This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/7j0U09U8nPVWA_pWoa9_2tsVvBk.roa File: 7j0U09U8nPVWA_pWoa9_2tsVvBk.roa (raw, json) Hash identifier: XIgO0Xdn7CbApZ7yUctmVBltpX+/I0jKKa8LxMU3ve8= Subject key identifier: EE:3D:14:D3:D5:3C:9C:F5:56:03:FA:56:A1:AF:7F:DA:DB:15:BC:19 Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa Certificate serial: 018EEFF9717D125371B609A75C7296501445 Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/7j0U09U8nPVWA_pWoa9_2tsVvBk.roa Signing time: Thu 18 Apr 2024 06:51:25 +0000 ROA not before: Thu 18 Apr 2024 06:51:25 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 25229 IP address blocks: 77.120.0.0/20 maxlen: 21 77.120.4.0/24 maxlen: 24 77.120.6.0/24 maxlen: 24 77.120.16.0/20 maxlen: 21 77.120.32.0/20 maxlen: 21 77.120.52.0/22 maxlen: 23 77.120.60.0/22 maxlen: 23 77.120.64.0/21 maxlen: 22 77.120.72.0/21 maxlen: 22 77.120.80.0/20 maxlen: 21 77.120.96.0/19 maxlen: 20 77.120.112.0/22 maxlen: 22 77.120.128.0/18 maxlen: 24 77.120.192.0/21 maxlen: 24 77.120.200.0/21 maxlen: 22 77.120.208.0/21 maxlen: 24 77.120.211.0/24 maxlen: 24 77.120.212.0/23 maxlen: 24 77.120.214.0/23 maxlen: 24 77.120.216.0/22 maxlen: 23 77.120.220.0/22 maxlen: 23 77.120.224.0/20 maxlen: 21 77.120.240.0/20 maxlen: 21 77.120.248.0/21 maxlen: 22 77.121.0.0/21 maxlen: 22 77.121.8.0/22 maxlen: 23 77.121.12.0/24 maxlen: 24 77.121.13.0/24 maxlen: 24 77.121.15.0/24 maxlen: 24 77.121.16.0/24 maxlen: 24 77.121.17.0/24 maxlen: 24 77.121.18.0/24 maxlen: 24 77.121.19.0/24 maxlen: 24 77.121.20.0/24 maxlen: 24 77.121.21.0/24 maxlen: 24 77.121.22.0/24 maxlen: 24 77.121.23.0/24 maxlen: 24 77.121.24.0/24 maxlen: 24 77.121.25.0/24 maxlen: 24 77.121.26.0/24 maxlen: 24 77.121.27.0/24 maxlen: 24 77.121.28.0/24 maxlen: 24 77.121.29.0/24 maxlen: 24 77.121.30.0/24 maxlen: 24 77.121.64.0/21 maxlen: 22 77.121.72.0/21 maxlen: 22 77.121.80.0/20 maxlen: 21 77.121.96.0/19 maxlen: 20 77.121.96.0/20 maxlen: 21 77.121.112.0/20 maxlen: 21 77.121.128.0/20 maxlen: 21 77.121.144.0/20 maxlen: 21 77.121.160.0/19 maxlen: 20 77.121.192.0/19 maxlen: 20 77.121.192.0/20 maxlen: 21 77.121.208.0/21 maxlen: 22 77.121.216.0/21 maxlen: 22 77.121.224.0/19 maxlen: 20 77.122.128.0/17 maxlen: 18 77.123.0.0/18 maxlen: 19 77.123.32.0/19 maxlen: 20 77.123.64.0/19 maxlen: 20 77.123.96.0/21 maxlen: 22 77.123.104.0/21 maxlen: 22 