This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/xkUeW_PwUlUASvf--c5chXoaFus.roa File: xkUeW_PwUlUASvf--c5chXoaFus.roa (raw, json) Hash identifier: /Oa4g8Q6DrNk3m323+ds3bthVQQSIsVnBGQZ3q3zNQ4= Subject key identifier: C6:45:1E:5B:F3:F0:52:55:00:4A:F7:FE:F9:CE:5C:85:7A:1A:16:EB Certificate issuer: /CN=5503251db69693362a927e2b130467945c54f0fc Certificate serial: 019AE230EC54BC4CF12FED31C8C542733371 Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/xkUeW_PwUlUASvf--c5chXoaFus.roa Signing time: Wed 03 Dec 2025 03:10:48 +0000 ROA not before: Wed 03 Dec 2025 03:10:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48282 IP address blocks: 62.113.112.0/24 maxlen: 24 62.113.113.0/24 maxlen: 24 62.113.114.0/24 maxlen: 24 62.113.115.0/24 maxlen: 24 62.113.116.0/24 maxlen: 24 62.113.117.0/24 maxlen: 24 62.113.118.0/24 maxlen: 24 62.113.119.0/24 maxlen: 24 83.217.212.0/24 maxlen: 24 83.217.213.0/24 maxlen: 24 83.217.214.0/24 maxlen: 24 83.217.215.0/24 maxlen: 24 84.54.44.0/24 maxlen: 24 84.54.47.0/24 maxlen: 24 85.198.108.0/24 maxlen: 24 85.198.109.0/24 maxlen: 24 85.198.110.0/24 maxlen: 24 85.198.111.0/24 maxlen: 24 88.210.34.0/24 maxlen: 24 88.210.35.0/24 maxlen: 24 88.210.52.0/24 maxlen: 24 88.210.53.0/24 maxlen: 24 88.210.54.0/24 maxlen: 24 88.210.55.0/24 maxlen: 24 88.218.60.0/24 maxlen: 24 88.218.61.0/24 maxlen: 24 88.218.62.0/24 maxlen: 24 88.218.63.0/24 maxlen: 24 91.142.72.0/24 maxlen: 24 91.142.73.0/24 maxlen: 24 91.142.74.0/24 maxlen: 24 91.142.75.0/24 maxlen: 24 91.184.244.0/24 maxlen: 24 91.184.245.0/24 maxlen: 24 91.184.246.0/24 maxlen: 24 91.184.247.0/24 maxlen: 24 91.212.150.0/24 maxlen: 24 93.183.92.0/24 maxlen: 24 93.183.93.0/24 maxlen: 24 93.183.94.0/24 maxlen: 24 93.183.95.0/24 maxlen: 24 94.103.83.0/24 maxlen: 24 94.103.84.0/24 maxlen: 24 94.103.85.0/24 maxlen: 24 94.103.86.0/24 maxlen: 24 94.103.87.0/24 maxlen: 24 94.103.88.0/24 maxlen: 24 94.103.89.0/24 maxlen: 24 94.103.90.0/24 maxlen: 24 94.103.91.0/24 maxlen: 24 94.103.92.0/24 maxlen: 24 94.103.93.0/24 maxlen: 24 95.142.33.0/24 maxlen: 24 95.142.34.0/24 maxlen: 24 95.142.45.0/24 maxlen: 24 95.142.46.0/24 maxlen: 24 95.142.47.0/24 maxlen: 24 109.172.84.0/24 maxlen: 24 109.172.85.0/24 maxlen: 24 109.172.86.0/24 maxlen: 24 109.172.87.0/24 maxlen: 24 109.172.88.0/24 maxlen: 24 109.172.89.0/24 maxlen: 24 109.172.90.0/24 maxlen: 24 109.172.91.0/24 maxlen: 24 178.20.40.0/24 maxlen: 24 178.20.41.0/24 maxlen: 24 178.20.42.0/24 maxlen: 24 178.20.43.0/24 maxlen: 24 178.20.44.0/24 maxlen: 24 178.20.45.0/24 maxlen: 24 178.20.46.0/24 maxlen: 24 178.20.47.0/24 maxlen: 24 178.130.131.0/24 maxlen: 24 178.217.98.0/24 maxlen: 24 