This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/Nh0GqKuGF98gKb-Cwk1kMbr-cyA.roa File: Nh0GqKuGF98gKb-Cwk1kMbr-cyA.roa (raw, json) Hash identifier: aK8xZBnqjnIOBr0tWt4e6+4KcSJi3YeptqQiZQTdYjA= Subject key identifier: 36:1D:06:A8:AB:86:17:DF:20:29:BF:82:C2:4D:64:31:BA:FE:73:20 Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Certificate serial: 019A78CC7F8CA9BFBE2347262A0C0B93A9C8 Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/Nh0GqKuGF98gKb-Cwk1kMbr-cyA.roa Signing time: Wed 12 Nov 2025 16:00:59 +0000 ROA not before: Wed 12 Nov 2025 16:00:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132839 IP address blocks: 2.59.100.0/22 maxlen: 24 2.59.100.0/24 maxlen: 24 2.59.101.0/24 maxlen: 24 2.59.102.0/24 maxlen: 24 2.59.103.0/24 maxlen: 24 45.8.29.0/24 maxlen: 24 45.8.30.0/24 maxlen: 24 45.9.108.0/22 maxlen: 24 45.9.108.0/24 maxlen: 24 45.9.109.0/24 maxlen: 24 45.9.110.0/24 maxlen: 24 45.9.111.0/24 maxlen: 24 45.10.208.0/23 maxlen: 23 45.10.208.0/24 maxlen: 24 45.10.209.0/24 maxlen: 24 45.10.210.0/24 maxlen: 24 45.13.160.0/22 maxlen: 24 45.13.160.0/24 maxlen: 24 45.66.188.0/22 maxlen: 24 45.66.188.0/24 maxlen: 24 45.66.189.0/24 maxlen: 24 45.66.190.0/24 maxlen: 24 45.66.191.0/24 maxlen: 24 45.80.112.0/22 maxlen: 24 45.80.113.0/24 maxlen: 24 45.80.114.0/23 maxlen: 24 45.80.114.0/24 maxlen: 24 45.87.228.0/22 maxlen: 24 45.87.228.0/24 maxlen: 24 45.87.231.0/24 maxlen: 24 45.93.64.0/22 maxlen: 24 45.93.64.0/24 maxlen: 24 45.93.65.0/24 maxlen: 24 45.93.66.0/24 maxlen: 24 45.93.67.0/24 maxlen: 24 45.131.156.0/22 maxlen: 24 45.131.156.0/24 maxlen: 24 45.131.157.0/24 maxlen: 24 45.131.158.0/24 maxlen: 24 45.131.159.0/24 maxlen: 24 45.142.76.0/22 maxlen: 24 45.142.77.0/24 maxlen: 24 45.142.78.0/24 maxlen: 24 45.142.79.0/24 maxlen: 24 45.147.212.0/22 maxlen: 24 45.147.213.0/24 maxlen: 24 45.147.214.0/24 maxlen: 24 45.147.215.0/24 maxlen: 24 45.149.68.0/22 maxlen: 24 45.149.68.0/24 maxlen: 24 45.149.69.0/24 maxlen: 24 45.156.168.0/22 maxlen: 24 45.156.169.0/24 maxlen: 24 45.156.171.0/24 maxlen: 24 45.156.216.0/22 maxlen: 24 45.158.220.0/22 maxlen: 24 45.158.221.0/24 maxlen: 24 45.158.223.0/24 maxlen: 24 62.192.188.0/22 maxlen: 24 62.192.188.0/24 maxlen: 24 62.192.189.0/24 maxlen: 24 62.192.190.0/24 maxlen: 24 62.192.191.0/24 maxlen: 24 83.150.224.0/22 maxlen: 24 83.150.224.0/24 maxlen: 24 83.150.225.0/24 maxlen: 24 85.208.56.0/22 maxlen: 24 85.208.56.0/24 maxlen: 24 85.208.57.0/24 maxlen: 24 85.208.58.0/24 