This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7RL8fW_Dxg4EDW5Z4ivLdpWOrN4.roa File: 7RL8fW_Dxg4EDW5Z4ivLdpWOrN4.roa (raw, json) Hash identifier: tokUjmASP17ooknmkjuaRsQxCEPLh9f9RrrnBdI6iu8= Subject key identifier: ED:12:FC:7D:6F:C3:C6:0E:04:0D:6E:59:E2:2B:CB:76:95:8E:AC:DE Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019B79111B8FE2914467BD8C10A98D3FFA5C Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7RL8fW_Dxg4EDW5Z4ivLdpWOrN4.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205647 IP address blocks: 37.148.0.0/19 maxlen: 24 37.148.32.0/20 maxlen: 24 37.148.48.0/23 maxlen: 24 37.148.50.0/23 maxlen: 24 37.148.52.0/22 maxlen: 24 37.148.56.0/21 maxlen: 24 37.148.64.0/21 maxlen: 24 37.148.72.0/21 maxlen: 24 37.148.80.0/22 maxlen: 24 37.148.84.0/22 maxlen: 24 37.148.84.0/23 maxlen: 24 37.148.86.0/23 maxlen: 24 37.148.88.0/22 maxlen: 24 37.148.88.0/24 maxlen: 24 37.148.89.0/24 maxlen: 24 37.148.90.0/24 maxlen: 24 37.148.91.0/24 maxlen: 24 37.148.92.0/23 maxlen: 24 37.148.92.0/24 maxlen: 24 37.148.120.0/21 maxlen: 24 37.202.128.0/21 maxlen: 21 37.202.136.0/21 maxlen: 21 37.202.144.0/21 maxlen: 21 37.202.144.0/22 maxlen: 22 37.202.148.0/23 maxlen: 23 37.202.150.0/23 maxlen: 23 37.202.152.0/21 maxlen: 21 37.202.160.0/21 maxlen: 21 37.202.168.0/21 maxlen: 21 37.202.176.0/22 maxlen: 22 37.202.180.0/22 maxlen: 22 37.202.184.0/21 maxlen: 24 37.202.184.0/22 maxlen: 24 37.202.188.0/22 maxlen: 24 85.15.48.0/24 maxlen: 24 85.15.49.0/24 maxlen: 24 94.182.0.0/18 maxlen: 18 94.182.8.0/23 maxlen: 23 94.182.12.0/23 maxlen: 23 94.182.14.0/24 maxlen: 24 94.182.17.0/24 maxlen: 24 94.182.30.0/23 maxlen: 23 94.182.30.0/24 maxlen: 24 94.182.41.0/24 maxlen: 24 94.182.48.0/24 maxlen: 24 94.182.56.0/22 maxlen: 24 94.182.60.0/22 maxlen: 24 94.182.64.0/18 maxlen: 18 94.182.64.0/20 maxlen: 20 94.182.72.0/21 maxlen: 21 94.182.80.0/20 maxlen: 20 94.182.82.0/24 maxlen: 24 94.182.94.0/24 maxlen: 24 94.182.96.0/20 maxlen: 20 94.182.97.192/28 maxlen: 28 94.182.112.0/20 maxlen: 20 94.182.114.0/23 maxlen: 23 94.182.115.0/24 maxlen: 24 94.182.116.0/22 maxlen: 22 94.182.120.0/21 maxlen: 21 94.182.128.0/18 maxlen: 18 94.182.128.0/20 maxlen: 20 94.182.144.0/20 maxlen: 20 94.182.160.0/20 maxlen: 20 94.182.176.0/20 maxlen: 20 94.182.192.0/18 maxlen: 18 94.182.196.0/24 maxlen: 24 94.182.199.0/24 maxlen: 24 94.182.204.0/22 maxlen: 22 94.182.204.0/24 maxlen: 24 94.182.205.0/24 maxlen: 24 94.182.206.0/24 maxlen: 24 94.182.207.0/24 maxlen: 24 94.182.208.0/24 maxlen: 24 94.182.212.0/23 maxlen: 23 94.182.217.0/24 maxlen: 24 94.182.222.0/23 maxlen: 23 94.182.226.0/24 maxlen: 24 94.182.228.0/22 maxlen: 22 94.182.232.0/23 maxlen: 24 94.182.234.0/23 maxlen: 23 94.182.238.0/24 maxlen: 24 94.182.240.0/23 maxlen: 24 94.182.244.0/22 maxlen: 24 94.182.244.0/23 maxlen: 23 94.182.248.0/22 maxlen: 24 94.182.248.0/23 maxlen: 23 94.182.252.0/24 maxlen: 24 94.182.254.0/24 maxlen: 24 94.183.0.0/18 maxlen: 18 94.183.