This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/s-3_7SLohdNO9CZebABAAjYAEe4.roa File: s-3_7SLohdNO9CZebABAAjYAEe4.roa (raw, json) Hash identifier: 5YasfnOm1GMk2+ySHxzGIst4/B/nGVawjF4KtTFhX8I= Subject key identifier: B3:ED:FF:ED:22:E8:85:D3:4E:F4:26:5E:6C:00:40:02:36:00:11:EE Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd Certificate serial: 019AEEA0D8D9F733780A8DD6829534FE247A Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/s-3_7SLohdNO9CZebABAAjYAEe4.roa Signing time: Fri 05 Dec 2025 13:08:30 +0000 ROA not before: Fri 05 Dec 2025 13:08:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21430 IP address blocks: 31.7.240.0/21 maxlen: 21 77.78.64.0/22 maxlen: 22 77.78.68.0/23 maxlen: 23 77.78.74.0/23 maxlen: 23 77.78.80.0/21 maxlen: 21 77.78.88.0/23 maxlen: 23 77.78.91.0/24 maxlen: 24 77.78.92.0/23 maxlen: 24 77.78.122.0/24 maxlen: 24 80.250.0.0/19 maxlen: 19 81.0.196.0/23 maxlen: 23 81.0.198.0/24 maxlen: 24 81.0.200.0/22 maxlen: 22 81.0.204.0/23 maxlen: 23 81.0.210.0/23 maxlen: 23 81.0.215.0/24 maxlen: 24 81.0.216.0/24 maxlen: 24 81.0.222.0/23 maxlen: 23 81.0.224.0/24 maxlen: 24 81.0.227.0/24 maxlen: 24 81.0.229.0/24 maxlen: 24 81.0.244.0/23 maxlen: 23 81.0.251.0/24 maxlen: 24 81.0.252.0/23 maxlen: 23 82.208.0.0/22 maxlen: 22 82.208.13.0/24 maxlen: 24 82.208.15.0/24 maxlen: 24 82.208.19.0/24 maxlen: 24 82.208.24.0/23 maxlen: 23 82.208.30.0/23 maxlen: 24 82.208.36.0/23 maxlen: 23 82.208.38.0/24 maxlen: 24 82.208.42.0/23 maxlen: 23 82.208.45.0/24 maxlen: 24 82.208.51.0/24 maxlen: 24 82.208.52.0/22 maxlen: 22 82.208.57.0/24 maxlen: 24 82.208.59.0/24 maxlen: 24 83.136.200.0/21 maxlen: 21 85.239.224.0/23 maxlen: 23 85.239.226.0/24 maxlen: 24 85.239.228.0/23 maxlen: 23 85.239.251.0/24 maxlen: 24 85.239.254.0/23 maxlen: 23 109.123.200.0/23 maxlen: 23 109.123.201.0/24 maxlen: 24 109.123.204.0/24 maxlen: 24 109.123.212.0/23 maxlen: 23 109.123.226.0/24 maxlen: 24 147.161.28.0/22 maxlen: 24 185.33.136.0/22 maxlen: 22 185.161.240.0/22 maxlen: 22 217.11.226.0/24 maxlen: 24 217.11.231.0/24 maxlen: 24 217.11.234.0/24 maxlen: 24 217.11.237.0/24 maxlen: 24 217.11.238.0/23 maxlen: 23 217.11.240.0/23 maxlen: 23 217.11.244.0/24 maxlen: 24 217.11.250.0/24 maxlen: 24 217.11.252.0/23 maxlen: 23 217.11.255.0/24 maxlen: 24 2a01:6400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:a0:d8:d9:f7:33:78:0a:8d:d6:82:95:34:fe:24:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd Validity Not Before: Dec 