This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/uw632Zt35uzluylkupd_OLjwoc0.roa File: uw632Zt35uzluylkupd_OLjwoc0.roa (raw, json) Hash identifier: 3VOqWGMkMg9GDheAfkqaJ41TEMCPbwEzlsyluZNEMXs= Subject key identifier: BB:0E:B7:D9:9B:77:E6:EC:E5:BB:29:64:BA:97:7F:38:B8:F0:A1:CD Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019ABAEA1A414DE00E66691DF28E8F619F36 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/uw632Zt35uzluylkupd_OLjwoc0.roa Signing time: Tue 25 Nov 2025 12:08:15 +0000 ROA not before: Tue 25 Nov 2025 12:08:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44559 IP address blocks: 31.222.248.0/24 maxlen: 24 45.142.39.0/24 maxlen: 24 157.22.0.0/24 maxlen: 24 157.22.1.0/24 maxlen: 24 157.22.2.0/24 maxlen: 24 157.22.3.0/24 maxlen: 24 157.22.4.0/24 maxlen: 24 157.22.5.0/24 maxlen: 24 157.22.6.0/24 maxlen: 24 157.22.7.0/24 maxlen: 24 157.22.8.0/24 maxlen: 24 157.22.9.0/24 maxlen: 24 157.22.10.0/24 maxlen: 24 157.22.11.0/24 maxlen: 24 157.22.12.0/24 maxlen: 24 157.22.13.0/24 maxlen: 24 157.22.14.0/24 maxlen: 24 157.22.15.0/24 maxlen: 24 157.22.20.0/24 maxlen: 24 157.22.21.0/24 maxlen: 24 157.22.22.0/24 maxlen: 24 157.22.23.0/24 maxlen: 24 157.22.24.0/24 maxlen: 24 157.22.25.0/24 maxlen: 24 157.22.26.0/24 maxlen: 24 157.22.27.0/24 maxlen: 24 157.22.28.0/24 maxlen: 24 157.22.29.0/24 maxlen: 24 157.22.30.0/24 maxlen: 24 157.22.31.0/24 maxlen: 24 157.22.32.0/24 maxlen: 24 157.22.33.0/24 maxlen: 24 157.22.34.0/24 maxlen: 24 157.22.35.0/24 maxlen: 24 157.22.36.0/24 maxlen: 24 157.22.37.0/24 maxlen: 24 157.22.38.0/24 maxlen: 24 157.22.39.0/24 maxlen: 24 157.22.40.0/24 maxlen: 24 157.22.42.0/24 maxlen: 24 157.22.43.0/24 maxlen: 24 157.22.48.0/24 maxlen: 24 157.22.49.0/24 maxlen: 24 157.22.51.0/24 maxlen: 24 157.22.52.0/24 maxlen: 24 157.22.53.0/24 maxlen: 24 157.22.54.0/24 maxlen: 24 157.22.55.0/24 maxlen: 24 157.22.56.0/24 maxlen: 24 157.22.57.0/24 maxlen: 24 157.22.59.0/24 maxlen: 24 157.22.60.0/24 maxlen: 24 157.22.61.0/24 maxlen: 24 157.22.62.0/24 maxlen: 24 157.22.63.0/24 maxlen: 24 157.22.64.0/24 maxlen: 24 157.22.66.0/24 maxlen: 24 157.22.67.0/24 maxlen: 24 157.22.68.0/24 maxlen: 24 157.22.69.0/24 maxlen: 24 157.22.70.0/24 maxlen: 24 157.22.71.0/24 maxlen: 24 157.22.76.0/24 maxlen: 24 157.22.77.0/24 maxlen: 24 157.22.78.0/24 maxlen: 24 157.22.79.0/24 maxlen: 24 157.22.80.0/24 maxlen: 24 157.22.81.0/24 maxlen: 24 157.22.82.0/24 maxlen: 24 157.22.83.0/24 maxlen: 24 157.22.84.0/24 maxlen: 24 157.22.85.0/24 maxlen: 24 157.22.86.0/24 maxlen: 24 157.22.87.0/24 maxlen: 24 157.22.88.0/24 maxlen: 24 157.22.89.0/24 maxlen: 24 157.22.90.0/24 maxlen: 