This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/PSEhn-xR-LGX_Sj7GdeZfrt0gTI.roa File: PSEhn-xR-LGX_Sj7GdeZfrt0gTI.roa (raw, json) Hash identifier: A4kpvpFD1Ozda2IwrgnmAZURYP2sYoUji6fCdgNJDuU= Subject key identifier: 3D:21:21:9F:EC:51:F8:B1:97:FD:28:FB:19:D7:99:7E:BB:74:81:32 Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140 Certificate serial: 019A721DF65D87C4C71E6C1C3F5A137C8C9A Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/PSEhn-xR-LGX_Sj7GdeZfrt0gTI.roa Signing time: Tue 11 Nov 2025 08:52:37 +0000 ROA not before: Tue 11 Nov 2025 08:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1299 IP address blocks: 62.77.196.0/22 maxlen: 24 62.77.240.0/23 maxlen: 24 62.77.248.0/21 maxlen: 24 62.165.192.0/18 maxlen: 24 77.234.64.0/19 maxlen: 24 78.131.0.0/17 maxlen: 24 79.120.160.0/21 maxlen: 24 79.120.170.0/23 maxlen: 24 79.120.172.0/22 maxlen: 24 79.120.248.0/23 maxlen: 24 79.120.252.0/22 maxlen: 24 80.95.64.0/19 maxlen: 24 81.0.82.0/23 maxlen: 24 81.0.84.0/22 maxlen: 24 81.0.90.0/23 maxlen: 24 81.0.92.0/22 maxlen: 24 81.0.98.0/23 maxlen: 24 81.0.108.0/23 maxlen: 24 81.0.122.0/23 maxlen: 24 81.0.126.0/23 maxlen: 24 81.17.176.0/20 maxlen: 24 82.131.128.0/19 maxlen: 24 82.131.182.0/23 maxlen: 24 82.131.184.0/21 maxlen: 24 82.131.196.0/23 maxlen: 24 82.131.198.0/24 maxlen: 24 82.131.200.0/21 maxlen: 24 82.131.216.0/21 maxlen: 24 82.131.224.0/19 maxlen: 24 82.144.164.0/22 maxlen: 24 82.144.172.0/22 maxlen: 24 82.144.176.0/23 maxlen: 24 82.144.188.0/23 maxlen: 24 84.21.180.0/22 maxlen: 24 84.236.0.0/17 maxlen: 24 85.66.0.0/15 maxlen: 24 85.238.64.0/19 maxlen: 24 87.97.0.0/18 maxlen: 24 87.97.80.0/20 maxlen: 24 87.97.96.0/19 maxlen: 24 89.147.64.0/20 maxlen: 24 89.147.96.0/22 maxlen: 24 89.147.112.0/21 maxlen: 24 89.148.64.0/18 maxlen: 24 89.186.96.0/23 maxlen: 24 89.186.102.0/23 maxlen: 24 89.186.106.0/23 maxlen: 24 89.186.108.0/22 maxlen: 24 89.186.112.0/22 maxlen: 24 89.186.118.0/23 maxlen: 24 89.186.120.0/21 maxlen: 24 91.82.0.0/21 maxlen: 24 91.82.24.0/21 maxlen: 24 91.82.32.0/21 maxlen: 24 91.82.56.0/23 maxlen: 24 91.82.60.0/23 maxlen: 24 91.82.64.0/21 maxlen: 24 91.82.82.0/23 maxlen: 24 91.82.130.0/23 maxlen: 24 91.82.132.0/22 maxlen: 24 91.82.136.0/21 maxlen: 24 91.82.144.0/22 maxlen: 24 91.82.160.0/21 maxlen: 24 91.82.168.0/22 maxlen: 24 91.82.172.0/23 maxlen: 24 91.82.176.0/21 maxlen: 24 91.82.188.0/22 maxlen: 24 91.82.210.0/23 maxlen: 24 91.82.212.0/22 maxlen: 24 91.82.228.0/22 maxlen: 24 