This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/nv5gCAE-XFvklzARdVFCATjn7s8.roa File: nv5gCAE-XFvklzARdVFCATjn7s8.roa (raw, json) Hash identifier: cZqsbI4NORfWULWVJvZM0hzz8P+kBhavqDjI6Gn5GRI= Subject key identifier: 9E:FE:60:08:01:3E:5C:5B:E4:97:30:11:75:51:42:01:38:E7:EE:CF Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019AFE38317AF9573A3C909129C345FCD29D Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/nv5gCAE-XFvklzARdVFCATjn7s8.roa Signing time: Mon 08 Dec 2025 13:48:06 +0000 ROA not before: Mon 08 Dec 2025 13:48:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202656 IP address blocks: 103.147.170.0/24 maxlen: 24 103.148.141.0/24 maxlen: 24 103.149.85.0/24 maxlen: 24 103.152.175.0/24 maxlen: 24 130.49.5.0/24 maxlen: 24 130.49.14.0/24 maxlen: 24 130.49.17.0/24 maxlen: 24 130.49.22.0/24 maxlen: 24 130.49.24.0/24 maxlen: 24 130.49.31.0/24 maxlen: 24 130.49.32.0/24 maxlen: 24 130.49.39.0/24 maxlen: 24 130.49.42.0/24 maxlen: 24 130.49.47.0/24 maxlen: 24 130.49.51.0/24 maxlen: 24 130.49.55.0/24 maxlen: 24 130.49.60.0/24 maxlen: 24 130.49.62.0/24 maxlen: 24 130.49.68.0/24 maxlen: 24 130.49.70.0/24 maxlen: 24 130.49.81.0/24 maxlen: 24 130.49.84.0/24 maxlen: 24 130.49.89.0/24 maxlen: 24 130.49.92.0/24 maxlen: 24 130.49.96.0/24 maxlen: 24 130.49.101.0/24 maxlen: 24 130.49.104.0/24 maxlen: 24 130.49.110.0/24 maxlen: 24 130.49.111.0/24 maxlen: 24 130.49.122.0/24 maxlen: 24 130.49.125.0/24 maxlen: 24 138.249.28.0/24 maxlen: 24 138.249.52.0/24 maxlen: 24 138.249.54.0/24 maxlen: 24 138.249.58.0/24 maxlen: 24 138.249.59.0/24 maxlen: 24 138.249.77.0/24 maxlen: 24 138.249.84.0/24 maxlen: 24 138.249.86.0/24 maxlen: 24 138.249.88.0/24 maxlen: 24 138.249.91.0/24 maxlen: 24 155.212.34.0/24 maxlen: 24 155.212.44.0/24 maxlen: 24 155.212.46.0/24 maxlen: 24 155.212.53.0/24 maxlen: 24 155.212.55.0/24 maxlen: 24 155.212.60.0/24 maxlen: 24 155.212.63.0/24 maxlen: 24 155.212.67.0/24 maxlen: 24 155.212.74.0/24 maxlen: 24 155.212.75.0/24 maxlen: 24 155.212.81.0/24 maxlen: 24 155.212.82.0/24 maxlen: 24 155.212.89.0/24 maxlen: 24 155.212.92.0/24 maxlen: 24 155.212.96.0/24 maxlen: 24 155.212.101.0/24 maxlen: 24 155.212.104.0/24 maxlen: 24 155.212.115.0/24 maxlen: 24 155.212.117.0/24 maxlen: 24 155.212.122.0/24 maxlen: 24 155.212.126.0/24 maxlen: 24 170.168.207.0/24 maxlen: 24 170.168.212.0/24 maxlen: 24 170.168.223.0/24 maxlen: 24 170.168.228.0/24 maxlen: 24 170.168.238.0/24 maxlen: 24 170.168.