maxlen: 24 85.208.59.0/24 maxlen: 24 92.118.144.0/22 maxlen: 24 92.118.144.0/24 maxlen: 24 92.118.145.0/24 maxlen: 24 92.118.146.0/24 maxlen: 24 92.118.147.0/24 maxlen: 24 185.51.164.0/22 maxlen: 24 185.51.164.0/24 maxlen: 24 185.51.167.0/24 maxlen: 24 193.42.15.0/24 maxlen: 24 193.42.132.0/24 maxlen: 24 193.42.135.0/24 maxlen: 24 193.42.149.0/24 maxlen: 24 193.108.46.0/24 maxlen: 24 193.108.96.0/23 maxlen: 24 193.108.96.0/24 maxlen: 24 193.108.97.0/24 maxlen: 24 193.168.4.0/23 maxlen: 24 193.168.4.0/24 maxlen: 24 194.146.84.0/22 maxlen: 24 194.146.84.0/24 maxlen: 24 194.146.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:cc:7f:8c:a9:bf:be:23:47:26:2a:0c:0b:93:a9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5 Validity Not Before: Nov 12 16:00:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=361d06a8ab8617df2029bf82c24d6431bafe7320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:80:56:dc:a6:a6:d2:0a:1d:e3:3e:5d:68: 4c:e4:d2:37:c6:8b:8e:c8:32:0e:3a:44:74:13:c9: 4f:67:c2:5b:0f:5f:a0:60:70:fb:6d:1d:a7:fa:60: 8a:84:e0:e4:41:9a:ff:76:ce:26:8c:fd:c7:05:84: 31:4d:3b:81:c0:c5:b7:2d:aa:6c:8b:11:ed:53:99: 71:35:fa:4e:b4:de:74:8d:35:1a:13:4b:97:02:c3: cf:63:a3:ab:5a:9b:a5:68:04:89:ed:d9:11:70:fc: 30:19:22:04:4e:be:66:5f:39:4f:59:92:04:cd:f8: 28:28:e2:3a:a0:0c:2b:3e:74:85:93:6c:2a:d0:5f: ed:04:61:be:b3:56:f5:f2:ac:10:ad:d8:e4:5c:35: c4:87:3b:cb:ec:c7:90:e7:e0:dc:35:6d:ab:5f:05: f3:5f:61:36:ae:bf:34:fc:c7:e7:36:05:b8:ac:f6: d1:49:05:e5:43:77:58:d1:50:b4:34:ae:6c:2f:9f: 4e:fa:15:c3:24:da:e1:e2:17:20:6d:db:46:dc:74: 15:f2:80:0a:cc:d9:ae:cc:2f:06:fd:b7:cf:0a:b6: c8:52:bd:8a:86:06:14:9e:fd:aa:60:e4:ce:e8:21: d9:3b:5c:48:7e:7b:a2:29:91:e7:81:39:eb:ce:fa: 54:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1D:06:A8:AB:86:17:DF:20:29:BF:82:C2:4D:64:31:BA:FE:73:20 X509v3 Authority Key Identifier: keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/Nh0GqKuGF98gKb-Cwk1kMbr-cyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.100.0/22 45.8.29.0-45.8.30.255 45.9.108.0/22 45.10.208.0-45.10.210.255 45.13.160.0/22 45.66.188.0/22 45.80.112.0/22 45.87.228.0/22 45.93.64.0/22 45.131.156.0/22 45.142.76.0/22 45.147.212.0/22 45.149.68.0/22 45.156.168.0/22 45.156.216.0/22 45.158.220.0/22 62.192.188.0/22 83.150.224.0/22 85.208.56.0/22 92.118.144.0/22 185.51.164.0/22 193.42.15.0/24 193.42.132.0/24 193.42.135.0/24 193.42.149.0/24 193.108.46.0/24 193.108.96.0/23 193.168.4.0/23 194.146.84.