This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/85g2kVlw-PgdqHeeR9eVh-mfFSA.roa File: 85g2kVlw-PgdqHeeR9eVh-mfFSA.roa (raw, json) Hash identifier: oQm3CbtlDIgURUMJx9pEjjzjgEzQrMItwbw8AbxJLEg= Subject key identifier: F3:98:36:91:59:70:F8:F8:1D:A8:77:9E:47:D7:95:87:E9:9F:15:20 Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862 Certificate serial: 019AE35A779A09425EC15538F234B1A18AA9 Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/85g2kVlw-PgdqHeeR9eVh-mfFSA.roa Signing time: Wed 03 Dec 2025 08:35:48 +0000 ROA not before: Wed 03 Dec 2025 08:35:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47583 IP address blocks: 31.97.0.0/23 maxlen: 24 31.97.2.0/24 maxlen: 24 31.97.3.0/24 maxlen: 24 31.97.4.0/22 maxlen: 24 31.97.8.0/21 maxlen: 24 31.97.16.0/20 maxlen: 24 31.97.32.0/21 maxlen: 24 31.97.40.0/22 maxlen: 24 31.97.44.0/22 maxlen: 24 31.97.48.0/22 maxlen: 24 31.97.52.0/22 maxlen: 24 31.97.56.0/22 maxlen: 24 31.97.60.0/22 maxlen: 24 31.97.64.0/24 maxlen: 24 31.97.65.0/24 maxlen: 24 31.97.66.0/23 maxlen: 24 31.97.68.0/23 maxlen: 24 31.97.70.0/23 maxlen: 24 31.97.72.0/22 maxlen: 24 31.97.76.0/22 maxlen: 24 31.97.80.0/20 maxlen: 24 31.97.96.0/21 maxlen: 24 31.97.104.0/21 maxlen: 24 31.97.112.0/21 maxlen: 24 31.97.120.0/21 maxlen: 24 31.97.128.0/20 maxlen: 24 31.97.144.0/22 maxlen: 24 31.97.148.0/23 maxlen: 24 31.97.150.0/24 maxlen: 24 31.97.151.0/24 maxlen: 24 31.97.152.0/21 maxlen: 24 31.97.160.0/20 maxlen: 24 31.97.176.0/23 maxlen: 24 31.97.178.0/24 maxlen: 24 31.97.179.0/24 maxlen: 24 31.97.180.0/22 maxlen: 24 31.97.184.0/23 maxlen: 24 31.97.186.0/24 maxlen: 24 31.97.187.0/24 maxlen: 24 31.97.188.0/22 maxlen: 24 31.97.192.0/21 maxlen: 24 31.97.200.0/21 maxlen: 24 31.97.208.0/21 maxlen: 24 31.97.216.0/23 maxlen: 24 31.97.218.0/23 maxlen: 24 31.97.220.0/22 maxlen: 24 31.97.224.0/20 maxlen: 24 31.97.240.0/20 maxlen: 24 69.62.64.0/23 maxlen: 24 69.62.66.0/23 maxlen: 24 69.62.68.0/22 maxlen: 24 69.62.72.0/21 maxlen: 24 69.62.80.0/22 maxlen: 24 69.62.84.0/23 maxlen: 24 69.62.86.0/23 maxlen: 24 69.62.88.0/21 maxlen: 24 69.62.96.0/21 maxlen: 24 69.62.104.0/24 maxlen: 24 69.62.105.0/24 maxlen: 24 69.62.106.0/23 maxlen: 24 69.62.108.0/22 maxlen: 24 69.62.112.0/22 maxlen: 24 69.62.116.0/22 maxlen: 24 69.62.120.0/23 maxlen: 24 69.62.122.0/24 maxlen: 24 69.62.123.0/24 maxlen: 24 69.62.124.0/24 maxlen: 24 69.62.125.0/24 maxlen: 24 69.62.126.0/23 maxlen: 24 72.60.0.0/20 maxlen: 24 72.60.16.0/22 maxlen: 24 72.60.20.0/22 maxlen: 24 72.60.24.0/21 maxlen: 24 72.60.32.0/21 maxlen: 24 72.60.40.0/22 maxlen: 24 72.60.44.0/22 maxlen: 24 72.60.48.0/20 maxlen: 24 72.60.64.0/21 maxlen: 24 72.60.72.0/21 maxlen: 24 72.60.80.0/21 maxlen: 24 72.60.88.0/21 maxlen: 24 72.60.96.0/21 maxlen: 24 72.60.104.0/21 maxlen: 24 72.60.112.0/20 maxlen: 24 72.60.128.0/24 maxlen: 24 72.60.129.0/24 maxlen: 24 72.60.130.0/23 maxlen: 24 72.60.132.0/23 maxlen: 24 72.60.134.0/23 maxlen: 24 72.60.136.0/21 maxlen: 24 72.60.144.0/20 maxlen: 24 72.60.160.0/20 maxlen: 24 72.60.176.0/21 maxlen: 24 72.60.184.0/21 maxlen: 24 