24 157.22.91.0/24 maxlen: 24 157.22.92.0/24 maxlen: 24 157.22.93.0/24 maxlen: 24 157.22.94.0/24 maxlen: 24 157.22.95.0/24 maxlen: 24 157.22.96.0/24 maxlen: 24 157.22.98.0/24 maxlen: 24 157.22.99.0/24 maxlen: 24 157.22.104.0/24 maxlen: 24 157.22.105.0/24 maxlen: 24 157.22.107.0/24 maxlen: 24 157.22.108.0/24 maxlen: 24 157.22.109.0/24 maxlen: 24 157.22.110.0/24 maxlen: 24 157.22.111.0/24 maxlen: 24 157.22.112.0/24 maxlen: 24 157.22.113.0/24 maxlen: 24 157.22.114.0/24 maxlen: 24 157.22.115.0/24 maxlen: 24 157.22.117.0/24 maxlen: 24 157.22.118.0/24 maxlen: 24 157.22.120.0/24 maxlen: 24 157.22.121.0/24 maxlen: 24 157.22.122.0/24 maxlen: 24 157.22.123.0/24 maxlen: 24 176.56.37.0/24 maxlen: 24 178.212.143.0/24 maxlen: 24 185.46.175.0/24 maxlen: 24 185.92.211.0/24 maxlen: 24 185.161.79.0/24 maxlen: 24 193.56.29.0/24 maxlen: 24 194.32.238.0/24 maxlen: 24 194.32.239.0/24 maxlen: 24 194.56.180.0/24 maxlen: 24 195.64.110.0/24 maxlen: 24 195.96.146.0/24 maxlen: 24 212.18.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:ea:1a:41:4d:e0:0e:66:69:1d:f2:8e:8f:61:9f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Nov 25 12:08:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb0eb7d99b77e6ece5bb2964ba977f38b8f0a1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:ce:41:2e:56:49:e8:82:c3:a7:0a:28:c0: f0:cd:f1:f6:03:fd:50:21:4c:1b:ad:92:67:ea:44: 49:d1:b7:ee:e0:f6:62:3b:d5:30:69:8e:f3:33:5f: 8d:00:63:6e:a5:7b:a7:df:10:57:df:8a:e6:17:e2: d2:ae:21:20:76:36:7f:6a:b1:77:56:9d:ce:f1:87: 10:22:5e:f6:7f:74:fc:d9:c9:13:f3:3f:29:94:42: f0:ae:a6:bb:dc:16:cf:b8:18:21:20:3a:d8:fb:ee: e3:49:4b:00:0b:ee:0b:44:94:ce:ad:a6:8a:11:23: 2b:dd:82:5e:68:6a:00:d6:26:50:da:fc:16:ce:62: 7c:2a:1b:9b:8e:9c:aa:ba:ae:f4:62:65:27:5f:e2: d2:00:8b:61:50:e5:8a:20:56:4f:cd:f7:2a:c4:47: 56:b3:85:fb:21:b3:2d:d9:92:26:95:41:76:d8:bb: 21:57:36:5a:d5:11:fa:35:4f:5b:13:ae:49:ca:ee: 3d:82:83:35:a2:8d:e2:25:69:6c:3d:d1:9f:7e:09: e2:ef:04:9f:d1:ab:d4:8c:c5:90:20:6c:ea:82:c0: f3:4b:1d:97:6a:57:2e:76:4b:49:9a:80:f4:31:fc: 3d:78:c9:46:21:d5:cc:1d:38:af:bf:02:f8:d3:19: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0E:B7:D9:9B:77:E6:EC:E5:BB:29:64:BA:97:7F:38:B8:F0:A1:CD X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/uw632Zt35uzluylkupd_OLjwoc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.248.0/24 45.142.39.0/24 157.22.0.0/20 157.22.20.0-157.22.40.255 157.22.42.0/23 157.22.48.0/23 157.22.51.0-157.22.57.255 157.22.59.0-157.22.64.255 157.22.66.0-157.22.71.255 157.22.76.0-157.22.96.255 157.22.98.0/23 157.22.104.0/23 157.22.107.0-157.22.115.255 157.22.117.0-157.22.118.255 157.22.120.0/22 176.56.37.0/24 