This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/7nkssnprFjXAOld7WKHfkEWzNzM.roa File: 7nkssnprFjXAOld7WKHfkEWzNzM.roa (raw, json) Hash identifier: Skwqi1fOlMCKRKFWmUaMkFVWVXCxT4HsubhdV1vB7J0= Subject key identifier: EE:79:2C:B2:7A:6B:16:35:C0:3A:57:7B:58:A1:DF:90:45:B3:37:33 Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019AB062C971B5DDDF463909C69D729CBE2D Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/7nkssnprFjXAOld7WKHfkEWzNzM.roa Signing time: Sun 23 Nov 2025 11:04:15 +0000 ROA not before: Sun 23 Nov 2025 11:04:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 719 IP address blocks: 31.7.16.0/20 maxlen: 20 46.182.112.0/21 maxlen: 21 62.142.0.0/16 maxlen: 16 62.148.192.0/19 maxlen: 19 62.216.96.0/19 maxlen: 19 62.240.64.0/19 maxlen: 19 62.248.128.0/17 maxlen: 17 77.109.192.0/18 maxlen: 18 80.81.160.0/19 maxlen: 19 80.88.176.0/20 maxlen: 20 80.186.0.0/16 maxlen: 16 80.248.96.0/19 maxlen: 19 81.197.0.0/16 maxlen: 16 81.209.0.0/17 maxlen: 17 82.103.192.0/18 maxlen: 18 82.118.192.0/19 maxlen: 19 82.141.64.0/18 maxlen: 18 82.215.192.0/18 maxlen: 18 83.245.128.0/17 maxlen: 17 84.230.0.0/15 maxlen: 15 85.76.0.0/14 maxlen: 14 85.156.0.0/16 maxlen: 16 85.157.0.0/16 maxlen: 16 85.217.0.0/17 maxlen: 17 88.112.0.0/14 maxlen: 14 91.152.0.0/13 maxlen: 13 94.22.0.0/16 maxlen: 16 109.232.80.0/21 maxlen: 21 139.97.0.0/16 maxlen: 16 178.251.56.0/21 maxlen: 21 192.77.120.0/22 maxlen: 22 192.102.32.0/24 maxlen: 24 192.102.36.0/24 maxlen: 24 192.102.37.0/24 maxlen: 24 192.102.38.0/24 maxlen: 24 192.102.39.0/24 maxlen: 24 192.102.40.0/24 maxlen: 24 192.102.41.0/24 maxlen: 24 192.102.42.0/24 maxlen: 24 192.102.49.0/24 maxlen: 24 192.102.50.0/24 maxlen: 24 192.126.1.0/24 maxlen: 24 192.126.23.0/24 maxlen: 24 192.126.24.0/24 maxlen: 24 192.126.35.0/24 maxlen: 24 192.126.44.0/24 maxlen: 24 192.126.46.0/24 maxlen: 24 192.163.32.0/19 maxlen: 19 192.163.64.0/18 maxlen: 18 192.163.128.0/19 maxlen: 19 192.175.45.0/24 maxlen: 24 193.64.0.0/15 maxlen: 15 193.66.0.0/16 maxlen: 16 193.94.0.0/16 maxlen: 16 193.184.0.0/15 maxlen: 15 193.199.0.0/16 maxlen: 16 193.229.0.0/16 maxlen: 16 194.86.0.0/16 maxlen: 16 194.136.0.0/16 maxlen: 16 194.157.0.0/16 maxlen: 16 194.188.0.0/16 maxlen: 16 194.211.0.0/16 maxlen: 16 194.240.0.0/15 maxlen: 15 195.16.192.0/19 maxlen: 19 195.74.0.0/19 maxlen: 19 195.170.128.0/19 maxlen: 19 195.197.0.0/16 maxlen: 16 195.218.64.0/19 maxlen: 19 195.236.0.0/15 maxlen: 15 195.238.192.0/19 maxlen: 19 195.255.0.0/16 maxlen: 16 212.38.224.0/20 maxlen: 20 212.38.240.0/24 maxlen: 24 212.38.241.0/24 maxlen: 24 212.38.242.0/24 maxlen: 24 212.38.243.0/24 maxlen: 24 212.38.244.0/24 maxlen: 24 212.50.192.0/19 maxlen: 19 212.54.0.0/19 maxlen: 19 212.63.0.0/19 maxlen: 19 212.226.0.0/16 maxlen: 16 212.246.0.0/16 maxlen: 16 213.130.224.0/19 maxlen: 19 213.161.32.0/19 maxlen: 19 213.169.0.0/19 maxlen: 19 213.192.128.0/18 maxlen: 18 213.250.64.0/18 maxlen: 18 217.24.96.0/20 