This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/OdXLz0lXUb6aDlyT4voEJkML1lY.roa File: OdXLz0lXUb6aDlyT4voEJkML1lY.roa (raw, json) Hash identifier: kzOUcLxgi82g4Q2eWFfxpJYvnBr2bm73vP0EzLEHsNA= Subject key identifier: 39:D5:CB:CF:49:57:51:BE:9A:0E:5C:93:E2:FA:04:26:43:0B:D6:56 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B0394EAFED519A08D53D7EEC0D3E5AC5D Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/OdXLz0lXUb6aDlyT4voEJkML1lY.roa Signing time: Tue 09 Dec 2025 14:47:29 +0000 ROA not before: Tue 09 Dec 2025 14:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9125 IP address blocks: 5.172.34.0/23 maxlen: 23 5.172.34.0/24 maxlen: 24 5.172.37.0/24 maxlen: 24 5.172.39.0/24 maxlen: 24 89.23.65.0/24 maxlen: 24 89.23.67.0/24 maxlen: 24 89.23.68.0/23 maxlen: 23 89.23.70.0/24 maxlen: 24 89.23.71.0/24 maxlen: 24 89.23.74.0/24 maxlen: 24 89.23.75.0/24 maxlen: 24 89.23.77.0/24 maxlen: 24 89.23.78.0/24 maxlen: 24 89.23.79.0/24 maxlen: 24 89.23.83.0/24 maxlen: 24 89.23.84.0/24 maxlen: 24 89.23.86.0/24 maxlen: 24 89.23.88.0/24 maxlen: 24 89.23.90.0/24 maxlen: 24 92.42.248.0/22 maxlen: 22 92.42.252.0/24 maxlen: 24 92.42.253.0/24 maxlen: 24 92.42.254.0/24 maxlen: 24 92.42.255.0/24 maxlen: 24 93.93.192.0/21 maxlen: 21 95.140.112.0/22 maxlen: 22 95.140.115.0/24 maxlen: 24 95.140.116.0/22 maxlen: 22 95.140.120.0/23 maxlen: 23 95.140.124.0/22 maxlen: 22 95.140.125.0/24 maxlen: 24 109.111.224.0/24 maxlen: 24 109.111.225.0/24 maxlen: 24 109.111.226.0/24 maxlen: 24 109.111.227.0/24 maxlen: 24 109.111.228.0/24 maxlen: 24 109.111.229.0/24 maxlen: 24 109.111.230.0/23 maxlen: 23 109.111.232.0/22 maxlen: 22 109.111.236.0/22 maxlen: 22 109.111.240.0/24 maxlen: 24 109.111.243.0/24 maxlen: 24 109.111.244.0/24 maxlen: 24 109.111.245.0/24 maxlen: 24 109.111.246.0/24 maxlen: 24 109.111.247.0/24 maxlen: 24 109.111.248.0/24 maxlen: 24 109.111.249.0/24 maxlen: 24 109.111.250.0/24 maxlen: 24 109.111.252.0/23 maxlen: 23 109.111.254.0/24 maxlen: 24 178.254.128.0/21 maxlen: 21 178.254.133.0/24 maxlen: 24 178.254.136.0/22 maxlen: 22 178.254.140.0/22 maxlen: 22 178.254.144.0/24 maxlen: 24 178.254.145.0/24 maxlen: 24 178.254.146.0/24 maxlen: 24 178.254.148.0/24 maxlen: 24 178.254.149.0/24 maxlen: 24 178.254.151.0/24 maxlen: 24 178.254.152.0/24 maxlen: 24 178.254.153.0/24 maxlen: 24 178.254.154.0/24 maxlen: 24 178.254.155.0/24 maxlen: 24 178.254.156.0/24 maxlen: 24 178.254.157.0/24 maxlen: 24 178.254.158.0/24 maxlen: 24 178.254.159.0/24 maxlen: 24 178.254.163.0/24 maxlen: 24 178.254.165.0/24 