This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/c151k3uuTX4II7cb_BeXaTE8a6o.roa File: c151k3uuTX4II7cb_BeXaTE8a6o.roa (raw, json) Hash identifier: vg0Y4dCfkVk5WEQ8dOFPXb6A3roAiuMWS+ic6c9s7qM= Subject key identifier: 73:5E:75:93:7B:AE:4D:7E:08:23:B7:1B:FC:17:97:69:31:3C:6B:AA Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Certificate serial: 019B35E4800904EB9A4B5AF6EA007CEB7D98 Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/c151k3uuTX4II7cb_BeXaTE8a6o.roa Signing time: Fri 19 Dec 2025 09:15:26 +0000 ROA not before: Fri 19 Dec 2025 09:15:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13285 IP address blocks: 2.96.0.0/13 maxlen: 24 62.3.192.0/18 maxlen: 24 62.24.128.0/17 maxlen: 24 62.241.160.0/19 maxlen: 24 78.144.0.0/13 maxlen: 24 79.77.0.0/16 maxlen: 24 79.78.0.0/15 maxlen: 24 80.40.0.0/13 maxlen: 24 81.1.64.0/18 maxlen: 24 81.6.192.0/18 maxlen: 24 81.86.0.0/16 maxlen: 24 81.170.0.0/17 maxlen: 24 81.178.0.0/15 maxlen: 24 82.133.0.0/17 maxlen: 24 83.67.0.0/16 maxlen: 24 84.43.0.0/17 maxlen: 24 87.242.128.0/17 maxlen: 24 89.168.128.0/17 maxlen: 24 89.240.0.0/14 maxlen: 24 91.146.112.0/21 maxlen: 24 92.10.0.0/15 maxlen: 24 92.16.0.0/12 maxlen: 24 145.255.240.0/21 maxlen: 24 185.24.12.0/22 maxlen: 24 185.112.212.0/22 maxlen: 24 185.173.116.0/22 maxlen: 24 185.173.120.0/22 maxlen: 24 185.175.48.0/22 maxlen: 24 185.175.144.0/22 maxlen: 24 193.218.99.0/24 maxlen: 24 194.106.32.0/19 maxlen: 24 194.247.224.0/19 maxlen: 24 195.112.0.0/18 maxlen: 24 195.137.0.0/17 maxlen: 24 195.149.0.0/18 maxlen: 24 212.1.128.0/19 maxlen: 24 212.67.96.0/19 maxlen: 24 212.74.96.0/19 maxlen: 24 212.139.0.0/16 maxlen: 24 212.159.128.0/18 maxlen: 24 213.78.0.0/16 maxlen: 24 217.8.0.0/19 maxlen: 24 217.68.128.0/20 maxlen: 24 2001:7e0::/32 maxlen: 32 2001:4a00::/27 maxlen: 27 2a00:4340::/32 maxlen: 32 2a0b:db00::/29 maxlen: 29 2a0b:e900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:e4:80:09:04:eb:9a:4b:5a:f6:ea:00:7c:eb:7d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Validity Not Before: Dec 19 09:15:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=735e75937bae4d7e0823b71bfc179769313c6baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:be:4e:db:8e:d7:99:37:58:ff:8a:1f:37:f3: bc:1a:71:74:0f:bc:0e:0a:a2:00:e4:9b:7a:d3:85: 0c:74:d6:eb:51:1e:cb:4b:1c:a8:58:ab:30:dc:22: 5e:f8:41:97:66:b5:09:4b:16:1a:56:ea:be:9d:c7: cf:8e:48:10:d3:e6:59:83:3e:83:51:11:b3:cc:5f: 99:e4:97:27:75:7c:73:ad:7e:54:64:4a:e4:97:b9: 2f:b3:ad:a2:05:1b:ca:6b:8e:ed:86:16:c8:6d:df: 6c:21:36:4e:94:c6:6d:20:96:c1:96:eb:be:9e:9c: 8a:8e:9c:3f:85:c2:c0:9a:16:40:56:77:4f:7e:5d: ee:fb:dc:d2:39:b9:85:2e:5c:42:41:b7:bb:ef:e6: 67:c3:21:74:7d:4b:64:4c:28:16:dc:5a:9d:60:b1: 07:6d:ef:df:af:ad:a5:25:e9:3b:55:28:4c:4c:ff: d2:30:6c:f6:13:5c:b7:81:7e:61:64:6b:21:df:1d: 50:e0:95:d6:9e:c2:bd:b3:a6:55:be:f7:f9:40:e4: b8:06:e8:78:ea:10:d9:49:81:44:18:81:7e:3e:f1: 04:34:6c:ea:6f:16:1f:f6:29:dc:2d:c9:48:22:24: dc:66:80:42:27:0b:cb:ec:a2:1b:f5:c2:f9:a3:db: b2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5E:75:93:7B:AE:4D:7E:08:23:B7:1B:FC:17:97:69:31:3C:6B:AA X509v3 Authority Key Identifier: keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/c151k3uuTX4II7cb_BeXaTE8a6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.96.0.0/13 62.3.192.0/18 62.24.128.0/17 62.241.160.0/19 78.144.0.0/13 