This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7mul9Xxd9OiZCF3EvqhnONqybco.roa File: 7mul9Xxd9OiZCF3EvqhnONqybco.roa (raw, json) Hash identifier: ibTI1aKN0qP91By2MMeoaONwWcQyqLse2jUJTdZHhTI= Subject key identifier: EE:6B:A5:F5:7C:5D:F4:E8:99:08:5D:C4:BE:A8:67:38:DA:B2:6D:CA Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B02CC6B44183DA4FE900EAA0E72CA431F Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7mul9Xxd9OiZCF3EvqhnONqybco.roa Signing time: Tue 09 Dec 2025 11:08:29 +0000 ROA not before: Tue 09 Dec 2025 11:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31195 IP address blocks: 31.173.132.0/23 maxlen: 23 31.173.134.0/23 maxlen: 23 31.173.135.0/24 maxlen: 24 31.173.143.0/24 maxlen: 24 31.173.225.0/24 maxlen: 24 31.173.226.0/24 maxlen: 24 31.173.228.0/23 maxlen: 23 31.173.228.0/24 maxlen: 24 31.173.229.0/24 maxlen: 24 31.173.230.0/24 maxlen: 24 31.173.231.0/24 maxlen: 24 31.173.232.0/23 maxlen: 23 31.173.235.0/24 maxlen: 24 31.173.236.0/23 maxlen: 23 31.173.238.0/24 maxlen: 24 31.173.239.0/24 maxlen: 24 37.28.188.0/22 maxlen: 22 37.28.190.0/24 maxlen: 24 37.28.191.0/24 maxlen: 24 37.29.43.0/24 maxlen: 24 37.29.88.0/22 maxlen: 22 37.29.89.0/24 maxlen: 24 37.29.91.0/24 maxlen: 24 37.29.92.0/22 maxlen: 22 37.29.94.0/24 maxlen: 24 37.29.95.0/24 maxlen: 24 78.25.124.0/22 maxlen: 22 78.25.127.0/24 maxlen: 24 83.149.52.0/22 maxlen: 22 83.169.224.0/23 maxlen: 23 83.169.226.0/24 maxlen: 24 83.169.227.0/24 maxlen: 24 83.169.228.0/23 maxlen: 23 83.169.230.0/24 maxlen: 24 85.26.240.0/22 maxlen: 22 85.26.244.0/22 maxlen: 22 85.26.247.0/24 maxlen: 24 94.154.64.0/24 maxlen: 24 94.154.71.0/24 maxlen: 24 94.154.72.0/24 maxlen: 24 94.154.73.0/24 maxlen: 24 94.154.74.0/24 maxlen: 24 94.154.75.0/24 maxlen: 24 94.154.76.0/24 maxlen: 24 178.176.233.0/24 maxlen: 24 178.176.234.0/24 maxlen: 24 178.176.235.0/24 maxlen: 24 178.178.64.0/24 maxlen: 24 178.178.65.0/24 maxlen: 24 178.178.66.0/24 maxlen: 24 178.178.67.0/24 maxlen: 24 178.178.68.0/24 maxlen: 24 178.178.69.0/24 maxlen: 24 178.178.70.0/24 maxlen: 24 178.178.71.0/24 maxlen: 24 178.178.72.0/24 maxlen: 24 178.178.73.0/24 maxlen: 24 178.178.74.0/24 maxlen: 24 178.178.75.0/24 maxlen: 24 178.178.76.0/24 maxlen: 24 178.178.77.0/24 maxlen: 24 188.170.228.0/23 maxlen: 23 188.170.230.0/24 maxlen: 24 188.170.231.0/24 maxlen: 24 188.170.232.0/24 maxlen: 24 188.170.233.0/24 maxlen: 24 188.170.234.0/24 maxlen: 24 188.170.235.0/24 maxlen: 24 188.170.236.0/24 maxlen: 24 