This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/erTAPqZCnG-ADp155VzeNpjbubc.roa File: erTAPqZCnG-ADp155VzeNpjbubc.roa (raw, json) Hash identifier: CL7TbVex5VRBUEC+MsrqLt2qzxwDmZE9xjvrEm5D+pg= Subject key identifier: 7A:B4:C0:3E:A6:42:9C:6F:80:0E:9D:79:E5:5C:DE:36:98:DB:B9:B7 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C7652C06D4CFB1B751E84C18673986 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/erTAPqZCnG-ADp155VzeNpjbubc.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31205 IP address blocks: 31.173.240.0/23 maxlen: 23 31.173.242.0/23 maxlen: 23 31.173.244.0/22 maxlen: 22 37.29.86.0/23 maxlen: 23 46.232.200.0/24 maxlen: 24 46.232.202.0/23 maxlen: 23 78.25.92.0/23 maxlen: 23 78.25.94.0/23 maxlen: 23 83.149.48.0/24 maxlen: 24 83.149.49.0/24 maxlen: 24 83.149.50.0/24 maxlen: 24 83.149.51.0/24 maxlen: 24 83.169.248.0/22 maxlen: 22 83.169.252.0/22 maxlen: 22 85.26.224.0/24 maxlen: 24 85.26.226.0/24 maxlen: 24 85.26.227.0/24 maxlen: 24 85.26.228.0/24 maxlen: 24 85.26.229.0/24 maxlen: 24 85.26.230.0/24 maxlen: 24 85.26.231.0/24 maxlen: 24 128.204.66.0/24 maxlen: 24 128.204.67.0/24 maxlen: 24 178.176.48.0/24 maxlen: 24 178.176.240.0/22 maxlen: 22 178.176.244.0/22 maxlen: 22 178.177.208.0/21 maxlen: 21 178.178.200.0/24 maxlen: 24 185.210.140.0/23 maxlen: 23 185.210.142.0/23 maxlen: 23 188.162.0.0/24 maxlen: 24 188.162.1.0/24 maxlen: 24 188.162.2.0/23 maxlen: 23 188.162.4.0/22 maxlen: 22 188.162.8.0/23 maxlen: 23 188.162.10.0/23 maxlen: 23 188.162.12.0/23 maxlen: 23 188.162.14.0/23 maxlen: 23 188.162.72.0/22 maxlen: 22 188.162.76.0/23 maxlen: 23 188.162.78.0/24 maxlen: 24 188.162.79.0/24 maxlen: 24 188.162.80.0/24 maxlen: 24 188.162.81.0/24 maxlen: 24 188.162.82.0/24 maxlen: 24 188.162.83.0/24 maxlen: 24 188.162.84.0/24 maxlen: 24 188.162.85.0/24 maxlen: 24 188.162.86.0/24 maxlen: 24 188.162.87.0/24 maxlen: 24 188.162.88.0/24 maxlen: 24 188.162.89.0/24 maxlen: 24 188.162.90.0/23 maxlen: 23 188.162.92.0/22 maxlen: 22 188.170.240.0/22 maxlen: 22 188.170.247.0/24 maxlen: 24 2a03:d000:6400::/40 maxlen: 40 2a03:d000:6500::/40 maxlen: 40 2a03:d000:67fe::/48 maxlen: 48 2a03:d000:67ff::/48 maxlen: 48 2a03:d000:6802::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:65:2c:06:d4:cf:b1:b7:51:e8:4c:18:67:39:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ab4c03ea6429c6f800e9d79e55cde3698dbb9b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:6e:f9:2a:61:c3:05:3a:5c:4c:2e:d9:e2: 4f:5a:4a:c0:76:c6:c9:41:bc:84:ca:8e:4a:f9:74: 96:0c:db:40:7e:53:ab:41:dc:a9:6f:73:cc:34:6a: 93:36:10:81:93:d2:33:75:78:11:31:17:3a:ef:9a: cf:e7:aa:ef:2b:c0:b1:25:5f:81:0d:2c:99:16:03: 02:c0:dd:d1:ba:fe:47:dc:fe:18:9f:d7:56:6f:8e: 51:98:fc:4e:d1:61:cb:5c:72:18:96:33:bd:46:c9: fd:04:eb:11:13:d4:47:0c:67:36:c1:9e:dc:43:66: a6:49:b9:d7:56:6c:db:27:fa:29:87:37:a4:43:79: aa:95:52:6e:70:ca:93:8d:45:3f:93:24:20:d9:11: 78:86:68:2e:23:c4:0b:9d:c5:4a:24:d6:f7:d8:26: d6:b6:00:a3:ba:ca:96:89:b1:93:73:3e:bb:c3:f2: e6:6e:49:86:3d:6d:0a:b2:e9:12:00:cd:4a:36:f2: 6d:55:c1:cf:73:5a:0f:b8:df:f0:bd:d7:e8:2a:3a: 