72.60.192.0/21 maxlen: 24 72.60.200.0/21 maxlen: 24 72.60.208.0/22 maxlen: 24 72.60.212.0/22 maxlen: 24 72.60.216.0/21 maxlen: 24 72.60.224.0/21 maxlen: 24 72.60.232.0/21 maxlen: 24 72.60.240.0/20 maxlen: 24 72.61.0.0/20 maxlen: 24 72.61.16.0/22 maxlen: 24 72.61.20.0/22 maxlen: 24 72.61.24.0/21 maxlen: 24 72.61.32.0/19 maxlen: 24 72.61.64.0/20 maxlen: 24 72.61.80.0/20 maxlen: 24 72.61.96.0/20 maxlen: 24 72.61.112.0/20 maxlen: 24 72.61.128.0/21 maxlen: 24 72.61.136.0/22 maxlen: 24 72.61.140.0/22 maxlen: 24 72.61.144.0/22 maxlen: 24 72.61.148.0/22 maxlen: 24 72.61.152.0/21 maxlen: 24 72.61.160.0/21 maxlen: 24 72.61.168.0/21 maxlen: 24 72.61.176.0/20 maxlen: 24 72.61.192.0/21 maxlen: 24 72.61.200.0/21 maxlen: 24 72.61.208.0/21 maxlen: 24 72.61.216.0/21 maxlen: 24 72.61.224.0/19 maxlen: 24 72.62.0.0/22 maxlen: 24 72.62.4.0/22 maxlen: 24 72.62.4.0/23 maxlen: 24 72.62.8.0/21 maxlen: 24 72.62.16.0/20 maxlen: 24 72.62.32.0/19 maxlen: 24 72.62.64.0/20 maxlen: 24 72.62.80.0/21 maxlen: 24 72.62.88.0/21 maxlen: 24 72.62.96.0/21 maxlen: 24 72.62.104.0/21 maxlen: 24 72.62.112.0/21 maxlen: 24 72.62.120.0/21 maxlen: 24 72.62.128.0/22 maxlen: 24 72.62.132.0/22 maxlen: 24 72.62.136.0/21 maxlen: 24 72.62.144.0/20 maxlen: 24 72.62.160.0/20 maxlen: 24 72.62.176.0/20 maxlen: 24 72.62.192.0/21 maxlen: 24 72.62.200.0/21 maxlen: 24 72.62.208.0/23 maxlen: 24 103.199.184.0/22 maxlen: 24 148.222.52.0/24 maxlen: 24 148.222.53.0/24 maxlen: 24 148.222.54.0/24 maxlen: 24 148.222.55.0/24 maxlen: 24 148.230.64.0/23 maxlen: 24 148.230.66.0/23 maxlen: 24 148.230.68.0/23 maxlen: 24 148.230.70.0/23 maxlen: 24 148.230.72.0/21 maxlen: 24 148.230.80.0/20 maxlen: 24 148.230.96.0/22 maxlen: 24 148.230.100.0/22 maxlen: 24 148.230.104.0/21 maxlen: 24 148.230.112.0/21 maxlen: 24 148.230.120.0/22 maxlen: 24 148.230.124.0/22 maxlen: 24 168.231.64.0/21 maxlen: 24 168.231.72.0/22 maxlen: 24 168.231.76.0/23 maxlen: 24 168.231.78.0/23 maxlen: 24 168.231.80.0/21 maxlen: 24 168.231.88.0/21 maxlen: 24 168.231.96.0/22 maxlen: 24 168.231.100.0/24 maxlen: 24 168.231.101.0/24 maxlen: 24 168.231.102.0/23 maxlen: 24 168.231.104.0/21 maxlen: 24 168.231.112.0/22 maxlen: 24 168.231.116.0/24 maxlen: 24 168.231.117.0/24 maxlen: 24 168.231.118.0/23 maxlen: 24 168.231.120.0/22 maxlen: 24 168.231.124.0/22 maxlen: 24 194.164.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:5a:77:9a:09:42:5e:c1:55:38:f2:34:b1:a1:8a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862 Validity Not Before: Dec 3 08:35:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f39836915970f8f81da8779e47d79587e99f1520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:d6:89:13:19:e0:33:35:50:31:56:1e:8d: 4f:61:4a:f6:00:ed:f5:90:03:37:c0:d1:3a:ae:76: cc:64:ae:e1:10:3e:5b:26:84:90:85:42:ef:9e:00: 3b:31:b6:0b:31:a5:5e:8d:52:b9:30:d0:89:3a:7c: 31:05:45:fd:a3:6b:14:87:46:82:ab:e2:84:fc:69: a6:cb:d3:d0:b6:b5:fe:a0:0b:b0:a5:8f:6b:43:2b: 2b:93:d3:7e:61:8f:99:89:a2:4a:53:c1:a3:a7:70: 26:a8:17:0e:59:1c:dc:b1:93:c4:5e:6e:20:00:a5: f9:df:73:38:25:6b:20:ac:00:fa:a3:d3:60:b2:dd: 