77.123.120.0/21 maxlen: 22 77.123.128.0/19 maxlen: 20 77.123.144.0/22 maxlen: 22 77.123.160.0/19 maxlen: 20 77.244.32.0/20 maxlen: 21 82.144.192.0/19 maxlen: 20 95.69.128.0/20 maxlen: 21 95.69.144.0/21 maxlen: 22 95.69.152.0/22 maxlen: 23 95.69.156.0/22 maxlen: 23 95.69.160.0/19 maxlen: 20 95.69.192.0/20 maxlen: 21 95.69.208.0/20 maxlen: 24 95.69.224.0/21 maxlen: 22 95.69.232.0/24 maxlen: 24 95.69.240.0/21 maxlen: 22 95.69.252.0/24 maxlen: 24 95.69.253.0/24 maxlen: 24 95.69.254.0/24 maxlen: 24 95.69.255.0/24 maxlen: 24 109.201.224.0/24 maxlen: 24 109.201.225.0/24 maxlen: 24 109.201.226.0/24 maxlen: 24 109.201.227.0/24 maxlen: 24 109.201.228.0/22 maxlen: 23 109.201.232.0/22 maxlen: 23 109.201.236.0/23 maxlen: 24 109.201.238.0/23 maxlen: 24 109.201.240.0/20 maxlen: 21 141.170.224.0/23 maxlen: 24 141.170.226.0/23 maxlen: 24 141.170.226.0/24 maxlen: 24 141.170.227.0/24 maxlen: 24 141.170.228.0/24 maxlen: 24 141.170.229.0/24 maxlen: 24 141.170.230.0/24 maxlen: 24 141.170.231.0/24 maxlen: 24 141.170.232.0/24 maxlen: 24 141.170.233.0/24 maxlen: 24 141.170.234.0/23 maxlen: 24 141.170.236.0/24 maxlen: 24 141.170.237.0/24 maxlen: 24 141.170.238.0/24 maxlen: 24 141.170.239.0/24 maxlen: 24 141.170.240.0/22 maxlen: 23 141.170.244.0/22 maxlen: 23 141.170.248.0/21 maxlen: 22 141.170.248.0/23 maxlen: 24 141.170.250.0/23 maxlen: 24 188.230.0.0/21 maxlen: 22 188.230.0.0/22 maxlen: 23 188.230.4.0/23 maxlen: 24 188.230.7.0/24 maxlen: 24 188.230.8.0/21 maxlen: 22 188.230.16.0/21 maxlen: 22 188.230.24.0/23 maxlen: 24 188.230.26.0/23 maxlen: 24 188.230.28.0/22 maxlen: 23 188.230.32.0/21 maxlen: 22 188.230.40.0/21 maxlen: 22 188.230.48.0/21 maxlen: 22 188.230.56.0/21 maxlen: 22 188.230.64.0/21 maxlen: 22 188.230.71.0/24 maxlen: 24 188.230.72.0/24 maxlen: 24 188.230.73.0/24 maxlen: 24 188.230.74.0/23 maxlen: 24 188.230.76.0/24 maxlen: 24 188.230.77.0/24 maxlen: 24 188.230.78.0/23 maxlen: 24 188.230.80.0/21 maxlen: 22 188.230.88.0/22 maxlen: 23 188.230.92.0/23 maxlen: 24 188.230.94.0/24 maxlen: 24 188.230.95.0/24 maxlen: 24 188.230.96.0/23 maxlen: 24 188.230.98.0/24 maxlen: 24 188.230.99.0/24 maxlen: 24 188.230.100.0/24 maxlen: 24 188.230.102.0/24 maxlen: 24 188.230.103.0/24 maxlen: 24 188.230.104.0/24 maxlen: 24 188.230.105.0/24 maxlen: 24 188.230.106.0/24 maxlen: 24 188.230.107.0/24 maxlen: 24 188.230.108.0/24 