This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/7b21kRHbye2v_dmZV5VUK_LJnVA.roa File: 7b21kRHbye2v_dmZV5VUK_LJnVA.roa (raw, json) Hash identifier: EN+RdTeUkPgyWw2KZHhbSo6oaTjE7NLfzP0K37REluE= Subject key identifier: ED:BD:B5:91:11:DB:C9:ED:AF:FD:D9:99:57:95:54:2B:F2:C9:9D:50 Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019BE0CBC97F4B6AE4D5D40AF0E1B635DF91 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/7b21kRHbye2v_dmZV5VUK_LJnVA.roa Signing time: Wed 21 Jan 2026 13:43:30 +0000 ROA not before: Wed 21 Jan 2026 13:43:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9119 IP address blocks: 2.58.48.0/22 maxlen: 22 45.8.0.0/22 maxlen: 22 45.15.44.0/22 maxlen: 22 45.15.44.0/23 maxlen: 23 45.15.46.0/24 maxlen: 24 45.156.140.0/23 maxlen: 23 45.156.140.0/24 maxlen: 24 46.163.0.0/19 maxlen: 19 46.163.32.0/20 maxlen: 20 46.163.48.0/21 maxlen: 21 46.163.56.0/23 maxlen: 23 46.163.56.0/24 maxlen: 24 46.163.58.0/23 maxlen: 23 46.163.58.0/24 maxlen: 24 46.163.59.0/24 maxlen: 24 46.163.60.0/22 maxlen: 22 80.65.160.0/20 maxlen: 20 80.65.160.0/24 maxlen: 24 80.65.161.0/24 maxlen: 24 80.65.162.0/24 maxlen: 24 80.65.163.0/24 maxlen: 24 80.65.164.0/24 maxlen: 24 80.65.165.0/24 maxlen: 24 80.65.166.0/24 maxlen: 24 80.65.167.0/24 maxlen: 24 80.65.168.0/24 maxlen: 24 80.65.169.0/24 maxlen: 24 80.65.170.0/24 maxlen: 24 80.65.171.0/24 maxlen: 24 80.65.172.0/22 maxlen: 22 80.65.172.0/24 maxlen: 24 80.65.173.0/24 maxlen: 24 80.65.174.0/24 maxlen: 24 80.65.175.0/24 maxlen: 24 84.41.0.0/18 maxlen: 18 84.41.0.0/19 maxlen: 19 84.41.0.0/21 maxlen: 21 84.41.32.0/19 maxlen: 19 84.41.64.0/19 maxlen: 19 84.41.96.0/21 maxlen: 21 84.41.104.0/22 maxlen: 22 84.41.108.0/23 maxlen: 23 84.41.110.0/24 maxlen: 24 84.41.111.0/24 maxlen: 24 84.41.112.0/23 maxlen: 23 84.41.114.0/24 maxlen: 24 84.41.115.0/24 maxlen: 24 84.41.116.0/22 maxlen: 22 84.41.120.0/23 maxlen: 23 84.41.122.0/23 maxlen: 23 84.41.124.0/22 maxlen: 22 85.208.172.0/24 maxlen: 24 85.208.173.0/24 maxlen: 24 85.208.175.0/24 maxlen: 24 91.132.74.0/23 maxlen: 23 147.78.216.0/22 maxlen: 22 147.78.216.0/24 maxlen: 24 147.78.217.0/24 maxlen: 24 147.78.218.0/24 maxlen: 24 185.54.128.0/23 maxlen: 23 185.54.128.0/24 maxlen: 24 185.54.130.0/24 maxlen: 24 185.54.131.0/24 maxlen: 24 185.175.0.0/22 maxlen: 22 212.13.224.0/19 maxlen: 19 212.103.128.0/19 maxlen: 19 213.253.64.0/19 maxlen: 19 213.253.96.0/20 maxlen: 20 213.253.96.0/21 maxlen: 21 213.253.104.0/22 maxlen: 22 213.253.108.0/22 maxlen: 22 213.253.108.0/24 maxlen: 