This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/cn7-hcrRNirVMn7fuVChkd5gOH0.roa File: cn7-hcrRNirVMn7fuVChkd5gOH0.roa (raw, json) Hash identifier: Jkp/J73ypJANp3uQ/SWVaEZfnou2Lr+GzdzjCKUvGzg= Subject key identifier: 72:7E:FE:85:CA:D1:36:2A:D5:32:7E:DF:B9:50:A1:91:DE:60:38:7D Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B91D6E6C8FF06CFEB4F6D38AFB8791242 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/cn7-hcrRNirVMn7fuVChkd5gOH0.roa Signing time: Tue 06 Jan 2026 05:45:38 +0000 ROA not before: Tue 06 Jan 2026 05:45:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 5.182.184.0/24 maxlen: 24 5.182.196.0/24 maxlen: 24 5.182.197.0/24 maxlen: 24 79.98.183.0/24 maxlen: 24 92.249.30.0/24 maxlen: 24 103.130.179.0/24 maxlen: 24 103.210.13.0/24 maxlen: 24 147.78.207.0/24 maxlen: 24 185.52.138.0/24 maxlen: 24 185.187.213.0/24 maxlen: 24 185.187.214.0/24 maxlen: 24 185.187.215.0/24 maxlen: 24 185.205.207.0/24 maxlen: 24 185.208.153.0/24 maxlen: 24 185.208.154.0/24 maxlen: 24 185.230.120.0/24 maxlen: 24 185.230.121.0/24 maxlen: 24 185.230.123.0/24 maxlen: 24 192.145.69.0/24 maxlen: 24 212.60.13.0/24 maxlen: 24 2a0a:8f40:1c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:91:d6:e6:c8:ff:06:cf:eb:4f:6d:38:af:b8:79:12:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 6 05:45:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=727efe85cad1362ad5327edfb950a191de60387d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ed:a3:b1:d5:87:1b:fa:0c:c3:2f:d5:ed:0d: 21:55:fe:cb:ef:a7:e7:dd:63:b0:7a:1d:71:8c:43: eb:15:4f:63:14:d7:3b:f8:6e:65:21:47:94:5e:40: a4:3c:16:08:b8:f0:86:8b:73:fa:4d:dd:9a:5f:7e: b8:1a:53:72:11:32:f6:bc:6f:79:a1:8e:40:e2:18: aa:ce:de:1a:15:85:3c:fd:7b:f5:ee:ba:36:52:e7: c9:e8:20:cb:5b:2c:d5:1b:ab:22:7b:16:29:b5:d0: 9f:03:a5:8c:99:b3:1b:05:ab:03:22:b6:6e:91:04: 28:ff:27:31:db:04:8a:b0:cb:18:2f:19:39:03:6e: a4:52:f2:d3:2e:7f:3d:f5:be:69:d8:58:7f:c5:18: ce:b7:d6:e0:41:53:ec:ee:52:fe:6b:05:22:f4:71: 57:cf:b6:aa:be:55:80:60:6b:f9:c2:6e:a0:7c:93: 40:b6:01:51:00:a6:d6:aa:16:35:55:f4:0a:9d:75: fe:e1:e9:da:3f:cc:a4:6d:38:18:46:11:ff:94:4a: c2:fd:12:57:6e:41:d3:17:f0:f7:9b:e4:9b:25:33: fb:31:bc:e3:95:b5:b2:93:2e:88:c4:07:62:24:f2: 41:b7:ee:a0:84:f4:2e:c6:85:52:62:40:bb:15:cd: fb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7E:FE:85:CA:D1:36:2A:D5:32:7E:DF:B9:50:A1:91:DE:60:38:7D X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/cn7-hcrRNirVMn7fuVChkd5gOH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.184.0/24 5.182.196.0/23 79.98.183.0/24 92.249.30.0/24 