maxlen: 24 188.230.109.0/24 maxlen: 24 188.230.111.0/24 maxlen: 24 188.230.112.0/24 maxlen: 24 188.230.113.0/24 maxlen: 24 188.230.115.0/24 maxlen: 24 188.230.116.0/23 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:ef:f9:71:7d:12:53:71:b6:09:a7:5c:72:96:50:14:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa Validity Not Before: Apr 18 06:51:25 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=ee3d14d3d53c9cf55603fa56a1af7fdadb15bc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c2:15:41:8e:f1:5e:fc:6e:88:fa:ce:f0:cd: 3f:7d:41:2e:40:48:88:72:97:6f:bb:5d:4a:92:4f: e5:41:6c:43:ba:c6:66:71:7a:91:28:05:6e:bb:d4: ee:ca:f8:2a:00:fc:88:09:f2:b9:29:0d:5d:22:60: 05:6b:1e:3a:45:02:c6:78:3e:9d:d6:d3:13:6d:21: fe:57:27:0d:d4:4b:0a:b6:bf:16:3d:40:ff:06:34: 59:ee:a3:c5:44:7d:01:76:58:64:d6:1e:d6:0a:3d: 01:83:87:7f:d0:0b:67:e0:72:80:ae:a7:45:93:28: c7:cd:22:f6:77:9d:46:4d:62:b6:2d:7c:22:dd:ce: be:70:6e:7e:54:92:42:20:ff:06:b0:0d:93:fe:99: 0f:1f:18:8b:29:ae:80:02:f4:27:03:ff:66:bd:a9: 5f:cf:6f:5e:f2:a2:4a:a5:27:7a:8f:d7:b6:4c:8e: 44:d0:3a:76:58:7d:5f:e5:a2:e1:46:ca:05:42:43: b5:7a:cd:83:b4:8d:63:a2:ec:51:4e:8f:a4:7c:cb: 52:55:00:27:57:21:6c:79:8e:a0:06:5b:ac:56:21: d7:b6:62:6b:cd:ab:84:88:39:4f:2e:40:67:df:ed: 32:d6:d7:4c:62:67:95:1c:f4:fc:15:0b:fb:74:27: b0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3D:14:D3:D5:3C:9C:F5:56:03:FA:56:A1:AF:7F:DA:DB:15:BC:19 X509v3 Authority Key Identifier: keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/7j0U09U8nPVWA_pWoa9_2tsVvBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.120.0.0-77.120.47.255 77.120.52.0/22 77.120.60.0-77.121.13.255 77.121.15.0-77.121.30.255 77.121.64.0-77.121.255.255 77.122.128.0-77.123.111.255 77.123.120.0-77.123.191.255 77.244.32.0/20 82.144.192.0/19 95.69.128.0-95.69.232.255 95.69.240.0/21 95.69.252.0/22 109.201.224.0/19 141.170.224.0/19 188.230.0.0-188.230.100.255 188.230.102.0-188.230.109.255 188.230.111.0-188.230.113.255 188.230.115.0-188.230.117.255 Signature Algorithm: sha256WithRSAEncryption aa:21:5c:47:7d:56:8c:0d:a8:b9:94:22:31:21:dc:82:5d:ef: 27:13:ca:94:d6:32:2a:5d:31:a6:7c:7a:2d:bb:1b:90:a7:a3: 11:6f:68:92:fb:87:a5:18:aa:cc:23:22:1f:49:59:04:13:88: 35:63:af:17:88:fc:12:41:f1:d1:e4:90:b5:d2:01:5d:7a:18: 64:7f:0f:f0:58:ab:98:77:1c:d2:0c:ca:96:7e:6e:c1:6c:1c: 24:6a:76:08:94:5e:f6:94:ea:c8:d7:95:cc:c2:a1:3b:7a:c6: