This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qOvBQkdmW5ecl7tp4jbMB6M-xDU.roa File: qOvBQkdmW5ecl7tp4jbMB6M-xDU.roa (raw, json) Hash identifier: f3eO3yVKLze7t3cMfREvj/n1G0Zqmpodubm4D35MulE= Subject key identifier: A8:EB:C1:42:47:66:5B:97:9C:97:BB:69:E2:36:CC:07:A3:3E:C4:35 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019AE8326908B55C2A9C3431C78CCC0BA645 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qOvBQkdmW5ecl7tp4jbMB6M-xDU.roa Signing time: Thu 04 Dec 2025 07:10:09 +0000 ROA not before: Thu 04 Dec 2025 07:10:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29278 IP address blocks: 79.172.196.0/24 maxlen: 24 79.172.199.0/24 maxlen: 24 79.172.203.0/24 maxlen: 24 79.172.209.0/24 maxlen: 24 79.172.211.0/24 maxlen: 24 79.172.213.0/24 maxlen: 24 79.172.216.0/24 maxlen: 24 79.172.225.0/24 maxlen: 24 79.172.236.0/24 maxlen: 24 79.172.238.0/24 maxlen: 24 79.172.240.0/24 maxlen: 24 79.172.241.0/24 maxlen: 24 79.172.243.0/24 maxlen: 24 79.172.248.0/24 maxlen: 24 79.172.253.0/24 maxlen: 24 79.172.255.0/24 maxlen: 24 84.21.0.0/19 maxlen: 19 84.21.7.0/24 maxlen: 24 84.21.8.0/24 maxlen: 24 84.21.18.0/24 maxlen: 24 84.21.19.0/24 maxlen: 24 87.229.15.0/24 maxlen: 24 87.229.26.0/24 maxlen: 24 87.229.32.0/24 maxlen: 24 87.229.33.0/24 maxlen: 24 87.229.45.0/24 maxlen: 24 87.229.51.0/24 maxlen: 24 87.229.53.0/24 maxlen: 24 87.229.54.0/24 maxlen: 24 87.229.55.0/24 maxlen: 24 87.229.58.0/24 maxlen: 24 87.229.59.0/24 maxlen: 24 87.229.65.0/24 maxlen: 24 87.229.66.0/24 maxlen: 24 87.229.73.0/24 maxlen: 24 87.229.74.0/23 maxlen: 23 87.229.78.0/24 maxlen: 24 87.229.83.0/24 maxlen: 24 87.229.93.0/24 maxlen: 24 87.229.94.0/24 maxlen: 24 87.229.96.0/24 maxlen: 24 87.229.105.0/24 maxlen: 24 87.229.113.0/24 maxlen: 24 87.229.114.0/24 maxlen: 24 87.229.116.0/24 maxlen: 24 87.229.118.0/24 maxlen: 24 87.229.121.0/24 maxlen: 24 95.138.192.0/21 maxlen: 21 178.238.208.0/20 maxlen: 20 178.238.208.0/21 maxlen: 21 178.238.214.0/24 maxlen: 24 178.238.216.0/21 maxlen: 21 213.181.196.0/24 maxlen: 24 213.181.197.0/24 maxlen: 24 213.181.198.0/24 maxlen: 24 213.181.200.0/24 maxlen: 24 213.181.204.0/24 maxlen: 24 213.181.207.0/24 maxlen: 24 213.181.210.0/24 maxlen: 24 213.181.219.0/24 maxlen: 24 213.181.221.0/24 maxlen: 24 217.113.50.0/24 maxlen: 24 217.113.51.0/24 maxlen: 24 217.113.52.0/24 maxlen: 24 217.113.59.0/24 maxlen: 24 217.113.61.0/24 maxlen: 24 217.113.63.0/24 maxlen: 24 217.144.48.0/23 maxlen: 23 217.144.50.0/24 maxlen: 24 217.144.56.0/21 