maxlen: 20 217.25.96.0/20 maxlen: 20 217.77.192.0/20 maxlen: 20 217.152.0.0/16 maxlen: 16 2001:671::/48 maxlen: 48 2001:671:1::/48 maxlen: 48 2001:671:fc00::/40 maxlen: 40 2001:671:fd00::/40 maxlen: 40 2001:671:fe00::/40 maxlen: 40 2001:671:ff00::/40 maxlen: 40 2001:998::/29 maxlen: 32 2001:9f0::/29 maxlen: 29 2001:1658::/29 maxlen: 29 2a00:1dd0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b0:62:c9:71:b5:dd:df:46:39:09:c6:9d:72:9c:be:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Nov 23 11:04:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee792cb27a6b1635c03a577b58a1df9045b33733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:71:73:8e:63:a2:36:49:54:fe:43:ac:7e: cc:97:71:5d:5f:fa:fd:b0:2b:92:c1:1d:3c:4d:5c: ac:7b:22:e4:db:60:76:e6:aa:e4:e5:e3:2e:34:88: 63:06:04:9f:55:ff:fd:f0:3e:8b:81:93:fd:a8:4f: 95:d4:1f:70:33:e7:9a:81:de:4a:1f:f8:17:df:cd: d2:de:50:82:a9:84:10:b2:50:67:75:ad:69:fb:62: 91:46:42:47:89:08:0e:81:30:49:46:38:a5:81:b6: 28:21:18:f9:20:f5:d8:9c:aa:c5:43:c0:44:af:71: 7c:07:5b:a9:ac:2e:5f:59:f5:b0:b0:7c:39:cd:20: 3f:6d:36:01:72:02:74:19:41:26:47:a6:32:0e:48: d1:1a:40:68:50:32:e4:fc:ca:da:74:69:3d:cc:e0: b2:ce:8c:f8:a5:f5:ad:da:1d:ef:7a:01:ca:c0:54: 11:17:e5:7c:80:bd:ee:e3:a5:47:41:41:21:ed:2f: 74:4a:e5:c4:f5:35:fe:8a:23:5a:bd:68:a2:f6:c6: 78:2a:13:79:0d:5c:4d:e8:5d:16:3f:f3:dc:7a:41: d8:5e:19:5a:3b:ec:89:1d:de:7a:f4:e4:21:9c:5b: 4b:52:ff:2c:f6:a7:b2:9b:2c:02:1f:3a:49:02:0b: 0e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:79:2C:B2:7A:6B:16:35:C0:3A:57:7B:58:A1:DF:90:45:B3:37:33 X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/7nkssnprFjXAOld7WKHfkEWzNzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.16.0/20 46.182.112.0/21 62.142.0.0/16 62.148.192.0/19 62.216.96.0/19 62.240.64.0/19 62.248.128.0/17 77.109.192.0/18 80.81.160.0/19 80.88.176.0/20 80.186.0.0/16 80.248.96.0/19 81.197.0.0/16 81.209.0.0/17 82.103.192.0/18 82.118.192.0/19 82.141.64.0/18 82.215.192.0/18 83.245.128.0/17 84.230.0.0/15 85.76.0.0/14 85.156.0.0/15 85.217.0.0/17 88.112.0.0/14 91.152.0.0/13 94.22.0.0/16 109.232.80.0/21 139.97.0.0/16 178.251.56.0/21 192.77.120.0/22 192.102.32.0/24 192.102.36.0-192.102.42.255 192.102.49.0-192.102.50.255 192.126.1.0/24 192.126.23.0-192.126.24.255 192.126.35.0/24 192.126.44.0/24 192.126.46.0/24 192.163.32.0-192.163.159.255 192.175.45.0/24 193.64.0.0-193.66.255.255 193.94.0.0/16 193.184.0.0/15 193.199.0.0/16 193.229.0.0/16 194.86.0.0/16 194.136.0.0/16 194.157.0.0/16 194.188.0.0/16 194.211.0.0/16 194.240.0.0/15 195.16.192.0/19 195.74.0.0/19 195.170.128.0/19 195.197.0.0/16 195.218.64.0/19 195.236.0.0/15 195.238.192.0/19 195.255.0.0/16 212.38.224.0-212.38.244.255 212.50.192.0/19 212.54.0.0/19 212.63.0.0/19 212.226.0.0/16 212.246.0.0/16 213.130.224.0/19 213.161.32.0/19 213.169.0.0/19 213.192.128.0/18 213.250.64.0/18 217.24.96.0/20 217.25.96.0/20 217.77.192.0/20 217.152.0.0/16 IPv6: 2001:671::/47 2001:671:fc00::/38 2001:998::/29 