This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/3ItpN6feGjO7UN2dRcjYM0AArZ8.roa File: 3ItpN6feGjO7UN2dRcjYM0AArZ8.roa (raw, json) Hash identifier: yWi2Tk1o0zmHp1TWp1hxn+lJhdrn/9G1rnKPAwuzeV0= Subject key identifier: DC:8B:69:37:A7:DE:1A:33:BB:50:DD:9D:45:C8:D8:33:40:00:AD:9F Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954 Certificate serial: 019AA01B4E45B1F06679F89050A532C740A2 Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/3ItpN6feGjO7UN2dRcjYM0AArZ8.roa Signing time: Thu 20 Nov 2025 07:12:15 +0000 ROA not before: Thu 20 Nov 2025 07:12:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18530 IP address blocks: 31.13.214.0/24 maxlen: 24 37.60.142.0/24 maxlen: 24 37.61.225.0/24 maxlen: 24 37.61.230.0/24 maxlen: 24 46.243.160.0/24 maxlen: 24 87.120.58.0/24 maxlen: 24 87.120.62.0/24 maxlen: 24 87.120.247.0/24 maxlen: 24 87.121.102.0/24 maxlen: 24 93.123.25.0/24 maxlen: 24 93.123.111.0/24 maxlen: 24 94.156.40.0/23 maxlen: 23 94.156.43.0/24 maxlen: 24 94.156.62.0/23 maxlen: 23 94.156.132.0/23 maxlen: 23 94.156.145.0/24 maxlen: 24 94.156.224.0/23 maxlen: 23 158.120.252.0/23 maxlen: 23 188.212.110.0/24 maxlen: 24 192.175.2.0/24 maxlen: 24 198.160.152.0/24 maxlen: 24 203.17.237.0/24 maxlen: 24 203.25.139.0/24 maxlen: 24 203.78.161.0/24 maxlen: 24 203.78.163.0/24 maxlen: 24 203.78.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:1b:4e:45:b1:f0:66:79:f8:90:50:a5:32:c7:40:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954 Validity Not Before: Nov 20 07:12:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dc8b6937a7de1a33bb50dd9d45c8d8334000ad9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:d2:e9:99:21:3b:7f:de:0c:06:fe:21:12: 49:b4:fc:40:57:19:c5:e1:1e:3d:b1:98:06:e3:31: 30:60:cf:51:47:e3:1e:01:59:d7:6b:8c:6f:a2:cd: a2:72:a2:be:fc:8c:4b:9e:3b:a6:f8:ed:28:86:3a: e8:16:b5:27:1c:3b:fc:38:bb:ec:7a:39:9e:97:09: 84:56:ee:b5:ea:16:6e:21:83:f5:62:88:e3:cc:20: 4a:fc:be:41:16:97:cf:32:46:ca:56:ac:3d:76:e4: 8f:c3:be:88:21:66:eb:55:4a:e9:d3:34:b0:cb:99: df:9d:a1:b3:02:6e:fc:2c:03:59:93:f6:f6:02:38: 04:26:a0:93:e4:dc:1f:cc:b5:b1:0d:27:2d:34:1c: da:51:d9:40:9c:8e:45:ee:ce:52:00:28:db:52:62: 99:4e:fc:2e:cf:09:9a:6c:62:0b:8c:4f:4e:24:13: c2:00:21:0f:42:0f:c9:27:74:1c:bc:93:c5:77:d3: f3:0d:10:2a:9f:83:b0:00:b8:4b:77:7d:65:18:d3: d7:08:c9:e3:19:f0:fe:fe:c1:55:83:3f:48:e3:db: 07:91:d3:a4:a0:3b:80:ed:6d:c9:d4:91:a1:e2:65: d2:c9:b0:d7:14:bb:99:d6:67:65:39:97:42:f0:4f: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8B:69:37:A7:DE:1A:33:BB:50:DD:9D:45:C8:D8:33:40:00:AD:9F X509v3 Authority Key Identifier: keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/3ItpN6feGjO7UN2dRcjYM0AArZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.214.0/24 37.60.142.0/24 37.61.225.0/24 37.61.230.0/24 46.243.160.0/24 87.120.58.0/24 