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1b:8f:e2:91:44:67:bd:8c:10:a9:8d:3f:fa:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed12fc7d6fc3c60e040d6e59e22bcb76958eacde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:93:b9:57:62:fb:d5:c3:a3:8f:5b:f6:a2: dd:ae:63:e3:27:d4:7f:13:2a:27:f4:cd:b6:d9:e1: f1:15:31:89:70:b9:b5:b4:49:72:34:88:62:8e:d5: c2:6a:1c:d8:1f:ce:38:73:bd:68:77:bc:63:05:82: f2:ab:f5:68:2b:ac:33:49:c7:9e:5f:9c:6b:1f:25: 00:6b:53:78:46:c3:9a:1b:28:de:6e:c1:0b:65:0f: 5f:8b:e2:0a:f0:dc:da:d1:30:75:ae:1c:3b:a0:aa: 99:1a:bf:a1:57:6a:6c:f8:1d:a6:9e:aa:49:54:c1: 1c:19:a2:9b:cf:f7:bd:3c:4a:6e:9d:21:c4:69:37: bc:8b:ba:52:5b:ff:1f:2d:15:5d:1f:74:bc:f4:9c: 67:5e:8f:51:f7:98:7f:13:10:12:12:57:e0:e3:5d: d2:29:c8:85:11:b5:b8:ef:9a:17:e9:3a:c3:56:90: 13:d5:80:43:e8:bf:85:bf:58:30:c7:ac:89:9f:b9: 1d:42:78:11:b2:23:a6:40:38:cc:30:0e:6f:f7:9f: 46:31:44:39:51:db:0d:27:8f:ca:cf:cb:b3:28:6a: 7e:e4:97:36:af:8c:75:6d:9f:15:70:c0:12:82:36: e6:c7:f3:c6:be:38:d8:0c:0d:de:3f:73:12:e7:47: cb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:12:FC:7D:6F:C3:C6:0E:04:0D:6E:59:E2:2B:CB:76:95:8E:AC:DE X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/7RL8fW_Dxg4EDW5Z4ivLdpWOrN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.148.0.0-37.148.93.255 37.148.120.0/21 37.202.128.0/18 85.15.48.0/23 94.182.0.0-94.183.127.255 Signature Algorithm: sha256WithRSAEncryption 7c:02:b9:e8:dd:97:ff:c3:75:68:0a:46:28:ff:c4:b2:b2:9d: 21:de:d2:70:94:87:11:81:70:1a:d4:d5:b9:85:48:bc:c2:99: fe:50:9f:99:6d:97:df:b5:37:b6:c8:88:b7:e8:76:f2:6c:23: 9b:96:e8:c1:17:ff:69:85:2a:e6:b0:41:63:2c:c6:d3:05:51: 34:3d:6f:69:47:78:08:09:65:6b:58:ae:ef:86:a4:01:1f:91: f6:dc:73:7c:f2:03:33:4f:34:5c:7e:b9:29:25:a4:56:f6:4b: c8:97:61:9a:33:2d:15:b8:49:21:04:5a:cd:fc:89:d4:f3:79: a6:a7:97:8e:d9:72:84:b8:74:14:36:9f:e5:94:50:c8:8f:20: 9f:a4:87:4f:d8:04:4d:84:a1:c1:7a:a7:f0:2f:d6:e9:70:30: d5:b9:49:54:32:72:89:c5:c8:47:8e:72:29:e9:d6:c7:c6:ef: cc:d7:95:a0:aa:f6:c6:05:6e:ea:07:40:1e:87:15:74:7b:03: c9:a5:19:f3:26:53:c2:82:b4:74:3f:82:9c:22:35:7a:f0:90: 65:3b:5a:5f:1f:a7:e6:7e:41:8d:df:2b:6a:e4:98:03:23:17: d1:86:1f:72:d9:ac:53:10:7a:29:98:f5:8a:97:2f:e9:19:04: 18:88:07:92 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt5ERuP4pFEZ72MEKmNP/pcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDEyZmM3ZDZmYzNjNjBlMDQwZDZlNTllMjJiY2I3Njk1OGVhY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1yTuVdi+9XDo49b9qLdrmPjJ9R/ Eyon9M222eHxFTGJcLm1tElyNIhijtXCahzYH844c71od7xjBYLyq/VoK6wzScee X5xrHyUAa1N4RsOaGyjebsELZQ9fi+IK8Nza0TB1rhw7oKqZGr+hV2ps+B2mnqpJ VMEcGaKbz/e9PEpunSHEaTe8i7pSW/8fLRVdH3S89JxnXo9R95h/ExASElfg413S KciFEbW475oX6TrDVpAT1YBD6L+Fv1gwx6yJn7kdQngRsiOmQDjMMA5v959GMUQ5 UdsNJ4/Kz8uzKGp+5Jc2r4x1bZ8VcMASgjbmx/PGvjjYDA3eP3MS50fLTwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFO0S/H1vw8YOBA1uWeIry3aVjqzeMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvN1JMOGZXX0R4ZzRFRFc1WjRpdkxkcFdPck40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAsDAwIllAME ASWUXAMEAyWUeAMEBiXKgAMEAVUPMDALAwMBXrYDBAdetwAwDQYJKoZIhvcNAQEL BQADggEBAHwCuejdl//DdWgKRij/xLKynSHe0nCUhxGBcBrU1bmFSLzCmf5Qn5lt l9+1N7bIiLfodvJsI5uW6MEX/2mFKuawQWMsxtMFUTQ9b2lHeAgJZWtYru+GpAEf kfbcc3zyAzNPNFx+uSklpFb2S8iXYZozLRW4SSEEWs38idTzeaanl47ZcoS4dBQ2 n+WUUMiPIJ+kh0/YBE2EocF6p/Av1ulwMNW5SVQyconFyEeOcinp1sfG78zXlaCq 9sYFbuoHQB6HFXR7A8mlGfMmU8KCtHQ/gpwiNXrwkGU7Wl8fp+Z+QY3fK2rkmAMj F9GGH3LZrFMQeimY9YqXL+kZBBiIB5I= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:04 2026 by rpki-client