This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OerUQeLc_7aUdDrhkQEAhmLDNqg.roa File: OerUQeLc_7aUdDrhkQEAhmLDNqg.roa (raw, json) Hash identifier: ZF4I5O2BGZEY7/HhhiPThYOwrK5+5hM8WcNHXjhLaNw= Subject key identifier: 39:EA:D4:41:E2:DC:FF:B6:94:74:3A:E1:91:01:00:86:62:C3:36:A8 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE514C1DC775018BBA612C491AFE19 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OerUQeLc_7aUdDrhkQEAhmLDNqg.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29278 IP address blocks: 79.172.196.0/24 maxlen: 24 79.172.199.0/24 maxlen: 24 79.172.203.0/24 maxlen: 24 79.172.209.0/24 maxlen: 24 79.172.211.0/24 maxlen: 24 79.172.213.0/24 maxlen: 24 79.172.216.0/24 maxlen: 24 79.172.225.0/24 maxlen: 24 79.172.236.0/24 maxlen: 24 79.172.238.0/24 maxlen: 24 79.172.240.0/24 maxlen: 24 79.172.241.0/24 maxlen: 24 79.172.243.0/24 maxlen: 24 79.172.248.0/24 maxlen: 24 79.172.253.0/24 maxlen: 24 79.172.255.0/24 maxlen: 24 84.21.0.0/19 maxlen: 19 84.21.7.0/24 maxlen: 24 84.21.8.0/24 maxlen: 24 84.21.18.0/24 maxlen: 24 84.21.19.0/24 maxlen: 24 87.229.15.0/24 maxlen: 24 87.229.26.0/24 maxlen: 24 87.229.32.0/24 maxlen: 24 87.229.33.0/24 maxlen: 24 87.229.45.0/24 maxlen: 24 87.229.53.0/24 maxlen: 24 87.229.54.0/24 maxlen: 24 87.229.55.0/24 maxlen: 24 87.229.58.0/24 maxlen: 24 87.229.59.0/24 maxlen: 24 87.229.65.0/24 maxlen: 24 87.229.66.0/24 maxlen: 24 87.229.73.0/24 maxlen: 24 87.229.74.0/23 maxlen: 23 87.229.78.0/24 maxlen: 24 87.229.83.0/24 maxlen: 24 87.229.93.0/24 maxlen: 24 87.229.94.0/24 maxlen: 24 87.229.96.0/24 maxlen: 24 87.229.105.0/24 maxlen: 24 87.229.113.0/24 maxlen: 24 87.229.114.0/24 maxlen: 24 87.229.116.0/24 maxlen: 24 87.229.118.0/24 maxlen: 24 87.229.121.0/24 maxlen: 24 95.138.192.0/21 maxlen: 21 178.238.208.0/20 maxlen: 20 178.238.208.0/21 maxlen: 21 178.238.214.0/24 maxlen: 24 178.238.216.0/21 maxlen: 21 213.181.196.0/24 maxlen: 24 213.181.197.0/24 maxlen: 24 213.181.198.0/24 maxlen: 24 213.181.200.0/24 maxlen: 24 213.181.204.0/24 maxlen: 24 213.181.207.0/24 maxlen: 24 213.181.210.0/24 maxlen: 24 213.181.219.0/24 maxlen: 24 213.181.221.0/24 maxlen: 24 217.113.50.0/24 maxlen: 24 217.113.51.0/24 maxlen: 24 217.113.52.0/24 maxlen: 24 217.113.59.0/24 maxlen: 24 217.113.61.0/24 maxlen: 24 217.113.63.0/24 maxlen: 24 217.144.48.0/23 maxlen: 23 217.144.50.0/24 maxlen: 24 217.144.56.0/21 maxlen: 21 217.144.62.0/24 