This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/mB7yGysqxM2w0BSJMz4SqdiHSZI.roa File: mB7yGysqxM2w0BSJMz4SqdiHSZI.roa (raw, json) Hash identifier: bdgkO9DwF+uIpDi10Iec80EoHKPGBrSErUC5CnGEJa8= Subject key identifier: 98:1E:F2:1B:2B:2A:C4:CD:B0:D0:14:89:33:3E:12:A9:D8:87:49:92 Certificate issuer: /CN=ca96218c20efd8fe53fca9990b725dd7963c885c Certificate serial: 019B7AC8273690B92EA79BA6FABD8EF64976 Authority key identifier: CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/mB7yGysqxM2w0BSJMz4SqdiHSZI.roa Signing time: Thu 01 Jan 2026 18:18:15 +0000 ROA not before: Thu 01 Jan 2026 18:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25145 IP address blocks: 31.40.240.0/24 maxlen: 24 31.40.242.0/24 maxlen: 24 77.92.96.0/19 maxlen: 19 77.92.96.0/24 maxlen: 24 77.92.97.0/24 maxlen: 24 77.92.98.0/24 maxlen: 24 77.92.99.0/24 maxlen: 24 77.92.100.0/22 maxlen: 22 77.92.100.0/24 maxlen: 24 77.92.101.0/24 maxlen: 24 77.92.102.0/24 maxlen: 24 77.92.103.0/24 maxlen: 24 77.92.104.0/24 maxlen: 24 77.92.105.0/24 maxlen: 24 77.92.106.0/24 maxlen: 24 77.92.107.0/24 maxlen: 24 77.92.108.0/22 maxlen: 22 77.92.108.0/24 maxlen: 24 77.92.109.0/24 maxlen: 24 77.92.110.0/24 maxlen: 24 77.92.111.0/24 maxlen: 24 77.92.112.0/22 maxlen: 22 77.92.112.0/24 maxlen: 24 77.92.113.0/24 maxlen: 24 77.92.114.0/24 maxlen: 24 77.92.115.0/24 maxlen: 24 77.92.116.0/24 maxlen: 24 77.92.117.0/24 maxlen: 24 77.92.118.0/24 maxlen: 24 77.92.119.0/24 maxlen: 24 77.92.120.0/24 maxlen: 24 77.92.121.0/24 maxlen: 24 77.92.122.0/24 maxlen: 24 77.92.123.0/24 maxlen: 24 77.92.124.0/24 maxlen: 24 77.92.125.0/24 maxlen: 24 77.92.126.0/24 maxlen: 24 77.92.127.0/24 maxlen: 24 185.115.208.0/24 maxlen: 24 185.115.210.0/24 maxlen: 24 185.115.211.0/24 maxlen: 24 213.144.96.0/19 maxlen: 19 213.144.96.0/22 maxlen: 22 213.144.96.0/24 maxlen: 24 213.144.97.0/24 maxlen: 24 213.144.98.0/24 maxlen: 24 213.144.99.0/24 maxlen: 24 213.144.100.0/24 maxlen: 24 213.144.101.0/24 maxlen: 24 213.144.103.0/24 maxlen: 24 213.144.104.0/22 maxlen: 22 213.144.104.0/24 maxlen: 24 213.144.105.0/24 maxlen: 24 213.144.106.0/24 maxlen: 24 213.144.107.0/24 maxlen: 24 213.144.108.0/22 maxlen: 22 213.144.108.0/24 maxlen: 24 213.144.109.0/24 maxlen: 24 213.144.110.0/24 maxlen: 24 213.144.111.0/24 maxlen: 24 213.144.112.0/22 maxlen: 22 213.144.112.0/24 maxlen: 24 213.144.113.0/24 maxlen: 24 213.144.114.0/24 maxlen: 24 213.144.115.0/24 maxlen: 24 213.144.116.0/22 maxlen: 22 213.144.116.0/24 maxlen: 24 213.144.117.0/24 maxlen: 24 213.144.118.0/24 maxlen: 24 213.144.119.0/24 maxlen: 24 213.144.120.0/22 maxlen: 22 213.144.120.0/24 maxlen: 24 213.144.121.0/24 maxlen: 24 213.144.122.0/24 maxlen: 24 213.144.123.0/24 maxlen: 24 213.144.124.0/22 maxlen: 22 213.144.124.0/24 maxlen: 24 213.144.125.0/24 maxlen: 24 213.144.126.0/24 maxlen: 24 213.144.127.0/24 maxlen: 24 2a02:ac80::/29 maxlen: 29 2a02:ac80::/32 maxlen: 32 2a02:ac80:10::/48 