5 13:08:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3edffed22e885d34ef4265e6c004002360011ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:ae:75:df:6b:99:c2:91:6b:93:f1:22:41: 25:a7:47:27:e6:07:61:f3:24:1f:a1:64:01:34:b0: 58:77:32:39:dc:9b:df:a3:a6:9d:57:fe:55:65:71: 69:60:ab:25:4a:d3:11:70:20:67:76:f1:19:6c:bb: 60:05:e4:0b:ce:81:b4:fb:e8:7d:b3:32:4c:f9:0f: e5:72:18:5b:8a:dd:b2:77:c6:27:31:62:67:a2:61: ba:2c:87:8e:e6:4c:97:f9:1f:00:5c:6b:1e:b7:41: ad:90:05:98:36:d8:36:34:e2:a8:4c:50:92:80:e6: c5:cf:b7:4c:2f:f9:03:e5:de:c1:a4:49:e6:65:d9: 6b:1c:a2:1b:cd:3a:01:cd:24:e2:d2:53:b0:85:38: 00:b6:75:e3:6b:2c:70:04:5a:1a:cc:ae:cc:e3:63: 9b:33:4b:a0:f0:c8:87:37:c0:23:85:57:a7:0f:21: 2e:22:c9:bc:f6:d2:5e:e7:70:f4:c6:44:d6:3b:38: 00:92:00:7f:a3:7b:6f:d5:69:f0:46:64:af:cb:0e: ca:e4:b8:ff:5a:a5:64:15:71:b8:21:17:8f:4b:d5: 9b:9d:9f:8c:1b:87:e4:d9:e5:f4:88:ec:ae:37:df: 24:66:f3:e3:b6:1d:96:7f:79:8c:ba:ca:82:b4:c2: cb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:ED:FF:ED:22:E8:85:D3:4E:F4:26:5E:6C:00:40:02:36:00:11:EE X509v3 Authority Key Identifier: keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/s-3_7SLohdNO9CZebABAAjYAEe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.240.0/21 77.78.64.0-77.78.69.255 77.78.74.0/23 77.78.80.0-77.78.89.255 77.78.91.0-77.78.93.255 77.78.122.0/24 80.250.0.0/19 81.0.196.0-81.0.198.255 81.0.200.0-81.0.205.255 81.0.210.0/23 81.0.215.0-81.0.216.255 81.0.222.0-81.0.224.255 81.0.227.0/24 81.0.229.0/24 81.0.244.0/23 81.0.251.0-81.0.253.255 82.208.0.0/22 82.208.13.0/24 82.208.15.0/24 82.208.19.0/24 82.208.24.0/23 82.208.30.0/23 82.208.36.0-82.208.38.255 82.208.42.0/23 82.208.45.0/24 82.208.51.0-82.208.55.255 82.208.57.0/24 82.208.59.0/24 83.136.200.0/21 85.239.224.0-85.239.226.255 85.239.228.0/23 85.239.251.0/24 85.239.254.0/23 109.123.200.0/23 109.123.204.0/24 109.123.212.0/23 109.123.226.0/24 147.161.28.0/22 185.33.136.0/22 185.161.240.0/22 217.11.226.0/24 217.11.231.0/24 217.11.234.0/24 217.11.237.0-217.11.241.255 217.11.244.0/24 217.11.250.0/24 217.11.252.0/23 217.11.255.0/24 IPv6: 2a01:6400::/32 Signature Algorithm: sha256WithRSAEncryption 82:a1:bd:1e:39:5c:92:28:ae:19:57:aa:4f:d5:44:07:9c:1d: 0f:b8:ef:b8:13:c3:3d:04:e1:88:db:0d:f9:ec:ad:b8:af:5a: ea:73:28:e4:eb:43:4a:b4:4d:fc:a1:4d:07:a2:41:5b:be:ee: 20:39:64:aa:20:6e:af:f4:6b:d5:24:82:08:6b:69:d2:4a:68: c1:80:9b:80:3d:7a:2e:24:2d:78:56:92:35:61:ea:6a:18:bb: b8:42:4e:a9:27:a5:82:99:11:64:67:35:e6:17:48:45:03:c9: 