maxlen: 24 2a02:730::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:51:4c:1d:c7:75:01:8b:ba:61:2c:49:1a:fe:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39ead441e2dcffb694743ae19101008662c336a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c6:d3:e8:cb:10:2a:a8:72:83:94:95:cc:b5: dc:61:f1:89:33:f2:39:7a:8a:00:a8:7a:d5:80:f2: 2f:30:4c:9a:ba:b9:f8:62:73:61:37:c3:26:e1:dd: e1:f8:65:42:e3:d6:a2:ed:9a:f1:7b:f6:49:9b:10: 03:e9:3e:6e:18:0b:95:40:ea:47:da:a3:15:f4:02: 88:a8:3b:17:c1:63:95:1e:52:1f:33:6d:ea:45:54: d7:33:47:13:47:10:48:ce:fd:05:62:d2:d6:07:fc: b2:52:49:cc:55:65:f2:49:fe:11:6b:8b:93:48:4e: cf:67:d3:7c:bd:7f:5c:af:66:4b:94:a1:3a:96:1b: 56:2e:f5:fe:9c:a0:a0:0e:2c:3c:c9:96:4d:9b:68: ea:96:b8:1f:d6:5e:9d:37:c2:76:df:86:e8:4a:2b: 98:b1:e7:26:c8:b0:42:67:d9:db:47:26:d6:4f:6d: 41:e6:1a:1b:7b:1c:23:60:3d:3f:b2:63:bc:7f:a2: f2:29:74:07:41:87:3a:5c:89:74:49:5c:6d:c6:ca: 83:f0:ac:9f:cc:88:cf:e8:eb:70:38:bc:ff:cb:59: 62:38:32:e3:ec:59:9b:fb:76:9b:14:e9:dc:2f:2e: d4:70:5b:7b:c5:c6:05:64:c2:1f:83:12:23:1d:45: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EA:D4:41:E2:DC:FF:B6:94:74:3A:E1:91:01:00:86:62:C3:36:A8 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/OerUQeLc_7aUdDrhkQEAhmLDNqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.196.0/24 79.172.199.0/24 79.172.203.0/24 79.172.209.0/24 79.172.211.0/24 79.172.213.0/24 79.172.216.0/24 79.172.225.0/24 79.172.236.0/24 79.172.238.0/24 79.172.240.0/23 79.172.243.0/24 79.172.248.0/24 79.172.253.0/24 79.172.255.0/24 84.21.0.0/19 87.229.15.0/24 87.229.26.0/24 87.229.32.0/23 87.229.45.0/24 87.229.53.0-87.229.55.255 87.229.58.0/23 87.229.65.0-87.229.66.255 87.229.73.0-87.229.75.255 87.229.78.0/24 87.229.83.0/24 87.229.93.0-87.229.94.255 87.229.96.0/24 87.229.105.0/24 87.229.113.0-87.229.114.255 87.229.116.0/24 87.229.118.0/24 87.229.121.0/24 95.138.192.0/21 178.238.208.0/20 213.181.196.0-213.181.198.255 213.181.200.0/24 213.181.204.0/24 213.181.207.0/24 213.181.210.0/24 213.181.219.0/24 213.181.221.0/24 217.113.50.0-217.113.52.255 217.113.59.0/24 217.113.61.0/24 217.113.63.0/24 217.144.48.0-217.144.50.255 217.144.56.0/21 IPv6: 2a02:730::/32 Signature Algorithm: sha256WithRSAEncryption 42:25:ae:34:8c:2a:bf:e8:1e:44:6b:10:69:a5:85:39:d4:22: 90:fa:04:64:a0:85:d1:d9:ea:42:c6:c5:a1:5c:2d:95:ea:5c: 86:be:33:e8:13:b6:d8:96:3d:2b:3c:a8:ae:5d:96:3e:4e:0c: 