This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7Wcy_e-fygtsm1qzHK47f90_Dec.roa
File: 7Wcy_e-fygtsm1qzHK47f90_Dec.roa (raw, json)
Hash identifier: 6nUoYVEyzYPZ0+V/PoHKlh7i8I3FhH7T4Idy+0rvrjU=
Subject key identifier: ED:67:32:FD:EF:9F:CA:0B:6C:9B:5A:B3:1C:AE:3B:7F:DD:3F:0D:E7
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 019AE7C74BA0BBB5A025410DA1E6DCBA9FE4
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7Wcy_e-fygtsm1qzHK47f90_Dec.roa
Signing time: Thu 04 Dec 2025 05:13:09 +0000
ROA not before: Thu 04 Dec 2025 05:13:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31205
IP address blocks: 31.173.240.0/23 maxlen: 23
31.173.242.0/23 maxlen: 23
31.173.244.0/22 maxlen: 22
37.29.86.0/23 maxlen: 23
46.232.200.0/24 maxlen: 24
46.232.202.0/23 maxlen: 23
78.25.92.0/23 maxlen: 23
78.25.94.0/23 maxlen: 23
83.149.48.0/24 maxlen: 24
83.149.49.0/24 maxlen: 24
83.149.50.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
83.169.248.0/22 maxlen: 22
83.169.252.0/22 maxlen: 22
85.26.224.0/24 maxlen: 24
85.26.226.0/24 maxlen: 24
85.26.227.0/24 maxlen: 24
85.26.228.0/24 maxlen: 24
85.26.229.0/24 maxlen: 24
85.26.230.0/24 maxlen: 24
85.26.231.0/24 maxlen: 24
128.204.66.0/24 maxlen: 24
128.204.67.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
178.176.240.0/22 maxlen: 22
178.176.244.0/22 maxlen: 22
178.177.208.0/21 maxlen: 21
185.210.140.0/23 maxlen: 23
185.210.142.0/23 maxlen: 23
188.162.0.0/24 maxlen: 24
188.162.1.0/24 maxlen: 24
188.162.2.0/23 maxlen: 23
188.162.4.0/22 maxlen: 22
188.162.8.0/23 maxlen: 23
188.162.10.0/23 maxlen: 23
188.162.12.0/23 maxlen: 23
188.162.14.0/23 maxlen: 23
188.162.72.0/22 maxlen: 22
188.162.76.0/23 maxlen: 23
188.162.78.0/24 maxlen: 24
188.162.79.0/24 maxlen: 24
188.162.80.0/24 maxlen: 24
188.162.81.0/24 maxlen: 24
188.162.82.0/24 maxlen: 24
188.162.83.0/24 maxlen: 24
188.162.84.0/24 maxlen: 24
188.162.85.0/24 maxlen: 24
188.162.86.0/24 maxlen: 24
188.162.87.0/24 maxlen: 24
188.162.88.0/24 maxlen: 24
188.162.89.0/24 maxlen: 24
188.162.90.0/23 maxlen: 23
188.162.92.0/22 maxlen: 22
188.170.240.0/22 maxlen: 22
188.170.247.0/24 maxlen: 24
2a03:d000:6400::/40 maxlen: 40
2a03:d000:6500::/40 maxlen: 40
2a03:d000:67fe::/48 maxlen: 48
2a03:d000:67ff::/48 maxlen: 48
