This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1-1ijxKf8Nf9JgCb2WgjGEz_3iaQ.roa File: 1-1ijxKf8Nf9JgCb2WgjGEz_3iaQ.roa (raw, json) Hash identifier: UukUcMQnRkRUff/v902TDiguiMi04hBZ4PMYdCj5nd0= Subject key identifier: FB:58:A3:C4:A7:FC:35:FF:49:80:26:F6:5A:08:C6:13:3F:F7:89:A4 Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e Certificate serial: 019ADE324726C4519AC741AA61960D85050F Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1-1ijxKf8Nf9JgCb2WgjGEz_3iaQ.roa Signing time: Tue 02 Dec 2025 08:33:48 +0000 ROA not before: Tue 02 Dec 2025 08:33:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8881 IP address blocks: 24.40.128.0/18 maxlen: 18 46.142.0.0/16 maxlen: 16 46.142.0.0/18 maxlen: 20 46.142.64.0/19 maxlen: 20 46.142.96.0/19 maxlen: 19 46.142.96.0/20 maxlen: 20 46.142.128.0/19 maxlen: 19 46.142.160.0/19 maxlen: 19 46.142.214.0/24 maxlen: 24 46.142.224.0/19 maxlen: 19 46.189.0.0/17 maxlen: 17 46.189.116.0/24 maxlen: 24 61.8.128.0/19 maxlen: 21 62.72.64.0/19 maxlen: 19 62.72.70.0/24 maxlen: 24 62.214.0.0/16 maxlen: 16 62.214.224.0/19 maxlen: 19 62.217.32.0/19 maxlen: 19 62.220.0.0/19 maxlen: 19 80.241.192.0/20 maxlen: 20 80.242.160.0/19 maxlen: 19 82.119.160.0/19 maxlen: 19 82.140.0.0/18 maxlen: 18 82.140.48.0/20 maxlen: 20 82.144.32.0/19 maxlen: 19 82.145.0.0/19 maxlen: 19 82.194.96.0/19 maxlen: 19 82.207.128.0/17 maxlen: 17 82.207.192.0/19 maxlen: 19 82.207.224.0/19 maxlen: 19 83.135.0.0/16 maxlen: 16 83.135.0.0/20 maxlen: 20 83.135.64.0/19 maxlen: 19 83.135.96.0/19 maxlen: 19 83.135.160.0/21 maxlen: 21 83.135.168.0/21 maxlen: 21 83.135.176.0/22 maxlen: 22 83.135.184.0/21 maxlen: 21 83.135.208.0/20 maxlen: 20 83.135.224.0/22 maxlen: 22 83.135.240.0/22 maxlen: 22 84.19.192.0/19 maxlen: 19 87.122.0.0/15 maxlen: 15 87.122.0.0/20 maxlen: 20 87.122.16.0/20 maxlen: 20 87.122.32.0/19 maxlen: 19 87.122.64.0/19 maxlen: 20 87.122.96.0/19 maxlen: 19 87.122.128.0/21 maxlen: 21 87.122.144.0/20 maxlen: 20 87.122.160.0/20 maxlen: 20 87.122.192.0/19 maxlen: 19 87.122.224.0/19 maxlen: 20 87.123.0.0/19 maxlen: 20 87.123.32.0/19 maxlen: 19 87.123.64.0/20 maxlen: 20 87.123.80.0/20 maxlen: 20 87.123.96.0/19 maxlen: 19 87.123.128.0/19 maxlen: 19 87.123.160.0/20 maxlen: 20 87.123.194.0/24 maxlen: 24 87.123.196.0/24 maxlen: 24 87.123.224.0/20 maxlen: 20 87.123.240.0/21 maxlen: 21 88.130.0.0/16 maxlen: 16 88.130.32.0/20 maxlen: 20 88.130.48.0/20 maxlen: 24 88.130.64.0/19 maxlen: 19 88.130.96.0/19 maxlen: 19 88.130.144.0/20 maxlen: 20 88.130.160.0/22 maxlen: 