fe:d4:f4:5b:4d:ed:92:26:30:37:1a:82:a8:5e:83:bd:72:e7: 5b:8f:c3:10:d7:d5:06:58:26:04:1c:0f:62:0e:8e:e1:7e:eb: 1e:aa:0c:6f:54:b9:33:24:5a:3f:5d:6d:ed:e3:4b:59:96:3e: 5f:dc:ff:d2:8d:15:8a:1d:d4:21:1c:7c:16:ca:9b:dd:08:ad: fb:60:ec:6d:8b:07:ce:bc:f2:e7:8e:b5:76:c2:1e:dd:b8:70: f2:56:50:5d:73:e5:3f:03:01:9a:2e:02:84:44:e1:52:cc:c3: 45:98:d1:86:ba:50:e0:88:2e:75:20:02:f8:58:de:0e:05:12: cc:95:4e:6f:55:2b:7a:db:57:7d:9d:06:37:c4:bd:d9:43:fd: e7:86:94:66 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgISAY7v+XF9ElNxtgmnXHKWUBRFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWVkYTBhMWU3NDc5YzRjYTc4ZmU0MWM1OGQxN2U5ZDEz YjY3YWEwHhcNMjQwNDE4MDY1MTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTNkMTRkM2Q1M2M5Y2Y1NTYwM2ZhNTZhMWFmN2ZkYWRiMTViYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18IVQY7xXvxuiPrO8M0/fUEuQEiI cpdvu11Kkk/lQWxDusZmcXqRKAVuu9TuyvgqAPyICfK5KQ1dImAFax46RQLGeD6d 1tMTbSH+VycN1EsKtr8WPUD/BjRZ7qPFRH0Bdlhk1h7WCj0Bg4d/0Atn4HKArqdF kyjHzSL2d51GTWK2LXwi3c6+cG5+VJJCIP8GsA2T/pkPHxiLKa6AAvQnA/9mvalf z29e8qJKpSd6j9e2TI5E0Dp2WH1f5aLhRsoFQkO1es2DtI1jouxRTo+kfMtSVQAn VyFseY6gBlusViHXtmJrzauEiDlPLkBn3+0y1tdMYmeVHPT8FQv7dCewzQIDAQAB o4ICyTCCAsUwHQYDVR0OBBYEFO49FNPVPJz1VgP6VqGvf9rbFbwZMB8GA1UdIwQY MBaAFK1e2goedHnEynj+QcWNF+nRO2eqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTIt OTQ0Y2U3ZWViMTU0LzEvN2owVTA5VThuUFZXQV9wV29hOV8ydHNWdkJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9mZWJiMTgtZTc4YS00ZDEyLTgwYTItOTQ0Y2U3ZWViMTU0 LzEvclY3YUNoNTBlY1RLZVA1QnhZMFg2ZEU3WjZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHeBggrBgEFBQcBBwEB/wSBzjCByzCByAQCAAEwgcEwCwMD A014AwQETXggAwQCTXg0MAwDBAJNeDwDBAFNeQwwDAMEAE15DwMEAE15HjALAwQG TXlAAwMBTXgwDAMEB016gAMEBE17YDAMAwQDTXt4AwQGTXuAAwQETfQgAwQFUpDA MAwDBAdfRYADBABfRegDBANfRfADBAJfRfwDBAVtyeADBAWNquAwCwMDAbzmAwQA vOZkMAwDBAG85mYDBAG85mwwDAMEALzmbwMEAbzmcDAMAwQAvOZzAwQBvOZ0MA0G CSqGSIb3DQEBCwUAA4IBAQCqIVxHfVaMDai5lCIxIdyCXe8nE8qU1jIqXTGmfHot uxuQp6MRb2iS+4elGKrMIyIfSVkEE4g1Y68XiPwSQfHR5JC10gFdehhkfw/wWKuY dxzSDMqWfm7BbBwkanYIlF72lOrI15XMwqE7esb+1PRbTe2SJjA3GoKoXoO9cudb j8MQ19UGWCYEHA9iDo7hfuseqgxvVLkzJFo/XW3t40tZlj5f3P/SjRWKHdQhHHwW ypvdCK37YOxtiwfOvPLnjrV2wh7duHDyVlBdc+U/AwGaLgKEROFSzMNFmNGGulDg iC51IAL4WN4OBRLMlU5vVSt621d9nQY3xL3ZQ/3nhpRm -----END CERTIFICATE-----Generated at Sun Dec 21 12:58:58 2025 by rpki-client