23:44:a7:3e:fb:ba:62:5a:d5:1a:54:b0:61:fe:f8:44:a1:3e: a4:49:b5:9b:5c:59:52:14:05:18:d7:68:be:7e:a9:4d:d9:ec: bd:06:70:27:35:ee:55:87:06:b8:9b:40:f2:a5:46:79:69:34: 37:c1:48:08:61:50:c3:8e:d2:70:2d:ff:92:49:54:d4:c4:13: a7:44:db:87:79:39:e9:c5:b0:10:0a:40:36:01:cd:7a:08:04: 5d:41:a0:67:44:b5:db:8d:b9:7b:ef:00:89:90:9d:c6:28:05: dc:06:08:92:00:18:6b:bc:a7:88:33:0d:16:12:05:d8:33:c5: 6d:d4:b1:25:e5:08:03:11:56:86:59:27:de:df:70:33:4e:fc: 87:1a:1a:4d -----BEGIN CERTIFICATE----- MIIGkDCCBXigAwIBAgISAZruoNjZ9zN4Co3WgpU0/iR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl YjhmZmQwHhcNMjUxMjA1MTMwODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2VkZmZlZDIyZTg4NWQzNGVmNDI2NWU2YzAwNDAwMjM2MDAxMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBqudd9rmcKRa5PxIkElp0cn5gdh 8yQfoWQBNLBYdzI53Jvfo6adV/5VZXFpYKslStMRcCBndvEZbLtgBeQLzoG0++h9 szJM+Q/lchhbit2yd8YnMWJnomG6LIeO5kyX+R8AXGset0GtkAWYNtg2NOKoTFCS gObFz7dML/kD5d7BpEnmZdlrHKIbzToBzSTi0lOwhTgAtnXjayxwBFoazK7M42Ob M0ug8MiHN8AjhVenDyEuIsm89tJe53D0xkTWOzgAkgB/o3tv1WnwRmSvyw7K5Lj/ WqVkFXG4IRePS9WbnZ+MG4fk2eX0iOyuN98kZvPjth2Wf3mMusqCtMLLRQIDAQAB o4IDnDCCA5gwHQYDVR0OBBYEFLPt/+0i6IXTTvQmXmwAQAI2ABHuMB8GA1UdIwQY MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt ZGEyZWM4Y2ZiODg4LzEvcy0zXzdTTG9oZE5POUNaZWJBQkFBallBRWU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4 LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBsAYIKwYBBQUHAQcBAf8EggGfMIIBmzCCAYgEAgABMIIB gAMEAx8H8DAMAwQGTU5AAwQBTU5EAwQBTU5KMAwDBARNTlADBAFNTlgwDAMEAE1O WwMEAU1OXAMEAE1OegMEBVD6ADAMAwQCUQDEAwQAUQDGMAwDBANRAMgDBAFRAMwD BAFRANIwDAMEAFEA1wMEAFEA2DAMAwQBUQDeAwQAUQDgAwQAUQDjAwQAUQDlAwQB UQD0MAwDBABRAPsDBAFRAPwDBAJS0AADBABS0A0DBABS0A8DBABS0BMDBAFS0BgD BAFS0B4wDAMEAlLQJAMEAFLQJgMEAVLQKgMEAFLQLTAMAwQAUtAzAwQDUtAwAwQA UtA5AwQAUtA7AwQDU4jIMAwDBAVV7+ADBABV7+IDBAFV7+QDBABV7/sDBAFV7/4D BAFte8gDBABte8wDBAFte9QDBABte+IDBAKToRwDBAK5IYgDBAK5ofADBADZC+ID BADZC+cDBADZC+owDAMEANkL7QMEAdkL8AMEANkL9AMEANkL+gMEAdkL/AMEANkL /zANBAIAAjAHAwUAKgFkADANBgkqhkiG9w0BAQsFAAOCAQEAgqG9HjlckiiuGVeq T9VEB5wdD7jvuBPDPQThiNsN+eytuK9a6nMo5OtDSrRN/KFNB6JBW77uIDlkqiBu r/Rr1SSCCGtp0kpowYCbgD16LiQteFaSNWHqahi7uEJOqSelgpkRZGc15hdIRQPJ I0SnPvu6YlrVGlSwYf74RKE+pEm1m1xZUhQFGNdovn6pTdnsvQZwJzXuVYcGuJtA 8qVGeWk0N8FICGFQw47ScC3/kklU1MQTp0Tbh3k56cWwEApANgHNeggEXUGgZ0S1 2425e+8AiZCdxigF3AYIkgAYa7yniDMNFhIF2DPFbdSxJeUIAxFWhlkn3t9wM078 hxoaTQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:33 2025 by rpki-client