This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/BgB57RrkZ5Bozk8jkW2_FV6VmAA.roa File: BgB57RrkZ5Bozk8jkW2_FV6VmAA.roa (raw, json) Hash identifier: pokEhbaiyjz6akLSE/xe2fj33j12cTdNEBlSqEQjlSw= Subject key identifier: 06:00:79:ED:1A:E4:67:90:68:CE:4F:23:91:6D:BF:15:5E:95:98:00 Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140 Certificate serial: 019A721DF72B999F4C9D8E348DBB684CFB6E Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/BgB57RrkZ5Bozk8jkW2_FV6VmAA.roa Signing time: Tue 11 Nov 2025 08:52:37 +0000 ROA not before: Tue 11 Nov 2025 08:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20845 IP address blocks: 62.77.196.0/22 maxlen: 24 62.77.240.0/23 maxlen: 24 62.77.248.0/21 maxlen: 24 62.165.192.0/18 maxlen: 24 77.234.64.0/19 maxlen: 24 78.131.0.0/17 maxlen: 24 79.120.160.0/21 maxlen: 24 79.120.170.0/23 maxlen: 24 79.120.172.0/22 maxlen: 24 79.120.248.0/23 maxlen: 24 79.120.252.0/22 maxlen: 24 80.95.64.0/19 maxlen: 24 81.0.82.0/23 maxlen: 24 81.0.84.0/22 maxlen: 24 81.0.90.0/23 maxlen: 24 81.0.92.0/22 maxlen: 24 81.0.98.0/23 maxlen: 24 81.0.108.0/23 maxlen: 24 81.0.122.0/23 maxlen: 24 81.0.126.0/23 maxlen: 24 81.17.176.0/20 maxlen: 24 82.131.128.0/19 maxlen: 24 82.131.182.0/23 maxlen: 24 82.131.184.0/21 maxlen: 24 82.131.196.0/23 maxlen: 24 82.131.198.0/24 maxlen: 24 82.131.200.0/21 maxlen: 24 82.131.216.0/21 maxlen: 24 82.131.224.0/19 maxlen: 24 82.144.164.0/22 maxlen: 24 82.144.172.0/22 maxlen: 24 82.144.176.0/23 maxlen: 24 82.144.188.0/23 maxlen: 24 84.236.0.0/17 maxlen: 24 85.66.0.0/15 maxlen: 24 85.238.64.0/19 maxlen: 24 87.97.0.0/18 maxlen: 24 87.97.80.0/20 maxlen: 24 87.97.96.0/19 maxlen: 24 89.147.64.0/20 maxlen: 24 89.147.96.0/22 maxlen: 24 89.147.112.0/21 maxlen: 24 89.148.64.0/18 maxlen: 24 89.186.96.0/23 maxlen: 24 89.186.102.0/23 maxlen: 24 89.186.106.0/23 maxlen: 24 89.186.108.0/22 maxlen: 24 89.186.112.0/22 maxlen: 24 89.186.118.0/23 maxlen: 24 89.186.120.0/21 maxlen: 24 91.82.0.0/21 maxlen: 24 91.82.24.0/21 maxlen: 24 91.82.32.0/21 maxlen: 24 91.82.56.0/23 maxlen: 24 91.82.60.0/23 maxlen: 24 91.82.64.0/21 maxlen: 24 91.82.82.0/23 maxlen: 24 91.82.130.0/23 maxlen: 24 91.82.132.0/22 maxlen: 24 91.82.136.0/21 maxlen: 24 91.82.144.0/22 maxlen: 24 91.82.160.0/21 maxlen: 24 91.82.168.0/22 maxlen: 24 91.82.172.0/23 maxlen: 24 91.82.176.0/21 maxlen: 24 91.82.188.0/22 maxlen: 24 91.82.210.0/23 maxlen: 24 91.82.212.0/22 maxlen: 24 91.82.228.0/22 