103.130.179.0/24 103.210.13.0/24 147.78.207.0/24 185.52.138.0/24 185.187.213.0-185.187.215.255 185.205.207.0/24 185.208.153.0-185.208.154.255 185.230.120.0/23 185.230.123.0/24 192.145.69.0/24 212.60.13.0/24 IPv6: 2a0a:8f40:1c::/48 Signature Algorithm: sha256WithRSAEncryption 29:67:26:af:df:08:22:a2:e9:e6:80:25:f9:2f:d5:71:76:4e: b5:ca:0a:f0:69:4e:71:cd:e3:0c:75:64:7d:a0:28:b3:81:35: ae:39:1a:92:d4:b0:17:37:13:03:7a:48:0a:09:dd:16:0f:89: 6e:39:49:a5:a7:a5:f7:fc:72:7a:de:7f:cc:36:22:7d:e4:e6: 37:8f:76:1d:66:f7:87:cc:23:6e:09:45:56:05:70:cd:5b:52: 6f:8e:db:c9:d7:10:be:79:79:ac:3f:88:2e:a7:4a:20:92:f0: e1:69:eb:99:b3:2d:0b:6e:fe:65:fb:d3:21:20:35:ae:11:2f: 66:49:cc:ff:77:7a:db:33:37:6d:8a:a4:9e:7e:07:82:79:67: 7c:73:44:31:e6:18:d7:eb:4b:98:4c:2e:1f:e0:47:56:ff:2a: b3:fd:d9:a5:e8:64:b4:b5:15:b2:10:11:eb:c1:7c:60:41:37: 1e:33:33:7c:35:9e:8e:bb:e0:a1:aa:c7:b3:f7:6e:4a:16:61: 80:02:eb:cc:15:ca:ee:68:85:5a:b5:f7:c7:96:52:31:c9:10: e8:25:05:bc:59:89:36:68:f3:15:48:c5:87:53:be:aa:e7:91: 6d:f4:3f:ea:bc:d1:b3:26:82:17:c6:8a:b6:f8:12:8b:44:fa: ea:c3:26:4c -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZuR1ubI/wbP609tOK+4eRJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTA2MDU0NTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjdlZmU4NWNhZDEzNjJhZDUzMjdlZGZiOTUwYTE5MWRlNjAzODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO2jsdWHG/oMwy/V7Q0hVf7L76fn 3WOweh1xjEPrFU9jFNc7+G5lIUeUXkCkPBYIuPCGi3P6Td2aX364GlNyETL2vG95 oY5A4hiqzt4aFYU8/Xv17ro2UufJ6CDLWyzVG6siexYptdCfA6WMmbMbBasDIrZu kQQo/ycx2wSKsMsYLxk5A26kUvLTLn899b5p2Fh/xRjOt9bgQVPs7lL+awUi9HFX z7aqvlWAYGv5wm6gfJNAtgFRAKbWqhY1VfQKnXX+4enaP8ykbTgYRhH/lErC/RJX bkHTF/D3m+SbJTP7MbzjlbWyky6IxAdiJPJBt+6ghPQuxoVSYkC7Fc37WwIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFHJ+/oXK0TYq1TJ+37lQoZHeYDh9MB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvY243LWhjclJOaXJWTW43ZnVWQ2hrZDVnT0gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzBwBAIAATBqAwQABba4 AwQBBbbEAwQAT2K3AwQAXPkeAwQAZ4KzAwQAZ9INAwQAk07PAwQAuTSKMAwDBAC5 u9UDBAO5u9ADBAC5zc8wDAMEALnQmQMEALnQmgMEAbnmeAMEALnmewMEAMCRRQME ANQ8DTAPBAIAAjAJAwcAKgqPQAAcMA0GCSqGSIb3DQEBCwUAA4IBAQApZyav3wgi ounmgCX5L9Vxdk61ygrwaU5xzeMMdWR9oCizgTWuORqS1LAXNxMDekgKCd0WD4lu OUmlp6X3/HJ63n/MNiJ95OY3j3YdZveHzCNuCUVWBXDNW1JvjtvJ1xC+eXmsP4gu p0ogkvDhaeuZsy0Lbv5l+9MhIDWuES9mScz/d3rbMzdtiqSefgeCeWd8c0Qx5hjX 60uYTC4f4EdW/yqz/dml6GS0tRWyEBHrwXxgQTceMzN8NZ6Ou+Chqsez925KFmGA AuvMFcruaIVatffHllIxyRDoJQW8WYk2aPMVSMWHU76q55Ft9D/qvNGzJoIXxoq2 +BKLRPrqwyZM -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:56 2026 by rpki-client