maxlen: 48 2a02:ac80:20::/48 maxlen: 48 2a02:ac80:30::/48 maxlen: 48 2a02:ac80:40::/48 maxlen: 48 2a02:ac80:50::/48 maxlen: 48 2a02:ac80:60::/48 maxlen: 48 2a02:ac80:70::/48 maxlen: 48 2a02:ac80:97::/48 maxlen: 48 2a02:ac80:99::/48 maxlen: 48 2a02:ac80:a0::/48 maxlen: 48 2a02:ac80:b0::/48 maxlen: 48 2a02:ac80:c0::/48 maxlen: 48 2a02:ac80:d0::/48 maxlen: 48 2a02:ac80:e0::/48 maxlen: 48 2a02:ac80:f0::/48 maxlen: 48 2a02:ac80:100::/48 maxlen: 48 2a02:ac80:105::/48 maxlen: 48 2a02:ac80:127::/48 maxlen: 48 2a02:ac80:200::/48 maxlen: 48 2a02:ac80:300::/48 maxlen: 48 2a02:ac80:400::/48 maxlen: 48 2a02:ac80:500::/48 maxlen: 48 2a02:ac80:600::/48 maxlen: 48 2a02:ac80:700::/48 maxlen: 48 2a02:ac80:a00::/48 maxlen: 48 2a02:ac80:b00::/48 maxlen: 48 2a02:ac80:c00::/48 maxlen: 48 2a02:ac80:d00::/48 maxlen: 48 2a02:ac80:e00::/48 maxlen: 48 2a02:ac80:f00::/48 maxlen: 48 2a02:ac80:1000::/48 maxlen: 48 2a02:ac80:2000::/48 maxlen: 48 2a02:ac80:3000::/48 maxlen: 48 2a02:ac80:4000::/48 maxlen: 48 2a02:ac80:5000::/48 maxlen: 48 2a02:ac80:6000::/48 maxlen: 48 2a02:ac80:7000::/48 maxlen: 48 2a02:ac80:7370::/48 maxlen: 48 2a02:ac80:a000::/48 maxlen: 48 2a02:ac80:b000::/48 maxlen: 48 2a02:ac80:c000::/48 maxlen: 48 2a02:ac80:d000::/48 maxlen: 48 2a02:ac80:e000::/48 maxlen: 48 2a02:ac80:f000::/48 maxlen: 48 2a02:ac81::/32 maxlen: 32 2a02:ac82::/32 maxlen: 32 2a02:ac83::/32 maxlen: 32 2a02:ac84::/32 maxlen: 32 2a02:ac85::/32 maxlen: 32 2a02:ac86::/32 maxlen: 32 2a02:ac87::/32 maxlen: 32 2a02:ac87:5900::/48 maxlen: 48 2a02:ac87:59cb::/48 maxlen: 48 2a02:ac87:ac87::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.mft rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:27:36:90:b9:2e:a7:9b:a6:fa:bd:8e:f6:49:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca96218c20efd8fe53fca9990b725dd7963c885c Validity Not Before: Jan 1 18:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=981ef21b2b2ac4cdb0d01489333e12a9d8874992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:0e:35:19:5d:2d:24:44:b9:e8:77:35:a4: a6:04:7a:5f:fb:6c:83:07:64:9a:88:05:5f:6d:21: 03:0b:24:3c:d6:d7:b4:e8:2e:1d:82:4c:55:5f:64: c0:d5:7e:ac:8c:5b:36:0b:33:9c:fd:b0:d1:a7:e6: 74:0d:d7:b3:e9:6f:29:fa:3c:f0:0a:60:95:b5:bc: 1d:a0:93:92:db:81:7e:7f:a0:ba:00:a5:86:88:fe: 51:1b:8a:96:f9:11:88:f3:dd:de:9f:f3:ce:a7:f0: 59:e6:36:24:bd:12:f1:b8:72:d2:86:46:d1:36:54: a5:00:58:e0:77:05:bc:64:3e:ba:c9:15:ea:72:f2: 55:c6:1e:2e:e6:33:70:aa:2b:a1:63:46:4f:71:d9: c4:5a:38:d9:b5:91:44:d8:3b:82:39:0c:d3:c0:2a: aa:e6:58:f3:63:f3:6d:7c:f3:08:9f:e5:ee:ed:db: 5d:aa:aa:21:8d:82:d3:dd:9a:92:2b:a1:0a:10:07: 43:1d:1c:3e:80:70:da:30:e0:95:82:2d:45:db:f4: 4c:bb:90:44:3b:c1:4c:41:b2:c5:5a:7a:17:31:4a: 27:d4:11:12:e4:e7:21:66:ef:36:0a:11:d7:91:6c: 2e:52:33:e6:74:71:03:b4:d2:f4:fd:8e:d9:f0:0b: 75:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1E:F2:1B:2B:2A:C4:CD:B0:D0:14:89:33:3E:12:A9:D8:87:49:92 X509v3 Authority Key