maxlen: 24 178.254.169.0/24 maxlen: 24 178.254.172.0/24 maxlen: 24 178.254.175.0/24 maxlen: 24 178.254.177.0/24 maxlen: 24 178.254.183.0/24 maxlen: 24 178.254.184.0/24 maxlen: 24 178.254.187.0/24 maxlen: 24 178.254.188.0/22 maxlen: 24 185.157.44.0/24 maxlen: 24 193.104.68.0/24 maxlen: 24 217.169.208.0/20 maxlen: 20 217.169.208.0/22 maxlen: 22 217.169.212.0/22 maxlen: 22 217.169.216.0/22 maxlen: 22 217.169.219.0/24 maxlen: 24 217.169.220.0/22 maxlen: 22 2a02:b58::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:94:ea:fe:d5:19:a0:8d:53:d7:ee:c0:d3:e5:ac:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Dec 9 14:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=39d5cbcf495751be9a0e5c93e2fa0426430bd656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2f:a9:66:85:1a:c1:c9:56:e2:17:18:ae:03: 9e:9d:be:d9:05:48:83:36:28:88:e0:b9:82:82:ca: c9:84:2c:c9:20:e2:8a:18:f4:4c:11:a0:51:be:7b: ab:a3:b8:bc:b4:9a:3b:f5:ed:44:3e:96:4c:5a:2a: 0f:bd:15:6a:2e:35:ba:93:1f:0a:1f:14:39:32:07: 3b:31:2a:f3:9c:98:79:1f:fd:83:b2:a9:ae:c2:73: 0f:92:ea:96:ee:e0:27:c9:e4:bb:03:1a:1f:13:69: 19:32:2c:80:62:cd:b1:e0:da:13:c6:76:7b:25:e5: dd:a9:94:94:57:90:30:03:6a:54:f9:28:03:57:38: 77:97:46:6c:62:7d:47:b2:69:bb:c8:7a:38:8f:71: fe:dc:ba:ab:52:f9:2e:f4:ec:c1:49:ca:96:13:87: 17:09:1c:7d:d6:30:d8:ee:52:78:58:94:65:58:2c: 03:ab:52:d0:04:f5:a9:47:5a:e0:f7:34:eb:52:cf: a6:73:69:30:cf:a8:af:7a:c2:ab:a8:39:d1:c9:9e: e4:68:dc:9f:54:08:ec:00:ce:ad:f1:8a:6f:bd:ce: 95:97:cb:90:b2:b1:08:ba:22:ad:27:9f:b6:77:cb: 8a:2c:a1:34:70:a2:85:72:0a:78:7c:03:54:9e:20: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D5:CB:CF:49:57:51:BE:9A:0E:5C:93:E2:FA:04:26:43:0B:D6:56 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/OdXLz0lXUb6aDlyT4voEJkML1lY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.34.0/23 5.172.37.0/24 5.172.39.0/24 89.23.65.0/24 89.23.67.0-89.23.71.255 89.23.74.0/23 89.23.77.0-89.23.79.255 89.23.83.0-89.23.84.255 89.23.86.0/24 89.23.88.0/24 89.23.90.0/24 92.42.248.0/21 93.93.192.0/21 95.140.112.0-95.140.121.255 95.140.124.0/22 109.111.224.0-109.111.240.255 109.111.243.0-109.111.250.255 109.111.252.0-109.111.254.255 178.254.128.0-178.254.146.255 178.254.148.0/23 178.254.151.0-178.254.159.255 178.254.163.0/24 178.254.165.0/24 178.254.169.0/24 178.254.172.0/24 178.254.175.0/24 178.254.177.0/24 178.254.183.0-178.254.184.255 178.254.187.0-178.254.191.255 185.157.44.0/24 193.104.68.0/24 217.169.208.0/20 IPv6: 2a02:b58::/32 Signature Algorithm: sha256WithRSAEncryption 