178.217.99.0/24 maxlen: 24 185.209.28.0/24 maxlen: 24 185.209.29.0/24 maxlen: 24 185.209.30.0/24 maxlen: 24 185.209.31.0/24 maxlen: 24 185.231.152.0/24 maxlen: 24 185.231.153.0/24 maxlen: 24 185.231.154.0/24 maxlen: 24 185.231.155.0/24 maxlen: 24 192.144.56.0/24 maxlen: 24 192.144.57.0/24 maxlen: 24 192.144.58.0/24 maxlen: 24 192.144.59.0/24 maxlen: 24 193.178.170.0/24 maxlen: 24 195.2.66.0/24 maxlen: 24 195.2.67.0/24 maxlen: 24 195.2.70.0/24 maxlen: 24 195.2.71.0/24 maxlen: 24 195.2.73.0/24 maxlen: 24 195.2.74.0/24 maxlen: 24 195.2.75.0/24 maxlen: 24 195.2.76.0/24 maxlen: 24 195.2.78.0/24 maxlen: 24 195.2.79.0/24 maxlen: 24 195.2.80.0/24 maxlen: 24 195.2.81.0/24 maxlen: 24 195.2.84.0/24 maxlen: 24 195.2.85.0/24 maxlen: 24 212.118.45.0/24 maxlen: 24 212.118.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e2:30:ec:54:bc:4c:f1:2f:ed:31:c8:c5:42:73:33:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5503251db69693362a927e2b130467945c54f0fc Validity Not Before: Dec 3 03:10:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6451e5bf3f05255004af7fef9ce5c857a1a16eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:cd:9b:c2:e0:dc:ac:22:db:4a:1b:b6:86: 09:30:27:72:2a:c7:5f:36:48:82:56:85:aa:ef:b2: 7a:26:7a:4d:da:e9:fa:b9:88:d8:49:32:11:da:54: 3d:8b:d2:2e:ba:39:e7:ca:61:78:d0:b7:de:f4:be: 62:02:05:31:e5:9e:9c:e0:4d:fe:2e:7e:95:a6:2b: 0b:06:e5:08:95:9d:c5:e6:46:d0:d5:e4:ef:1a:46: 21:33:fc:36:d2:f3:a1:2c:94:bf:49:6d:9d:e3:2c: df:e7:9f:b0:e7:71:82:bc:47:c3:91:09:f8:e8:d6: 0c:ce:b2:3e:34:34:0d:04:e1:fa:2d:0b:23:da:eb: ce:48:36:0f:ac:d8:22:72:a7:b9:ae:c8:cd:75:b1: c5:80:43:1c:f8:ab:37:6e:73:70:2f:75:e1:46:c9: e4:d0:39:6d:0c:1a:2c:d4:94:d1:5f:b9:86:25:ab: 2b:87:f5:f0:35:04:3a:c6:30:bd:ab:e7:98:1e:d8: 09:c1:61:8f:23:84:70:3c:9b:ce:d6:8a:f5:c8:b2: 91:bd:e1:9e:dc:89:e6:28:7f:48:67:97:8a:4d:4b: c2:47:aa:09:77:ab:4c:12:f3:3f:d3:c9:d1:e0:3c: b1:45:fe:0c:e8:ac:35:38:e0:ab:de:fd:fa:cd:5a: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:45:1E:5B:F3:F0:52:55:00:4A:F7:FE:F9:CE:5C:85:7A:1A:16:EB X509v3 Authority Key Identifier: keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/xkUeW_PwUlUASvf--c5chXoaFus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.112.0/21 83.217.212.0/22 84.54.44.0/24 84.54.47.0/24 85.198.108.0/22 88.210.34.0/23 88.210.52.0/22 88.218.60.0/22 91.142.72.0/22 91.184.244.0/22 91.212.150.0/24 93.183.92.0/22 94.103.83.0-94.103.93.255 95.142.33.0-95.142.34.255 95.142.45.0-95.142.47.255 109.172.84.0-109.172.91.255 178.20.40.0/21 178.130.131.0/24 178.217.98.0/23 185.209.28.0/22 185.231.152.0/22 192.144.56.0/22 193.178.170.0/24 195.2.66.0/23 195.2.70.0/23 195.2.73.0-195.2.76.255 