24 213.253.109.0/24 maxlen: 24 213.253.110.0/24 maxlen: 24 213.253.111.0/24 maxlen: 24 213.253.112.0/22 maxlen: 22 213.253.116.0/22 maxlen: 22 213.253.120.0/22 maxlen: 22 213.253.124.0/22 maxlen: 22 217.199.128.0/20 maxlen: 24 217.199.128.0/24 maxlen: 24 217.199.129.0/24 maxlen: 24 217.199.130.0/24 maxlen: 24 217.199.131.0/24 maxlen: 24 217.199.132.0/24 maxlen: 24 217.199.133.0/24 maxlen: 24 217.199.134.0/24 maxlen: 24 217.199.135.0/24 maxlen: 24 217.199.136.0/24 maxlen: 24 217.199.137.0/24 maxlen: 24 217.199.138.0/24 maxlen: 24 217.199.139.0/24 maxlen: 24 217.199.140.0/24 maxlen: 24 217.199.141.0/24 maxlen: 24 217.199.142.0/24 maxlen: 24 217.199.143.0/24 maxlen: 24 2a02:800::/32 maxlen: 32 2a02:801::/32 maxlen: 32 2a02:801::/33 maxlen: 33 2a02:805::/33 maxlen: 33 2a09:e140::/29 maxlen: 29 2a0b:c300::/29 maxlen: 29 2a0b:c306::/32 maxlen: 32 2a0b:c307::/32 maxlen: 32 2a0e:1e80::/29 maxlen: 29 2a0e:2e00::/29 maxlen: 29 2a0f:2180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:cb:c9:7f:4b:6a:e4:d5:d4:0a:f0:e1:b6:35:df:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jan 21 13:43:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edbdb59111dbc9edaffdd9995795542bf2c99d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d5:f3:55:33:a9:ce:b4:18:32:74:c1:43:71: c5:c0:d9:f6:17:b9:da:8e:8f:06:b1:b0:cc:8b:17: 1d:e7:98:ce:1d:32:64:0c:7a:7c:af:c8:71:bf:06: 96:7e:09:73:72:e0:b5:28:5e:e9:68:ce:9d:0b:9e: bc:96:4a:43:8b:45:f9:62:92:9a:68:7f:08:23:fb: c1:f6:b7:af:5b:0e:dd:b2:ce:6a:f5:c8:b9:e1:84: 35:b9:25:dd:cd:dc:72:68:ed:07:4f:6b:61:4f:77: d4:df:41:c3:ff:63:fc:58:40:ac:bb:d0:e1:93:98: 39:ef:17:73:ed:0a:48:6f:bc:47:76:f4:06:c7:cc: 0e:5f:0c:26:f6:a0:05:b5:5b:b2:83:39:92:7a:9f: 35:88:77:d6:6f:be:34:d6:83:04:ca:a3:02:f5:d6: 61:af:7a:53:7c:06:c9:a5:9b:c9:d4:5d:2f:fa:1a: 23:56:14:f4:eb:7a:1e:00:6b:17:86:ab:bf:42:1c: bc:0e:81:36:15:e0:ff:7b:cc:dc:1b:6a:3c:ac:84: 5a:1d:b8:f7:55:11:cc:6e:cd:1b:c0:55:37:ba:de: 2b:4f:a2:bc:22:e9:97:39:c8:83:da:68:19:4d:cc: ee:44:39:c1:af:a7:27:1b:be:ae:9f:17:6c:96:93: 4a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BD:B5:91:11:DB:C9:ED:AF:FD:D9:99:57:95:54:2B:F2:C9:9D:50 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/7b21kRHbye2v_dmZV5VUK_LJnVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.48.0/22 45.8.0.0/22 45.15.44.0/22 45.156.140.0/23 46.163.0.0/18 80.65.160.0/20 84.41.0.0/17 85.208.172.0/23 85.208.175.0/24 91.132.74.0/23 147.78.216.0/22 185.54.128.0/22 185.175.0.0/22 212.13.224.0/19 212.103.128.0/19 213.253.64.0/18 