This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/303cGm7GadK9lNgAL4z82NQfdfM.roa File: 303cGm7GadK9lNgAL4z82NQfdfM.roa (raw, json) Hash identifier: JS6YyjPcG1xvWU7KnpWNdnDHWsQAyl/9+/sPjCmUXJY= Subject key identifier: DF:4D:DC:1A:6E:C6:69:D2:BD:94:D8:00:2F:8C:FC:D8:D4:1F:75:F3 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019A7712E2E9DAA35F9E555EAA1452497FC8 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/303cGm7GadK9lNgAL4z82NQfdfM.roa Signing time: Wed 12 Nov 2025 07:58:37 +0000 ROA not before: Wed 12 Nov 2025 07:58:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62206 IP address blocks: 5.181.84.0/24 maxlen: 24 5.181.85.0/24 maxlen: 24 5.181.87.0/24 maxlen: 24 45.9.29.0/24 maxlen: 24 45.13.189.0/24 maxlen: 24 45.13.190.0/24 maxlen: 24 45.94.171.0/24 maxlen: 24 45.132.180.0/24 maxlen: 24 45.132.182.0/23 maxlen: 24 77.83.39.0/24 maxlen: 24 146.19.125.0/24 maxlen: 24 185.43.248.0/24 maxlen: 24 185.43.249.0/24 maxlen: 24 185.43.251.0/24 maxlen: 24 185.200.62.0/24 maxlen: 24 185.200.63.0/24 maxlen: 24 193.30.240.0/24 maxlen: 24 193.30.242.0/24 maxlen: 24 193.30.243.0/24 maxlen: 24 193.57.43.0/24 maxlen: 24 194.242.96.0/24 maxlen: 24 194.242.98.0/24 maxlen: 24 194.242.99.0/24 maxlen: 24 195.177.92.0/24 maxlen: 24 195.177.93.0/24 maxlen: 24 195.177.94.0/24 maxlen: 24 195.177.95.0/24 maxlen: 24 195.211.188.0/24 maxlen: 24 195.211.189.0/24 maxlen: 24 195.211.190.0/24 maxlen: 24 195.211.191.0/24 maxlen: 24 2a01:7120::/32 maxlen: 32 2a01:7120:7::/48 maxlen: 48 2a07:9200::/29 maxlen: 32 2a07:9201::/32 maxlen: 32 2a07:9206::/32 maxlen: 32 2a07:9207::/32 maxlen: 32 2a09:340::/32 maxlen: 32 2a09:342::/32 maxlen: 32 2a09:346::/32 maxlen: 32 2a09:c440::/32 maxlen: 32 2a0c:5d40::/32 maxlen: 32 2a0c:a580::/29 maxlen: 32 2a0c:a580::/32 maxlen: 32 2a0c:a581::/32 maxlen: 32 2a0c:a584::/32 maxlen: 32 2a0c:a586::/32 maxlen: 32 2a10:dfc0::/29 maxlen: 32 2a10:dfc0::/32 maxlen: 32 2a10:fac0::/32 maxlen: 32 2a11:580::/29 maxlen: 29 2a11:580::/32 maxlen: 32 2a11:1600::/32 maxlen: 32 2a11:2a80::/32 maxlen: 32 2a11:3900::/32 maxlen: 32 2a11:d680::/32 maxlen: 32 2a12:9f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:12:e2:e9:da:a3:5f:9e:55:5e:aa:14:52:49:7f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Nov 12 07:58:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df4ddc1a6ec669d2bd94d8002f8cfcd8d41f75f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:66:10:0e:89:19:0d:29:08:e3:2d:51:f7:90: 12:fa:9e:0a:48:67:01:4e:bc:ab:d5:82:c7:72:cb: f1:63:13:6a:53:bc:a1:99:a7:af:55:e9:96:c6:7f: 57:76:fa:6e:7e:39:1c:05:47:df:81:f7:8b:51:12: 43:06:17:25:f9:51:87:85:43:7d:12:84:05:3d:bf: ee:e2:d7:24:3d:bb:56:fe:fb:75:66:99:c0:aa:19: ec:45:fe:69:bd:d4:8c:12:4d:46:17:51:11:b0:82: 17:ca:26:56:b5:ef:84:44:6e:4c:bc:c6:9c:49:fa: 49:7e:2e:ad:a9:d9:2d:35:eb:e4:f6:c6:33:58:1f: 57:7a:fc:b4:4f:79:a5:46:7f:31:6d:82:a1:ca:78: 6c:65:ab:5a:39:f2:13:8c:c4:00:57:9a:5f:1b:17: ee:94:2d:c1:02:28:71:f5:0f:56:72:ee:d5:36:d6: 17:a5:e5:9b:68:52:f3:55:83:8c:7c:7b:09:ea:2e: b2:68:1b:d1:6d:c7:19:d3:a2:3c:ab:35:d7:59:26: 62:78:e3:d7:9c:0a:16:05:ce:38:68:41:e5:b5:4a: e8:2e:9f:ed:27:8b:92:f4:7d:26:5a:7a:7d:e7:18: 82:8f:c2:3e:d3:bc:e5:41:a2:09:7e:05:c5:82:df: d7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4D:DC:1A:6E:C6:69:D2:BD:94:D8:00:2F:8C:FC:D8:D4:1F:75:F3 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/303cGm7GadK9lNgAL4z82NQfdfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.84.0/23 5.181.87.0/24 45.9.29.0/24 45.13.189.0-45.13.190.255 45.94.171.0/24 45.132.180.0/24 45.132.182.0/23 77.83.39.0/24 146.19.125.0/24 185.43.248.0/23 185.43.251.0/24 185.200.62.0/23 193.30.240.0/24 193.30.242.0/23 193.57.43.0/24 194.242.96.0/24 194.242.98.0/23 195.177.92.0/22 195.211.188.0/22 IPv6: 2a01:7120::/32 2a07:9200::/29 2a09:340::/32 2a09:342::/32 2a09:346::/32 2a09:c440::/32 2a0c:5d40::/32 2a0c:a580::/29 2a10:dfc0::/29 2a10:fac0::/32 2a11:580::/29 2a11:1600::/32 2a11:2a80::/32 2a11:3900::/32 2a11:d680::/32 2a12:9f00::/32 Signature Algorithm: sha256WithRSAEncryption 90:44:0b:ff:71:1a:87:fd:f5:a5:09:9a:52:95:e5:51:92:a0: ec:a0:91:db:e0:98:43:31:26:c1:f1:bc:9b:2d:8b:57:54:02: 3c:62:ba:29:6e:b1:6e:c5:a5:cf:d5:d2:3a:de:9b:eb:9f:75: e5:12:f0:4a:a3:13:41:e5:00:90:1d:4a:fd:2b:f6:62:ad:eb: 6e:f6:2c:64:a3:dd:55:a1:df:2f:ea:e5:50:d9:89:e5:5f:b7: c5:29:dc:db:7a:cc:78:e2:be:1c:87:50:a6:04:89:b0:27:6e: 18:0a:f5:ce:bd:00:32:61:e2:10:00:71:e3:8b:fa:84:59:b0: 23:f0:a8:94:c9:c5:be:6e:ed:62:b1:71:f7:24:a9:be:82:c4: b7:53:7d:b8:a3:cc:d8:be:ad:bd:6d:5a:3a:a1:f1:0d:2f:10: 5e:17:c1:7a:20:5c:31:c8:c0:7f:ff:80:94:19:8e:24:24:55: fa:0f:61:18:b5:90:f8:6f:35:e6:8e:56:27:e3:78:16:d9:fe: 6e:4a:b6:32:4e:4b:b7:fe:26:82:6b:36:49:91:8e:b3:45:08: 32:06:1f:ae:18:cc:de:af:93:e9:9c:69:75:09:71:94:cd:b5: f3:ab:b6:7f:11:da:17:75:60:18:6e:3c:b5:d2:6d:69:9a:c1: f9:ec:73:b6 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZp3EuLp2qNfnlVeqhRSSX/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMTEyMDc1ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjRkZGMxYTZlYzY2OWQyYmQ5NGQ4MDAyZjhjZmNkOGQ0MWY3NWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2YQDokZDSkI4y1R95AS+p4KSGcB Tryr1YLHcsvxYxNqU7yhmaevVemWxn9XdvpufjkcBUffgfeLURJDBhcl+VGHhUN9 EoQFPb/u4tckPbtW/vt1ZpnAqhnsRf5pvdSMEk1GF1ERsIIXyiZWte+ERG5MvMac SfpJfi6tqdktNevk9sYzWB9Xevy0T3mlRn8xbYKhynhsZataOfITjMQAV5pfGxfu lC3BAihx9Q9Wcu7VNtYXpeWbaFLzVYOMfHsJ6i6yaBvRbccZ06I8qzXXWSZieOPX nAoWBc44aEHltUroLp/tJ4uS9H0mWnp95xiCj8I+07zlQaIJfgXFgt/XqQIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFN9N3BpuxmnSvZTYAC+M/NjUH3XzMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvMzAzY0dtN0dhZEs5bE5nQUw0ejgyTlFmZGZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDgYIKwYBBQUHAQcBAf8Egf4wgfswgYAEAgABMHoDBAEF tVQDBAAFtVcDBAAtCR0wDAMEAC0NvQMEAC0NvgMEAC1eqwMEAC2EtAMEAS2EtgME AE1TJwMEAJITfQMEAbkr+AMEALkr+wMEAbnIPgMEAMEe8AMEAcEe8gMEAME5KwME AMLyYAMEAcLyYgMEAsOxXAMEAsPTvDB2BAIAAjBwAwUAKgFxIAMFAyoHkgADBQAq CQNAAwUAKgkDQgMFACoJA0YDBQAqCcRAAwUAKgxdQAMFAyoMpYADBQMqEN/AAwUA KhD6wAMFAyoRBYADBQAqERYAAwUAKhEqgAMFACoROQADBQAqEdaAAwUAKhKfADAN BgkqhkiG9w0BAQsFAAOCAQEAkEQL/3Eah/31pQmaUpXlUZKg7KCR2+CYQzEmwfG8 my2LV1QCPGK6KW6xbsWlz9XSOt6b65915RLwSqMTQeUAkB1K/Sv2Yq3rbvYsZKPd VaHfL+rlUNmJ5V+3xSnc23rMeOK+HIdQpgSJsCduGAr1zr0AMmHiEABx44v6hFmw I/ColMnFvm7tYrFx9ySpvoLEt1N9uKPM2L6tvW1aOqHxDS8QXhfBeiBcMcjAf/+A lBmOJCRV+g9hGLWQ+G815o5WJ+N4Ftn+bkq2Mk5Lt/4mgms2SZGOs0UIMgYfrhjM 3q+T6ZxpdQlxlM2186u2fxHaF3VgGG48tdJtaZrB+exztg== -----END CERTIFICATE-----Generated at Fri Nov 21 18:53:26 2025 by rpki-client