91.82.232.0/22 maxlen: 24 91.82.240.0/22 maxlen: 24 91.82.250.0/23 maxlen: 24 91.83.0.0/19 maxlen: 24 91.83.32.0/21 maxlen: 24 91.83.52.0/22 maxlen: 24 91.83.94.0/23 maxlen: 24 91.83.102.0/23 maxlen: 24 91.83.110.0/23 maxlen: 24 91.83.120.0/23 maxlen: 24 91.83.136.0/21 maxlen: 24 91.83.144.0/23 maxlen: 24 91.83.154.0/23 maxlen: 24 91.83.180.0/22 maxlen: 24 91.83.184.0/21 maxlen: 24 91.83.192.0/20 maxlen: 24 91.83.252.0/23 maxlen: 24 92.52.224.0/19 maxlen: 24 92.245.64.0/19 maxlen: 24 92.249.128.0/17 maxlen: 24 94.21.0.0/16 maxlen: 24 94.247.88.0/21 maxlen: 24 176.241.0.0/18 maxlen: 24 178.164.128.0/17 maxlen: 24 185.29.80.0/22 maxlen: 24 185.62.128.0/22 maxlen: 24 188.142.128.0/19 maxlen: 24 188.143.0.0/17 maxlen: 24 193.110.56.0/21 maxlen: 24 193.226.192.0/23 maxlen: 24 193.226.212.0/22 maxlen: 24 193.226.226.0/23 maxlen: 24 193.226.232.0/23 maxlen: 24 193.226.238.0/23 maxlen: 24 193.226.240.0/23 maxlen: 24 193.226.244.0/22 maxlen: 24 193.226.248.0/23 maxlen: 24 195.38.96.0/19 maxlen: 24 212.40.64.0/22 maxlen: 24 212.40.68.0/23 maxlen: 24 212.40.72.0/21 maxlen: 24 212.40.80.0/20 maxlen: 24 213.197.72.0/21 maxlen: 24 213.197.80.0/20 maxlen: 24 217.197.176.0/20 maxlen: 24 2a01:368::/29 maxlen: 48 2a01:368::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:1d:f6:5d:87:c4:c7:1e:6c:1c:3f:5a:13:7c:8c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140 Validity Not Before: Nov 11 08:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3d21219fec51f8b197fd28fb19d7997ebb748132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:99:cc:bc:9b:5a:96:2c:55:cc:89:74:5e: a7:00:cd:ae:30:91:03:17:92:28:b1:04:e5:5a:94: 57:3f:fa:fc:10:71:cb:4a:ae:8e:00:28:e0:d5:1f: 38:16:ca:fd:df:39:bc:64:31:f3:84:28:0a:a6:3c: 8e:a8:54:8f:cc:c6:e9:7a:44:7a:be:1c:0f:68:7c: bd:19:36:c4:79:94:52:c7:f5:79:70:cd:c5:3f:a1: 8f:7b:cc:a0:c5:cd:38:b2:bb:bc:3e:17:e1:69:d6: be:b9:3a:55:2c:d3:ff:6f:82:ac:0d:6e:c4:d5:5f: 55:4b:0f:7f:b1:de:2b:74:bd:40:92:1c:09:a4:c8: c6:c6:ef:6b:02:c2:ae:7a:cd:4e:c2:e5:5a:26:68: 2a:7a:df:49:ca:96:02:ff:4a:f0:91:d2:51:ae:bb: 50:e8:26:a6:99:30:6a:d3:4b:04:c9:c7:93:38:19: b0:e4:14:b8:43:26:ef:7d:3a:86:22:6c:c8:c9:7d: 00:c7:7e:51:80:6f:94:bf:a2:90:ad:b0:d5:d9:7b: 61:29:01:58:d8:05:f5:47:20:4f:5d:b6:61:6d:cc: a8:96:02:53:53:e6:6e:b5:f6:e3:53:59:e7:b4:ad: 6a:be:73:40:a4:19:ff:4c:40:60:ee:ce:cb:d7:0e: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:21:21:9F:EC:51:F8:B1:97:FD:28:FB:19:D7:99:7E:BB:74:81:32 X509v3 Authority Key