188.170.237.0/24 maxlen: 24 188.170.239.0/24 maxlen: 24 195.225.160.0/24 maxlen: 24 195.225.161.0/24 maxlen: 24 195.225.162.0/24 maxlen: 24 195.225.163.0/24 maxlen: 24 213.138.208.0/24 maxlen: 24 213.138.209.0/24 maxlen: 24 213.138.211.0/24 maxlen: 24 213.138.212.0/24 maxlen: 24 213.138.213.0/24 maxlen: 24 213.138.215.0/24 maxlen: 24 213.138.221.0/24 maxlen: 24 217.8.86.0/24 maxlen: 24 2a03:d006::/40 maxlen: 40 2a03:d006:100::/40 maxlen: 40 2a03:d006:200::/40 maxlen: 40 2a03:d006:300::/40 maxlen: 40 2a03:d006:400::/40 maxlen: 40 2a03:d006:500::/40 maxlen: 40 2a03:d006:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:cc:6b:44:18:3d:a4:fe:90:0e:aa:0e:72:ca:43:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Dec 9 11:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee6ba5f57c5df4e899085dc4bea86738dab26dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:0c:8e:a4:6a:ee:3a:c3:f7:ee:94:ab:65: 95:f0:ec:d2:c2:26:30:69:a6:d1:fa:a5:ca:da:1b: 38:9f:f9:5c:8b:e8:3c:69:46:36:72:f9:84:22:00: 12:24:fa:a3:2d:62:2d:3e:f3:8d:92:4a:c6:c6:cb: fc:b8:d8:f4:9e:9f:39:e0:3c:f3:9c:0e:56:bd:2f: b3:07:30:99:75:b7:3d:cf:da:e0:84:9c:46:e3:7e: fc:1d:e5:32:ae:f3:8a:04:8e:d6:ab:01:07:49:c8: 09:56:7c:2b:4e:9c:b8:ed:41:21:2e:1c:4a:17:f9: 8d:71:83:ae:e3:86:30:be:13:b0:89:4c:2f:95:0f: 56:86:63:3c:6a:5d:ba:dc:19:ff:7d:2c:b2:0f:18: 01:9a:cd:4a:92:52:a3:04:b3:41:ed:6f:65:c8:d3: a4:66:b2:43:a6:ae:47:3d:89:eb:05:30:e5:c1:2d: 75:a7:0c:0c:e0:40:35:b2:85:b0:29:92:ca:e6:6b: d8:90:cd:1b:c6:e2:a6:16:77:99:33:7c:4b:25:d0: a0:82:61:66:0c:61:2d:bb:7f:d8:6b:06:75:6d:c9: b9:b2:e2:fc:d1:06:47:ad:1f:7e:4b:ba:fe:0e:3f: d2:b6:ef:39:39:74:4e:b3:e4:9f:d6:2b:0d:4a:a8: c5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6B:A5:F5:7C:5D:F4:E8:99:08:5D:C4:BE:A8:67:38:DA:B2:6D:CA X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7mul9Xxd9OiZCF3EvqhnONqybco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.173.132.0/22 31.173.143.0/24 31.173.225.0-31.173.226.255 31.173.228.0-31.173.233.255 31.173.235.0-31.173.239.255 37.28.188.0/22 37.29.43.0/24 37.29.88.0/21 78.25.124.0/22 83.149.52.0/22 83.169.224.0-83.169.230.255 85.26.240.0/21 94.154.64.0/24 94.154.71.0-94.154.76.255 178.176.233.0-178.176.235.255 178.178.64.0-178.178.77.255 188.170.228.0-188.170.237.255 188.170.239.0/24 195.225.160.0/22 213.138.208.0/23 213.138.211.0-213.138.213.255 213.138.215.0/24 213.138.221.0/24 217.8.86.0/24 IPv6: 2a03:d006::-2a03:d006:6ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 