maxlen: 21 217.144.62.0/24 maxlen: 24 2a02:730::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:32:69:08:b5:5c:2a:9c:34:31:c7:8c:cc:0b:a6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Dec 4 07:10:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a8ebc14247665b979c97bb69e236cc07a33ec435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:66:b3:3a:ff:20:09:c9:f7:39:3a:3d:65:e2: b6:52:1e:8f:e7:0b:c6:b3:85:ba:9b:7e:cc:c5:ab: 86:a5:f6:3e:ed:d9:87:5a:52:58:de:dc:d7:2f:85: 15:aa:94:9b:27:84:19:4f:3d:0c:2c:8a:7f:27:cf: 09:2c:66:48:a4:a0:c1:9b:2e:bc:8d:10:6d:64:60: 9d:ca:8f:d1:0a:7d:59:64:ec:12:af:87:b5:d6:50: 7d:0e:d0:f8:27:f8:67:1e:0c:f3:75:ab:80:38:0d: 74:36:3d:a8:60:4f:ea:0f:5f:b3:62:5a:26:59:26: 3c:8a:4d:db:d7:14:60:c5:88:48:14:9d:9d:90:85: 4a:9e:9d:25:30:4f:97:50:92:bb:10:e1:67:af:d8: 76:37:9e:59:54:b1:b0:38:58:4a:a3:17:7c:4d:33: 1e:67:2e:ec:5a:bb:a6:01:a4:76:4b:d5:45:18:92: 5d:09:21:1c:5c:97:8e:34:a5:fe:86:e1:12:a0:54: 4d:b4:6e:61:33:59:5f:dd:98:18:36:ae:5e:68:81: cb:a4:73:9c:ea:43:a5:c8:49:ee:f1:f4:34:a1:0c: 00:26:55:f3:ce:8a:13:3f:c5:7d:2e:b1:49:89:f7: c1:9f:5c:fa:34:57:7d:a5:47:86:62:f0:ab:55:b3: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EB:C1:42:47:66:5B:97:9C:97:BB:69:E2:36:CC:07:A3:3E:C4:35 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/qOvBQkdmW5ecl7tp4jbMB6M-xDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.196.0/24 79.172.199.0/24 79.172.203.0/24 79.172.209.0/24 79.172.211.0/24 79.172.213.0/24 79.172.216.0/24 79.172.225.0/24 79.172.236.0/24 79.172.238.0/24 79.172.240.0/23 79.172.243.0/24 79.172.248.0/24 79.172.253.0/24 79.172.255.0/24 84.21.0.0/19 87.229.15.0/24 87.229.26.0/24 87.229.32.0/23 87.229.45.0/24 87.229.51.0/24 87.229.53.0-87.229.55.255 87.229.58.0/23 87.229.65.0-87.229.66.255 87.229.73.0-87.229.75.255 87.229.78.0/24 87.229.83.0/24 87.229.93.0-87.229.94.255 87.229.96.0/24 87.229.105.0/24 87.229.113.0-87.229.114.255 87.229.116.0/24 87.229.118.0/24 87.229.121.0/24 95.138.192.0/21 178.238.208.0/20 213.181.196.0-213.181.198.255 213.181.200.0/24 213.181.204.0/24 213.181.207.0/24 213.181.210.0/24 213.181.219.0/24 213.181.221.0/24 217.113.50.0-217.113.52.255 217.113.59.0/24 217.113.61.0/24 217.113.63.0/24 217.144.48.0-217.144.50.255 217.144.56.0/21 IPv6: 2a02:730::/32 Signature Algorithm: sha256WithRSAEncryption 5e:06:c1:11:0b:bd:d7:e4:e9:c0:3a:c8:64:4e:65:41:dc:6a: 27:79:80:b3:e2:ad:43:73:b5:7f:dd:a8:a1:8f:56:86:19:43: 96:8c:55:17:f2:04:23:9c:7a:fa:da:e5:b2:be:6a:2d:24:ba: 