This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/p7BVCU62BRURJnqp18vcgZBi9lA.roa File: p7BVCU62BRURJnqp18vcgZBi9lA.roa (raw, json) Hash identifier: DLOPi5ESV+e2DHMAV+0PXNX8prnnrufqQAKqkUfKYls= Subject key identifier: A7:B0:55:09:4E:B6:05:15:11:26:7A:A9:D7:CB:DC:81:90:62:F6:50 Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Certificate serial: 019B7BA50970F26FDDDDFB69EBED84AC3D0F Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/p7BVCU62BRURJnqp18vcgZBi9lA.roa Signing time: Thu 01 Jan 2026 22:19:31 +0000 ROA not before: Thu 01 Jan 2026 22:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13285 IP address blocks: 2.96.0.0/13 maxlen: 24 62.24.128.0/17 maxlen: 24 62.241.160.0/19 maxlen: 24 78.144.0.0/13 maxlen: 24 79.77.0.0/16 maxlen: 24 79.78.0.0/15 maxlen: 24 80.40.0.0/13 maxlen: 24 81.1.64.0/18 maxlen: 24 81.86.0.0/16 maxlen: 24 81.178.0.0/15 maxlen: 24 83.67.0.0/16 maxlen: 24 84.43.0.0/17 maxlen: 24 87.242.128.0/17 maxlen: 24 89.168.128.0/17 maxlen: 24 89.240.0.0/14 maxlen: 24 92.16.0.0/12 maxlen: 24 145.255.240.0/21 maxlen: 24 185.24.12.0/22 maxlen: 24 185.173.120.0/22 maxlen: 24 185.175.48.0/22 maxlen: 24 185.175.144.0/22 maxlen: 24 193.218.99.0/24 maxlen: 24 194.106.32.0/19 maxlen: 24 194.247.224.0/19 maxlen: 24 195.112.0.0/18 maxlen: 24 195.137.0.0/17 maxlen: 24 195.149.0.0/18 maxlen: 24 212.1.128.0/19 maxlen: 24 212.67.96.0/19 maxlen: 24 212.74.96.0/19 maxlen: 24 212.139.0.0/16 maxlen: 24 212.159.128.0/18 maxlen: 24 213.78.0.0/16 maxlen: 24 2001:7e0::/32 maxlen: 32 2001:4a00::/27 maxlen: 27 2a00:4340::/32 maxlen: 32 2a0b:db00::/29 maxlen: 29 2a0b:e900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:09:70:f2:6f:dd:dd:fb:69:eb:ed:84:ac:3d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Validity Not Before: Jan 1 22:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7b055094eb6051511267aa9d7cbdc819062f650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d3:28:ad:0d:ce:aa:be:5d:0a:83:1d:6c:d1: 3d:db:f9:fd:ea:26:e7:58:77:06:75:ae:57:8f:d6: 71:bd:1e:69:d1:33:aa:0b:41:ae:18:99:64:d7:8a: ff:35:c7:68:7a:e4:27:73:cd:fb:ef:5e:11:49:43: 43:5e:c7:91:4f:4f:a8:bd:7e:93:cd:ec:55:17:96: ac:78:02:87:e8:1f:fa:dc:90:dc:93:4c:cf:81:58: c6:1c:05:34:ca:3d:eb:77:48:e3:4c:b5:57:fe:5c: 4b:21:d3:57:c1:30:84:23:a6:78:dd:22:a1:9f:8c: 59:93:d4:37:7a:5e:49:bc:b7:c9:5a:6c:6f:78:ff: fe:43:e0:a1:25:9e:8b:00:a8:31:7a:dd:1a:9e:27: a9:b5:5a:1e:90:21:02:21:db:d1:3d:72:66:d8:af: 71:07:92:a7:69:17:cd:5f:ca:86:4d:b8:7a:47:94: 8a:c3:8c:00:59:9e:96:d2:9b:bb:76:0b:c2:6e:b3: 32:46:8f:fa:17:74:df:73:60:de:75:fe:c7:65:6a: 1c:ea:ed:c7:8b:c6:71:4f:31:cf:2d:73:e9:20:b3: e2:6e:0f:e5:82:c7:eb:93:c0:50:c1:18:ff:0d:e5: 34:08:ae:f7:55:aa:66:ab:20:2b:8e:df:94:2c:45: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B0:55:09:4E:B6:05:15:11:26:7A:A9:D7:CB:DC:81:90:62:F6:50 X509v3 Authority Key Identifier: keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/p7BVCU62BRURJnqp18vcgZBi9lA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.96.0.0/13 62.24.128.0/17 62.241.160.0/19 78.144.0.0/13 79.77.0.0-79.79.255.255 80.40.0.0/13 