maxlen: 24 91.82.232.0/22 maxlen: 24 91.82.240.0/22 maxlen: 24 91.82.250.0/23 maxlen: 24 91.83.0.0/19 maxlen: 24 91.83.32.0/21 maxlen: 24 91.83.52.0/22 maxlen: 24 91.83.94.0/23 maxlen: 24 91.83.102.0/23 maxlen: 24 91.83.110.0/23 maxlen: 24 91.83.120.0/23 maxlen: 24 91.83.136.0/21 maxlen: 24 91.83.144.0/23 maxlen: 24 91.83.154.0/23 maxlen: 24 91.83.180.0/22 maxlen: 24 91.83.184.0/21 maxlen: 24 91.83.192.0/20 maxlen: 24 91.83.252.0/23 maxlen: 24 92.52.224.0/19 maxlen: 24 92.245.64.0/19 maxlen: 24 92.249.128.0/17 maxlen: 24 94.21.0.0/16 maxlen: 24 94.247.88.0/21 maxlen: 24 176.241.0.0/18 maxlen: 24 178.164.128.0/17 maxlen: 24 185.29.80.0/22 maxlen: 24 185.62.128.0/22 maxlen: 24 188.142.128.0/19 maxlen: 24 188.143.0.0/17 maxlen: 24 193.110.56.0/21 maxlen: 24 193.226.192.0/23 maxlen: 24 193.226.212.0/22 maxlen: 24 193.226.226.0/23 maxlen: 24 193.226.232.0/23 maxlen: 24 193.226.238.0/23 maxlen: 24 193.226.240.0/23 maxlen: 24 193.226.244.0/22 maxlen: 24 193.226.248.0/23 maxlen: 24 195.38.96.0/19 maxlen: 24 212.40.72.0/21 maxlen: 24 212.40.80.0/20 maxlen: 24 213.197.72.0/21 maxlen: 24 213.197.80.0/20 maxlen: 24 217.197.176.0/20 maxlen: 24 2a01:368::/29 maxlen: 48 2a01:368::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:1d:f7:2b:99:9f:4c:9d:8e:34:8d:bb:68:4c:fb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140 Validity Not Before: Nov 11 08:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=060079ed1ae4679068ce4f23916dbf155e959800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:02:e3:f9:00:70:c9:1e:bd:0a:f8:87:b4: db:17:19:d2:4a:21:33:78:92:68:c6:38:61:13:bc: 68:ab:18:6f:3a:85:d4:27:f9:fc:71:34:1a:c8:c1: 10:66:74:a1:d3:76:f9:d8:27:ca:5e:40:5f:7c:2b: 9e:69:04:c7:16:bc:1f:96:e8:05:4c:26:4b:ba:fc: 6c:44:53:1c:7c:15:28:02:ba:d6:5f:06:b0:24:82: 31:4d:ff:c7:8b:30:8e:a5:e8:e9:f0:b3:a8:94:0f: ce:c8:89:0b:46:5f:84:dd:ce:3f:30:da:82:21:63: 08:66:5d:1a:d4:52:f7:0a:f1:a1:54:11:78:48:b5: c8:ef:bb:3f:f2:a3:ec:b3:42:04:d7:37:12:90:ed: 34:1c:51:9b:1d:fc:30:9f:20:b3:30:58:13:d8:23: f1:ab:3c:76:ea:05:b7:3b:24:9c:f2:5b:0b:e5:37: 99:32:de:8d:d3:8e:71:1d:88:c5:25:58:0d:1f:3c: 44:08:c3:94:78:44:d3:9c:75:6a:f0:a9:d2:32:0f: 5f:5f:ca:d4:ec:15:1c:cb:20:e8:11:c0:76:ff:16: c5:5f:4a:ed:96:b3:50:c6:95:9e:10:b0:a9:4f:7b: 13:ca:26:f1:c4:7e:e9:3e:50:42:ff:f1:93:cd:d8: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:00:79:ED:1A:E4:67:90:68:CE:4F:23:91:6D:BF:15:5E:95:98:00 X509v3 Authority Key