This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/7ZSQXgt-PmtduDM7YooPy16ZmCA.roa File: 7ZSQXgt-PmtduDM7YooPy16ZmCA.roa (raw, json) Hash identifier: 4ZKvXpP93XbeUM0ug27/05HPgIPnBDcdNtO2BcvXF/8= Subject key identifier: ED:94:90:5E:0B:7E:3E:6B:5D:B8:33:3B:62:8A:0F:CB:5E:99:98:20 Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b Certificate serial: 019AD89979E8E9E372C7ED57BC012AE3AA2C Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/7ZSQXgt-PmtduDM7YooPy16ZmCA.roa Signing time: Mon 01 Dec 2025 06:28:48 +0000 ROA not before: Mon 01 Dec 2025 06:28:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49628 IP address blocks: 5.187.8.0/21 maxlen: 21 5.187.8.0/24 maxlen: 24 5.187.9.0/24 maxlen: 24 5.187.10.0/24 maxlen: 24 5.187.11.0/24 maxlen: 24 5.187.12.0/24 maxlen: 24 5.187.13.0/24 maxlen: 24 5.187.15.0/24 maxlen: 24 37.75.128.0/21 maxlen: 21 78.40.104.0/22 maxlen: 22 78.40.104.0/24 maxlen: 24 78.40.105.0/24 maxlen: 24 78.40.106.0/24 maxlen: 24 78.40.107.0/24 maxlen: 24 185.46.176.0/22 maxlen: 22 185.46.176.0/24 maxlen: 24 185.46.177.0/24 maxlen: 24 185.46.178.0/24 maxlen: 24 185.46.179.0/24 maxlen: 24 185.81.92.0/22 maxlen: 22 185.81.92.0/24 maxlen: 24 185.81.93.0/24 maxlen: 24 185.81.94.0/24 maxlen: 24 185.81.95.0/24 maxlen: 24 185.168.224.0/22 maxlen: 22 185.168.224.0/24 maxlen: 24 185.168.225.0/24 maxlen: 24 185.168.226.0/24 maxlen: 24 185.168.227.0/24 maxlen: 24 188.227.192.0/22 maxlen: 22 188.227.192.0/24 maxlen: 24 188.227.193.0/24 maxlen: 24 188.227.194.0/24 maxlen: 24 188.227.195.0/24 maxlen: 24 193.176.212.0/22 maxlen: 22 193.176.212.0/24 maxlen: 24 193.176.213.0/24 maxlen: 24 193.176.214.0/24 maxlen: 24 193.176.215.0/24 maxlen: 24 2a0a:2900::/29 maxlen: 29 2a0a:2907:ffff:1000::/64 maxlen: 64 2a0a:2907:ffff:1100::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:99:79:e8:e9:e3:72:c7:ed:57:bc:01:2a:e3:aa:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b Validity Not Before: Dec 1 06:28:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed94905e0b7e3e6b5db8333b628a0fcb5e999820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:c5:5a:03:c3:60:03:ff:f8:c3:6a:2c:cb: a7:6f:02:e8:10:99:29:4e:8f:48:1d:3c:b6:19:f3: e8:d7:71:31:41:b5:6e:4b:95:eb:d2:fa:68:84:43: fb:91:c8:6a:67:1c:b9:21:ca:cf:66:67:10:d3:be: 7b:bd:2a:ab:fb:15:93:2d:95:c5:3a:56:b6:30:b9: fa:67:7f:60:34:7a:ee:1f:9e:13:53:d1:6a:5b:47: 23:b5:20:8b:d8:95:ba:66:d0:68:66:80:15:e4:b0: 8e:28:94:22:90:29:71:1a:fe:0f:4e:31:26:1f:73: 15:95:3d:11:3f:4d:12:20:e3:84:13:29:1d:0b:a5: 44:6b:3b:3b:7b:2b:c0:ad:6e:b4:e2:55:19:96:e1: 67:8c:08:24:a5:03:42:8e:5c:e0:60:91:85:ca:d8: 2f:cc:4b:85:67:6b:a9:d7:51:94:12:2b:7d:7b:21: 8c:de:53:81:89:bb:1a:48:8e:f9:05:3c:29:48:47: 05:3c:dd:dc:70:51:56:3a:11:87:0a:ae:7c:78:1a: 01:c2:8c:a4:14:43:9d:39:05:1a:7c:db:90:33:8d: eb:7d:4e:b8:ab:5f:61:2e:80:05:ae:b0:6b:75:a2: 3a:a2:75:80:7e:38:5f:28:9c:72:09:f4:b0:6a:82: 55:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:94:90:5E:0B:7E:3E:6B:5D:B8:33:3B:62:8A:0F:CB:5E:99:98:20 X509v3 Authority Key Identifier: keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/7ZSQXgt-PmtduDM7YooPy16ZmCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.187.8.0/21 37.75.128.0/21 78.40.104.0/22 185.46.176.0/22 185.81.92.0/22 185.168.224.0/22 188.227.192.0/22 193.176.212.0/22 IPv6: 2a0a:2900::/29 Signature Algorithm: sha256WithRSAEncryption 06:ff:f6:c5:74:17:e5:d9:c9:f2:de:99:ce:90:e1:a6:71:45: dd:c9:7d:b6:84:f2:5a:18:80:70:a5:cb:fb:0e:e2:ff:30:5a: e5:29:22:06:3f:54:10:2b:47:3f:02:fa:98:bd:10:d8:25:22: 15:1a:da:87:cc:69:ac:fa:35:b9:5b:02:df:0c:7f:21:fe:39: 7d:6a:c5:f3:a7:95:88:b8:cf:b9:fb:ed:c0:be:43:08:f3:4b: c4:f4:70:36:60:b6:02:38:4e:05:c0:bc:05:45:d5:03:3f:a5: 68:70:42:20:98:f9:ed:f7:f0:83:05:ee:d8:22:79:45:f7:52: 42:c1:5e:fe:d0:da:a4:17:62:73:c2:22:cc:5d:9b:b4:e3:cf: 47:8d:9f:57:ab:6a:70:52:ac:41:27:4f:37:c5:ad:f1:3d:87: 04:c3:3c:64:45:64:66:c9:3f:f6:26:a6:d3:c9:e2:da:7a:5b: 77:84:09:24:66:c3:4a:f7:cc:62:a8:23:86:cc:ec:2c:c8:e5: b3:8f:b0:ef:11:c2:0e:cb:0a:a8:37:57:20:91:9a:9a:b9:54: 37:bb:ee:c2:0e:88:df:85:4e:c7:ee:89:46:95:ea:ca:f7:48: 9d:48:e4:f4:02:e4:d4:d3:4a:8d:5c:55:56:40:10:ba:bc:03: 6a:6a:98:24 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZrYmXno6eNyx+1XvAEq46osMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjkzNjI2NmU5ODBkZDIwM2IyY2JlYjFjOWM0NTcwNjA0 YjkxMWIwHhcNMjUxMjAxMDYyODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDk0OTA1ZTBiN2UzZTZiNWRiODMzM2I2MjhhMGZjYjVlOTk5ODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQDFWgPDYAP/+MNqLMunbwLoEJkp To9IHTy2GfPo13ExQbVuS5Xr0vpohEP7kchqZxy5IcrPZmcQ0757vSqr+xWTLZXF Ola2MLn6Z39gNHruH54TU9FqW0cjtSCL2JW6ZtBoZoAV5LCOKJQikClxGv4PTjEm H3MVlT0RP00SIOOEEykdC6VEazs7eyvArW604lUZluFnjAgkpQNCjlzgYJGFytgv zEuFZ2up11GUEit9eyGM3lOBibsaSI75BTwpSEcFPN3ccFFWOhGHCq58eBoBwoyk FEOdOQUafNuQM43rfU64q19hLoAFrrBrdaI6onWAfjhfKJxyCfSwaoJVXQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFO2UkF4Lfj5rXbgzO2KKD8temZggMB8GA1UdIwQY MBaAFFhpNiZumA3SA7LL6xycRXBgS5EbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80YzY2Y2MtZmE5YS00ZjU4LWFkMjEt N2RhMTgzZWZmMTE1LzEvN1pTUVhndC1QbXRkdURNN1lvb1B5MTZabUNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS80YzY2Y2MtZmE5YS00ZjU4LWFkMjEtN2RhMTgzZWZmMTE1 LzEvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQDBbsIAwQD JUuAAwQCTihoAwQCuS6wAwQCuVFcAwQCuajgAwQCvOPAAwQCwbDUMA0EAgACMAcD BQMqCikAMA0GCSqGSIb3DQEBCwUAA4IBAQAG//bFdBfl2cny3pnOkOGmcUXdyX22 hPJaGIBwpcv7DuL/MFrlKSIGP1QQK0c/AvqYvRDYJSIVGtqHzGms+jW5WwLfDH8h /jl9asXzp5WIuM+5++3AvkMI80vE9HA2YLYCOE4FwLwFRdUDP6VocEIgmPnt9/CD Be7YInlF91JCwV7+0NqkF2JzwiLMXZu0489HjZ9Xq2pwUqxBJ083xa3xPYcEwzxk RWRmyT/2JqbTyeLaelt3hAkkZsNK98xiqCOGzOwsyOWzj7DvEcIOywqoN1cgkZqa uVQ3u+7CDojfhU7H7olGlerK90idSOT0AuTU00qNXFVWQBC6vANqapgk -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:50 2025 by rpki-client