55:7e:b1:57:d0:f4:76:c2:29:3d:fb:05:6f:03:31:81:7c:b3: 78:98:50:bb:e3:50:4c:b9:4e:77:6f:0c:1c:68:74:a2:a1:8c: 8d:e1:7d:24:d3:31:e1:f8:46:9f:3d:e4:13:0c:6f:0d:4e:25: 5c:f2:fb:7c:a8:e9:6b:8b:ea:8a:79:f5:22:e7:20:9c:54:26: 10:2a:1b:6d:1d:db:07:99:bd:2a:2c:ae:80:b5:35:3d:b6:dc: 0c:1f:1a:91:54:7f:e3:fb:24:7c:b8:45:ab:af:14:a3:39:a2: a0:41:03:53:58:62:ca:da:82:67:7e:9d:e4:c9:5e:e9:7c:c7: b4:ab:cc:ca:68:f9:66:2a:42:80:f2:09:6f:90:5f:c1:a4:7f: 4c:52:05:a6:65:0a:59:82:be:17:3d:70:a5:b2:d4:75:bf:7b: f2:62:92:15:01:10:bd:4b:70:11:7f:c1:0f:dc:25:90:d1:d9: 74:b9:67:e4:dd:35:ab:9e:af:ae:6d:df:f1:5d:1f:c1:29:83: 63:03:dc:a1:aa:40:92:44:20:48:bc:7b:06:97:8c:e7:52:b8: ad:b3:d7:94:81:a3:d9:ee:53:0d:d4:09:96:fa:d4:5c:0d:29: f9:3b:1f:bb:db:24:a7:7c:10:d6:35:76:e4:cf:a9:29:cd:b4: 79:57:31:06 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZsCzGtEGD2k/pAOqg5yykMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjUxMjA5MTEwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTZiYTVmNTdjNWRmNGU4OTkwODVkYzRiZWE4NjczOGRhYjI2ZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEsMjqRq7jrD9+6Uq2WV8OzSwiYw aabR+qXK2hs4n/lci+g8aUY2cvmEIgASJPqjLWItPvONkkrGxsv8uNj0np854Dzz nA5WvS+zBzCZdbc9z9rghJxG4378HeUyrvOKBI7WqwEHScgJVnwrTpy47UEhLhxK F/mNcYOu44YwvhOwiUwvlQ9WhmM8al263Bn/fSyyDxgBms1KklKjBLNB7W9lyNOk ZrJDpq5HPYnrBTDlwS11pwwM4EA1soWwKZLK5mvYkM0bxuKmFneZM3xLJdCggmFm DGEtu3/YawZ1bcm5suL80QZHrR9+S7r+Dj/Stu85OXROs+Sf1isNSqjF6wIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFO5rpfV8XfTomQhdxL6oZzjasm3KMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvN211bDlYeGQ5T2laQ0YzRXZxaG5PTnF5YmNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDgYIKwYBBQUHAQcBAf8Egf4wgfswgd8EAgABMIHYAwQC H62EAwQAH62PMAwDBAAfreEDBAAfreIwDAMEAh+t5AMEAR+t6DAMAwQAH63rAwQE H63gAwQCJRy8AwQAJR0rAwQDJR1YAwQCThl8AwQCU5U0MAwDBAVTqeADBABTqeYD BANVGvADBABemkAwDAMEAF6aRwMEAF6aTDAMAwQAsrDpAwQCsrDoMAwDBAayskAD BAGyskwwDAMEAryq5AMEAbyq7AMEALyq7wMEAsPhoAMEAdWK0DAMAwQA1YrTAwQB 1YrUAwQA1YrXAwQA1YrdAwQA2QhWMBcEAgACMBEwDwMFASoD0AYDBgAqA9AGBjAN BgkqhkiG9w0BAQsFAAOCAQEAVX6xV9D0dsIpPfsFbwMxgXyzeJhQu+NQTLlOd28M HGh0oqGMjeF9JNMx4fhGnz3kEwxvDU4lXPL7fKjpa4vqinn1IucgnFQmECobbR3b B5m9KiyugLU1PbbcDB8akVR/4/skfLhFq68UozmioEEDU1hiytqCZ36d5Mle6XzH tKvMymj5ZipCgPIJb5BfwaR/TFIFpmUKWYK+Fz1wpbLUdb978mKSFQEQvUtwEX/B D9wlkNHZdLln5N01q56vrm3f8V0fwSmDYwPcoapAkkQgSLx7BpeM51K4rbPXlIGj 2e5TDdQJlvrUXA0p+Tsfu9skp3wQ1jV25M+pKc20eVcxBg== -----END CERTIFICATE-----Generated at Fri Dec 12 12:17:54 2025 by rpki-client