This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/nrPQs8zaNxBymroioM8igUcwELI.roa File: nrPQs8zaNxBymroioM8igUcwELI.roa (raw, json) Hash identifier: VR7Hvj6PagX2e2gWWlhJoQowQbhnCL7ZdCxoWqsmQjg= Subject key identifier: 9E:B3:D0:B3:CC:DA:37:10:72:9A:BA:22:A0:CF:22:81:47:30:10:B2 Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B0901C534A0696A7CB91CDA5A81D3F96F Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/nrPQs8zaNxBymroioM8igUcwELI.roa Signing time: Wed 10 Dec 2025 16:04:29 +0000 ROA not before: Wed 10 Dec 2025 16:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 2.56.63.0/24 maxlen: 24 31.210.152.0/24 maxlen: 24 31.210.153.0/24 maxlen: 24 31.210.154.0/24 maxlen: 24 31.210.155.0/24 maxlen: 24 31.210.156.0/24 maxlen: 24 31.210.157.0/24 maxlen: 24 31.210.158.0/24 maxlen: 24 31.210.159.0/24 maxlen: 24 37.247.96.0/24 maxlen: 24 37.247.97.0/24 maxlen: 24 37.247.98.0/24 maxlen: 24 37.247.99.0/24 maxlen: 24 37.247.100.0/24 maxlen: 24 37.247.101.0/24 maxlen: 24 37.247.102.0/24 maxlen: 24 37.247.103.0/24 maxlen: 24 37.247.104.0/24 maxlen: 24 37.247.105.0/24 maxlen: 24 37.247.106.0/24 maxlen: 24 37.247.107.0/24 maxlen: 24 37.247.108.0/24 maxlen: 24 37.247.109.0/24 maxlen: 24 37.247.110.0/24 maxlen: 24 37.247.111.0/24 maxlen: 24 46.20.0.0/24 maxlen: 24 46.20.1.0/24 maxlen: 24 46.20.2.0/24 maxlen: 24 46.20.3.0/24 maxlen: 24 46.20.4.0/24 maxlen: 24 46.20.5.0/24 maxlen: 24 46.20.6.0/24 maxlen: 24 46.20.7.0/24 maxlen: 24 46.20.8.0/24 maxlen: 24 46.20.9.0/24 maxlen: 24 46.20.11.0/24 maxlen: 24 46.20.14.0/24 maxlen: 24 46.20.15.0/24 maxlen: 24 89.107.224.0/24 maxlen: 24 89.107.225.0/24 maxlen: 24 89.107.226.0/24 maxlen: 24 89.107.227.0/24 maxlen: 24 89.107.228.0/24 maxlen: 24 89.107.229.0/24 maxlen: 24 89.107.230.0/24 maxlen: 24 89.107.231.0/24 maxlen: 24 95.130.168.0/24 maxlen: 24 95.130.169.0/24 maxlen: 24 95.130.170.0/24 maxlen: 24 95.130.171.0/24 maxlen: 24 95.130.172.0/24 maxlen: 24 95.130.173.0/24 maxlen: 24 95.130.175.0/24 maxlen: 24 109.235.248.0/24 maxlen: 24 109.235.249.0/24 maxlen: 24 109.235.250.0/24 maxlen: 24 109.235.251.0/24 maxlen: 24 109.235.252.0/24 maxlen: 24 109.235.253.0/24 maxlen: 24 109.235.254.0/24 maxlen: 24 109.235.255.0/24 maxlen: 24 185.29.120.0/24 maxlen: 24 185.29.121.0/24 maxlen: 24 185.29.122.0/24 maxlen: 24 2a04:4280::/29 maxlen: 48 2a04:4280:10::/48 maxlen: 48 2a04:4280:100::/48 maxlen: 48 2a04:4280:200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:01:c5:34:a0:69:6a:7c:b9:1c:da:5a:81:d3:f9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Dec 10 16:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9eb3d0b3ccda3710729aba22a0cf2281473010b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:50:a8:39:e8:c0:97:2d:08:0d:6e:c7:ce: d0:8f:f3:73:fc:4b:a8:4c:0b:55:de:51:f3:91:98: 2b:3b:a6:3c:67:8b:bf:4a:aa:0f:17:cc:bd:45:00: 98:e7:cc:0b:33:66:31:e1:91:89:77:1a:85:5f:19: a3:d6:5b:ba:9f:33:df:fb:0a:d8:6a:ee:e5:85:9c: 93:0a:ec:c3:4a:71:7c:b6:04:a7:bb:5b:36:c5:cf: 3b:bb:45:ee:34:3d:53:ce:b4:f3:2b:ed:bc:59:f4: 0a:bd:e4:62:ea:c9:fb:14:37:ae:44:1e:d4:b6:32: 2b:bc:54:98:10:87:c8:c0:85:df:f2:33:e8:ce:28: 