2001:9f0::/29 2001:1658::/29 2a00:1dd0::/29 Signature Algorithm: sha256WithRSAEncryption 95:36:61:91:9b:02:b1:41:e2:83:73:21:70:4b:34:8e:83:ab: 3c:25:68:33:a8:b7:53:5e:5a:2a:b1:09:c5:d4:fc:91:c8:31: ca:2f:e2:61:0e:38:e7:2a:0b:95:9d:4d:20:fb:dc:76:4c:62: 96:ef:f7:ef:e5:4f:96:a7:ac:1c:c2:72:10:fa:5a:0c:61:20: 23:ef:5a:ae:c6:8f:1e:6b:40:97:d6:8f:65:ca:6b:12:69:eb: 10:c2:a4:79:5f:e0:1a:bd:8b:bd:48:72:47:bb:97:86:dc:c4: 3c:3c:9d:82:b5:35:ac:cd:87:b7:b7:40:38:f3:36:b3:4c:46: dc:cb:dd:78:86:f9:e3:27:d6:a3:3f:f0:54:4c:61:ff:d8:b6: 6a:98:34:98:6d:ee:2b:59:de:ca:b6:94:73:45:4e:88:a5:d7: df:21:ab:3a:f3:ab:eb:cc:9b:e6:74:97:7a:63:a6:16:86:d9: 1a:05:f3:33:21:90:40:fe:3a:ce:60:d9:63:7f:32:69:b9:86: 07:bb:e6:29:9b:36:c5:fd:4c:b4:89:54:4c:77:96:42:ac:7b: 81:09:94:6c:54:1c:c4:c4:d2:53:26:a5:64:ab:24:e5:a0:3c: 57:ef:0a:2e:77:2f:d2:61:9a:7d:7e:24:f4:c6:8f:8b:dc:52: 2d:ad:a7:45 -----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgISAZqwYslxtd3fRjkJxp1ynL4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjUxMTIzMTEwNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTc5MmNiMjdhNmIxNjM1YzAzYTU3N2I1OGExZGY5MDQ1YjMzNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVhxc45jojZJVP5DrH7Ml3FdX/r9 sCuSwR08TVyseyLk22B25qrk5eMuNIhjBgSfVf/98D6LgZP9qE+V1B9wM+eagd5K H/gX383S3lCCqYQQslBnda1p+2KRRkJHiQgOgTBJRjilgbYoIRj5IPXYnKrFQ8BE r3F8B1uprC5fWfWwsHw5zSA/bTYBcgJ0GUEmR6YyDkjRGkBoUDLk/MradGk9zOCy zoz4pfWt2h3vegHKwFQRF+V8gL3u46VHQUEh7S90SuXE9TX+iiNavWii9sZ4KhN5 DVxN6F0WP/PcekHYXhlaO+yJHd569OQhnFtLUv8s9qeymywCHzpJAgsOjwIDAQAB o4IEEjCCBA4wHQYDVR0OBBYEFO55LLJ6axY1wDpXe1ih35BFszczMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvN25rc3NucHJGalhBT2xkN1dLSGZrRVd6TnpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICJgYIKwYBBQUHAQcBAf8EggIVMIICETCCAdgEAgABMIIB 0AMEBB8HEAMEAy62cAMDAD6OAwQFPpTAAwQFPthgAwQFPvBAAwQHPviAAwQGTW3A AwQFUFGgAwQEUFiwAwMAULoDBAVQ+GADAwBRxQMEB1HRAAMEBlJnwAMEBVJ2wAME BlKNQAMEBlLXwAMEB1P1gAMDAVTmAwMCVUwDAwFVnAMEB1XZAAMDAlhwAwMDW5gD AwBeFgMEA23oUAMDAIthAwQDsvs4AwQCwE14AwQAwGYgMAwDBALAZiQDBADAZiow DAMEAMBmMQMEAMBmMgMEAMB+ATAMAwQAwH4XAwQAwH4YAwQAwH4jAwQAwH4sAwQA wH4uMAwDBAXAoyADBAXAo4ADBADAry0wCgMDBsFAAwMAwUIDAwDBXgMDAcG4AwMA wccDAwDB5QMDAMJWAwMAwogDAwDCnQMDAMK8AwMAwtMDAwHC8AMEBcMQwAMEBcNK AAMEBcOqgAMDAMPFAwQFw9pAAwMBw+wDBAXD7sADAwDD/zAMAwQF1CbgAwQA1Cb0 AwQF1DLAAwQF1DYAAwQF1D8AAwMA1OIDAwDU9gMEBdWC4AMEBdWhIAMEBdWpAAME BtXAgAMEBtX6QAMEBNkYYAMEBNkZYAMEBNlNwAMDANmYMDMEAgACMC0DBwEgAQZx AAADBgIgAQZx/AMFAyABCZgDBQMgAQnwAwUDIAEWWAMFAyoAHdAwDQYJKoZIhvcN AQELBQADggEBAJU2YZGbArFB4oNzIXBLNI6DqzwlaDOot1NeWiqxCcXU/JHIMcov 4mEOOOcqC5WdTSD73HZMYpbv9+/lT5anrBzCchD6WgxhICPvWq7Gjx5rQJfWj2XK axJp6xDCpHlf4Bq9i71Icke7l4bcxDw8nYK1NazNh7e3QDjzNrNMRtzL3XiG+eMn 1qM/8FRMYf/YtmqYNJht7itZ3sq2lHNFToil198hqzrzq+vMm+Z0l3pjphaG2RoF 8zMhkED+Os5g2WN/Mmm5hge75imbNsX9TLSJVEx3lkKse4EJlGxUHMTE0lMmpWSr JOWgPFfvCi53L9Jhmn1+JPTGj4vcUi2tp0U= -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:19 2025 by rpki-client