This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/m7HwybdiPGFWv-KxpiFIAeDc2hA.roa File: m7HwybdiPGFWv-KxpiFIAeDc2hA.roa (raw, json) Hash identifier: qaCqJ2OehDpyBjrRuAzdPAOS4B3DtTV2bEBs1eCR7UY= Subject key identifier: 9B:B1:F0:C9:B7:62:3C:61:56:BF:E2:B1:A6:21:48:01:E0:DC:DA:10 Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Certificate serial: 019A7194A300FD8374B567795376F94EC539 Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/m7HwybdiPGFWv-KxpiFIAeDc2hA.roa Signing time: Tue 11 Nov 2025 06:22:37 +0000 ROA not before: Tue 11 Nov 2025 06:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62442 IP address blocks: 78.157.32.0/19 maxlen: 19 78.157.32.0/24 maxlen: 24 78.157.34.0/24 maxlen: 24 78.157.35.0/24 maxlen: 24 78.157.36.0/24 maxlen: 24 78.157.37.0/24 maxlen: 24 78.157.38.0/24 maxlen: 24 78.157.39.0/24 maxlen: 24 78.157.40.0/24 maxlen: 24 78.157.41.0/24 maxlen: 24 78.157.42.0/24 maxlen: 24 78.157.43.0/24 maxlen: 24 78.157.44.0/24 maxlen: 24 78.157.45.0/24 maxlen: 24 78.157.46.0/24 maxlen: 24 78.157.47.0/24 maxlen: 24 78.157.48.0/21 maxlen: 21 78.157.48.0/24 maxlen: 24 78.157.49.0/24 maxlen: 24 78.157.50.0/24 maxlen: 24 78.157.51.0/24 maxlen: 24 78.157.52.0/24 maxlen: 24 78.157.53.0/24 maxlen: 24 78.157.54.0/23 maxlen: 23 78.157.54.0/24 maxlen: 24 78.157.55.0/24 maxlen: 24 78.157.56.0/21 maxlen: 21 78.157.56.0/24 maxlen: 24 78.157.57.0/24 maxlen: 24 78.157.58.0/24 maxlen: 24 78.157.59.0/24 maxlen: 24 78.157.60.0/23 maxlen: 23 78.157.60.0/24 maxlen: 24 78.157.61.0/24 maxlen: 24 78.157.62.0/24 maxlen: 24 78.157.63.0/24 maxlen: 24 89.221.84.0/22 maxlen: 22 89.221.88.0/21 maxlen: 21 89.221.88.0/24 maxlen: 24 185.222.210.0/24 maxlen: 24 2a10:8180::/29 maxlen: 29 2a10:8180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:94:a3:00:fd:83:74:b5:67:79:53:76:f9:4e:c5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2 Validity Not Before: Nov 11 06:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9bb1f0c9b7623c6156bfe2b1a6214801e0dcda10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:35:5c:7a:f9:eb:38:3a:9b:79:59:67:20: 27:e1:46:08:43:15:16:2f:4d:f3:a5:4e:d5:5a:76: 86:93:31:7d:54:70:3b:07:bf:c1:fb:bc:f3:25:8e: 61:77:ec:8f:91:cc:35:e4:d2:45:5a:17:6b:13:67: fc:a8:27:42:db:0e:03:9d:20:88:6d:50:6c:2f:8e: 23:18:d8:3a:0b:a6:31:5a:df:bb:81:c0:0b:be:2d: 6c:9b:dc:f3:3d:1a:b1:b4:74:c5:83:e1:77:f4:17: 9b:92:c0:ae:11:bf:d5:0f:43:f8:b9:3c:e6:1b:4c: 95:77:71:63:da:cb:29:75:7e:78:af:c5:a7:4d:20: 59:9c:e5:08:56:58:4b:4b:84:00:80:c5:29:21:71: a8:26:5f:19:d2:80:48:9e:a5:00:45:be:4b:a7:87: 7f:21:19:93:78:ce:63:3b:0b:46:26:00:0f:e5:b6: b0:37:4a:37:6d:2f:17:5e:2a:a0:45:56:81:f7:ba: 99:74:5c:2b:55:26:ae:20:10:44:ef:c0:20:8c:bb: 36:69:f0:ca:fe:97:61:44:c8:40:2b:83:24:fa:2a: 