This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/7Z9cH1C8XPNJTxdsgH0ox-pTxZg.roa File: 7Z9cH1C8XPNJTxdsgH0ox-pTxZg.roa (raw, json) Hash identifier: 4+TklJPq6Xjl0HFZYNmTMPoe1Qx5I4KGqW30JOPepMU= Subject key identifier: ED:9F:5C:1F:50:BC:5C:F3:49:4F:17:6C:80:7D:28:C7:EA:53:C5:98 Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Certificate serial: 019ADB9B701EA4A506F81E6C5159693F68AC Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/7Z9cH1C8XPNJTxdsgH0ox-pTxZg.roa Signing time: Mon 01 Dec 2025 20:29:48 +0000 ROA not before: Mon 01 Dec 2025 20:29:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199967 IP address blocks: 5.181.6.0/24 maxlen: 24 5.181.7.0/24 maxlen: 24 5.183.178.0/24 maxlen: 24 45.12.204.0/24 maxlen: 24 45.12.205.0/24 maxlen: 24 45.66.132.0/24 maxlen: 24 45.66.133.0/24 maxlen: 24 45.82.166.0/24 maxlen: 24 45.128.154.0/24 maxlen: 24 45.134.19.0/24 maxlen: 24 45.144.240.0/24 maxlen: 24 45.144.241.0/24 maxlen: 24 81.90.191.0/24 maxlen: 24 91.217.120.0/24 maxlen: 24 91.217.121.0/24 maxlen: 24 147.78.15.0/24 maxlen: 24 152.89.208.0/24 maxlen: 24 152.89.209.0/24 maxlen: 24 185.105.189.0/24 maxlen: 24 185.105.190.0/24 maxlen: 24 185.120.18.0/24 maxlen: 24 185.120.19.0/24 maxlen: 24 185.126.69.0/24 maxlen: 24 185.126.70.0/24 maxlen: 24 185.126.71.0/24 maxlen: 24 185.126.118.0/24 maxlen: 24 185.126.138.0/24 maxlen: 24 185.159.68.0/24 maxlen: 24 185.159.69.0/24 maxlen: 24 185.159.70.0/24 maxlen: 24 185.160.27.0/24 maxlen: 24 185.168.21.0/24 maxlen: 24 185.168.22.0/24 maxlen: 24 185.168.23.0/24 maxlen: 24 185.171.121.0/24 maxlen: 24 185.175.140.0/24 maxlen: 24 185.175.141.0/24 maxlen: 24 185.187.237.0/24 maxlen: 24 185.187.238.0/24 maxlen: 24 185.187.239.0/24 maxlen: 24 188.119.100.0/24 maxlen: 24 188.119.101.0/24 maxlen: 24 194.156.228.0/24 maxlen: 24 217.197.163.0/24 maxlen: 24 2a0c:8a40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:db:9b:70:1e:a4:a5:06:f8:1e:6c:51:59:69:3f:68:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13 Validity Not Before: Dec 1 20:29:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed9f5c1f50bc5cf3494f176c807d28c7ea53c598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:64:ba:38:49:ab:16:93:0b:d6:19:5d:5b: 36:3d:e5:3a:f8:74:4e:a9:55:e3:78:aa:e5:5c:96: a1:02:20:46:4c:3e:c7:1a:13:19:64:72:b5:be:6f: 59:ed:1e:70:ed:54:03:8b:3e:a2:27:d9:4d:68:20: c0:24:4a:8b:72:21:7b:98:ea:03:a9:c0:ab:be:92: f3:04:a1:82:2b:37:96:5f:69:eb:2d:bb:a7:89:ae: ec:e9:b0:9d:51:21:23:68:39:c9:85:44:74:86:e2: b7:e7:69:e5:a3:48:5b:b1:eb:8d:25:11:6e:f0:c4: c2:ea:e9:91:48:fc:0b:3d:d9:b7:55:13:b4:be:26: 42:f9:0b:50:09:a8:4f:41:86:3b:69:db:2f:88:b4: e4:4c:d5:74:a7:b1:41:54:59:48:4c:96:2c:14:64: e8:bb:25:a3:d1:af:1b:77:92:f6:0c:0c:b2:44:4b: 9d:d2:8c:d0:74:a8:4e:ac:c0:1d:c6:64:06:25:61: 78:25:ee:f7:f1:e8:54:64:1a:e4:c3:83:50:24:fe: 5c:bf:35:19:a9:73:5d:9a:24:96:a9:9f:ef:62:d1: c3:9d:7e:06:1f:dd:8a:3f:97:6c:b3:11:21:a6:b5: 69:de:41:2f:a1:eb:5c:87:8e:25:ae:24:5d:38:fa: 03:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9F:5C:1F:50:BC:5C:F3:49:4F:17:6C:80:7D:28:C7:EA:53:C5:98 X509v3 Authority Key Identifier: keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/7Z9cH1C8XPNJTxdsgH0ox-pTxZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.6.0/23 