85:92:14:aa:4e:d3:9c:c0:af:91:ef:23:79:53:11:76:0a:41: d9:17:97:0d:a4:17:f1:6a:b8:ba:24:ac:f6:58:95:46:5c:18: 20:ce:53:bf:1c:a8:d9:a2:84:cf:fc:e5:32:d7:7d:ca:e3:54: ae:5a:46:24:bc:d8:1f:e5:9d:78:58:41:17:51:b1:31:8c:8e: 03:de:06:3e:19:cd:ad:b9:e3:c6:30:7c:86:d9:83:b1:3b:3c: f2:6d:ba:0a:b4:6e:53:49:6c:83:a3:8f:de:79:7d:3e:37:6d: 71:eb:c5:79:96:dd:45:6e:f3:74:a5:30:eb:e1:3b:8c:d5:06: 44:d7:0c:8e:dc:50:cb:e4:64:1e:31:d4:0b:40:f6:ea:75:8e: f5:36:2d:b2:ef:bf:c2:c5:7b:13:41:22:af:f5:06:a2:db:a5: 7b:43:9c:00:06:e4:78:8f:1d:71:af:1e:23:f1:ac:58:bb:26: cb:e0:4a:57:ae:12:b8:ac:44:0a:42:7e:03:ea:76:20:f2:79: 0f:48:09:65:6b:64:31:00:c2:84:bf:52:9c:e2:8f:4f:c8:b6: ef:40:73:55:c6:20:b6:bc:bb:45:16:f6:50:89:e5:4d:c4:ed: 47:17:29:9e:09:7b:1c:ce:e5:10:d0:d9:68:7f:7a:22:01:86: 6e:c9:28:0b -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgISAZsDlOr+1RmgjVPX7sDT5axdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMjA5MTQ0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWQ1Y2JjZjQ5NTc1MWJlOWEwZTVjOTNlMmZhMDQyNjQzMGJkNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky+pZoUawclW4hcYrgOenb7ZBUiD NiiI4LmCgsrJhCzJIOKKGPRMEaBRvnuro7i8tJo79e1EPpZMWioPvRVqLjW6kx8K HxQ5Mgc7MSrznJh5H/2DsqmuwnMPkuqW7uAnyeS7AxofE2kZMiyAYs2x4NoTxnZ7 JeXdqZSUV5AwA2pU+SgDVzh3l0ZsYn1Hsmm7yHo4j3H+3LqrUvku9OzBScqWE4cX CRx91jDY7lJ4WJRlWCwDq1LQBPWpR1rg9zTrUs+mc2kwz6ivesKrqDnRyZ7kaNyf VAjsAM6t8Ypvvc6Vl8uQsrEIuiKtJ5+2d8uKLKE0cKKFcgp4fANUniDlbwIDAQAB o4IDNDCCAzAwHQYDVR0OBBYEFDnVy89JV1G+mg5ck+L6BCZDC9ZWMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvT2RYTHowbFhVYjZhRGx5VDR2b0VKa01MMWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBSAYIKwYBBQUHAQcBAf8EggE3MIIBMzCCASAEAgABMIIB GAMEAQWsIgMEAAWsJQMEAAWsJwMEAFkXQTAMAwQAWRdDAwQDWRdAAwQBWRdKMAwD BABZF00DBARZF0AwDAMEAFkXUwMEAFkXVAMEAFkXVgMEAFkXWAMEAFkXWgMEA1wq +AMEA11dwDAMAwQEX4xwAwQBX4x4AwQCX4x8MAwDBAVtb+ADBABtb/AwDAMEAG1v 8wMEAG1v+jAMAwQCbW/8AwQAbW/+MAwDBAey/oADBACy/pIDBAGy/pQwDAMEALL+ lwMEBbL+gAMEALL+owMEALL+pQMEALL+qQMEALL+rAMEALL+rwMEALL+sTAMAwQA sv63AwQAsv64MAwDBACy/rsDBAay/oADBAC5nSwDBADBaEQDBATZqdAwDQQCAAIw BwMFACoCC1gwDQYJKoZIhvcNAQELBQADggEBAIWSFKpO05zAr5HvI3lTEXYKQdkX lw2kF/FquLokrPZYlUZcGCDOU78cqNmihM/85TLXfcrjVK5aRiS82B/lnXhYQRdR sTGMjgPeBj4Zza2548YwfIbZg7E7PPJtugq0blNJbIOjj955fT43bXHrxXmW3UVu 83SlMOvhO4zVBkTXDI7cUMvkZB4x1AtA9up1jvU2LbLvv8LFexNBIq/1BqLbpXtD nAAG5HiPHXGvHiPxrFi7JsvgSleuErisRApCfgPqdiDyeQ9ICWVrZDEAwoS/Upzi j0/Itu9Ac1XGILa8u0UW9lCJ5U3E7UcXKZ4JexzO5RDQ2Wh/eiIBhm7JKAs= -----END CERTIFICATE-----Generated at Wed Dec 17 03:35:41 2025 by rpki-client