22 88.130.172.0/22 maxlen: 22 88.130.194.0/23 maxlen: 23 88.130.216.0/21 maxlen: 21 89.27.128.0/17 maxlen: 17 89.207.200.0/21 maxlen: 21 89.244.0.0/14 maxlen: 14 89.244.76.0/22 maxlen: 22 89.244.80.0/20 maxlen: 20 89.244.96.0/22 maxlen: 22 89.244.120.0/21 maxlen: 21 89.244.176.0/20 maxlen: 20 89.244.192.0/19 maxlen: 20 89.245.0.0/20 maxlen: 20 89.245.16.0/20 maxlen: 20 89.245.32.0/19 maxlen: 19 89.245.64.0/19 maxlen: 19 89.245.96.0/20 maxlen: 20 89.245.158.0/24 maxlen: 24 89.245.159.0/24 maxlen: 24 89.245.176.0/21 maxlen: 21 89.245.192.0/19 maxlen: 19 89.245.224.0/19 maxlen: 20 89.246.0.0/19 maxlen: 20 89.246.32.0/19 maxlen: 19 89.246.96.0/21 maxlen: 21 89.246.112.0/20 maxlen: 20 89.246.122.0/24 maxlen: 24 89.246.124.0/22 maxlen: 22 89.246.160.0/21 maxlen: 21 89.246.192.0/19 maxlen: 19 89.247.0.0/19 maxlen: 19 89.247.32.0/19 maxlen: 19 89.247.32.0/20 maxlen: 20 89.247.112.0/21 maxlen: 21 89.247.112.0/22 maxlen: 22 89.247.144.0/20 maxlen: 20 89.247.160.0/20 maxlen: 20 89.247.179.0/24 maxlen: 24 89.247.216.0/22 maxlen: 22 89.247.232.0/21 maxlen: 21 89.247.240.0/21 maxlen: 21 89.247.252.0/22 maxlen: 22 94.134.0.0/15 maxlen: 15 94.134.0.0/18 maxlen: 18 94.134.64.0/18 maxlen: 23 94.134.89.0/24 maxlen: 24 94.134.128.0/17 maxlen: 23 104.151.0.0/17 maxlen: 17 143.58.64.0/18 maxlen: 18 185.108.228.0/23 maxlen: 23 185.128.68.0/22 maxlen: 22 193.219.15.0/24 maxlen: 24 195.167.208.0/20 maxlen: 20 195.202.32.0/19 maxlen: 19 195.226.96.0/19 maxlen: 19 195.226.160.0/19 maxlen: 19 202.71.128.0/20 maxlen: 24 202.89.144.0/20 maxlen: 20 212.7.128.0/19 maxlen: 19 212.80.224.0/19 maxlen: 19 212.93.0.0/19 maxlen: 19 212.204.0.0/19 maxlen: 19 213.30.192.0/18 maxlen: 18 213.138.32.0/19 maxlen: 19 213.138.35.0/24 maxlen: 24 213.139.128.0/19 maxlen: 19 213.182.128.0/19 maxlen: 19 217.9.32.0/19 maxlen: 19 217.9.96.0/19 maxlen: 19 217.27.192.0/20 maxlen: 20 217.65.16.0/20 maxlen: 20 217.78.128.0/20 maxlen: 20 217.199.64.0/20 maxlen: 20 2001:7b0::/32 maxlen: 32 2001:9e8::/32 maxlen: 32 2001:9e8::/35 maxlen: 35 2001:9e8:2000::/35 maxlen: 35 2001:9e8:4000::/35 maxlen: 35 2001:9e8:6000::/35 maxlen: 35 2001:9e8:8000::/35 maxlen: 35 2001:9e8:a000::/35 maxlen: 35 2001:9e8:c000::/35 maxlen: 35 2001:9e8:e000::/35 maxlen: 36 2001:1438::/32 maxlen: 36 2001:1438:1::/48 maxlen: 56 2001:1438:300::/56 maxlen: 56 2001:16b8::/32 maxlen: 40 2a00:fb8::/29 maxlen: 29 2a00:fb8::/35 maxlen: 35 2a00:fb8:2000::/35 maxlen: 35 2a00:fb8:4000::/35 maxlen: 35 2a00:fb8:6000::/35 maxlen: 35 