195.2.78.0-195.2.81.255 195.2.84.0/23 212.118.45.0/24 212.118.56.0/24 Signature Algorithm: sha256WithRSAEncryption ae:95:be:4d:95:e6:b6:8f:88:ed:92:d9:34:04:d7:fe:12:18: 27:df:39:60:86:7c:12:56:e4:ea:37:ac:09:f9:c9:de:c5:db: 96:13:af:ae:d8:91:b3:47:eb:4a:d9:2d:1e:38:e9:c7:b5:5b: d2:42:52:db:7c:c0:c7:ce:67:3c:90:78:ff:d1:f1:fa:8c:96: 50:de:bf:6d:83:3c:11:8a:5c:17:38:70:e7:61:8c:fc:f2:03: 0a:c6:70:20:9c:04:3f:ef:57:ef:b3:48:31:47:a9:9e:16:a2: 78:90:4a:2d:df:ff:a2:41:ea:9b:d1:9e:6a:ee:69:b4:03:60: 94:e2:0c:89:e4:06:f4:ae:be:a5:0f:49:06:9c:1e:99:9e:43: 99:ff:75:6c:03:5b:c8:59:70:c4:ad:6f:c0:fd:21:b5:48:0f: 36:34:84:fe:0a:dd:c6:40:d1:e2:09:12:46:5b:cf:f9:e1:d6: d5:3a:f2:40:c1:3f:00:ac:3e:f2:dd:66:af:99:88:ca:60:20: 54:83:4b:90:41:57:63:3a:e4:a3:2e:a4:4b:66:80:4e:f7:46: 89:50:a3:10:e5:ba:ac:5a:c6:93:a3:78:9d:3f:e9:4e:fe:69: fd:d0:6f:3a:8c:57:d7:ec:6c:c0:f3:8d:cf:25:86:a2:9a:19: 89:1d:0d:8b -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgISAZriMOxUvEzxL+0xyMVCczNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1 NGYwZmMwHhcNMjUxMjAzMDMxMDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjQ1MWU1YmYzZjA1MjU1MDA0YWY3ZmVmOWNlNWM4NTdhMWExNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcnNm8Lg3Kwi20obtoYJMCdyKsdf NkiCVoWq77J6JnpN2un6uYjYSTIR2lQ9i9IuujnnymF40Lfe9L5iAgUx5Z6c4E3+ Ln6VpisLBuUIlZ3F5kbQ1eTvGkYhM/w20vOhLJS/SW2d4yzf55+w53GCvEfDkQn4 6NYMzrI+NDQNBOH6LQsj2uvOSDYPrNgicqe5rsjNdbHFgEMc+Ks3bnNwL3XhRsnk 0DltDBos1JTRX7mGJasrh/XwNQQ6xjC9q+eYHtgJwWGPI4RwPJvO1or1yLKRveGe 3InmKH9IZ5eKTUvCR6oJd6tMEvM/08nR4DyxRf4M6Kw1OOCr3v36zVrfFwIDAQAB o4IC7TCCAukwHQYDVR0OBBYEFMZFHlvz8FJVAEr3/vnOXIV6GhbrMB8GA1UdIwQY MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It M2NiYWQ1YjkwNGI1LzEveGtVZVdfUHdVbFVBU3ZmLS1jNWNoWG9hRnVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1 LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAQYIKwYBBQUHAQcBAf8EgfEwge4wgesEAgABMIHkAwQD PnFwAwQCU9nUAwQAVDYsAwQAVDYvAwQCVcZsAwQBWNIiAwQCWNI0AwQCWNo8AwQC W45IAwQCW7j0AwQAW9SWAwQCXbdcMAwDBABeZ1MDBAFeZ1wwDAMEAF+OIQMEAF+O IjAMAwQAX44tAwQEX44gMAwDBAJtrFQDBAJtrFgDBAOyFCgDBACygoMDBAGy2WID BAK50RwDBAK555gDBALAkDgDBADBsqoDBAHDAkIDBAHDAkYwDAMEAMMCSQMEAMMC TDAMAwQBwwJOAwQBwwJQAwQBwwJUAwQA1HYtAwQA1HY4MA0GCSqGSIb3DQEBCwUA A4IBAQCulb5Nlea2j4jtktk0BNf+Ehgn3zlghnwSVuTqN6wJ+cnexduWE6+u2JGz R+tK2S0eOOnHtVvSQlLbfMDHzmc8kHj/0fH6jJZQ3r9tgzwRilwXOHDnYYz88gMK xnAgnAQ/71fvs0gxR6meFqJ4kEot3/+iQeqb0Z5q7mm0A2CU4gyJ5Ab0rr6lD0kG nB6ZnkOZ/3VsA1vIWXDErW/A/SG1SA82NIT+Ct3GQNHiCRJGW8/54dbVOvJAwT8A rD7y3WavmYjKYCBUg0uQQVdjOuSjLqRLZoBO90aJUKMQ5bqsWsaTo3idP+lO/mn9 0G86jFfX7GzA843PJYaimhmJHQ2L -----END CERTIFICATE-----Generated at Sun Dec 7 11:35:28 2025 by rpki-client