178.212.143.0/24 185.46.175.0/24 185.92.211.0/24 185.161.79.0/24 193.56.29.0/24 194.32.238.0/23 194.56.180.0/24 195.64.110.0/24 195.96.146.0/24 212.18.103.0/24 Signature Algorithm: sha256WithRSAEncryption 23:cf:59:7e:76:10:06:9c:08:3c:35:db:38:77:8f:d0:a8:c5: 7a:cd:96:29:66:be:38:f4:f1:81:21:a3:a9:31:17:30:fa:1a: 51:be:63:de:8c:87:45:8b:99:73:df:62:54:be:19:79:dd:61: 38:60:0d:7e:f8:ed:66:9a:bf:2f:64:f2:83:4c:dd:57:0e:31: fb:08:b9:c7:c8:ad:33:1a:72:ce:f4:d4:67:8e:59:d6:98:22: b1:47:dc:e3:a7:c5:e2:9e:14:68:43:2e:1c:6f:e0:9f:22:13: 0d:31:77:6c:60:9c:ac:8d:90:40:d1:b1:a7:42:84:e1:2e:19: 0a:84:57:ce:64:ba:f6:ff:ce:02:f9:00:a1:ba:80:3b:9a:07: 54:c1:12:58:47:3e:77:96:9c:ae:d3:4a:fe:5a:67:82:38:71: 8e:0c:a1:b0:d6:f2:cf:07:03:10:fe:98:6d:a2:98:cc:38:bf: 47:d1:28:60:56:b9:7d:06:27:6d:f7:09:94:24:de:40:b6:f5: 1a:41:ff:b4:fd:9d:94:00:5c:a1:82:fe:ef:1a:92:73:12:c7: 14:c3:b7:27:b1:e2:d8:87:a0:50:1f:52:1c:de:52:00:69:5c: af:2d:50:4d:d7:23:fe:e8:62:07:e7:0f:28:a7:f1:f2:c3:cd: 4d:0a:d9:2e -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZq66hpBTeAOZmkd8o6PYZ82MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjUxMTI1MTIwODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjBlYjdkOTliNzdlNmVjZTViYjI5NjRiYTk3N2YzOGI4ZjBhMWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ3OQS5WSeiCw6cKKMDwzfH2A/1Q IUwbrZJn6kRJ0bfu4PZiO9UwaY7zM1+NAGNupXun3xBX34rmF+LSriEgdjZ/arF3 Vp3O8YcQIl72f3T82ckT8z8plELwrqa73BbPuBghIDrY++7jSUsAC+4LRJTOraaK ESMr3YJeaGoA1iZQ2vwWzmJ8Khubjpyquq70YmUnX+LSAIthUOWKIFZPzfcqxEdW s4X7IbMt2ZImlUF22LshVzZa1RH6NU9bE65Jyu49goM1oo3iJWlsPdGffgni7wSf 0avUjMWQIGzqgsDzSx2XalcudktJmoD0Mfw9eMlGIdXMHTivvwL40xlJdwIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFLsOt9mbd+bs5bspZLqXfzi48KHNMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvdXc2MzJadDM1dXpsdXlsa3VwZF9PTGp3b2MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCB2wQCAAEwgdQDBAAf 3vgDBAAtjicDBASdFgAwDAMEAp0WFAMEAJ0WKAMEAZ0WKgMEAZ0WMDAMAwQAnRYz AwQBnRY4MAwDBACdFjsDBACdFkAwDAMEAZ0WQgMEA50WQDAMAwQCnRZMAwQAnRZg AwQBnRZiAwQBnRZoMAwDBACdFmsDBAKdFnAwDAMEAJ0WdQMEAJ0WdgMEAp0WeAME ALA4JQMEALLUjwMEALkurwMEALlc0wMEALmhTwMEAME4HQMEAcIg7gMEAMI4tAME AMNAbgMEAMNgkgMEANQSZzANBgkqhkiG9w0BAQsFAAOCAQEAI89ZfnYQBpwIPDXb OHeP0KjFes2WKWa+OPTxgSGjqTEXMPoaUb5j3oyHRYuZc99iVL4Zed1hOGANfvjt Zpq/L2Tyg0zdVw4x+wi5x8itMxpyzvTUZ45Z1pgisUfc46fF4p4UaEMuHG/gnyIT DTF3bGCcrI2QQNGxp0KE4S4ZCoRXzmS69v/OAvkAobqAO5oHVMESWEc+d5acrtNK /lpngjhxjgyhsNbyzwcDEP6YbaKYzDi/R9EoYFa5fQYnbfcJlCTeQLb1GkH/tP2d lABcoYL+7xqScxLHFMO3J7Hi2IegUB9SHN5SAGlcry1QTdcj/uhiB+cPKKfx8sPN TQrZLg== -----END CERTIFICATE-----Generated at Thu Nov 27 12:13:12 2025 by rpki-client