This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/7cNt7nS6Ga02pEEvUGwXFcclfa4.roa File: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (raw, json) Hash identifier: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw= Subject key identifier: ED:C3:6D:EE:74:BA:19:AD:36:A4:41:2F:50:6C:17:15:C7:25:7D:AE Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e Certificate serial: 019B77C6E944EA979FC0ABDE5F8716B9097F Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/7cNt7nS6Ga02pEEvUGwXFcclfa4.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48737 IP address blocks: 37.58.17.0/24 maxlen: 24 37.58.19.0/24 maxlen: 24 37.58.20.0/24 maxlen: 24 37.58.21.0/24 maxlen: 24 37.58.23.0/24 maxlen: 24 46.20.144.0/24 maxlen: 24 46.20.145.0/24 maxlen: 24 46.20.146.0/24 maxlen: 24 46.20.147.0/24 maxlen: 24 46.20.148.0/24 maxlen: 24 46.20.149.0/24 maxlen: 24 46.20.150.0/24 maxlen: 24 46.20.151.0/24 maxlen: 24 46.20.152.0/24 maxlen: 24 46.20.153.0/24 maxlen: 24 46.20.154.0/24 maxlen: 24 46.20.155.0/24 maxlen: 24 46.20.156.0/24 maxlen: 24 46.20.157.0/24 maxlen: 24 46.20.158.0/24 maxlen: 24 46.20.159.0/24 maxlen: 24 81.22.96.0/24 maxlen: 24 81.22.97.0/24 maxlen: 24 81.22.98.0/24 maxlen: 24 81.22.99.0/24 maxlen: 24 81.22.100.0/24 maxlen: 24 81.22.101.0/24 maxlen: 24 81.22.102.0/24 maxlen: 24 81.22.103.0/24 maxlen: 24 81.22.104.0/24 maxlen: 24 81.22.105.0/24 maxlen: 24 81.22.106.0/24 maxlen: 24 81.22.107.0/24 maxlen: 24 81.22.108.0/24 maxlen: 24 81.22.109.0/24 maxlen: 24 81.22.110.0/24 maxlen: 24 81.22.111.0/24 maxlen: 24 95.128.56.0/24 maxlen: 24 95.128.57.0/24 maxlen: 24 95.128.58.0/24 maxlen: 24 95.128.60.0/24 maxlen: 24 95.128.61.0/24 maxlen: 24 95.128.62.0/24 maxlen: 24 95.128.63.0/24 maxlen: 24 185.56.237.0/24 maxlen: 24 185.56.238.0/24 maxlen: 24 185.56.239.0/24 maxlen: 24 185.59.72.0/24 maxlen: 24 185.59.73.0/24 maxlen: 24 185.59.74.0/24 maxlen: 24 185.59.75.0/24 maxlen: 24 2a02:dc40::/48 maxlen: 48 2a02:dc40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e9:44:ea:97:9f:c0:ab:de:5f:87:16:b9:09:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edc36dee74ba19ad36a4412f506c1715c7257dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:1d:32:58:0b:e9:58:17:27:ec:83:ee:06: 59:a1:2b:a1:fc:2d:a1:6e:4a:e6:e4:c2:d6:ef:23: 2f:1c:38:79:21:7c:b5:dc:8c:8b:30:e6:6d:50:30: 4a:14:e0:8a:05:71:29:46:9b:64:ca:de:e5:c7:98: 51:c3:34:fe:90:36:b8:5e:6e:e7:92:a5:0c:e5:14: aa:29:11:4a:19:52:06:6d:7f:73:de:87:20:72:79: c0:18:bf:c9:1f:35:a2:52:d8:b2:f4:79:f7:90:96: aa:b6:02:83:1f:67:81:6f:a9:00:d0:73:1d:0b:0d: 11:76:32:48:a9:d8:5f:00:4f:0e:17:37:e9:8f:64: 0f:ee:0b:bd:63:1c:04:2b:76:97:7f:d8:21:ba:58: 0d:ca:e9:34:87:94:5a:75:43:a2:1c:49:3f:cf:59: fd:8e:34:b6:8a:8c:1b:60:28:84:1b:80:9e:a3:17: c5:1f:61:4c:86:7a:8a:f0:23:e3:ec:5c:13:08:52: 05:6e:43:be:31:45:3c:e8:43:6c:aa:ae:26:95:1e: bf:39:da:95:06:dd:1b:f8:18:05:51:6d:48:97:a2: 98:b2:15:8f:30:7c:ff:1c:f0:2c:16:68:25:d2:75: 92:29:49:63:79:e8:12:bf:e4:db:72:d4:f2:7e:c7: 34:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C3:6D:EE:74:BA:19:AD:36:A4:41:2F:50:6C:17:15:C7:25:7D:AE