This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ytCMvXgi7-5EalYEygb1M-dSbo4.roa File: ytCMvXgi7-5EalYEygb1M-dSbo4.roa (raw, json) Hash identifier: 0MrqqAAtZWVj8wfoNtj5hcwvBU3HxDQG25M1h24iiN8= Subject key identifier: CA:D0:8C:BD:78:22:EF:EE:44:6A:56:04:CA:06:F5:33:E7:52:6E:8E Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019AC42D52C6F0BFB9E50BD5A5E9135A0F03 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ytCMvXgi7-5EalYEygb1M-dSbo4.roa Signing time: Thu 27 Nov 2025 07:18:15 +0000 ROA not before: Thu 27 Nov 2025 07:18:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57169 IP address blocks: 5.180.114.0/24 maxlen: 24 5.187.33.0/24 maxlen: 24 37.235.48.0/20 maxlen: 20 37.235.48.0/24 maxlen: 24 37.235.50.0/23 maxlen: 23 37.235.50.0/24 maxlen: 24 37.235.52.0/24 maxlen: 24 37.235.56.0/24 maxlen: 24 37.235.57.0/24 maxlen: 24 37.235.58.0/24 maxlen: 24 37.235.59.0/24 maxlen: 24 37.235.60.0/24 maxlen: 24 37.235.61.0/24 maxlen: 24 37.235.62.0/24 maxlen: 24 37.235.63.0/24 maxlen: 24 45.153.125.0/24 maxlen: 24 46.183.187.0/24 maxlen: 24 83.172.134.0/24 maxlen: 24 83.172.135.0/24 maxlen: 24 83.172.150.0/24 maxlen: 24 83.172.151.0/24 maxlen: 24 83.172.153.0/24 maxlen: 24 83.172.169.0/24 maxlen: 24 83.243.120.0/24 maxlen: 24 83.243.122.0/24 maxlen: 24 83.243.123.0/24 maxlen: 24 84.247.61.0/24 maxlen: 24 86.106.119.0/24 maxlen: 24 89.31.123.0/24 maxlen: 24 89.40.105.0/24 maxlen: 24 89.46.235.0/24 maxlen: 24 89.46.238.0/24 maxlen: 24 91.132.94.0/24 maxlen: 24 91.227.204.0/23 maxlen: 23 91.227.204.0/24 maxlen: 24 91.227.205.0/24 maxlen: 24 92.243.66.0/24 maxlen: 24 95.156.204.0/24 maxlen: 24 95.156.205.0/24 maxlen: 24 103.57.249.0/24 maxlen: 24 103.57.250.0/24 maxlen: 24 134.255.210.0/24 maxlen: 24 149.154.152.0/24 maxlen: 24 149.154.153.0/24 maxlen: 24 149.154.154.0/24 maxlen: 24 149.154.155.0/24 maxlen: 24 149.154.156.0/24 maxlen: 24 151.236.0.0/19 maxlen: 19 151.236.0.0/24 maxlen: 24 151.236.1.0/24 maxlen: 24 151.236.2.0/24 maxlen: 24 151.236.3.0/24 maxlen: 24 151.236.4.0/24 maxlen: 24 151.236.5.0/24 maxlen: 24 151.236.6.0/24 maxlen: 24 151.236.7.0/24 maxlen: 24 151.236.8.0/24 maxlen: 24 151.236.9.0/24 maxlen: 24 151.236.10.0/24 maxlen: 24 151.236.11.0/24 maxlen: 24 151.236.12.0/24 maxlen: 24 151.236.13.0/24 maxlen: 24 151.236.14.0/24 maxlen: 24 151.236.20.0/24 maxlen: 24 151.236.25.0/24 maxlen: 24 151.236.26.0/23 maxlen: 23 151.236.28.0/24 maxlen: 24 151.236.30.0/24 maxlen: 24 158.255.209.0/24 maxlen: 24 158.255.210.0/24 