Identifier: keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/BgB57RrkZ5Bozk8jkW2_FV6VmAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.196.0/22 62.77.240.0/23 62.77.248.0/21 62.165.192.0/18 77.234.64.0/19 78.131.0.0/17 79.120.160.0/21 79.120.170.0-79.120.175.255 79.120.248.0/23 79.120.252.0/22 80.95.64.0/19 81.0.82.0-81.0.87.255 81.0.90.0-81.0.95.255 81.0.98.0/23 81.0.108.0/23 81.0.122.0/23 81.0.126.0/23 81.17.176.0/20 82.131.128.0/19 82.131.182.0-82.131.191.255 82.131.196.0-82.131.198.255 82.131.200.0/21 82.131.216.0-82.131.255.255 82.144.164.0/22 82.144.172.0-82.144.177.255 82.144.188.0/23 84.236.0.0/17 85.66.0.0/15 85.238.64.0/19 87.97.0.0/18 87.97.80.0-87.97.127.255 89.147.64.0/20 89.147.96.0/22 89.147.112.0/21 89.148.64.0/18 89.186.96.0/23 89.186.102.0/23 89.186.106.0-89.186.115.255 89.186.118.0-89.186.127.255 91.82.0.0/21 91.82.24.0-91.82.39.255 91.82.56.0/23 91.82.60.0/23 91.82.64.0/21 91.82.82.0/23 91.82.130.0-91.82.147.255 91.82.160.0-91.82.173.255 91.82.176.0/21 91.82.188.0/22 91.82.210.0-91.82.215.255 91.82.228.0-91.82.235.255 91.82.240.0/22 91.82.250.0/23 91.83.0.0-91.83.39.255 91.83.52.0/22 91.83.94.0/23 91.83.102.0/23 91.83.110.0/23 91.83.120.0/23 91.83.136.0-91.83.145.255 91.83.154.0/23 91.83.180.0-91.83.207.255 91.83.252.0/23 92.52.224.0/19 92.245.64.0/19 92.249.128.0/17 94.21.0.0/16 94.247.88.0/21 176.241.0.0/18 178.164.128.0/17 185.29.80.0/22 185.62.128.0/22 188.142.128.0/19 188.143.0.0/17 193.110.56.0/21 193.226.192.0/23 193.226.212.0/22 193.226.226.0/23 193.226.232.0/23 193.226.238.0-193.226.241.255 193.226.244.0-193.226.249.255 195.38.96.0/19 212.40.72.0-212.40.95.255 213.197.72.0-213.197.95.255 217.197.176.0/20 IPv6: 2a01:368::/29 Signature Algorithm: sha256WithRSAEncryption 6a:62:2d:33:d2:8b:6a:03:2e:a0:30:e7:e7:59:43:46:76:86: 10:2e:56:aa:b0:9b:bf:94:94:69:a9:28:5d:41:e6:6c:94:57: a9:b0:a2:29:7f:14:5d:c9:56:5a:d5:e0:77:cd:68:56:da:c3: 66:93:ce:be:b1:b7:a2:be:a3:5c:23:c9:2e:24:03:84:a0:9c: 77:df:d7:6a:f2:72:69:35:df:9a:96:c3:bd:57:86:50:d8:7d: 86:b5:59:4f:7a:d7:b9:c6:f8:eb:bd:b8:51:64:9f:0c:7d:98: 64:44:d4:94:a4:33:09:e8:84:d4:df:af:5d:5f:ce:49:15:cb: db:9f:34:a0:77:0f:e2:48:73:4a:fd:55:a0:b7:17:3e:6f:4d: dc:ff:d7:78:71:03:87:87:57:e9:36:6f:ed:bb:96:b2:74:ec: 17:d1:2a:3f:36:09:4e:12:d3:5b:6d:3c:9e:7a:4d:74:ca:f0: 5d:15:41:e6:80:06:e6:36:27:39:f3:34:a5:a1:4d:a9:c1:dc: 10:4f:cc:74:60:1e:f9:eb:9d:f8:e4:1e:f9:a9:cc:37:d8:3d: 35:60:86:f5:ad:fa:49:3d:cb:8f:35:05:b8:7f:a1:9b:81:f9: 