2a00:fbc::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:32:47:26:c4:51:9a:c7:41:aa:61:96:0d:85:05:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e Validity Not Before: Dec 2 08:33:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fb58a3c4a7fc35ff498026f65a08c6133ff789a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:61:c3:5e:5b:9a:b4:9c:7c:f3:d7:f4:cc:6b: 9a:b2:0f:e5:52:1a:24:f1:a9:14:ce:46:13:f7:08: 09:dc:d0:a0:3d:e5:2b:21:8c:ec:a1:2c:d4:09:8d: 3e:8a:21:d1:23:13:1a:86:39:24:7c:04:84:fb:82: 7e:b7:0d:a4:5f:50:ba:54:e8:f4:10:34:21:fc:5a: 18:6a:6a:fd:fd:95:59:a3:61:58:45:39:a8:c3:2d: ee:1c:06:85:63:03:b4:84:59:c4:32:f0:85:ff:f5: e3:f0:9c:8e:ce:4d:cd:bb:41:f8:95:a1:3a:8f:37: 76:d6:dc:03:0b:71:2c:bf:0d:8b:fa:63:da:b8:45: 95:bc:81:16:ce:5e:86:f0:13:9d:ab:89:34:88:18: 27:78:23:d3:dc:f2:6d:67:c6:d7:b2:47:66:f0:ed: 00:a4:f1:89:e7:06:06:1f:f7:56:de:cf:2c:79:a7: 87:2a:77:2e:46:b8:d4:72:c8:70:24:0e:d2:54:b3: 81:01:ab:d1:6d:22:2e:e5:fc:81:c7:48:47:1c:92: 06:a5:98:eb:cc:ec:1a:32:6d:a8:8e:85:3d:02:f3: 85:2a:83:a9:85:ad:7b:4d:9c:56:73:b8:eb:46:b1: 0e:b9:54:85:0a:41:4d:91:f5:7a:57:16:f1:44:c8: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:58:A3:C4:A7:FC:35:FF:49:80:26:F6:5A:08:C6:13:3F:F7:89:A4 X509v3 Authority Key Identifier: keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1-1ijxKf8Nf9JgCb2WgjGEz_3iaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.40.128.0/18 46.142.0.0/16 46.189.0.0/17 61.8.128.0/19 62.72.64.0/19 62.214.0.0/16 62.217.32.0/19 62.220.0.0/19 80.241.192.0/20 80.242.160.0/19 82.119.160.0/19 82.140.0.0/18 82.144.32.0/19 82.145.0.0/19 82.194.96.0/19 82.207.128.0/17 83.135.0.0/16 84.19.192.0/19 87.122.0.0/15 88.130.0.0/16 89.27.128.0/17 89.207.200.0/21 89.244.0.0/14 94.134.0.0/15 104.151.0.0/17 143.58.64.0/18 185.108.228.0/23 185.128.68.0/22 193.219.15.0/24 195.167.208.0/20 195.202.32.0/19 195.226.96.0/19 195.226.160.0/19 202.71.128.0/20 202.89.144.0/20 212.7.128.0/19 212.80.224.0/19 212.93.0.0/19 212.204.0.0/19 213.30.192.0/18 213.138.32.0/19 213.139.128.0/19 213.182.128.0/19 217.9.32.0/19 217.9.96.0/19 217.27.192.0/20 217.65.16.0/20 217.78.128.0/20 217.199.64.0/20 IPv6: 2001:7b0::/32 2001:9e8::/32 2001:1438::/32 2001:16b8::/32 2a00:fb8::/29 Signature Algorithm: sha256WithRSAEncryption 93:71:03:c7:8e:a4:49:ff:26:48:7c:ca:8c:44:89:f3:e0:b5: b6:80:bd:e1:95:7a:f4:f1:4b:60:a2:51:36:73:07:2f:0d:72: 99:58:f7:7a:1b:0c:6e:df:b4:8b:5c:bc:d1:77:76:17:49:c0: 05:ac:6d:db:f3:f7:c8:a5:81:01:e9:9e:14:92:41:d1:5e:4d: 38:3f:68:3f:aa:38:f3:69:24:de:36:d2:79:56:f5:4a:5f:28: 