8c:c1:0f:d4:89:40:34:b5:d2:ef:69:be:46:e2:47:96:4a:b1: 64:dd:5c:a0:b5:54:4f:c4:27:18:f5:a4:c4:95:aa:c4:e1:c2: a6:30:c8:be:bb:a1:2d:a0:72:2a:ca:29:2b:de:05:08:86:8e: a9:dd:10:62:ed:43:30:42:10:19:0e:75:c5:4d:7c:90:b3:81: 37:53:26:11:11:d0:9d:2b:44:14:57:e8:10:6c:65:6c:03:f4: 4f:c3:62:2d:d2:76:3d:e4:e5:fe:00:5c:6f:ee:8e:a8:aa:27: 94:97:81:a9:a4:c9:61:28:ea:fd:fc:bf:c2:93:b7:d6:6c:d2: 5d:99:6b:17:59:0e:c1:23:ad:81:cb:20:c1:df:75:e2:eb:9a: a5:ad:5e:67:4a:80:ec:55:18:ac:6b:c1:bf:5e:26:10:e4:be: a0:78:57:07:00:55:55:9b:f0:a6:36:c9:b6:12:42:c7:2d:1a: 38:d0:21:27:e4:e6:fc:96:7f:00:ce:c9:66:d8:c7:b9:f2:fb: 0f:32:21:11 -----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgISAZroMmkItVwqnDQxx4zMC6ZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMjA0MDcxMDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGViYzE0MjQ3NjY1Yjk3OWM5N2JiNjllMjM2Y2MwN2EzM2VjNDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2azOv8gCcn3OTo9ZeK2Uh6P5wvG s4W6m37MxauGpfY+7dmHWlJY3tzXL4UVqpSbJ4QZTz0MLIp/J88JLGZIpKDBmy68 jRBtZGCdyo/RCn1ZZOwSr4e11lB9DtD4J/hnHgzzdauAOA10Nj2oYE/qD1+zYlom WSY8ik3b1xRgxYhIFJ2dkIVKnp0lME+XUJK7EOFnr9h2N55ZVLGwOFhKoxd8TTMe Zy7sWrumAaR2S9VFGJJdCSEcXJeONKX+huESoFRNtG5hM1lf3ZgYNq5eaIHLpHOc 6kOlyEnu8fQ0oQwAJlXzzooTP8V9LrFJiffBn1z6NFd9pUeGYvCrVbPSGQIDAQAB o4IDgjCCA34wHQYDVR0OBBYEFKjrwUJHZluXnJe7aeI2zAejPsQ1MB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvcU92QlFrZG1XNWVjbDd0cDRqYk1CNk0teERVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBlgYIKwYBBQUHAQcBAf8EggGFMIIBgTCCAW4EAgABMIIB ZgMEAE+sxAMEAE+sxwMEAE+sywMEAE+s0QMEAE+s0wMEAE+s1QMEAE+s2AMEAE+s 4QMEAE+s7AMEAE+s7gMEAU+s8AMEAE+s8wMEAE+s+AMEAE+s/QMEAE+s/wMEBVQV AAMEAFflDwMEAFflGgMEAVflIAMEAFflLQMEAFflMzAMAwQAV+U1AwQDV+UwAwQB V+U6MAwDBABX5UEDBABX5UIwDAMEAFflSQMEAlflSAMEAFflTgMEAFflUzAMAwQA V+VdAwQAV+VeAwQAV+VgAwQAV+VpMAwDBABX5XEDBABX5XIDBABX5XQDBABX5XYD BABX5XkDBANfisADBASy7tAwDAMEAtW1xAMEANW1xgMEANW1yAMEANW1zAMEANW1 zwMEANW10gMEANW12wMEANW13TAMAwQB2XEyAwQA2XE0AwQA2XE7AwQA2XE9AwQA 2XE/MAwDBATZkDADBADZkDIDBAPZkDgwDQQCAAIwBwMFACoCBzAwDQYJKoZIhvcN AQELBQADggEBAF4GwRELvdfk6cA6yGROZUHcaid5gLPirUNztX/dqKGPVoYZQ5aM VRfyBCOcevra5bK+ai0kuozBD9SJQDS10u9pvkbiR5ZKsWTdXKC1VE/EJxj1pMSV qsThwqYwyL67oS2gcirKKSveBQiGjqndEGLtQzBCEBkOdcVNfJCzgTdTJhER0J0r RBRX6BBsZWwD9E/DYi3Sdj3k5f4AXG/ujqiqJ5SXgamkyWEo6v38v8KTt9Zs0l2Z axdZDsEjrYHLIMHfdeLrmqWtXmdKgOxVGKxrwb9eJhDkvqB4VwcAVVWb8KY2ybYS QsctGjjQISfk5vyWfwDOyWbYx7ny+w8yIRE= -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:44 2025 by rpki-client