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:c7:cc:a2:92:4f:30:71:4d:6f:ce:6b:29:9f:ce:f3:ed:c9: b2:06:e9:3c:43:71:39:e8:7a:41:e4:c9:1d:06:90:8a:dd:d9: 3f:cc:ef:d6:a9:8e:fa:a5:f1:a6:fe:8f:26:e0:3d:ec:06:a0: ec:32:d2:d6:58:a7:be:74:c4:60:93:e7:d4:cd:3c:15:d0:1f: a8:25:bb:8f:c4:2b:e7:22:49:1f:be:99:31:28:45:5b:ef:f1: c1:56:f0:1a:2f:4b:3b:54:8c:c3:45:67:bf:12:e7:d6:a8:35: e3:1a:86:4f:7a:e9:27:c2:7d:58:1e:83:0f:f0:b1:3d:11:0c: 5a:d5:9e:2a:8e:a5:4a:1b:4e:e2:f5:b2:87:5d:9c:90:2c:4a: 10:41:22:eb:01:37:94:e5:04:3c:a5:81:1b:48:5e:01:19:2d: c6:ec:19:5f:44:a0:6e:3a:48:5d:c9:fa:c0:e9:d0:85:7b:69: 7b:21:44:81:25:e7:93:f0:36:42:40:5f:4d:cb:74:bf:14:dd: a8:ab:bd:f0:58:51:31:44:20:8a:98:91:4d:dc:93:a8:14:f5: 1c:06:c8:d0:90:7d:e1:26:7a:49:5d:d6:89:ea:68:bd:39:2d: 5f:cd:4e:fb:f1:3c:d4:d9:6d:59:6c:17:53:45:b3:99:7b:16: 23:e6:19:0a -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZp4zH+Mqb++I0cmKgwLk6nIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk NGU4YzUwHhcNMjUxMTEyMTYwMDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjFkMDZhOGFiODYxN2RmMjAyOWJmODJjMjRkNjQzMWJhZmU3MzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypSAVtymptIKHeM+XWhM5NI3xouO yDIOOkR0E8lPZ8JbD1+gYHD7bR2n+mCKhODkQZr/ds4mjP3HBYQxTTuBwMW3Laps ixHtU5lxNfpOtN50jTUaE0uXAsPPY6OrWpulaASJ7dkRcPwwGSIETr5mXzlPWZIE zfgoKOI6oAwrPnSFk2wq0F/tBGG+s1b18qwQrdjkXDXEhzvL7MeQ5+DcNW2rXwXz X2E2rr80/MfnNgW4rPbRSQXlQ3dY0VC0NK5sL59O+hXDJNrh4hcgbdtG3HQV8oAK zNmuzC8G/bfPCrbIUr2KhgYUnv2qYOTO6CHZO1xIfnuiKZHngTnrzvpU9QIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFDYdBqirhhffICm/gsJNZDG6/nMgMB8GA1UdIwQY MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et YWM4NjQ3ZDA1NThhLzEvTmgwR3FLdUdGOThnS2ItQ3drMWtNYnItY3lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBxQQCAAEwgb4DBAIC O2QwDAMEAC0IHQMEAC0IHgMEAi0JbDAMAwQELQrQAwQALQrSAwQCLQ2gAwQCLUK8 AwQCLVBwAwQCLVfkAwQCLV1AAwQCLYOcAwQCLY5MAwQCLZPUAwQCLZVEAwQCLZyo AwQCLZzYAwQCLZ7cAwQCPsC8AwQCU5bgAwQCVdA4AwQCXHaQAwQCuTOkAwQAwSoP AwQAwSqEAwQAwSqHAwQAwSqVAwQAwWwuAwQBwWxgAwQBwagEAwQCwpJUMA0GCSqG SIb3DQEBCwUAA4IBAQAex8yikk8wcU1vzmspn87z7cmyBuk8Q3E56HpB5MkdBpCK 3dk/zO/WqY76pfGm/o8m4D3sBqDsMtLWWKe+dMRgk+fUzTwV0B+oJbuPxCvnIkkf vpkxKEVb7/HBVvAaL0s7VIzDRWe/EufWqDXjGoZPeuknwn1YHoMP8LE9EQxa1Z4q jqVKG07i9bKHXZyQLEoQQSLrATeU5QQ8pYEbSF4BGS3G7BlfRKBuOkhdyfrA6dCF e2l7IUSBJeeT8DZCQF9Ny3S/FN2oq73wWFExRCCKmJFN3JOoFPUcBsjQkH3hJnpJ XdaJ6mi9OS1fzU778TzU2W1ZbBdTRbOZexYj5hkK -----END CERTIFICATE-----Generated at Fri Dec 5 01:44:09 2025 by rpki-client