7e:40:7e:29:00:c5:63:4d:11:6c:7d:e4:7c:bc:fe: ad:d3:68:a2:0d:48:29:e3:da:1e:86:9a:aa:25:d9: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:F0:C9:B7:62:3C:61:56:BF:E2:B1:A6:21:48:01:E0:DC:DA:10 X509v3 Authority Key Identifier: keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/m7HwybdiPGFWv-KxpiFIAeDc2hA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.157.32.0/19 89.221.84.0-89.221.95.255 185.222.210.0/24 IPv6: 2a10:8180::/29 Signature Algorithm: sha256WithRSAEncryption 7d:14:58:7d:9a:ef:f4:9a:86:17:34:c8:eb:b7:13:2e:13:99: 34:9a:fa:3a:68:2b:e3:fc:e1:f8:4f:ed:42:6b:ab:e6:10:18: ed:83:d5:86:78:5e:aa:bb:27:a5:3c:3b:52:d3:4d:99:5f:8a: 06:1b:fe:1d:ec:93:7f:a9:8a:35:bb:a8:43:6f:c1:81:e9:3d: 60:a1:d0:54:71:a7:2f:c1:25:44:9f:f2:4c:6c:90:35:41:33: 1d:b6:9f:bd:39:3f:bc:33:e2:9a:4e:17:e4:32:de:cc:74:54: e6:f5:7b:52:bc:59:ed:08:d5:8c:6e:83:7f:b3:58:a1:45:3d: e1:12:5e:41:08:23:0f:e2:5b:b6:c5:61:38:ab:03:69:25:1a: 11:27:03:f1:9b:7c:f3:80:25:f2:79:6c:a2:b1:2a:c7:ac:f9: 78:c1:fa:52:52:02:28:0f:9f:7f:17:50:f2:30:8f:fa:3d:49: 82:3e:f2:93:aa:96:95:60:90:15:cb:cf:7d:fb:89:9a:c9:d3: 1d:fa:47:68:6b:49:51:5e:4b:f5:c9:27:75:4c:61:98:83:c7: 48:c8:fc:74:ad:21:4a:0c:c7:6f:bc:b9:0f:7d:43:09:99:6b: e5:a6:6c:27:7c:10:ad:c0:32:48:18:e6:b9:e9:73:f9:00:e0: 32:51:48:10 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZpxlKMA/YN0tWd5U3b5TsU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj NWZlYzIwHhcNMjUxMTExMDYyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmIxZjBjOWI3NjIzYzYxNTZiZmUyYjFhNjIxNDgwMWUwZGNkYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoc1XHr56zg6m3lZZyAn4UYIQxUW L03zpU7VWnaGkzF9VHA7B7/B+7zzJY5hd+yPkcw15NJFWhdrE2f8qCdC2w4DnSCI bVBsL44jGNg6C6YxWt+7gcALvi1sm9zzPRqxtHTFg+F39BebksCuEb/VD0P4uTzm G0yVd3Fj2sspdX54r8WnTSBZnOUIVlhLS4QAgMUpIXGoJl8Z0oBInqUARb5Lp4d/ IRmTeM5jOwtGJgAP5bawN0o3bS8XXiqgRVaB97qZdFwrVSauIBBE78AgjLs2afDK /pdhRMhAK4Mk+ip+QH4pAMVjTRFsfeR8vP6t02iiDUgp49oehpqqJdkNfQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFJux8Mm3YjxhVr/isaYhSAHg3NoQMB8GA1UdIwQY MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt YTNhMTNlM2E3ZDgwLzEvbTdId3liZGlQR0ZXdi1LeHBpRklBZURjMmhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQFTp0gMAwD BAJZ3VQDBAVZ3UADBAC53tIwDQQCAAIwBwMFAyoQgYAwDQYJKoZIhvcNAQELBQAD ggEBAH0UWH2a7/Sahhc0yOu3Ey4TmTSa+jpoK+P84fhP7UJrq+YQGO2D1YZ4Xqq7 J6U8O1LTTZlfigYb/h3sk3+pijW7qENvwYHpPWCh0FRxpy/BJUSf8kxskDVBMx22 n705P7wz4ppOF+Qy3sx0VOb1e1K8We0I1Yxug3+zWKFFPeESXkEIIw/iW7bFYTir A2klGhEnA/GbfPOAJfJ5bKKxKses+XjB+lJSAigPn38XUPIwj/o9SYI+8pOqlpVg kBXLz337iZrJ0x36R2hrSVFeS/XJJ3VMYZiDx0jI/HStIUoMx2+8uQ99QwmZa+Wm bCd8EK3AMkgY5rnpc/kA4DJRSBA= -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:38 2025 by rpki-client