This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/7_vTLU6_W9WRO99eRf3W3MXytqs.roa
File: 7_vTLU6_W9WRO99eRf3W3MXytqs.roa (raw, json)
Hash identifier: H8ULtmJILJ9TvT6VQcaaq/32t8wDD2TyxKJK2DXGNIw=
Subject key identifier: EF:FB:D3:2D:4E:BF:5B:D5:91:3B:DF:5E:45:FD:D6:DC:C5:F2:B6:AB
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019ADDD3FA8B1A61AD3A106C1D4AB948B569
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/7_vTLU6_W9WRO99eRf3W3MXytqs.roa
Signing time: Tue 02 Dec 2025 06:50:48 +0000
ROA not before: Tue 02 Dec 2025 06:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 89.19.56.0/24 maxlen: 24
89.19.57.0/24 maxlen: 24
89.19.58.0/24 maxlen: 24
89.19.59.0/24 maxlen: 24
185.59.232.0/22 maxlen: 24
185.68.245.0/24 maxlen: 24
185.81.146.0/24 maxlen: 24
185.81.147.0/24 maxlen: 24
185.81.174.0/24 maxlen: 24
185.81.184.0/23 maxlen: 23
185.81.186.0/23 maxlen: 23
185.89.104.0/22 maxlen: 22
185.89.108.0/22 maxlen: 22
185.95.100.0/23 maxlen: 24
185.95.102.0/23 maxlen: 24
185.96.82.0/24 maxlen: 24
185.96.83.0/24 maxlen: 24
185.96.132.0/24 maxlen: 24
185.96.134.0/23 maxlen: 24
185.97.0.0/22 maxlen: 24
185.98.43.0/24 maxlen: 24
185.101.203.0/24 maxlen: 24
185.104.151.0/24 maxlen: 24
185.112.56.0/23 maxlen: 24
185.175.224.0/23 maxlen: 24
185.175.226.0/23 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:dd:d3:fa:8b:1a:61:ad:3a:10:6c:1d:4a:b9:48:b5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Dec 2 06:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=effbd32d4ebf5bd5913bdf5e45fdd6dcc5f2b6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:55:a5:f4:2f:18:e1:7c:78:cb:4f:09:9d:
d2:2a:0f:3e:d2:74:84:1b:d5:94:4c:0f:f7:55:b4:
e2:4f:14:83:75:01:92:7d:8e:81:ad:d1:c7:05:5f:
20:00:47:15:b3:7a:3c:77:a3:aa:b7:a9:fb:45:c1:
0d:52:5a:65:a4:36:c7:e7:a1:21:7f:7b:f4:ad:a8:
1b:35:51:d0:1d:5b:17:03:fd:43:3a:96:7b:44:e1:
94:3e:f4:24:72:56:c7:05:85:4b:73:ca:bc:f0:34:
e6:35:85:2d:b8:6f:fe:7c:c0:48:73:22:e6:b2:67:
bc:3f:0b:5b:20:4b:76:53:3f:f2:88:3e:48:40:1d:
3f:83:8e:ec:ea:46:1e:aa:d4:d6:7f:0d:ad:5e:cc:
d7:e6:3e:a3:f5:2c:a8:30:c2:6a:81:e3:ca:e7:0a:
d9:47:cb:26:2e:6d:f3:a7:22:fd:c1:74:db:4c:ef:
03:5e:48:e6:f3:ae:ac:f5:34:ff:a0:2f:57:d0:9e:
de:26:ea:8c:5d:d5:a2:2d:d8:b1:38:4e:5e:e9:56:
66:be:a5:1c:ef:fe:a7:b2:23:d8:6f:3d:5c:77:47:
48:64:bc:13:21:3d:97:ba:8b:63:f3:58:b1:b6:71:
44:ce:aa:3f:45:79:5a:85:93:55:3e:18:bf:a2:9d:
0a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:D3:2D:4E:BF:5B:D5:91:3B:DF:5E:45:FD:D6:DC:C5:F2:B6:AB
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/7_vTLU6_W9WRO99eRf3W3MXytqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.56.0/22
185.59.232.0/22
185.68.245.0/24
185.81.146.0/23
185.81.174.0/24
185.81.184.0/22
185.89.104.0/21
185.95.100.0/22
185.96.82.0/23
185.96.132.0/24
185.96.134.0/23
185.97.0.0/22
185.98.43.0/24
185.101.203.0/24
185.104.151.0/24
185.112.56.0/23
185.175.224.0/22
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:48:c4:e9:5d:93:0a:0f:ac:c1:3b:76:13:25:2d:ea:6e:ea:
cf:8a:6f:44:ad:1e:26:8b:b2:db:d1:77:42:b1:8e:df:df:33:
ee:64:e0:2b:51:9b:59:86:c0:64:a0:ba:f8:96:82:e6:50:7c:
ff:9e:b9:74:e0:ee:7a:d4:70:02:e4:84:bd:a1:d6:6d:70:fa:
18:95:47:59:b9:67:90:e4:bc:ab:2e:44:a9:4d:43:7c:a0:cb:
ea:78:f6:46:f1:9f:73:a7:46:54:51:b5:ac:3a:bd:36:b1:ef:
41:9f:7d:93:6a:89:d3:f5:af:00:60:53:64:e5:41:9b:e8:ef:
61:1b:f9:44:81:69:34:de:98:28:1f:ea:b5:aa:d2:46:dd:c3:
43:eb:38:00:16:84:f9:1d:8d:ea:3f:a5:c8:82:7d:28:a2:23:
e6:00:9b:fc:67:86:c8:e7:36:6a:22:ca:4c:69:49:f1:02:80:
1b:a9:88:f3:f8:87:66:eb:8f:6d:77:01:6b:0e:d1:21:83:ed:
95:df:dc:29:7e:dc:2c:63:5a:93:d9:c1:ad:15:3b:9e:ba:94:
a1:4c:fa:90:7a:e2:53:aa:bd:97:20:3c:8a:b2:b6:cb:0c:ed:
be:a8:7a:62:1e:6b:e8:64:db:a4:40:aa:6e:c3:11:5a:cd:92:
46:d5:77:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:05:54 2025 by rpki-client