwar7P+ CNhnr5L/gR1x1qT8K5mZbfM5szQ8/6IVI3AbV+JMAqa6keDSPrdl+S3vuQZ8oXuL h3wAQdiDX9OBoeXpIjtHgohjlp4eqkPJS89VOlmY2tbAeX/kxPNXcKb+TedKbw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:10 2026 by rpki-client