217.199.128.0/20 IPv6: 2a02:800::/31 2a02:805::/33 2a09:e140::/29 2a0b:c300::/29 2a0e:1e80::/29 2a0e:2e00::/29 2a0f:2180::/29 Signature Algorithm: sha256WithRSAEncryption 3b:e9:4e:04:50:b0:ba:72:23:ce:f7:32:70:0b:43:8f:dc:ac: 4f:d3:c5:45:c2:44:ce:8e:ec:e8:e6:6e:7c:f0:51:c8:bc:f6: 70:d1:9a:a0:c0:69:8b:f6:72:1f:1a:a6:b2:2e:6c:85:f0:36: ba:62:50:0d:0c:9f:e3:d2:43:cc:59:01:34:cc:6a:d4:5b:5f: c9:0f:cf:c0:1b:bd:8e:8e:20:e1:03:ff:18:14:21:46:1f:a1: 11:8b:dc:5b:71:46:f3:e6:20:71:ed:95:1b:93:df:25:7b:5a: e5:00:d6:08:a4:75:8d:6f:7c:71:be:f6:b4:b1:bc:ab:48:76: 94:6b:d8:fa:33:cf:13:d2:93:f5:58:99:e7:d9:d3:84:fa:5f: 37:3b:e1:08:a9:bf:b6:80:66:5c:3f:c5:34:b9:4e:32:85:5d: 2d:0e:7e:d4:1c:d6:ba:25:72:0f:d5:48:8f:c8:8c:bd:1f:f0: 2c:6d:78:d9:76:f0:0b:89:da:f8:dd:5e:d1:37:4e:36:ec:76: 14:58:be:de:6e:ea:96:42:70:a3:a2:8b:ce:95:8c:ad:9d:4a: a1:e9:a2:61:80:7b:a6:43:fd:3d:aa:87:e5:4d:b0:36:41:15: 3a:ba:5c:d9:5c:f8:85:87:c1:38:41:53:3b:b2:41:8c:1e:cd: 8a:74:c0:5b -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZvgy8l/S2rk1dQK8OG2Nd+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwMTIxMTM0MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGJkYjU5MTExZGJjOWVkYWZmZGQ5OTk1Nzk1NTQyYmYyYzk5ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNXzVTOpzrQYMnTBQ3HFwNn2F7na jo8GsbDMixcd55jOHTJkDHp8r8hxvwaWfglzcuC1KF7paM6dC568lkpDi0X5YpKa aH8II/vB9revWw7dss5q9ci54YQ1uSXdzdxyaO0HT2thT3fU30HD/2P8WECsu9Dh k5g57xdz7QpIb7xHdvQGx8wOXwwm9qAFtVuygzmSep81iHfWb7401oMEyqMC9dZh r3pTfAbJpZvJ1F0v+hojVhT063oeAGsXhqu/Qhy8DoE2FeD/e8zcG2o8rIRaHbj3 VRHMbs0bwFU3ut4rT6K8IumXOciD2mgZTczuRDnBr6cnG76unxdslpNKgQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFO29tZER28ntr/3ZmVeVVCvyyZ1QMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvN2IyMWtSSGJ5ZTJ2X2RtWlY1VlVLX0xKblZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDBsBAIAATBmAwQCAjow AwQCLQgAAwQCLQ8sAwQBLZyMAwQGLqMAAwQEUEGgAwQHVCkAAwQBVdCsAwQAVdCv AwQBW4RKAwQCk07YAwQCuTaAAwQCua8AAwQF1A3gAwQF1GeAAwQG1f1AAwQE2ceA MDgEAgACMDIDBQEqAggAAwYHKgIIBQADBQMqCeFAAwUDKgvDAAMFAyoOHoADBQMq Di4AAwUDKg8hgDANBgkqhkiG9w0BAQsFAAOCAQEAO+lOBFCwunIjzvcycAtDj9ys T9PFRcJEzo7s6OZufPBRyLz2cNGaoMBpi/ZyHxqmsi5shfA2umJQDQyf49JDzFkB NMxq1FtfyQ/PwBu9jo4g4QP/GBQhRh+hEYvcW3FG8+Ygce2VG5PfJXta5QDWCKR1 jW98cb72tLG8q0h2lGvY+jPPE9KT9ViZ59nThPpfNzvhCKm/toBmXD/FNLlOMoVd LQ5+1BzWuiVyD9VIj8iMvR/wLG142XbwC4na+N1e0TdONux2FFi+3m7qlkJwo6KL zpWMrZ1KoemiYYB7pkP9PaqH5U2wNkEVOrpc2Vz4hYfBOEFTO7JBjB7NinTAWw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:08 2026 by rpki-client