87:84:70:c5:5b:82:3d:cf:aa:fd:a5:46:d9:39:9d: 3e:23:97:be:fa:9b:82:a9:fd:83:71:3d:68:15:f6: 57:2a:43:9a:8d:69:b2:b1:cf:a8:07:d3:20:fd:fc: ee:42:e5:57:96:29:59:e2:ed:f6:e4:0d:ec:da:43: 9a:ac:ff:c2:c9:ba:46:12:02:9f:c2:2a:d4:3f:21: cb:b5:e3:72:97:02:94:e9:63:45:f8:9c:87:93:bc: 62:03:62:31:4f:4c:8d:87:a6:a4:b2:6b:f0:2c:61: 1c:22:a8:ce:7c:14:21:11:35:7e:cc:42:08:c2:f9: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B3:D0:B3:CC:DA:37:10:72:9A:BA:22:A0:CF:22:81:47:30:10:B2 X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/nrPQs8zaNxBymroioM8igUcwELI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.63.0/24 31.210.152.0/21 37.247.96.0/20 46.20.0.0-46.20.9.255 46.20.11.0/24 46.20.14.0/23 89.107.224.0/21 95.130.168.0-95.130.173.255 95.130.175.0/24 109.235.248.0/21 185.29.120.0-185.29.122.255 IPv6: 2a04:4280::/29 Signature Algorithm: sha256WithRSAEncryption 93:8e:fd:fa:6b:d6:60:c3:0a:93:c5:23:b9:3a:cf:23:f4:9e: da:d5:22:1a:81:63:21:96:5b:c8:d7:d5:4c:bd:0f:59:42:84: 85:c0:f0:3b:7a:01:0b:30:95:1d:72:7a:fb:bc:3a:47:21:be: 8b:3a:76:20:62:ef:fc:2c:d1:84:17:2c:12:99:bb:09:dc:05: 4b:d4:52:4b:7e:94:7d:9e:64:c7:38:2c:18:0c:4d:36:0a:bf: ea:6f:ec:0e:56:53:36:0c:06:82:80:e7:51:2e:f9:ff:54:9e: 24:74:1c:b1:21:e2:3a:c6:3e:f8:e2:e8:44:e3:d5:ce:27:c0: 6d:02:74:f1:e4:44:c9:db:52:8b:1b:62:78:21:2c:1a:8c:53: 37:a6:eb:58:82:18:cd:fd:88:63:e8:f4:70:36:38:cb:a7:6a: 92:ab:8f:08:e8:92:5c:01:42:f2:d6:79:e4:02:3e:94:df:92: e5:73:9f:88:60:38:77:6d:fa:b2:d8:da:e5:c5:1c:f3:21:7b: c9:99:27:6e:fd:a7:f9:c1:16:af:24:0c:ee:44:71:21:b2:81: d2:3d:fd:cb:dd:5c:31:f9:53:59:72:c0:46:0c:f5:af:e5:5d: be:32:45:2a:c2:1e:18:7d:d8:30:8b:c4:6c:5f:d5:a4:ec:e9: 6b:ac:10:77 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZsJAcU0oGlqfLkc2lqB0/lvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjUxMjEwMTYwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWIzZDBiM2NjZGEzNzEwNzI5YWJhMjJhMGNmMjI4MTQ3MzAxMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCpQqDnowJctCA1ux87Qj/Nz/Euo TAtV3lHzkZgrO6Y8Z4u/SqoPF8y9RQCY58wLM2Yx4ZGJdxqFXxmj1lu6nzPf+wrY au7lhZyTCuzDSnF8tgSnu1s2xc87u0XuND1TzrTzK+28WfQKveRi6sn7FDeuRB7U tjIrvFSYEIfIwIXf8jPoziiHhHDFW4I9z6r9pUbZOZ0+I5e++puCqf2DcT1oFfZX KkOajWmysc+oB9Mg/fzuQuVXlilZ4u325A3s2kOarP/CybpGEgKfwirUPyHLteNy lwKU6WNF+JyHk7xiA2IxT0yNh6aksmvwLGEcIqjOfBQhETV+zEIIwvlk3QIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFJ6z0LPM2jcQcpq6IqDPIoFHMBCyMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvbnJQUXM4emFOeEJ5bXJvaW9NOGlnVWN3RUxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwXwQCAAEwWQMEAAI4PwME Ax/SmAMEBCX3YDALAwMCLhQDBAEuFAgDBAAuFAsDBAEuFA4DBANZa+AwDAMEA1+C qAMEAV+CrAMEAF+CrwMEA23r+DAMAwQDuR14AwQAuR16MA0EAgACMAcDBQMqBEKA MA0GCSqGSIb3DQEBCwUAA4IBAQCTjv36a9ZgwwqTxSO5Os8j9J7a1SIagWMhllvI 19VMvQ9ZQoSFwPA7egELMJUdcnr7vDpHIb6LOnYgYu/8LNGEFywSmbsJ3AVL1FJL fpR9nmTHOCwYDE02Cr/qb+wOVlM2DAaCgOdRLvn/VJ4kdByxIeI6xj744uhE49XO J8BtAnTx5ETJ21KLG2J4ISwajFM3putYghjN/Yhj6PRwNjjLp2qSq48I6JJcAULy 1nnkAj6U35Llc5+IYDh3bfqy2NrlxRzzIXvJmSdu/af5wRavJAzuRHEhsoHSPf3L 3Vwx+VNZcsBGDPWv5V2+MkUqwh4Yfdgwi8RsX9Wk7OlrrBB3 -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:22 2025 by rpki-client