87.120.62.0/24 87.120.247.0/24 87.121.102.0/24 93.123.25.0/24 93.123.111.0/24 94.156.40.0/23 94.156.43.0/24 94.156.62.0/23 94.156.132.0/23 94.156.145.0/24 94.156.224.0/23 158.120.252.0/23 188.212.110.0/24 192.175.2.0/24 198.160.152.0/24 203.17.237.0/24 203.25.139.0/24 203.78.161.0/24 203.78.163.0-203.78.164.255 Signature Algorithm: sha256WithRSAEncryption 0a:6a:17:ad:31:f2:52:5a:99:61:3d:61:65:13:b0:4b:8e:32: d9:42:a3:85:87:88:50:d9:93:3f:ee:58:dc:2b:81:ee:ed:28: 7d:4b:5f:02:e0:05:fe:7c:df:6e:11:5e:aa:05:eb:8f:b3:7d: 8f:51:8d:ef:4d:37:93:0b:f1:6d:50:34:6f:9d:1e:d0:60:af: 5c:9a:eb:5f:90:1b:81:e6:a0:d7:66:16:8f:5d:dc:0a:a4:fa: e6:4b:19:fe:bd:27:d7:27:7c:ef:6e:bc:f3:44:d2:bd:66:a3: 7c:7a:83:bd:c1:3e:0c:9b:b3:14:c7:98:f5:f5:f1:fc:6c:c6: c8:36:b9:15:69:23:cf:c1:97:96:59:27:5c:7e:f0:43:5f:25: dd:86:31:0f:9e:45:00:6c:a1:1f:4d:fb:fe:35:2c:66:59:e2: e9:e1:96:4f:5e:6f:c9:76:36:d1:f0:e9:4b:d4:12:38:5a:7a: 7c:90:99:a9:78:b7:49:20:f9:60:14:9a:7d:b2:6a:64:6f:ba: 2d:ae:e3:db:c1:30:d6:a1:58:84:dc:aa:3e:4c:a9:f3:47:9c: cd:54:1e:fc:98:de:b4:a9:8b:29:6e:c7:a2:88:f9:1d:8f:42: 03:22:c7:5c:38:9d:71:ca:ba:86:24:c9:49:bc:f6:90:8d:76: 05:49:5d:15 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZqgG05FsfBmefiQUKUyx0CiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw Njc5NTQwHhcNMjUxMTIwMDcxMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzhiNjkzN2E3ZGUxYTMzYmI1MGRkOWQ0NWM4ZDgzMzQwMDBhZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKzS6ZkhO3/eDAb+IRJJtPxAVxnF 4R49sZgG4zEwYM9RR+MeAVnXa4xvos2icqK+/IxLnjum+O0ohjroFrUnHDv8OLvs ejmelwmEVu616hZuIYP1YojjzCBK/L5BFpfPMkbKVqw9duSPw76IIWbrVUrp0zSw y5nfnaGzAm78LANZk/b2AjgEJqCT5NwfzLWxDSctNBzaUdlAnI5F7s5SACjbUmKZ TvwuzwmabGILjE9OJBPCACEPQg/JJ3QcvJPFd9PzDRAqn4OwALhLd31lGNPXCMnj GfD+/sFVgz9I49sHkdOkoDuA7W3J1JGh4mXSybDXFLuZ1mdlOZdC8E+7NwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFNyLaTen3hozu1DdnUXI2DNAAK2fMB8GA1UdIwQY MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt NmVhYzYyZTYwZGY3LzEvM0l0cE42ZmVHak83VU4yZFJjallNMEFBclo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3 LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAAf DdYDBAAlPI4DBAAlPeEDBAAlPeYDBAAu86ADBABXeDoDBABXeD4DBABXePcDBABX eWYDBABdexkDBABde28DBAFenCgDBABenCsDBAFenD4DBAFenIQDBABenJEDBAFe nOADBAGeePwDBAC81G4DBADArwIDBADGoJgDBADLEe0DBADLGYsDBADLTqEwDAME AMtOowMEAMtOpDANBgkqhkiG9w0BAQsFAAOCAQEACmoXrTHyUlqZYT1hZROwS44y 2UKjhYeIUNmTP+5Y3CuB7u0ofUtfAuAF/nzfbhFeqgXrj7N9j1GN7003kwvxbVA0 b50e0GCvXJrrX5Abgeag12YWj13cCqT65ksZ/r0n1yd8726880TSvWajfHqDvcE+ DJuzFMeY9fXx/GzGyDa5FWkjz8GXllknXH7wQ18l3YYxD55FAGyhH037/jUsZlni 6eGWT15vyXY20fDpS9QSOFp6fJCZqXi3SSD5YBSafbJqZG+6La7j28Ew1qFYhNyq Pkyp80eczVQe/JjetKmLKW7Hooj5HY9CAyLHXDidccq6hiTJSbz2kI12BUldFQ== -----END CERTIFICATE-----Generated at Sun Nov 23 20:41:51 2025 by rpki-client