94:b1:b7:e2:51:37:4d:23:52:8a:34:21:80:aa:2a:04:99:b1: 39:26:00:65:aa:48:dd:14:61:c7:e7:e5:62:ad:af:20:ca:4b: 53:af:f0:04:f3:83:7f:97:0e:4c:59:7e:82:49:85:ce:d6:54: 65:75:fd:02:4a:88:88:c6:29:05:b2:2f:5f:29:2d:84:c1:7c: 61:64:8e:71:a6:bd:ab:04:d4:06:94:70:60:6d:d1:e4:3a:ec: d4:eb:3f:5c:ce:35:70:03:66:24:33:08:36:ac:b8:08:36:44: 37:4b:2f:4e:f4:ea:9e:9f:14:0b:56:57:73:db:9a:f7:a7:30: c1:a0:38:0f:a1:80:34:2f:19:f8:21:2d:23:86:dc:62:05:11: 2e:06:08:05:ab:5f:76:67:3c:d8:a6:a1:9a:9b:46:3f:11:38: 20:ed:0d:ac:cc:1a:82:06:cb:57:67:98:1c:6f:34:45:c6:8e: 61:24:ee:93:a2:24:2f:fa:80:2c:f6:4a:69:cd:9a:be:14:b6: 87:24:29:d7 -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgISAZt87lFMHcd1AYu6YSxJGv4ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWVhZDQ0MWUyZGNmZmI2OTQ3NDNhZTE5MTAxMDA4NjYyYzMzNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sbT6MsQKqhyg5SVzLXcYfGJM/I5 eooAqHrVgPIvMEyaurn4YnNhN8Mm4d3h+GVC49ai7Zrxe/ZJmxAD6T5uGAuVQOpH 2qMV9AKIqDsXwWOVHlIfM23qRVTXM0cTRxBIzv0FYtLWB/yyUknMVWXySf4Ra4uT SE7PZ9N8vX9cr2ZLlKE6lhtWLvX+nKCgDiw8yZZNm2jqlrgf1l6dN8J234boSiuY secmyLBCZ9nbRybWT21B5hobexwjYD0/smO8f6LyKXQHQYc6XIl0SVxtxsqD8Kyf zIjP6OtwOLz/y1liODLj7Fmb+3abFOncLy7UcFt7xcYFZMIfgxIjHUVdJwIDAQAB o4IDfDCCA3gwHQYDVR0OBBYEFDnq1EHi3P+2lHQ64ZEBAIZiwzaoMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvT2VyVVFlTGNfN2FVZERyaGtRRUFobUxETnFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBkAYIKwYBBQUHAQcBAf8EggF/MIIBezCCAWgEAgABMIIB YAMEAE+sxAMEAE+sxwMEAE+sywMEAE+s0QMEAE+s0wMEAE+s1QMEAE+s2AMEAE+s 4QMEAE+s7AMEAE+s7gMEAU+s8AMEAE+s8wMEAE+s+AMEAE+s/QMEAE+s/wMEBVQV AAMEAFflDwMEAFflGgMEAVflIAMEAFflLTAMAwQAV+U1AwQDV+UwAwQBV+U6MAwD BABX5UEDBABX5UIwDAMEAFflSQMEAlflSAMEAFflTgMEAFflUzAMAwQAV+VdAwQA V+VeAwQAV+VgAwQAV+VpMAwDBABX5XEDBABX5XIDBABX5XQDBABX5XYDBABX5XkD BANfisADBASy7tAwDAMEAtW1xAMEANW1xgMEANW1yAMEANW1zAMEANW1zwMEANW1 0gMEANW12wMEANW13TAMAwQB2XEyAwQA2XE0AwQA2XE7AwQA2XE9AwQA2XE/MAwD BATZkDADBADZkDIDBAPZkDgwDQQCAAIwBwMFACoCBzAwDQYJKoZIhvcNAQELBQAD ggEBAEIlrjSMKr/oHkRrEGmlhTnUIpD6BGSghdHZ6kLGxaFcLZXqXIa+M+gTttiW PSs8qK5dlj5ODJSxt+JRN00jUoo0IYCqKgSZsTkmAGWqSN0UYcfn5WKtryDKS1Ov 8ATzg3+XDkxZfoJJhc7WVGV1/QJKiIjGKQWyL18pLYTBfGFkjnGmvasE1AaUcGBt 0eQ67NTrP1zONXADZiQzCDasuAg2RDdLL0706p6fFAtWV3PbmvenMMGgOA+hgDQv GfghLSOG3GIFES4GCAWrX3ZnPNimoZqbRj8ROCDtDazMGoIGy1dnmBxvNEXGjmEk 7pOiJC/6gCz2SmnNmr4UtockKdc= -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:48 2026 by rpki-client