29:79:73:df:4c:81:13:82:ad:ea:e4:34:7c:47:37: 1a:c6:e1:ba:7b:3e:53:ec:b0:63:37:a4:b1:7e:9b: 9b:b5:7a:20:29:5f:a0:5f:01:36:c5:df:43:1c:b9: 8a:d9:90:80:18:1b:8b:29:26:6f:8b:18:12:f7:a4: 55:ed:50:e5:b0:0b:9b:21:4e:68:52:f5:89:0d:4b: 80:b4:aa:87:b9:d1:37:28:d6:d9:2c:ae:4c:56:95: a4:a5:10:93:cc:8b:37:15:7b:90:e7:48:3a:5b:e9: 65:86:d5:ae:a5:f1:a7:e9:55:1c:38:c3:53:4e:98: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:98:36:91:59:70:F8:F8:1D:A8:77:9E:47:D7:95:87:E9:9F:15:20 X509v3 Authority Key Identifier: keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/85g2kVlw-PgdqHeeR9eVh-mfFSA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.97.0.0/16 69.62.64.0/18 72.60.0.0-72.62.209.255 103.199.184.0/22 148.222.52.0/22 148.230.64.0/18 168.231.64.0/18 194.164.148.0/22 Signature Algorithm: sha256WithRSAEncryption 79:41:2f:c2:ec:56:26:08:c3:e0:5c:97:1b:fa:8d:f2:09:ef: 4d:35:20:c9:29:38:26:33:a9:cb:03:62:d4:ce:93:d8:fe:a4: 02:a8:b0:a0:ec:c4:57:ed:95:a3:b4:7a:d9:a4:25:20:1a:00: 2a:fd:69:22:9c:58:5d:b4:d8:0b:3e:00:9c:a0:24:21:f6:29: d4:e3:ab:a4:71:07:8c:8b:88:ff:a3:11:7a:20:fc:77:de:6e: ed:53:ff:8c:3c:8e:47:57:66:91:18:16:1e:92:5b:9b:f1:c8: 62:c4:c4:ca:92:1e:59:76:08:81:99:7a:dd:40:df:4d:66:d9: 88:c0:98:6c:72:60:f5:2a:76:3c:15:54:4c:48:e6:cb:42:41: 25:b6:e4:5f:12:35:51:d0:bb:1e:90:df:55:ee:f4:d8:25:38: b0:bc:18:c8:41:74:30:4b:4c:ab:bb:6f:d8:49:b7:d7:45:1b: a8:ff:14:fe:91:ca:02:62:e0:e5:28:ce:14:25:fb:4c:28:70: 6e:20:81:d0:0b:a6:ea:a1:90:e9:47:36:50:f8:dc:3c:a5:06: f4:23:10:59:69:19:53:af:f7:8d:e0:14:c8:67:d7:9b:92:28: cb:c3:bb:72:20:b1:17:01:16:3d:16:03:99:2c:83:36:de:8a: d1:82:47:cc -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZrjWneaCUJewVU48jSxoYqpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy ZWQ4NjIwHhcNMjUxMjAzMDgzNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzk4MzY5MTU5NzBmOGY4MWRhODc3OWU0N2Q3OTU4N2U5OWYxNTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD7WiRMZ4DM1UDFWHo1PYUr2AO31 kAM3wNE6rnbMZK7hED5bJoSQhULvngA7MbYLMaVejVK5MNCJOnwxBUX9o2sUh0aC q+KE/Gmmy9PQtrX+oAuwpY9rQysrk9N+YY+ZiaJKU8Gjp3AmqBcOWRzcsZPEXm4g AKX533M4JWsgrAD6o9Ngst0peXPfTIETgq3q5DR8RzcaxuG6ez5T7LBjN6Sxfpub tXogKV+gXwE2xd9DHLmK2ZCAGBuLKSZvixgS96RV7VDlsAubIU5oUvWJDUuAtKqH udE3KNbZLK5MVpWkpRCTzIs3FXuQ50g6W+llhtWupfGn6VUcOMNTTphZAQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFPOYNpFZcPj4Hah3nkfXlYfpnxUgMB8GA1UdIwQY MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt ZWE2N2E5ODYyNWZlLzEvODVnMmtWbHctUGdkcUhlZVI5ZVZoLW1mRlNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwMAH2EDBAZF PkAwCwMDAkg8AwQBSD7QAwQCZ8e4AwQClN40AwQGlOZAAwQGqOdAAwQCwqSUMA0G CSqGSIb3DQEBCwUAA4IBAQB5QS/C7FYmCMPgXJcb+o3yCe9NNSDJKTgmM6nLA2LU zpPY/qQCqLCg7MRX7ZWjtHrZpCUgGgAq/WkinFhdtNgLPgCcoCQh9inU46ukcQeM i4j/oxF6IPx33m7tU/+MPI5HV2aRGBYeklub8chixMTKkh5ZdgiBmXrdQN9NZtmI wJhscmD1KnY8FVRMSObLQkEltuRfEjVR0LsekN9V7vTYJTiwvBjIQXQwS0yru2/Y SbfXRRuo/xT+kcoCYuDlKM4UJftMKHBuIIHQC6bqoZDpRzZQ+Nw8pQb0IxBZaRlT r/eN4BTIZ9ebkijLw7tyILEXARY9FgOZLIM23orRgkfM -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:22 2025 by rpki-client