2a03:d000:6802::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e7:c7:4b:a0:bb:b5:a0:25:41:0d:a1:e6:dc:ba:9f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 4 05:13:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed6732fdef9fca0b6c9b5ab31cae3b7fdd3f0de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:cf:80:ad:6f:ad:7b:f4:12:02:64:d5:00:
e2:5e:f5:bd:c8:2c:79:82:88:09:76:99:8b:cd:d7:
f7:9f:eb:ae:85:c8:f8:4a:8f:0d:31:41:06:82:38:
55:95:02:e0:6f:fb:75:35:8e:74:df:f2:8f:07:fc:
30:2d:77:b3:a0:37:41:a8:b7:e0:a1:11:de:31:3a:
34:df:c4:ee:5d:ed:41:00:7d:4f:a5:3e:1c:67:ae:
3f:7c:21:a1:c9:fd:18:1c:77:43:9a:b1:40:43:97:
68:21:d3:99:cb:e4:94:1a:70:2b:6d:c3:48:da:73:
d4:92:54:4f:11:81:4f:60:c9:db:68:f4:41:82:79:
f8:66:04:49:9d:75:bf:d7:9f:3f:64:a6:ee:04:48:
92:e2:60:5a:55:21:74:1c:39:03:b0:c6:65:ac:77:
22:33:91:f5:90:15:28:25:02:14:c5:fd:30:80:a9:
ca:0a:da:f4:d5:4a:b0:69:7c:40:79:26:0a:ab:0c:
c9:da:ae:7e:0f:fd:b8:f9:9c:ce:9c:9a:2b:05:b0:
8d:bc:89:b6:c5:95:70:83:53:8a:38:82:92:96:75:
b8:0e:b3:b8:9c:bd:70:14:7d:f0:66:3d:14:50:3a:
eb:1f:9b:9a:46:17:7b:a3:77:e9:24:09:f6:a0:73:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:67:32:FD:EF:9F:CA:0B:6C:9B:5A:B3:1C:AE:3B:7F:DD:3F:0D:E7
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7Wcy_e-fygtsm1qzHK47f90_Dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.232.200.0/24
46.232.202.0/23
78.25.92.0/22
83.149.48.0/22
83.169.248.0/21
85.26.224.0/24
85.26.226.0-85.26.231.255
128.204.66.0/23
178.176.48.0/24
178.176.240.0/21
178.177.208.0/21
185.210.140.0/22
188.162.0.0/20
188.162.72.0-188.162.95.255
188.170.240.0/22
188.170.247.0/24
IPv6:
2a03:d000:6400::/39
2a03:d000:67fe::/47
2a03:d000:6802::/48
Signature Algorithm: sha256WithRSAEncryption
72:8f:98:f9:e8:bb:70:96:92:f8:08:9d:0b:d4:eb:55:61:8b:
b3:0e:61:78:0c:18:ee:84:24:34:ce:e5:d4:34:04:6f:ed:e0:
bc:4c:41:19:26:a8:80:77:af:fb:40:22:11:14:40:0c:ed:4b:
c0:52:67:10:79:c5:b5:b4:b2:b6:2f:a3:01:7e:92:9a:bd:62:
94:bb:fe:ce:dc:d3:94:1c:b9:cd:60:61:b9:39:09:a7:84:48:
33:a5:c3:51:cb:e3:cb:ea:e9:1b:44:fc:f2:26:c7:c4:06:17:
dc:d0:4d:95:99:96:ce:b8:a6:5c:ef:11:f1:bb:3c:33:20:f2:
1e:2d:3f:ba:3f:06:d0:70:95:5a:73:25:af:a1:0d:5b:ae:6e:
1e:f2:78:c7:1e:1a:3a:40:80:74:d6:61:6e:8a:89:9e:d4:f9:
ba:3c:63:23:5b:42:4f:82:92:64:c0:1c:96:c1:e8:73:af:9d:
a9:77:c8:4d:13:04:91:3e:e4:e6:53:91:0a:65:4f:eb:c8:73:
00:f1:3b:b3:ee:53:81:9d:ea:85:db:e6:86:35:c8:2e:7b:a3:
35:7a:2f:2f:8f:b3:fe:0b:48:90:37:b5:99:97:8a:5a:9f:1e:
3a:e6:f6:88:d9:9f:22:11:e9:07:b8:53:b0:40:5a:6a:3b:b1:
94:90:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:51:08 2025 by rpki-client