This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa File: 7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa (raw, json) Hash identifier: hhvez6L7iOSamemiziLCMKx9JI55MAZ7ghp/mQWgqbI= Subject key identifier: EE:74:12:53:72:9C:28:51:B3:36:99:35:4B:D9:BB:3E:0F:D1:DD:00 Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd Certificate serial: 019B77C67CAA88320A85D0F79F8C81B0496C Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13097 IP address blocks: 46.229.80.0/20 maxlen: 20 46.229.80.0/24 maxlen: 24 46.229.81.0/24 maxlen: 24 46.229.82.0/24 maxlen: 24 46.229.83.0/24 maxlen: 24 46.229.84.0/24 maxlen: 24 46.229.85.0/24 maxlen: 24 46.229.86.0/24 maxlen: 24 46.229.87.0/24 maxlen: 24 46.229.88.0/24 maxlen: 24 46.229.89.0/24 maxlen: 24 46.229.90.0/24 maxlen: 24 46.229.91.0/24 maxlen: 24 46.229.92.0/24 maxlen: 24 46.229.93.0/24 maxlen: 24 46.229.94.0/24 maxlen: 24 46.229.95.0/24 maxlen: 24 80.70.116.0/22 maxlen: 22 80.70.116.0/24 maxlen: 24 80.70.117.0/24 maxlen: 24 80.70.118.0/24 maxlen: 24 80.70.119.0/24 maxlen: 24 82.163.32.0/22 maxlen: 22 82.163.32.0/24 maxlen: 24 82.163.33.0/24 maxlen: 24 82.163.34.0/24 maxlen: 24 82.163.35.0/24 maxlen: 24 84.234.100.0/22 maxlen: 22 84.234.100.0/24 maxlen: 24 84.234.101.0/24 maxlen: 24 84.234.102.0/24 maxlen: 24 84.234.103.0/24 maxlen: 24 89.189.32.0/20 maxlen: 20 89.189.32.0/24 maxlen: 24 89.189.33.0/24 maxlen: 24 89.189.34.0/24 maxlen: 24 89.189.35.0/24 maxlen: 24 89.189.36.0/24 maxlen: 24 89.189.37.0/24 maxlen: 24 89.189.38.0/24 maxlen: 24 89.189.39.0/24 maxlen: 24 89.189.40.0/24 maxlen: 24 89.189.41.0/24 maxlen: 24 89.189.42.0/24 maxlen: 24 89.189.43.0/24 maxlen: 24 89.189.44.0/24 maxlen: 24 89.189.45.0/24 maxlen: 24 89.189.46.0/24 maxlen: 24 89.189.47.0/24 maxlen: 24 89.189.56.0/21 maxlen: 21 89.189.56.0/24 maxlen: 24 89.189.57.0/24 maxlen: 24 89.189.58.0/24 maxlen: 24 89.189.59.0/24 maxlen: 24 89.189.60.0/24 maxlen: 24 89.189.61.0/24 maxlen: 24 89.189.62.0/24 maxlen: 24 89.189.63.0/24 maxlen: 24 185.138.36.0/22 maxlen: 22 185.138.36.0/23 maxlen: 23 185.138.36.0/24 maxlen: 24 185.138.37.0/24 maxlen: 24 185.138.38.0/23 maxlen: 23 185.138.38.0/24 maxlen: 24 185.138.39.0/24 maxlen: 24 185.178.12.0/22 maxlen: 22 185.178.12.0/24 maxlen: 24 185.178.13.0/24 maxlen: 24 185.178.14.0/24 maxlen: 24 185.178.15.0/24 maxlen: 24 213.178.192.0/20 maxlen: 20 213.178.192.0/24 maxlen: 24 213.178.193.0/24 maxlen: 24 213.178.194.0/24 maxlen: 24 213.178.195.0/24 maxlen: 24 213.178.196.0/24 maxlen: 24 213.178.197.0/24 maxlen: 24 213.178.198.0/24 maxlen: 24 213.178.199.0/24 maxlen: 24 213.178.200.0/24 maxlen: 24 213.178.201.0/24 maxlen: 24 213.178.202.0/24 maxlen: 24 213.178.203.0/24 maxlen: 24 213.178.204.0/24 maxlen: 24 213.178.205.0/24 maxlen: 24 213.178.206.0/24 maxlen: 24 213.178.207.0/24 maxlen: 24 2a01:7540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7c:aa:88:32:0a:85:d0:f7:9f:8c:81:b0:49:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee741253729c2851b33699354bd9bb3e0fd1dd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c8:d9:97:f9:58:32:2c:47:25:c4:ff:5a:06: 5a:de:33:7a:a2:f9:f0:c5:bb:f5:f9:5b:84:c3:36: 75:f1:be:f4:18:62:e4:77:de:f2:46:85:bd:39:71: f0:13:bc:3a:e7:f1:fb:4b:df:3e:53:c4:69:bb:35: 78:45:ef:b1:cf:f7:73:ef:52:d2:c5:d6:95:3c:cf: 14:5b:99:ea:53:16:7f:01:66:9f:e5:db:10:e2:45: 63:23:69:2e:ce:31:c8:6f:14:40:08:f2:52:9e:f5: cb:78:e5:21:73:db:bf:05:c1:b7:63:fc:b9:b5:a7: 3e:a3:65:46:ca:41:c3:4e:52:1a:28:90:ef:dc:b6: 21:b6:8f:eb:08:68:8a:e7:99:dc:11:44:d8:37:95: de:75:85:e2:da:11:d1:29:17:1f:f7:60:81:95:7a: e9:59:cb:de:79:30:66:02:f3:f9:c0:1a:45:95:23: 4d:fe:1e:40:65:d3:b3:2b:14:f5:73:e3:cf:af:50: 95:72:a6:e3:aa:d1:2c:f3:e6:d9:e4:b7:ac:3d:ee: 1b:1b:0f:8f:93:dc:59:48:db:5d:d9:c6:a6:84:ef: 8e:61:f8:7f:e9:c2:31:9a:00:fb:3d:b5:b6:ef:77: ae:7d:14:f4:c7:63:0b:94:7f:7b:d4:c0:2e:1b:bd: 25:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:74:12:53:72:9C:28:51:B3:36:99:35:4B:D9:BB:3E:0F:D1:DD:00 X509v3 Authority Key Identifier: keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/7nQSU3KcKFGzNpk1S9m7Pg_R3QA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.80.0/20 80.70.116.0/22 82.163.32.0/22 84.234.100.0/22 89.189.32.0/20 89.189.56.0/21 185.138.36.0/22 185.178.12.0/22 213.178.192.0/20 IPv6: 2a01:7540::/32 Signature Algorithm: sha256WithRSAEncryption 4f:60:bf:25:34:e9:55:7f:be:cb:e8:47:6b:ba:00:12:b1:b4: 4c:20:7d:7d:b9:bc:7f:67:2b:b8:5e:2b:b0:d7:14:59:08:f1: fa:21:79:fd:b6:4c:15:94:6d:6c:8e:55:6c:20:6e:7d:14:8a: 30:7b:09:03:50:cf:a3:6b:ee:b7:b1:6d:7f:78:78:0b:c3:36: 43:0f:07:13:d0:7f:8e:20:59:fb:d4:76:35:f5:46:85:b9:cb: 88:de:6d:db:bc:09:e4:c3:39:77:dc:91:0b:86:93:df:95:68: 0f:02:7d:43:86:07:31:6a:75:f3:11:6c:7f:ef:ee:c8:19:83: 8a:e4:2f:40:63:7d:dd:3f:00:c5:3a:89:0b:e3:cd:b5:78:a0: ac:41:a0:4b:2d:8c:93:e4:a7:ee:eb:3c:02:f4:61:89:3a:4d: a0:30:e7:03:f2:a2:a3:9f:2a:7e:0f:0c:72:a9:3a:23:f4:81: b5:74:c2:30:72:38:2e:3b:c3:4f:dd:c3:6c:2b:61:65:e6:fc: b4:0a:6b:5a:4b:3c:c3:5c:f3:6b:61:bc:d7:61:84:27:e4:c0: 48:5b:0b:6c:9f:15:f2:e6:4e:66:52:a9:44:0d:2e:61:04:1d: 83:95:3c:45:ec:ff:26:b0:96:8c:d4:2f:b5:db:6b:94:66:4d: 67:c4:ea:55 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt3xnyqiDIKhdD3n4yBsElsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOTQ5YjQ3ZGYzMTNjYmFiOTQ1MmRhOThmY2M2Mzc2MDhh OTA5YmQwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTc0MTI1MzcyOWMyODUxYjMzNjk5MzU0YmQ5YmIzZTBmZDFkZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38jZl/lYMixHJcT/WgZa3jN6ovnw xbv1+VuEwzZ18b70GGLkd97yRoW9OXHwE7w65/H7S98+U8RpuzV4Re+xz/dz71LS xdaVPM8UW5nqUxZ/AWaf5dsQ4kVjI2kuzjHIbxRACPJSnvXLeOUhc9u/BcG3Y/y5 tac+o2VGykHDTlIaKJDv3LYhto/rCGiK55ncEUTYN5XedYXi2hHRKRcf92CBlXrp WcveeTBmAvP5wBpFlSNN/h5AZdOzKxT1c+PPr1CVcqbjqtEs8+bZ5LesPe4bGw+P k9xZSNtd2camhO+OYfh/6cIxmgD7PbW273eufRT0x2MLlH971MAuG70ldwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFO50ElNynChRszaZNUvZuz4P0d0AMB8GA1UdIwQY MBaAFHGUm0ffMTy6uUUtqY/MY3YIqQm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgt MDA2NmY1NDFmYWVhLzEvN25RU1UzS2NLRkd6TnBrMVM5bTdQZ19SM1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iMzNhNzgtYTUxZS00NmU0LTg2NDgtMDA2NmY1NDFmYWVh LzEvY1pTYlI5OHhQTHE1UlMycGo4eGpkZ2lwQ2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQELuVQAwQC UEZ0AwQCUqMgAwQCVOpkAwQEWb0gAwQDWb04AwQCuYokAwQCubIMAwQE1bLAMA0E AgACMAcDBQAqAXVAMA0GCSqGSIb3DQEBCwUAA4IBAQBPYL8lNOlVf77L6EdrugAS sbRMIH19ubx/Zyu4Xiuw1xRZCPH6IXn9tkwVlG1sjlVsIG59FIowewkDUM+ja+63 sW1/eHgLwzZDDwcT0H+OIFn71HY19UaFucuI3m3bvAnkwzl33JELhpPflWgPAn1D hgcxanXzEWx/7+7IGYOK5C9AY33dPwDFOokL4821eKCsQaBLLYyT5Kfu6zwC9GGJ Ok2gMOcD8qKjnyp+DwxyqToj9IG1dMIwcjguO8NP3cNsK2Fl5vy0CmtaSzzDXPNr YbzXYYQn5MBIWwtsnxXy5k5mUqlEDS5hBB2DlTxF7P8msJaM1C+122uUZk1nxOpV -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:44 2026 by rpki-client