This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/q7840-8NLfB9rixc3D7BnbwSdDA.roa File: q7840-8NLfB9rixc3D7BnbwSdDA.roa (raw, json) Hash identifier: 0Goj8+TDxdfY7h+CKm9IaOQBi4HU0GNPe4VjB2tB/pg= Subject key identifier: AB:BF:38:D3:EF:0D:2D:F0:7D:AE:2C:5C:DC:3E:C1:9D:BC:12:74:30 Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0 Certificate serial: 019A80FBCF519EFB1057BFD180E57232040E Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/q7840-8NLfB9rixc3D7BnbwSdDA.roa Signing time: Fri 14 Nov 2025 06:09:37 +0000 ROA not before: Fri 14 Nov 2025 06:09:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50477 IP address blocks: 5.149.200.0/22 maxlen: 22 5.149.204.0/22 maxlen: 22 5.149.204.0/24 maxlen: 24 5.149.205.0/24 maxlen: 24 5.149.206.0/24 maxlen: 24 46.19.112.0/23 maxlen: 23 46.19.114.0/24 maxlen: 24 46.19.115.0/24 maxlen: 24 46.19.116.0/22 maxlen: 22 109.236.208.0/23 maxlen: 23 109.236.210.0/24 maxlen: 24 109.236.211.0/24 maxlen: 24 109.236.212.0/22 maxlen: 22 109.236.216.0/21 maxlen: 21 134.19.144.0/21 maxlen: 21 134.19.152.0/24 maxlen: 24 134.19.153.0/24 maxlen: 24 134.19.154.0/23 maxlen: 23 134.19.154.0/24 maxlen: 24 134.19.156.0/22 maxlen: 22 134.19.156.0/23 maxlen: 23 2a04:6000::/29 maxlen: 29 2a04:6006::/32 maxlen: 32 2a04:6007::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:80:fb:cf:51:9e:fb:10:57:bf:d1:80:e5:72:32:04:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0 Validity Not Before: Nov 14 06:09:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=abbf38d3ef0d2df07dae2c5cdc3ec19dbc127430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:39:2e:d7:11:1b:66:80:86:0d:3c:59:13: 89:1f:25:5f:e8:8b:53:1b:3b:25:e6:51:25:5d:e9: 2c:ba:5d:45:58:c1:d5:b2:52:82:e1:03:3c:f8:01: dc:36:39:35:d8:18:10:28:f4:20:e6:ac:11:9e:23: 4e:dc:36:6e:33:c0:fa:53:0a:41:24:8b:a3:4e:51: 1b:b6:49:f0:9c:3c:7a:87:13:c2:6e:1f:a5:7f:ef: be:83:36:0b:ba:d4:ec:88:13:a8:6e:38:18:3f:b1: d6:8b:cd:de:b5:7f:07:2f:c2:f0:fb:5f:0e:ef:2c: c6:29:61:01:0b:0d:89:de:75:9e:63:7e:50:44:2f: dc:86:c5:a8:6f:51:a4:77:43:22:b0:7a:5f:86:52: b2:c6:77:46:db:35:74:9d:42:f5:9f:5f:16:a1:23: 4c:1a:ae:ca:4d:65:90:a4:be:1b:97:5c:cc:00:08: e1:cc:bf:eb:b8:7a:7c:a0:b4:25:5f:49:24:00:06: ab:46:26:0b:4e:21:95:ce:d8:6f:2d:41:4f:fd:f4: 0c:6b:d8:d4:da:b2:c8:16:8f:1c:0d:4c:07:91:7e: 55:99:e4:59:5b:bb:ee:8b:f7:2e:2c:8d:14:1f:39: 0b:98:fc:be:a4:be:9b:c7:0a:e4:bc:22:9c:d3:d4: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BF:38:D3:EF:0D:2D:F0:7D:AE:2C:5C:DC:3E:C1:9D:BC:12:74:30 X509v3 Authority Key Identifier: keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/q7840-8NLfB9rixc3D7BnbwSdDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.200.0/21 46.19.112.0/21 109.236.208.0/20 134.19.144.0/20 IPv6: 2a04:6000::/29 Signature Algorithm: sha256WithRSAEncryption 1c:b1:62:8d:e9:10:02:be:e4:d9:f7:91:98:78:60:f1:b6:e9: 73:9f:52:d4:74:dd:b4:26:9f:92:c9:c7:99:89:46:63:c7:1b: a5:a4:f3:28:d5:09:22:7a:ab:61:cd:5a:ce:b2:e7:9e:0f:7b: 2d:44:9e:ab:5b:b5:5c:ab:3d:48:47:3b:ef:20:b2:42:92:db: 2b:9c:6c:38:3c:fd:b9:e3:83:71:70:5a:73:fa:32:da:b2:43: 1f:5d:96:7a:b4:3c:f0:06:3d:ef:df:11:f5:f7:2d:dc:74:f6: 5f:8e:41:19:ba:b0:1c:b2:54:db:b8:59:3f:2f:6c:17:04:cd: 39:e5:b8:b4:8a:35:ee:56:1d:c4:61:c4:5d:96:6b:eb:d8:0a: 55:b9:a1:c1:7f:07:b9:10:28:60:4d:94:23:75:55:e7:d8:ee: 64:e2:25:82:5c:5c:95:fa:30:f3:a2:74:f3:ce:ab:d4:88:fd: 0a:46:5e:ad:14:47:9b:97:eb:bd:7c:d2:b4:37:5c:40:24:5d: ed:7d:b7:e9:79:d6:9c:0f:e2:ae:95:50:31:ef:5f:0a:d9:cd: 56:72:f6:49:9e:e4:ed:f4:09:9b:41:59:f8:3f:03:0c:ed:a2: 95:c7:38:42:26:4c:57:9d:3d:68:96:7d:36:72:09:0f:5e:c6: f3:06:d1:ef -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZqA+89RnvsQV7/RgOVyMgQOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2U4YzYyMmM4NzUzMmY4YzQ0OWYzNDc0MzNkYWU1MmI3 NzM4ZjAwHhcNMjUxMTE0MDYwOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmJmMzhkM2VmMGQyZGYwN2RhZTJjNWNkYzNlYzE5ZGJjMTI3NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j45LtcRG2aAhg08WROJHyVf6ItT Gzsl5lElXeksul1FWMHVslKC4QM8+AHcNjk12BgQKPQg5qwRniNO3DZuM8D6UwpB JIujTlEbtknwnDx6hxPCbh+lf+++gzYLutTsiBOobjgYP7HWi83etX8HL8Lw+18O 7yzGKWEBCw2J3nWeY35QRC/chsWob1Gkd0MisHpfhlKyxndG2zV0nUL1n18WoSNM Gq7KTWWQpL4bl1zMAAjhzL/ruHp8oLQlX0kkAAarRiYLTiGVzthvLUFP/fQMa9jU 2rLIFo8cDUwHkX5VmeRZW7vui/cuLI0UHzkLmPy+pL6bxwrkvCKc09RRmQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKu/ONPvDS3wfa4sXNw+wZ28EnQwMB8GA1UdIwQY MBaAFEp+jGIsh1MvjESfNHQz2uUrdzjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NDc4MzYtNzgyMi00ZWQ3LTgyOTEt ZGFjMjViMjY2ZDhlLzEvcTc4NDAtOE5MZkI5cml4YzNEN0JuYndTZERBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NDc4MzYtNzgyMi00ZWQ3LTgyOTEtZGFjMjViMjY2ZDhl LzEvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDBZXIAwQD LhNwAwQEbezQAwQEhhOQMA0EAgACMAcDBQMqBGAAMA0GCSqGSIb3DQEBCwUAA4IB AQAcsWKN6RACvuTZ95GYeGDxtulzn1LUdN20Jp+SyceZiUZjxxulpPMo1Qkieqth zVrOsueeD3stRJ6rW7Vcqz1IRzvvILJCktsrnGw4PP2544NxcFpz+jLaskMfXZZ6 tDzwBj3v3xH19y3cdPZfjkEZurAcslTbuFk/L2wXBM055bi0ijXuVh3EYcRdlmvr 2ApVuaHBfwe5EChgTZQjdVXn2O5k4iWCXFyV+jDzonTzzqvUiP0KRl6tFEebl+u9 fNK0N1xAJF3tfbfpedacD+KulVAx718K2c1WcvZJnuTt9AmbQVn4PwMM7aKVxzhC JkxXnT1oln02cgkPXsbzBtHv -----END CERTIFICATE-----Generated at Thu Dec 25 15:38:20 2025 by rpki-client