79.77.0.0-79.79.255.255 80.40.0.0/13 81.1.64.0/18 81.6.192.0/18 81.86.0.0/16 81.170.0.0/17 81.178.0.0/15 82.133.0.0/17 83.67.0.0/16 84.43.0.0/17 87.242.128.0/17 89.168.128.0/17 89.240.0.0/14 91.146.112.0/21 92.10.0.0/15 92.16.0.0/12 145.255.240.0/21 185.24.12.0/22 185.112.212.0/22 185.173.116.0-185.173.123.255 185.175.48.0/22 185.175.144.0/22 193.218.99.0/24 194.106.32.0/19 194.247.224.0/19 195.112.0.0/18 195.137.0.0/17 195.149.0.0/18 212.1.128.0/19 212.67.96.0/19 212.74.96.0/19 212.139.0.0/16 212.159.128.0/18 213.78.0.0/16 217.8.0.0/19 217.68.128.0/20 IPv6: 2001:7e0::/32 2001:4a00::/27 2a00:4340::/32 2a0b:db00::/29 2a0b:e900::/29 Signature Algorithm: sha256WithRSAEncryption 76:ab:5d:a4:45:16:c1:d3:e8:f7:24:c2:3b:88:78:5c:19:cd: 6e:b5:46:67:31:3c:cd:e2:38:ea:bf:32:68:73:ec:b7:4a:7f: 4a:7a:1c:33:8e:3a:de:1a:8f:bb:de:f6:f5:1a:45:64:8e:22: a8:64:78:f8:00:f4:aa:76:66:16:c5:5f:14:17:e2:bf:dc:bf: 89:42:45:75:21:39:f1:47:7a:b2:cb:4a:b7:b0:39:a1:11:a9: 17:ae:1d:4b:34:5a:7c:6f:32:d7:39:34:ff:36:9e:65:25:d9: 89:aa:3e:01:35:f3:60:7f:6e:b0:10:20:1c:9d:7e:d4:5c:38: fc:34:aa:f7:32:54:16:af:27:db:29:b7:4b:50:a6:01:69:48: cf:07:b0:db:78:5f:0f:6e:5a:48:d5:fa:2b:d2:86:0a:c8:77: 44:27:64:f1:ac:5f:93:f5:b4:b2:18:ad:31:29:c0:57:5c:07: d8:ed:98:83:55:0b:ae:ef:59:6b:cd:e7:60:5d:fb:b6:7a:23: fc:10:75:cf:53:a0:7e:08:b3:4f:8a:0f:cc:e0:8a:c7:e9:93: 4b:fd:3e:79:e8:56:90:2a:ba:11:2a:d7:88:40:d4:b9:ea:a2: b3:15:df:d8:b8:a7:29:6b:88:41:76:23:4d:fa:9a:14:c5:8e: 62:32:15:e8 -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISAZs15IAJBOuaS1r26gB8632YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh ZGIzZWMwHhcNMjUxMjE5MDkxNTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzVlNzU5MzdiYWU0ZDdlMDgyM2I3MWJmYzE3OTc2OTMxM2M2YmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L5O247XmTdY/4ofN/O8GnF0D7wO CqIA5Jt604UMdNbrUR7LSxyoWKsw3CJe+EGXZrUJSxYaVuq+ncfPjkgQ0+ZZgz6D URGzzF+Z5JcndXxzrX5UZErkl7kvs62iBRvKa47thhbIbd9sITZOlMZtIJbBluu+ npyKjpw/hcLAmhZAVndPfl3u+9zSObmFLlxCQbe77+ZnwyF0fUtkTCgW3FqdYLEH be/fr62lJek7VShMTP/SMGz2E1y3gX5hZGsh3x1Q4JXWnsK9s6ZVvvf5QOS4Buh4 6hDZSYFEGIF+PvEENGzqbxYf9incLclIIiTcZoBCJwvL7KIb9cL5o9uykwIDAQAB o4IDMDCCAywwHQYDVR0OBBYEFHNedZN7rk1+CCO3G/wXl2kxPGuqMB8GA1UdIwQY MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt MGQ4ZjdkZDhjY2U2LzEvYzE1MWszdXVUWDRJSTdjYl9CZVhhVEU4YTZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2 LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBRAYIKwYBBQUHAQcBAf8EggEzMIIBLzCCAQAEAgABMIH5 AwMDAmADBAY+A8ADBAc+GIADBAU+8aADAwNOkDAKAwMAT00DAwRPQAMDA1AoAwQG UQFAAwQGUQbAAwMAUVYDBAdRqgADAwFRsgMEB1KFAAMDAFNDAwQHVCsAAwQHV/KA AwQHWaiAAwMCWfADBANbknADAwFcCgMDBFwQAwQDkf/wAwQCuRgMAwQCuXDUMAwD BAK5rXQDBAK5rXgDBAK5rzADBAK5r5ADBADB2mMDBAXCaiADBAXC9+ADBAbDcAAD BAfDiQADBAbDlQADBAXUAYADBAXUQ2ADBAXUSmADAwDUiwMEBtSfgAMDANVOAwQF 2QgAAwQE2USAMCkEAgACMCMDBQAgAQfgAwUFIAFKAAMFACoAQ0ADBQMqC9sAAwUD KgvpADANBgkqhkiG9w0BAQsFAAOCAQEAdqtdpEUWwdPo9yTCO4h4XBnNbrVGZzE8 zeI46r8yaHPst0p/SnocM4463hqPu9729RpFZI4iqGR4+AD0qnZmFsVfFBfiv9y/ iUJFdSE58Ud6sstKt7A5oRGpF64dSzRafG8y1zk0/zaeZSXZiao+ATXzYH9usBAg HJ1+1Fw4/DSq9zJUFq8n2ym3S1CmAWlIzwew23hfD25aSNX6K9KGCsh3RCdk8axf k/W0shitMSnAV1wH2O2Yg1ULru9Za83nYF37tnoj/BB1z1OgfgizT4oPzOCKx+mT S/0+eehWkCq6ESrXiEDUueqisxXf2LinKWuIQXYjTfqaFMWOYjIV6A== -----END CERTIFICATE-----Generated at Fri Dec 19 19:48:29 2025 by rpki-client