98:6d:88:0a:10:41:92:d8:e5:cc:34:2f:6f:c6:e6:c3:c2:35: d9:7f:05:b6 -----BEGIN CERTIFICATE----- MIIHujCCBqKgAwIBAgISAZpyHfcrmZ9MnY40jbtoTPtuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh OGMxNDAwHhcNMjUxMTExMDg1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjAwNzllZDFhZTQ2NzkwNjhjZTRmMjM5MTZkYmYxNTVlOTU5ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrsC4/kAcMkevQr4h7TbFxnSSiEz eJJoxjhhE7xoqxhvOoXUJ/n8cTQayMEQZnSh03b52CfKXkBffCueaQTHFrwflugF TCZLuvxsRFMcfBUoArrWXwawJIIxTf/HizCOpejp8LOolA/OyIkLRl+E3c4/MNqC IWMIZl0a1FL3CvGhVBF4SLXI77s/8qPss0IE1zcSkO00HFGbHfwwnyCzMFgT2CPx qzx26gW3OySc8lsL5TeZMt6N045xHYjFJVgNHzxECMOUeETTnHVq8KnSMg9fX8rU 7BUcyyDoEcB2/xbFX0rtlrNQxpWeELCpT3sTyibxxH7pPlBC//GTzdizOwIDAQAB o4IExjCCBMIwHQYDVR0OBBYEFAYAee0a5GeQaM5PI5FtvxVelZgAMB8GA1UdIwQY MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt YmU3YTFhMDAxY2NmLzEvQmdCNTdScmtaNUJvems4amtXMl9GVjZWbUFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIC2gYIKwYBBQUHAQcBAf8EggLJMIICxTCCArIEAgABMIIC qgMEAj5NxAMEAT5N8AMEAz5N+AMEBj6lwAMEBU3qQAMEB06DAAMEA094oDAMAwQB T3iqAwQET3igAwQBT3j4AwQCT3j8AwQFUF9AMAwDBAFRAFIDBANRAFAwDAMEAVEA WgMEBVEAQAMEAVEAYgMEAVEAbAMEAVEAegMEAVEAfgMEBFERsAMEBVKDgDAMAwQB UoO2AwQGUoOAMAwDBAJSg8QDBABSg8YDBANSg8gwCwMEA1KD2AMDAlKAAwQCUpCk MAwDBAJSkKwDBAFSkLADBAFSkLwDBAdU7AADAwFVQgMEBVXuQAMEBldhADAMAwQE V2FQAwQHV2EAAwQEWZNAAwQCWZNgAwQDWZNwAwQGWZRAAwQBWbpgAwQBWbpmMAwD BAFZumoDBAJZunAwDAMEAVm6dgMEB1m6AAMEA1tSADAMAwQDW1IYAwQDW1IgAwQB W1I4AwQBW1I8AwQDW1JAAwQBW1JSMAwDBAFbUoIDBAJbUpAwDAMEBVtSoAMEAVtS rAMEA1tSsAMEAltSvDAMAwQBW1LSAwQDW1LQMAwDBAJbUuQDBAJbUugDBAJbUvAD BAFbUvowCwMDAFtTAwQDW1MgAwQCW1M0AwQBW1NeAwQBW1NmAwQBW1NuAwQBW1N4 MAwDBANbU4gDBAFbU5ADBAFbU5owDAMEAltTtAMEBFtTwAMEAVtT/AMEBVw04AME BVz1QAMEB1z5gAMDAF4VAwQDXvdYAwQGsPEAAwQHsqSAAwQCuR1QAwQCuT6AAwQF vI6AAwQHvI8AAwQDwW44AwQBweLAAwQCweLUAwQBweLiAwQBweLoMAwDBAHB4u4D BAHB4vAwDAMEAsHi9AMEAcHi+AMEBcMmYDAMAwQD1ChIAwQF1ChAMAwDBAPVxUgD BAXVxUADBATZxbAwDQQCAAIwBwMFAyoBA2gwDQYJKoZIhvcNAQELBQADggEBAGpi LTPSi2oDLqAw5+dZQ0Z2hhAuVqqwm7+UlGmpKF1B5myUV6mwoil/FF3JVlrV4HfN aFbaw2aTzr6xt6K+o1wjyS4kA4SgnHff12rycmk135qWw71XhlDYfYa1WU9617nG +Ou9uFFknwx9mGRE1JSkMwnohNTfr11fzkkVy9ufNKB3D+JIc0r9VaC3Fz5vTdz/ 13hxA4eHV+k2b+27lrJ07BfRKj82CU4S01ttPJ56TXTK8F0VQeaABuY2JznzNKWh TanB3BBPzHRgHvnrnfjkHvmpzDfYPTVghvWt+kk9y481Bbh/oZuB+ZhtiAoQQZLY 5cw0L2/G5sPCNdl/BbY= -----END CERTIFICATE-----Generated at Fri Dec 12 13:21:44 2025 by rpki-client