5.183.178.0/24 45.12.204.0/23 45.66.132.0/23 45.82.166.0/24 45.128.154.0/24 45.134.19.0/24 45.144.240.0/23 81.90.191.0/24 91.217.120.0/23 147.78.15.0/24 152.89.208.0/23 185.105.189.0-185.105.190.255 185.120.18.0/23 185.126.69.0-185.126.71.255 185.126.118.0/24 185.126.138.0/24 185.159.68.0-185.159.70.255 185.160.27.0/24 185.168.21.0-185.168.23.255 185.171.121.0/24 185.175.140.0/23 185.187.237.0-185.187.239.255 188.119.100.0/23 194.156.228.0/24 217.197.163.0/24 IPv6: 2a0c:8a40:1::/48 Signature Algorithm: sha256WithRSAEncryption c3:18:c6:d9:c4:71:e3:30:a8:e5:10:f7:e8:25:8e:f8:45:c3: d5:b8:da:0b:6e:b2:dc:8b:4e:a2:8e:76:fc:ac:1d:81:ee:c7: 32:da:d2:ff:15:7f:4a:3c:68:0a:67:3e:2d:9e:67:6f:d1:5d: 5b:d9:99:83:46:89:a9:37:dd:a8:3d:e4:10:30:fb:69:7c:05: c3:e0:e7:d2:a8:32:1e:44:0e:81:3c:48:65:42:a6:81:8a:29: 14:70:d0:7c:75:d9:62:48:fc:7a:24:2f:4e:bd:3d:58:15:a5: 2e:4a:78:4f:28:95:d7:2b:26:3f:5e:f6:83:94:a0:09:d5:77: 4d:3b:70:e4:97:84:9c:c8:04:16:5c:ee:03:f7:bd:e3:06:af: 52:f4:d2:b1:b3:fe:37:9e:46:f1:82:6b:6d:23:6e:a6:f9:3c: fe:ee:4d:54:3c:40:25:6f:8c:b1:1c:a3:fa:23:5c:05:e1:e1: ee:2d:0e:b8:a1:bf:a3:8e:6f:03:8f:89:fe:db:f0:66:32:e6: f4:0f:53:69:78:61:ca:20:ab:c2:d1:a5:2d:2d:b7:64:ac:34: 51:04:89:ad:ec:41:6a:16:b5:c9:8b:09:57:9e:34:3b:dc:f6: 35:76:05:6d:2c:9c:b3:f3:07:cf:e0:d1:c2:8d:bb:e7:61:63: 87:cc:fc:76 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZrbm3AepKUG+B5sUVlpP2isMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjQ3ZTczMzkxZWM5ZDZhMmE0NmYyY2IwYjAyZmM5OTQy ODhmMTMwHhcNMjUxMjAxMjAyOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDlmNWMxZjUwYmM1Y2YzNDk0ZjE3NmM4MDdkMjhjN2VhNTNjNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGtkujhJqxaTC9YZXVs2PeU6+HRO qVXjeKrlXJahAiBGTD7HGhMZZHK1vm9Z7R5w7VQDiz6iJ9lNaCDAJEqLciF7mOoD qcCrvpLzBKGCKzeWX2nrLbunia7s6bCdUSEjaDnJhUR0huK352nlo0hbseuNJRFu 8MTC6umRSPwLPdm3VRO0viZC+QtQCahPQYY7adsviLTkTNV0p7FBVFlITJYsFGTo uyWj0a8bd5L2DAyyREud0ozQdKhOrMAdxmQGJWF4Je738ehUZBrkw4NQJP5cvzUZ qXNdmiSWqZ/vYtHDnX4GH92KP5dssxEhprVp3kEvoetch44lriRdOPoDKwIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFO2fXB9QvFzzSU8XbIB9KMfqU8WYMB8GA1UdIwQY MBaAFAskfnM5HsnWoqRvLLCwL8mUKI8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMt NzM2Nzg5ZWU2ZmQwLzEvN1o5Y0gxQzhYUE5KVHhkc2dIMG94LXBUeFpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iM2ZkNDAtYjEyNS00MjgyLWI4ODMtNzM2Nzg5ZWU2ZmQw LzEvQ3lSLWN6a2V5ZGFpcEc4c3NMQXZ5WlFvanhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHyBggrBgEFBQcBBwEB/wSB4jCB3zCBywQCAAEwgcQDBAEF tQYDBAAFt7IDBAEtDMwDBAEtQoQDBAAtUqYDBAAtgJoDBAAthhMDBAEtkPADBABR Wr8DBAFb2XgDBACTTg8DBAGYWdAwDAMEALlpvQMEALlpvgMEAbl4EjAMAwQAuX5F AwQDuX5AAwQAuX52AwQAuX6KMAwDBAK5n0QDBAC5n0YDBAC5oBswDAMEALmoFQME A7moEAMEALmreQMEAbmvjDAMAwQAubvtAwQEubvgAwQBvHdkAwQAwpzkAwQA2cWj MA8EAgACMAkDBwAqDIpAAAEwDQYJKoZIhvcNAQELBQADggEBAMMYxtnEceMwqOUQ 9+gljvhFw9W42gtustyLTqKOdvysHYHuxzLa0v8Vf0o8aApnPi2eZ2/RXVvZmYNG iak33ag95BAw+2l8BcPg59KoMh5EDoE8SGVCpoGKKRRw0Hx12WJI/HokL069PVgV pS5KeE8oldcrJj9e9oOUoAnVd007cOSXhJzIBBZc7gP3veMGr1L00rGz/jeeRvGC a20jbqb5PP7uTVQ8QCVvjLEco/ojXAXh4e4tDrihv6OObwOPif7b8GYy5vQPU2l4 Ycogq8LRpS0tt2SsNFEEia3sQWoWtcmLCVeeNDvc9jV2BW0snLPzB8/g0cKNu+dh Y4fM/HY= -----END CERTIFICATE-----Generated at Fri Dec 5 17:52:15 2025 by rpki-client