81.1.64.0/18 81.86.0.0/16 81.178.0.0/15 83.67.0.0/16 84.43.0.0/17 87.242.128.0/17 89.168.128.0/17 89.240.0.0/14 92.16.0.0/12 145.255.240.0/21 185.24.12.0/22 185.173.120.0/22 185.175.48.0/22 185.175.144.0/22 193.218.99.0/24 194.106.32.0/19 194.247.224.0/19 195.112.0.0/18 195.137.0.0/17 195.149.0.0/18 212.1.128.0/19 212.67.96.0/19 212.74.96.0/19 212.139.0.0/16 212.159.128.0/18 213.78.0.0/16 IPv6: 2001:7e0::/32 2001:4a00::/27 2a00:4340::/32 2a0b:db00::/29 2a0b:e900::/29 Signature Algorithm: sha256WithRSAEncryption a5:4d:87:22:98:c1:da:83:67:eb:01:58:6e:e4:21:9f:93:ce: 0b:72:37:3b:4a:75:38:78:b3:9c:34:46:6c:07:96:65:f3:4a: 24:db:c1:1e:2f:ab:b5:b8:2b:de:31:e8:76:eb:ab:7a:83:bd: b0:3e:fe:f4:42:0f:6d:4b:b3:aa:d3:d8:9f:f5:1d:59:5f:1f: d7:b8:9e:57:7e:27:9a:c9:b7:96:30:a4:2e:29:14:9a:96:17: 9f:0f:8b:be:91:bb:6b:99:a6:4f:b8:96:15:e2:eb:25:21:8a: d6:6e:ee:01:18:c7:47:db:51:69:63:94:16:f8:0e:82:4b:00: 49:c3:92:77:33:e5:65:a4:0e:84:a3:b7:b0:fe:c5:11:69:99: 42:8d:6f:64:f4:83:95:23:fc:a6:65:26:98:3e:f7:1d:a6:20: 70:aa:bc:41:95:b5:7d:50:b4:99:0c:76:11:24:d8:8a:36:3c: 2a:3d:98:97:41:d5:25:9e:eb:88:26:87:46:dd:79:a8:fb:7f: 23:78:a9:36:0c:b0:cf:02:6d:f6:95:06:8f:67:46:53:f2:3c: ff:c2:a9:3b:e5:49:8b:3f:27:c5:2e:28:b4:e6:73:6d:b8:44: 06:4d:53:03:91:ee:3b:51:fe:30:30:75:67:65:4a:4f:85:44: 7d:0d:c7:5b -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt7pQlw8m/d3ftp6+2ErD0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh ZGIzZWMwHhcNMjYwMTAxMjIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2IwNTUwOTRlYjYwNTE1MTEyNjdhYTlkN2NiZGM4MTkwNjJmNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89MorQ3Oqr5dCoMdbNE92/n96ibn WHcGda5Xj9ZxvR5p0TOqC0GuGJlk14r/NcdoeuQnc837714RSUNDXseRT0+ovX6T zexVF5aseAKH6B/63JDck0zPgVjGHAU0yj3rd0jjTLVX/lxLIdNXwTCEI6Z43SKh n4xZk9Q3el5JvLfJWmxveP/+Q+ChJZ6LAKgxet0anieptVoekCECIdvRPXJm2K9x B5KnaRfNX8qGTbh6R5SKw4wAWZ6W0pu7dgvCbrMyRo/6F3Tfc2Dedf7HZWoc6u3H i8ZxTzHPLXPpILPibg/lgsfrk8BQwRj/DeU0CK73VapmqyArjt+ULEXsPQIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFKewVQlOtgUVESZ6qdfL3IGQYvZQMB8GA1UdIwQY MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt MGQ4ZjdkZDhjY2U2LzEvcDdCVkNVNjJCUlVSSm5xcDE4dmNnWkJpOWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2 LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBAYIKwYBBQUHAQcBAf8EgfQwgfEwgcMEAgABMIG8AwMD AmADBAc+GIADBAU+8aADAwNOkDAKAwMAT00DAwRPQAMDA1AoAwQGUQFAAwMAUVYD AwFRsgMDAFNDAwQHVCsAAwQHV/KAAwQHWaiAAwMCWfADAwRcEAMEA5H/8AMEArkY DAMEArmteAMEArmvMAMEArmvkAMEAMHaYwMEBcJqIAMEBcL34AMEBsNwAAMEB8OJ AAMEBsOVAAMEBdQBgAMEBdRDYAMEBdRKYAMDANSLAwQG1J+AAwMA1U4wKQQCAAIw IwMFACABB+ADBQUgAUoAAwUAKgBDQAMFAyoL2wADBQMqC+kAMA0GCSqGSIb3DQEB CwUAA4IBAQClTYcimMHag2frAVhu5CGfk84Lcjc7SnU4eLOcNEZsB5Zl80ok28Ee L6u1uCveMeh266t6g72wPv70Qg9tS7Oq09if9R1ZXx/XuJ5XfieaybeWMKQuKRSa lhefD4u+kbtrmaZPuJYV4uslIYrWbu4BGMdH21FpY5QW+A6CSwBJw5J3M+VlpA6E o7ew/sURaZlCjW9k9IOVI/ymZSaYPvcdpiBwqrxBlbV9ULSZDHYRJNiKNjwqPZiX QdUlnuuIJodG3Xmo+38jeKk2DLDPAm32lQaPZ0ZT8jz/wqk75UmLPyfFLii05nNt uEQGTVMDke47Uf4wMHVnZUpPhUR9Dcdb -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:03 2026 by rpki-client