Identifier: keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/PSEhn-xR-LGX_Sj7GdeZfrt0gTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.77.196.0/22 62.77.240.0/23 62.77.248.0/21 62.165.192.0/18 77.234.64.0/19 78.131.0.0/17 79.120.160.0/21 79.120.170.0-79.120.175.255 79.120.248.0/23 79.120.252.0/22 80.95.64.0/19 81.0.82.0-81.0.87.255 81.0.90.0-81.0.95.255 81.0.98.0/23 81.0.108.0/23 81.0.122.0/23 81.0.126.0/23 81.17.176.0/20 82.131.128.0/19 82.131.182.0-82.131.191.255 82.131.196.0-82.131.198.255 82.131.200.0/21 82.131.216.0-82.131.255.255 82.144.164.0/22 82.144.172.0-82.144.177.255 82.144.188.0/23 84.21.180.0/22 84.236.0.0/17 85.66.0.0/15 85.238.64.0/19 87.97.0.0/18 87.97.80.0-87.97.127.255 89.147.64.0/20 89.147.96.0/22 89.147.112.0/21 89.148.64.0/18 89.186.96.0/23 89.186.102.0/23 89.186.106.0-89.186.115.255 89.186.118.0-89.186.127.255 91.82.0.0/21 91.82.24.0-91.82.39.255 91.82.56.0/23 91.82.60.0/23 91.82.64.0/21 91.82.82.0/23 91.82.130.0-91.82.147.255 91.82.160.0-91.82.173.255 91.82.176.0/21 91.82.188.0/22 91.82.210.0-91.82.215.255 91.82.228.0-91.82.235.255 91.82.240.0/22 91.82.250.0/23 91.83.0.0-91.83.39.255 91.83.52.0/22 91.83.94.0/23 91.83.102.0/23 91.83.110.0/23 91.83.120.0/23 91.83.136.0-91.83.145.255 91.83.154.0/23 91.83.180.0-91.83.207.255 91.83.252.0/23 92.52.224.0/19 92.245.64.0/19 92.249.128.0/17 94.21.0.0/16 94.247.88.0/21 176.241.0.0/18 178.164.128.0/17 185.29.80.0/22 185.62.128.0/22 188.142.128.0/19 188.143.0.0/17 193.110.56.0/21 193.226.192.0/23 193.226.212.0/22 193.226.226.0/23 193.226.232.0/23 193.226.238.0-193.226.241.255 193.226.244.0-193.226.249.255 195.38.96.0/19 212.40.64.0-212.40.69.255 212.40.72.0-212.40.95.255 213.197.72.0-213.197.95.255 217.197.176.0/20 IPv6: 2a01:368::/29 Signature Algorithm: sha256WithRSAEncryption b9:b8:45:cc:e9:92:7f:39:b4:68:cc:b1:4c:e6:5a:5b:82:d1: 20:29:fd:3e:a8:12:99:b8:34:ba:d0:f4:0d:0e:46:0d:81:b8: 1b:f9:70:a7:7f:18:77:33:41:fb:e1:1d:df:0c:2f:87:d1:24: 02:c4:f5:71:c3:be:87:ee:f8:da:db:f7:8d:ef:b6:5a:c8:27: aa:02:9c:f2:00:b6:3f:ea:39:e2:86:b2:ae:32:c6:0c:cd:4d: 64:90:c7:db:43:94:25:99:27:cc:d7:39:6b:a8:47:df:0e:ad: ae:9d:82:e0:4a:71:f6:f0:9f:d9:83:52:12:c8:91:a6:24:2d: dc:57:f1:e0:d0:1f:6e:f6:af:b6:87:d2:6e:03:73:19:e4:6d: 9c:9f:f2:53:cc:e8:41:4c:a5:f3:5e:77:3b:4f:5b:4c:93:30: 5a:27:ec:90:16:e7:8d:c9:e1:bd:f3:66:5c:cd:15:b6:08:1b: ac:ee:69:80:0d:f2:4e:07:92:3b:7b:f5:29:ea:39:89:d1:cd: 2e:98:c0:71:75:3d:17:b8:a4:62:72:40:79:a1:06:ef:e6:bc: d1:89:ae:89:d1:93:cf:7a:43:df:8f:b3:8b:c0:29:15:ac:5e: d9:07:b2:a0:33:1e:bb:a5:67:93:e9:39:1f:7f:02:1f:35:4e: 54:24:10:67 -----BEGIN CERTIFICATE----- MIIHzjCCBragAwIBAgISAZpyHfZdh8THHmwcP1oTfIyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh OGMxNDAwHhcNMjUxMTExMDg1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDIxMjE5ZmVjNTFmOGIxOTdmZDI4ZmIxOWQ3OTk3ZWJiNzQ4MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aqZzLybWpYsVcyJdF6nAM2uMJED F5IosQTlWpRXP/r8EHHLSq6OACjg1R84Fsr93zm8ZDHzhCgKpjyOqFSPzMbpekR6 vhwPaHy9GTbEeZRSx/V5cM3FP6GPe8ygxc04sru8Phfhada+uTpVLNP/b4KsDW7E 1V9VSw9/sd4rdL1AkhwJpMjGxu9rAsKues1OwuVaJmgqet9JypYC/0rwkdJRrrtQ 6CammTBq00sEyceTOBmw5BS4QybvfTqGImzIyX0Ax35RgG+Uv6KQrbDV2XthKQFY 2AX1RyBPXbZhbcyolgJTU+ZutfbjU1nntK1qvnNApBn/TEBg7s7L1w42tQIDAQAB o4IE2jCCBNYwHQYDVR0OBBYEFD0hIZ/sUfixl/0o+xnXmX67dIEyMB8GA1UdIwQY MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt YmU3YTFhMDAxY2NmLzEvUFNFaG4teFItTEdYX1NqN0dkZVpmcnQwZ1RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIC7gYIKwYBBQUHAQcBAf8EggLdMIIC2TCCAsYEAgABMIIC vgMEAj5NxAMEAT5N8AMEAz5N+AMEBj6lwAMEBU3qQAMEB06DAAMEA094oDAMAwQB T3iqAwQET3igAwQBT3j4AwQCT3j8AwQFUF9AMAwDBAFRAFIDBANRAFAwDAMEAVEA WgMEBVEAQAMEAVEAYgMEAVEAbAMEAVEAegMEAVEAfgMEBFERsAMEBVKDgDAMAwQB UoO2AwQGUoOAMAwDBAJSg8QDBABSg8YDBANSg8gwCwMEA1KD2AMDAlKAAwQCUpCk MAwDBAJSkKwDBAFSkLADBAFSkLwDBAJUFbQDBAdU7AADAwFVQgMEBVXuQAMEBldh ADAMAwQEV2FQAwQHV2EAAwQEWZNAAwQCWZNgAwQDWZNwAwQGWZRAAwQBWbpgAwQB WbpmMAwDBAFZumoDBAJZunAwDAMEAVm6dgMEB1m6AAMEA1tSADAMAwQDW1IYAwQD W1IgAwQBW1I4AwQBW1I8AwQDW1JAAwQBW1JSMAwDBAFbUoIDBAJbUpAwDAMEBVtS oAMEAVtSrAMEA1tSsAMEAltSvDAMAwQBW1LSAwQDW1LQMAwDBAJbUuQDBAJbUugD BAJbUvADBAFbUvowCwMDAFtTAwQDW1MgAwQCW1M0AwQBW1NeAwQBW1NmAwQBW1Nu AwQBW1N4MAwDBANbU4gDBAFbU5ADBAFbU5owDAMEAltTtAMEBFtTwAMEAVtT/AME BVw04AMEBVz1QAMEB1z5gAMDAF4VAwQDXvdYAwQGsPEAAwQHsqSAAwQCuR1QAwQC uT6AAwQFvI6AAwQHvI8AAwQDwW44AwQBweLAAwQCweLUAwQBweLiAwQBweLoMAwD BAHB4u4DBAHB4vAwDAMEAsHi9AMEAcHi+AMEBcMmYDAMAwQG1ChAAwQB1ChEMAwD BAPUKEgDBAXUKEAwDAMEA9XFSAMEBdXFQAMEBNnFsDANBAIAAjAHAwUDKgEDaDAN BgkqhkiG9w0BAQsFAAOCAQEAubhFzOmSfzm0aMyxTOZaW4LRICn9PqgSmbg0utD0 DQ5GDYG4G/lwp38YdzNB++Ed3wwvh9EkAsT1ccO+h+742tv3je+2WsgnqgKc8gC2 P+o54oayrjLGDM1NZJDH20OUJZknzNc5a6hH3w6trp2C4Epx9vCf2YNSEsiRpiQt 3Ffx4NAfbvavtofSbgNzGeRtnJ/yU8zoQUyl8153O09bTJMwWifskBbnjcnhvfNm XM0VtggbrO5pgA3yTgeSO3v1Keo5idHNLpjAcXU9F7ikYnJAeaEG7+a80YmuidGT z3pD34+zi8ApFaxe2QeyoDMeu6Vnk+k5H38CHzVOVCQQZw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:50:41 2025 by rpki-client