maxlen: 24 158.255.211.0/24 maxlen: 24 158.255.212.0/24 maxlen: 24 176.126.99.0/24 maxlen: 24 185.26.236.0/24 maxlen: 24 185.26.237.0/24 maxlen: 24 185.26.238.0/24 maxlen: 24 185.122.184.0/24 maxlen: 24 185.193.51.0/24 maxlen: 24 185.195.65.0/24 maxlen: 24 188.190.1.0/24 maxlen: 24 188.190.3.0/24 maxlen: 24 188.190.6.0/24 maxlen: 24 188.190.7.0/24 maxlen: 24 188.190.8.0/24 maxlen: 24 188.190.9.0/24 maxlen: 24 188.190.10.0/24 maxlen: 24 188.190.11.0/24 maxlen: 24 188.190.15.0/24 maxlen: 24 188.190.17.0/24 maxlen: 24 188.190.19.0/24 maxlen: 24 188.190.20.0/24 maxlen: 24 188.190.21.0/24 maxlen: 24 188.190.22.0/24 maxlen: 24 188.211.166.0/24 maxlen: 24 188.214.33.0/24 maxlen: 24 188.214.34.0/24 maxlen: 24 188.214.38.0/24 maxlen: 24 188.214.39.0/24 maxlen: 24 193.3.55.0/24 maxlen: 24 213.111.177.0/24 maxlen: 24 213.111.182.0/24 maxlen: 24 213.111.183.0/24 maxlen: 24 213.111.184.0/24 maxlen: 24 213.111.186.0/24 maxlen: 24 213.111.187.0/24 maxlen: 24 213.111.188.0/24 maxlen: 24 213.111.191.0/24 maxlen: 24 213.183.54.0/24 maxlen: 24 213.183.55.0/24 maxlen: 24 213.183.56.0/24 maxlen: 24 213.183.57.0/24 maxlen: 24 2a03:f80:7::/48 maxlen: 48 2a03:f80:31::/48 maxlen: 48 2a03:f80:32::/48 maxlen: 48 2a03:f80:48::/48 maxlen: 48 2a03:f80:56::/48 maxlen: 48 2a03:f80:57::/48 maxlen: 48 2a03:f80:61::/48 maxlen: 48 2a03:f80:70::/48 maxlen: 48 2a03:f80:354::/48 maxlen: 48 2a03:f80:357::/48 maxlen: 48 2a03:f80:358::/48 maxlen: 48 2a03:f80:359::/48 maxlen: 48 2a03:f80:370::/48 maxlen: 48 2a03:f80:371::/48 maxlen: 48 2a03:f80:491::/48 maxlen: 48 2a03:f80:3991::/48 maxlen: 48 2a03:f80:ad15::/48 maxlen: 48 2a03:f80:ed15::/48 maxlen: 48 2a03:f80:ed16::/48 maxlen: 48 2a03:f80:ed17::/48 maxlen: 48 2a03:f80:ed31::/48 maxlen: 48 2a03:f80:ed51::/48 maxlen: 48 2a03:f80:ed91::/48 maxlen: 48 2a03:f82:abcd::/48 maxlen: 48 2a03:f82:abcd:43::/64 maxlen: 64 2a03:f87:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:2d:52:c6:f0:bf:b9:e5:0b:d5:a5:e9:13:5a:0f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Nov 27 07:18:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cad08cbd7822efee446a5604ca06f533e7526e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:54:c8:5f:09:2b:4b:1d:10:3f:7c:16:d4: ca:e5:5d:4a:de:2a:b4:f9:6b:71:97:cc:fd:cb:47: f4:a2:d7:fe:0f:19:18:4b:7e:6d:fa:7f:cf:5a:d2: ca:21:b7:a0:75:71:c1:f8:4f:14:a0:3f:6b:92:6c: b1:6e:9c:bc:22:db:22:77:5b:7c:ee:0e:5a:60:14: 16:10:61:5c:fb:ec:17:c7:28:82:17:63:d1:dd:5c: 05:17:7c:9d:81:53:10:5b:c5:76:5b:22:3d:3f:ec: e7:bc:6a:49:76:c4:95:e4:45:2b:81:68:f8:2a:c1: f6:bd:64:d2:c9:81:6d:57:90:f8:41:3a:44:10:da: 5f:dc:64:bd:4a:70:29:17:6e:9c:f8:96:0b:23:69: 5f:1a:d4:25:ff:36:45:35:05:03:a9:60:ad:db:dc: 91:27:47:7e:d1:11:f4:bd:bd:7a:e1:15:92:f9:33: 0e:f1:da:5e:a9:b5:cd:44:0d:e9:30:60:96:fd:15: 51:d6:13:a4:af:c3:c2:12:2b:55:59:06:e4:41:61: 6a:7a:e3:db:e8:c2:05:59:10:82:24:ac:da:42:e6: 40:59:ff:41:1e:61:f8:df:12:2e:ff:6b:fe:ad:8e: e6:e1:87:d3:b7:8c:78:88:63:fd:de:c8:97:d1:a3: 02:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D0:8C:BD:78:22:EF:EE:44:6A:56:04:CA:06:F5:33:E7:52:6E:8E X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ytCMvXgi7-5EalYEygb1M-dSbo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.114.0/24 5.187.33.0/24 37.235.48.0/20 45.153.125.0/24 46.183.187.0/24 83.172.134.0/23 83.172.150.0/23 83.172.153.0/24 83.172.169.0/24 83.243.120.0/24 83.243.122.0/23 84.247.61.0/24 86.106.119.0/24 89.31.123.0/24 89.40.105.0/24 89.46.235.0/24 89.46.238.0/24 91.132.94.0/24 91.227.204.0/23 92.243.66.0/24 95.156.204.0/23 103.57.249.0-103.57.250.255 134.255.210.0/24 149.154.152.0-149.154.156.255 151.236.0.0/19 158.255.209.0-158.255.212.255 176.126.99.0/24 185.26.236.0-185.26.238.255 185.122.184.0/24 185.193.51.0/24 185.195.65.0/24 188.190.1.0/24 188.190.3.0/24 188.190.6.0-188.190.11.255 188.190.15.0/24 188.190.17.0/24 188.190.19.0-188.190.22.255 188.211.166.0/24 188.214.33.0-188.214.34.255 188.214.38.0/23 193.3.55.0/24 213.111.177.0/24 213.111.182.0-213.111.184.255 213.111.186.0-213.111.188.255 213.111.191.0/24 213.183.54.0-213.183.57.255 IPv6: 2a03:f80:7::/48 2a03:f80:31::-2a03:f80:32:ffff:ffff:ffff:ffff:ffff 2a03:f80:48::/48 2a03:f80:56::/47 2a03:f80:61::/48 2a03:f80:70::/48 2a03:f80:354::/48 2a03:f80:357::-2a03:f80:359:ffff:ffff:ffff:ffff:ffff 2a03:f80:370::/47 2a03:f80:491::/48 2a03:f80:3991::/48 2a03:f80:ad15::/48 2a03:f80:ed15::-2a03:f80:ed17:ffff:ffff:ffff:ffff:ffff 2a03:f80:ed31::/48 2a03:f80:ed51::/48 2a03:f80:ed91::/48 2a03:f82:abcd::/48 2a03:f87:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 13:e4:c6:b2:1e:a9:8f:d2:cd:9a:e0:d8:64:d7:e5:25:9a:3b: 4d:41:66:d3:f3:36:80:7d:c3:50:de:ac:11:6f:8f:f3:80:29: 7f:12:c9:ab:34:56:61:dd:a6:3c:ed:3a:a5:8c:57:0e:d0:17: 79:de:0f:eb:61:1d:92:19:b6:6e:83:0f:98:68:ca:32:27:0e: 91:2c:4d:61:e9:36:a4:3d:24:dd:74:de:58:a0:c2:2c:32:7c: 4c:a8:92:11:23:e2:f9:cc:9f:c3:bf:55:46:99:8f:b5:29:7e: 8b:31:1b:37:f4:0e:44:b8:10:9b:65:69:dd:67:16:06:c1:27: 1c:e4:53:c7:40:bc:14:2d:b0:e8:ba:b9:cb:a3:f2:db:4a:a5: 