X509v3 Authority Key Identifier: keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/7cNt7nS6Ga02pEEvUGwXFcclfa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.58.17.0/24 37.58.19.0-37.58.21.255 37.58.23.0/24 46.20.144.0/20 81.22.96.0/20 95.128.56.0-95.128.58.255 95.128.60.0/22 185.56.237.0-185.56.239.255 185.59.72.0/22 IPv6: 2a02:dc40::/47 Signature Algorithm: sha256WithRSAEncryption 28:b9:e3:e0:af:33:c0:a2:7c:dc:d8:e4:9c:a9:af:95:0f:5b: 85:d2:6e:7f:f4:dd:42:62:00:cb:16:31:92:6c:73:65:12:f3: 3f:e4:ff:73:23:59:be:6f:9c:35:92:cd:5c:18:92:f5:07:07: 20:43:6b:5a:6e:19:0c:65:8a:55:f3:85:2f:1b:c6:3b:83:31: 4d:77:b5:80:d8:4b:d4:75:bf:95:5d:bd:8a:b7:23:fc:46:27: 90:45:72:90:08:9a:3a:d2:4a:f8:8f:23:35:5d:de:02:7e:ea: 38:1c:09:c3:e8:e8:16:8e:69:dd:d4:fa:78:cc:f5:34:88:0f: 89:02:6b:4f:72:7e:f9:30:a0:55:96:dc:cf:99:a2:2d:e4:20: a2:b1:7b:b5:cb:3e:94:7b:16:5d:bc:b2:bf:af:37:12:33:99: 94:9d:9b:87:6a:0d:a7:ba:61:3e:2c:34:68:84:34:a2:bc:ba: c7:bf:6d:cf:73:56:0e:21:3e:54:10:77:b0:5d:73:b2:87:e0: 3f:2e:80:14:ca:02:e6:a5:02:7a:9d:6e:9b:4e:6e:bb:a4:c1: 39:54:6c:d7:45:14:69:51:68:2a:5a:06:db:eb:43:5c:2a:48: c4:a8:75:44:10:22:87:a5:9c:9d:cb:ec:6a:88:d7:f6:0a:c9: c2:b9:83:c3 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAZt3xulE6pefwKveX4cWuQl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMTViZTQ1MzJlOTU4OGM0MDUzMWE3ZjMzMWVhYmZiZjQ3 NzBhNWUwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGMzNmRlZTc0YmExOWFkMzZhNDQxMmY1MDZjMTcxNWM3MjU3ZGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV0dMlgL6VgXJ+yD7gZZoSuh/C2h bkrm5MLW7yMvHDh5IXy13IyLMOZtUDBKFOCKBXEpRptkyt7lx5hRwzT+kDa4Xm7n kqUM5RSqKRFKGVIGbX9z3ocgcnnAGL/JHzWiUtiy9Hn3kJaqtgKDH2eBb6kA0HMd Cw0RdjJIqdhfAE8OFzfpj2QP7gu9YxwEK3aXf9ghulgNyuk0h5RadUOiHEk/z1n9 jjS2iowbYCiEG4CeoxfFH2FMhnqK8CPj7FwTCFIFbkO+MUU86ENsqq4mlR6/OdqV Bt0b+BgFUW1Il6KYshWPMHz/HPAsFmgl0nWSKUljeegSv+TbctTyfsc0gQIDAQAB o4ICYjCCAl4wHQYDVR0OBBYEFO3Dbe50uhmtNqRBL1BsFxXHJX2uMB8GA1UdIwQY MBaAFOIVvkUy6ViMQFMafzMeq/v0dwpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGhXLVJUTHBXSXhBVXhwX014NnItX1IzQ2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZWU4NWUtMjJjYi00MmVkLTkwNzEt NDY1MWZkODAyNzM3LzEvN2NOdDduUzZHYTAycEVFdlVHd1hGY2NsZmE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS80ZWU4NWUtMjJjYi00MmVkLTkwNzEtNDY1MWZkODAyNzM3 LzEvNGhXLVJUTHBXSXhBVXhwX014NnItX1IzQ2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHgGCCsGAQUFBwEHAQH/BGkwZzBUBAIAATBOAwQAJToRMAwD BAAlOhMDBAElOhQDBAAlOhcDBAQuFJADBARRFmAwDAMEA1+AOAMEAF+AOgMEAl+A PDAMAwQAuTjtAwQEuTjgAwQCuTtIMA8EAgACMAkDBwEqAtxAAAAwDQYJKoZIhvcN AQELBQADggEBACi54+CvM8CifNzY5Jypr5UPW4XSbn/03UJiAMsWMZJsc2US8z/k /3MjWb5vnDWSzVwYkvUHByBDa1puGQxlilXzhS8bxjuDMU13tYDYS9R1v5VdvYq3 I/xGJ5BFcpAImjrSSviPIzVd3gJ+6jgcCcPo6BaOad3U+njM9TSID4kCa09yfvkw oFWW3M+Zoi3kIKKxe7XLPpR7Fl28sr+vNxIzmZSdm4dqDae6YT4sNGiENKK8use/ bc9zVg4hPlQQd7Bdc7KH4D8ugBTKAualAnqdbptObrukwTlUbNdFFGlRaCpaBtvr Q1wqSMSodUQQIoelnJ3L7GqI1/YKycK5g8M= -----END CERTIFICATE-----Generated at Sun Jan 25 19:58:58 2026 by rpki-client