Identifier: keyid:CA:96:21:8C:20:EF:D8:FE:53:FC:A9:99:0B:72:5D:D7:96:3C:88:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/mB7yGysqxM2w0BSJMz4SqdiHSZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9755d5-7f0b-427f-afe0-d712d4738046/1/ypYhjCDv2P5T_KmZC3Jd15Y8iFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.240.0/24 31.40.242.0/24 77.92.96.0/19 185.115.208.0/24 185.115.210.0/23 213.144.96.0/19 IPv6: 2a02:ac80::/29 Signature Algorithm: sha256WithRSAEncryption 41:9f:69:af:99:32:38:40:64:a7:f6:f6:4a:de:3d:c0:14:f4: a9:a0:59:91:4b:3e:82:e4:85:58:33:fe:49:99:c6:79:e9:22: ac:4b:c1:38:e7:e3:cb:ad:57:e5:8d:8b:de:d3:a2:8b:11:56: ae:71:04:65:d6:86:4f:c2:85:60:57:dc:ce:68:8d:73:c1:22: 65:1d:74:18:47:a4:37:83:2c:2f:f7:a4:27:23:1f:85:2b:5a: 2a:36:01:16:66:79:1a:e3:19:18:1a:ac:95:14:ec:5e:e3:97: 47:50:fc:a5:cd:3c:e0:a6:e0:2e:8a:42:6c:cc:17:26:d1:53: 14:16:8e:7d:43:01:38:80:e4:cb:3d:8a:8a:ff:c8:15:61:ae: 0a:8a:11:11:21:a3:86:a4:7b:da:3b:23:4b:fc:f1:dd:98:9e: e1:16:0f:e0:81:ae:dc:2b:fb:14:f4:bb:34:e6:69:bc:18:7b: 5b:b0:d3:bb:a8:45:fd:2e:f6:1e:b1:ed:17:79:ad:70:59:34: c8:d0:44:3f:57:0d:69:95:eb:67:13:cd:a2:a9:c7:60:7d:76: 31:b8:d3:50:ec:92:16:b5:c0:e0:07:2d:7f:4c:6c:e6:9d:a9: 0b:cf:6d:85:68:97:f5:00:74:1e:ab:4c:5f:f4:5d:1b:f6:95: 20:88:9d:b6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt6yCc2kLkup5um+r2O9kl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhOTYyMThjMjBlZmQ4ZmU1M2ZjYTk5OTBiNzI1ZGQ3OTYz Yzg4NWMwHhcNMjYwMTAxMTgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODFlZjIxYjJiMmFjNGNkYjBkMDE0ODkzMzNlMTJhOWQ4ODc0OTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZUONRldLSREueh3NaSmBHpf+2yD B2SaiAVfbSEDCyQ81te06C4dgkxVX2TA1X6sjFs2CzOc/bDRp+Z0Ddez6W8p+jzw CmCVtbwdoJOS24F+f6C6AKWGiP5RG4qW+RGI893en/POp/BZ5jYkvRLxuHLShkbR NlSlAFjgdwW8ZD66yRXqcvJVxh4u5jNwqiuhY0ZPcdnEWjjZtZFE2DuCOQzTwCqq 5ljzY/NtfPMIn+Xu7dtdqqohjYLT3ZqSK6EKEAdDHRw+gHDaMOCVgi1F2/RMu5BE O8FMQbLFWnoXMUon1BES5OchZu82ChHXkWwuUjPmdHEDtNL0/Y7Z8At15QIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFJge8hsrKsTNsNAUiTM+EqnYh0mSMB8GA1UdIwQY MBaAFMqWIYwg79j+U/ypmQtyXdeWPIhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAt ZDcxMmQ0NzM4MDQ2LzEvbUI3eUd5c3F4TTJ3MEJTSk16NFNxZGlIU1pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85NzU1ZDUtN2YwYi00MjdmLWFmZTAtZDcxMmQ0NzM4MDQ2 LzEveXBZaGpDRHYyUDVUX0ttWkMzSmQxNVk4aUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAHyjwAwQA HyjyAwQFTVxgAwQAuXPQAwQBuXPSAwQF1ZBgMA0EAgACMAcDBQMqAqyAMA0GCSqG SIb3DQEBCwUAA4IBAQBBn2mvmTI4QGSn9vZK3j3AFPSpoFmRSz6C5IVYM/5JmcZ5 6SKsS8E45+PLrVfljYve06KLEVaucQRl1oZPwoVgV9zOaI1zwSJlHXQYR6Q3gywv 96QnIx+FK1oqNgEWZnka4xkYGqyVFOxe45dHUPylzTzgpuAuikJszBcm0VMUFo59 QwE4gOTLPYqK/8gVYa4KihERIaOGpHvaOyNL/PHdmJ7hFg/gga7cK/sU9Ls05mm8 GHtbsNO7qEX9LvYese0Xea1wWTTI0EQ/Vw1pletnE82iqcdgfXYxuNNQ7JIWtcDg By1/TGzmnakLz22FaJf1AHQeq0xf9F0b9pUgiJ22 -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:42 2026 by rpki-client