27:0a:5d:bc:01:d6:ab:05:47:9d:63:d0:77:b9:96:8a:14:45: 9e:c5:93:6c:cc:4b:44:d1:eb:e5:bb:d8:f3:e6:6c:da:1f:eb: 07:63:6c:ce:b2:42:0c:a5:38:7d:1d:74:57:15:77:77:23:52: 5f:ca:15:b9:b3:86:4c:d8:20:13:be:20:db:48:62:c9:1b:40: 94:76:a5:19:d0:38:1f:80:b9:53:30:b9:3e:9c:7f:97:b5:b7: 1a:8b:5c:c0:84:ac:c1:03:97:9a:80:c3:a7:6b:1d:a8:10:a9: 16:df:90:1d -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgISAZrELVLG8L+55QvVpekTWg8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUxMTI3MDcxODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWQwOGNiZDc4MjJlZmVlNDQ2YTU2MDRjYTA2ZjUzM2U3NTI2ZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQpUyF8JK0sdED98FtTK5V1K3iq0 +Wtxl8z9y0f0otf+DxkYS35t+n/PWtLKIbegdXHB+E8UoD9rkmyxbpy8Itsid1t8 7g5aYBQWEGFc++wXxyiCF2PR3VwFF3ydgVMQW8V2WyI9P+znvGpJdsSV5EUrgWj4 KsH2vWTSyYFtV5D4QTpEENpf3GS9SnApF26c+JYLI2lfGtQl/zZFNQUDqWCt29yR J0d+0RH0vb164RWS+TMO8dpeqbXNRA3pMGCW/RVR1hOkr8PCEitVWQbkQWFqeuPb 6MIFWRCCJKzaQuZAWf9BHmH43xIu/2v+rY7m4YfTt4x4iGP93siX0aMCbwIDAQAB o4IEPjCCBDowHQYDVR0OBBYEFMrQjL14Iu/uRGpWBMoG9TPnUm6OMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEveXRDTXZYZ2k3LTVFYWxZRXlnYjFNLWRTYm80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICUgYIKwYBBQUHAQcBAf8EggJBMIICPTCCAWwEAgABMIIB ZAMEAAW0cgMEAAW7IQMEBCXrMAMEAC2ZfQMEAC63uwMEAVOshgMEAVOslgMEAFOs mQMEAFOsqQMEAFPzeAMEAVPzegMEAFT3PQMEAFZqdwMEAFkfewMEAFkoaQMEAFku 6wMEAFku7gMEAFuEXgMEAVvjzAMEAFzzQgMEAV+czDAMAwQAZzn5AwQAZzn6AwQA hv/SMAwDBAOVmpgDBACVmpwDBAWX7AAwDAMEAJ7/0QMEAJ7/1AMEALB+YzAMAwQC uRrsAwQAuRruAwQAuXq4AwQAucEzAwQAucNBAwQAvL4BAwQAvL4DMAwDBAG8vgYD BAK8vggDBAC8vg8DBAC8vhEwDAMEALy+EwMEALy+FgMEALzTpjAMAwQAvNYhAwQA vNYiAwQBvNYmAwQAwQM3AwQA1W+xMAwDBAHVb7YDBADVb7gwDAMEAdVvugMEANVv vAMEANVvvzAMAwQB1bc2AwQB1bc4MIHKBAIAAjCBwwMHACoDD4AABzASAwcAKgMP gAAxAwcAKgMPgAAyAwcAKgMPgABIAwcBKgMPgABWAwcAKgMPgABhAwcAKgMPgABw AwcAKgMPgANUMBIDBwAqAw+AA1cDBwEqAw+AA1gDBwEqAw+AA3ADBwAqAw+ABJED BwAqAw+AOZEDBwAqAw+ArRUwEgMHACoDD4DtFQMHAyoDD4DtEAMHACoDD4DtMQMH ACoDD4DtUQMHACoDD4DtkQMHACoDD4KrzQMHACoDD4f//zANBgkqhkiG9w0BAQsF AAOCAQEAE+TGsh6pj9LNmuDYZNflJZo7TUFm0/M2gH3DUN6sEW+P84ApfxLJqzRW Yd2mPO06pYxXDtAXed4P62Edkhm2boMPmGjKMicOkSxNYek2pD0k3XTeWKDCLDJ8 TKiSESPi+cyfw79VRpmPtSl+izEbN/QORLgQm2Vp3WcWBsEnHORTx0C8FC2w6Lq5 y6Py20qlJwpdvAHWqwVHnWPQd7mWihRFnsWTbMxLRNHr5bvY8+Zs2h/rB2NszrJC DKU4fR10VxV3dyNSX8oVubOGTNggE74g20hiyRtAlHalGdA4H4C5UzC5Ppx/l7W3 GotcwISswQOXmoDDp2sdqBCpFt+QHQ== -----END CERTIFICATE-----Generated at Wed Dec 10 10:53:25 2025 by rpki-client