72:72:23:5c:4b:c0:52:d2:d2:87:9d:9b:87:e8:1d: c4:ab:2c:4b:00:58:f8:0f:43:f0:68:43:ae:48:fb: 9a:e5:ca:be:62:da:3a:03:f4:4e:51:10:ea:61:e1: f6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:C0:3E:A6:42:9C:6F:80:0E:9D:79:E5:5C:DE:36:98:DB:B9:B7 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/erTAPqZCnG-ADp155VzeNpjbubc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.173.240.0/21 37.29.86.0/23 46.232.200.0/24 46.232.202.0/23 78.25.92.0/22 83.149.48.0/22 83.169.248.0/21 85.26.224.0/24 85.26.226.0-85.26.231.255 128.204.66.0/23 178.176.48.0/24 178.176.240.0/21 178.177.208.0/21 178.178.200.0/24 185.210.140.0/22 188.162.0.0/20 188.162.72.0-188.162.95.255 188.170.240.0/22 188.170.247.0/24 IPv6: 2a03:d000:6400::/39 2a03:d000:67fe::/47 2a03:d000:6802::/48 Signature Algorithm: sha256WithRSAEncryption 43:b2:54:11:19:7d:00:aa:20:09:cb:b8:80:7c:b6:9e:af:06: 2c:35:d1:a9:29:39:24:6c:ff:eb:b8:1e:21:67:b5:6c:37:db: 71:00:bd:00:2a:8d:01:76:c5:88:90:3b:49:39:f7:a8:0a:d1: ef:ed:4f:7a:50:b5:db:b8:51:ea:df:1b:94:db:c5:e2:44:3d: 01:8d:f9:8a:85:b1:37:10:8f:c6:55:81:87:6c:8a:0c:0c:e1: 88:55:e4:83:d0:30:07:86:11:ae:39:85:2d:c4:65:cc:4c:9f: 26:83:6d:ac:06:79:77:67:65:9c:a3:cf:46:c1:21:99:df:ac: 50:91:01:c2:68:63:6a:f5:7c:79:03:ff:1a:03:72:d2:78:56: 1d:d1:fc:9c:4c:e0:14:5a:9e:35:86:47:03:96:4f:6a:ac:db: f3:65:43:f5:4b:91:34:9b:46:00:a2:8c:7b:f7:97:28:0f:bf: fd:b3:c5:aa:1a:8a:66:6c:17:e0:f0:43:cb:f4:c7:1e:e3:56: 5d:69:9f:86:2a:74:21:3d:51:f4:6f:1b:3b:34:9c:d6:60:7a: bd:a2:8b:87:60:38:68:65:a4:3f:36:fd:55:ce:cd:df:ec:bc: 05:16:27:3e:03:bf:7c:91:03:06:be:2b:af:23:a2:00:6b:5d: ff:f0:c6:28 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt3x2UsBtTPsbdR6EwYZzmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWI0YzAzZWE2NDI5YzZmODAwZTlkNzllNTVjZGUzNjk4ZGJiOWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOJu+SphwwU6XEwu2eJPWkrAdsbJ QbyEyo5K+XSWDNtAflOrQdypb3PMNGqTNhCBk9IzdXgRMRc675rP56rvK8CxJV+B DSyZFgMCwN3Ruv5H3P4Yn9dWb45RmPxO0WHLXHIYljO9Rsn9BOsRE9RHDGc2wZ7c Q2amSbnXVmzbJ/ophzekQ3mqlVJucMqTjUU/kyQg2RF4hmguI8QLncVKJNb32CbW tgCjusqWibGTcz67w/LmbkmGPW0KsukSAM1KNvJtVcHPc1oPuN/wvdfoKjpyciNc S8BS0tKHnZuH6B3EqyxLAFj4D0PwaEOuSPua5cq+Yto6A/ROURDqYeH2MQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFHq0wD6mQpxvgA6deeVc3jaY27m3MB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvZXJUQVBxWkNuRy1BRHAxNTVWemVOcGpidWJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBiQQCAAEwgYIDBAMf rfADBAElHVYDBAAu6MgDBAEu6MoDBAJOGVwDBAJTlTADBANTqfgDBABVGuAwDAME AVUa4gMEA1Ua4AMEAYDMQgMEALKwMAMEA7Kw8AMEA7Kx0AMEALKyyAMEArnSjAME BLyiADAMAwQDvKJIAwQFvKJAAwQCvKrwAwQAvKr3MCAEAgACMBoDBgEqA9AAZAMH ASoD0ABn/gMHACoD0ABoAjANBgkqhkiG9w0BAQsFAAOCAQEAQ7JUERl9AKogCcu4 gHy2nq8GLDXRqSk5JGz/67geIWe1bDfbcQC9ACqNAXbFiJA7STn3qArR7+1PelC1 27hR6t8blNvF4kQ9AY35ioWxNxCPxlWBh2yKDAzhiFXkg9AwB4YRrjmFLcRlzEyf JoNtrAZ5d2dlnKPPRsEhmd+sUJEBwmhjavV8eQP/GgNy0nhWHdH8nEzgFFqeNYZH A5ZPaqzb82VD9UuRNJtGAKKMe/eXKA+//bPFqhqKZmwX4PBDy/THHuNWXWmfhip0 IT1R9G8bOzSc1mB6vaKLh2A4aGWkPzb9Vc7N3+y8BRYnPgO/fJEDBr4rryOiAGtd //DGKA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:04 2026 by rpki-client