6a:23:40:14:4e:ff:29:88:f6:48:bd:fb:ee:fe:eb:3d:52:fb: d9:6c:5c:a5:93:87:27:c0:82:43:a1:92:a9:b0:41:c0:82:d3: 38:3d:d2:3d:4b:e4:02:96:45:7c:74:ff:86:f3:b5:a5:f7:5e: 01:89:d7:1d:7f:2e:d5:7b:d6:49:77:79:12:6b:e4:ac:19:d8: 72:e3:08:de:77:af:7d:70:35:35:d4:39:90:1a:c8:16:a4:b5: 10:71:8b:b5:50:a8:0f:65:39:58:1a:b3:95:31:46:8c:c8:4c: 90:43:4f:7e:f0:55:ba:fb:04:9a:85:2d:29:0e:ca:26:24:03: 01:e1:70:3c:8c:36:4a:b5:91:59:f9:71:31:91:90:7e:d0:56: 34:e3:b7:3d:1c:56:64:6a:3b:e9:15:95:cb:1f:2d:b8:09:0b: 4b:a0:45:43 -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgISAZreMkcmxFGax0GqYZYNhQUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0 NjQzMmUwHhcNMjUxMjAyMDgzMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjU4YTNjNGE3ZmMzNWZmNDk4MDI2ZjY1YTA4YzYxMzNmZjc4OWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52HDXluatJx889f0zGuasg/lUhok 8akUzkYT9wgJ3NCgPeUrIYzsoSzUCY0+iiHRIxMahjkkfASE+4J+tw2kX1C6VOj0 EDQh/FoYamr9/ZVZo2FYRTmowy3uHAaFYwO0hFnEMvCF//Xj8JyOzk3Nu0H4laE6 jzd21twDC3Esvw2L+mPauEWVvIEWzl6G8BOdq4k0iBgneCPT3PJtZ8bXskdm8O0A pPGJ5wYGH/dW3s8seaeHKncuRrjUcshwJA7SVLOBAavRbSIu5fyBx0hHHJIGpZjr zOwaMm2ojoU9AvOFKoOpha17TZxWc7jrRrEOuVSFCkFNkfV6VxbxRMgBuwIDAQAB o4IDWDCCA1QwHQYDVR0OBBYEFPtYo8Sn/DX/SYAm9loIxhM/94mkMB8GA1UdIwQY MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt NjQzYTQxNTlhYjQ2LzEvMS0xaWp4S2Y4TmY5SmdDYjJXZ2pHRXpfM2lhUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWIvYjEzOTNkLWNjYTgtNGE5Ny04MWFhLTY0M2E0MTU5YWI0 Ni8xL0FkR2hOVDlfaTFCZnlZZFE2R2VIOU9CR1F5NC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAWsGCCsGAQUFBwEHAQH/BIIBWjCCAVYwggEnBAIAATCC AR8DBAYYKIADAwAujgMEBy69AAMEBT0IgAMEBT5IQAMDAD7WAwQFPtkgAwQFPtwA AwQEUPHAAwQFUPKgAwQFUnegAwQGUowAAwQFUpAgAwQFUpEAAwQFUsJgAwQHUs+A AwMAU4cDBAVUE8ADAwFXegMDAFiCAwQHWRuAAwQDWc/IAwMCWfQDAwFehgMEB2iX AAMEBo86QAMEAbls5AMEArmARAMEAMHbDwMEBMOn0AMEBcPKIAMEBcPiYAMEBcPi oAMEBMpHgAMEBMpZkAMEBdQHgAMEBdRQ4AMEBdRdAAMEBdTMAAMEBtUewAMEBdWK IAMEBdWLgAMEBdW2gAMEBdkJIAMEBdkJYAMEBNkbwAMEBNlBEAMEBNlOgAMEBNnH QDApBAIAAjAjAwUAIAEHsAMFACABCegDBQAgARQ4AwUAIAEWuAMFAyoAD7gwDQYJ KoZIhvcNAQELBQADggEBAJNxA8eOpEn/Jkh8yoxEifPgtbaAveGVevTxS2CiUTZz By8NcplY93obDG7ftItcvNF3dhdJwAWsbdvz98ilgQHpnhSSQdFeTTg/aD+qOPNp JN420nlW9UpfKGojQBRO/ymI9ki9++7+6z1S+9lsXKWThyfAgkOhkqmwQcCC0zg9 0j1L5AKWRXx0/4bztaX3XgGJ1x1/LtV71kl3eRJr5KwZ2HLjCN53r31wNTXUOZAa yBaktRBxi7VQqA9lOVgas5UxRozITJBDT37wVbr7BJqFLSkOyiYkAwHhcDyMNkq1 kVn5cTGRkH7QVjTjtz0cVmRqO+kVlcsfLbgJC0ugRUM= -----END CERTIFICATE-----Generated at Fri Dec 5 09:29:09 2025 by rpki-client