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:38:31:7a:f9:57:3a:3c:90:91:29:c3:45:fc:d2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 8 13:48:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9efe6008013e5c5be49730117551420138e7eecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:47:63:27:b0:01:50:5d:48:15:30:1b:9c: 3f:2a:f3:ec:6d:a1:e6:07:56:a0:5b:dd:c1:bf:d5: 54:89:45:7f:8b:b2:4e:c7:31:4d:e8:b3:f2:b6:ca: 72:68:03:9e:6b:cf:a4:37:10:76:fd:e1:91:b9:47: 4b:65:7d:1c:0f:c9:c5:5c:b0:a0:e7:15:ce:fc:62: bf:26:8b:77:42:bc:90:7d:ac:bc:b8:11:7f:c7:48: bc:4b:51:3a:f7:86:3c:46:49:cd:07:b3:b8:44:1c: 76:7f:69:ec:f7:40:cd:70:d8:45:7c:5b:b0:f9:e6: f5:2a:11:4e:b1:2c:c3:40:4c:96:d4:58:a6:d4:6c: 1a:75:90:a0:e6:58:3f:e4:35:97:5b:21:96:98:35: 60:f5:bc:e8:ca:4e:ab:e4:dd:c6:f7:e9:08:e1:ed: a7:0b:e1:e8:63:06:63:32:da:b7:bb:45:ff:6d:ed: 72:f9:78:1f:73:f9:0a:6a:09:e3:04:d4:4f:4c:3e: d9:3c:21:d7:84:81:af:80:69:e4:f1:51:04:63:f8: a1:b4:e5:b2:1d:88:9c:0b:ca:dd:7e:bf:c0:d8:a9: 95:24:52:68:38:68:f5:57:0a:9a:8a:5f:03:73:a3: 32:a0:69:93:c3:14:e0:4b:b8:5c:21:ca:43:c5:86: c0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FE:60:08:01:3E:5C:5B:E4:97:30:11:75:51:42:01:38:E7:EE:CF X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/nv5gCAE-XFvklzARdVFCATjn7s8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.170.0/24 103.148.141.0/24 103.149.85.0/24 103.152.175.0/24 130.49.5.0/24 130.49.14.0/24 130.49.17.0/24 130.49.22.0/24 130.49.24.0/24 130.49.31.0-130.49.32.255 130.49.39.0/24 130.49.42.0/24 130.49.47.0/24 130.49.51.0/24 130.49.55.0/24 130.49.60.0/24 130.49.62.0/24 130.49.68.0/24 130.49.70.0/24 130.49.81.0/24 130.49.84.0/24 130.49.89.0/24 130.49.92.0/24 130.49.96.0/24 130.49.101.0/24 130.49.104.0/24 130.49.110.0/23 130.49.122.0/24 130.49.125.0/24 138.249.28.0/24 138.249.52.0/24 138.249.54.0/24 138.249.58.0/23 138.249.77.0/24 138.249.84.0/24 138.249.86.0/24 138.249.88.0/24 138.249.91.0/24 155.212.34.0/24 155.212.44.0/24 155.212.46.0/24 155.212.53.0/24 155.212.55.0/24 155.212.60.0/24 155.212.63.0/24 155.212.67.0/24 155.212.74.0/23 155.212.81.0-155.212.82.255 155.212.89.0/24 155.212.92.0/24 155.212.96.0/24 155.212.101.0/24 155.212.104.0/24 155.212.115.0/24 155.212.117.0/24 155.212.122.0/24 155.212.126.0/24 170.168.207.0/24 170.168.212.0/24 170.168.223.0/24 170.168.228.0/24 170.168.238.0/24 170.168.248.0/24 Signature Algorithm: sha256WithRSAEncryption 20:fb:4f:15:e6:49:33:0b:2f:06:f8:e8:65:56:bc:a0:8a:6c: c8:e4:ab:07:15:d4:dd:e1:3f:78:4b:43:b6:dd:05:62:c1:8b: 24:5c:a8:c1:1e:98:a1:d0:f6:85:a6:15:70:6d:aa:54:d7:fa: ff:e6:89:18:72:5a:91:83:dd:1f:4c:2c:d3:e4:dc:95:7b:11: e6:37:e1:bb:6a:55:b1:f2:b4:3b:95:e9:44:a4:e6:d7:48:44: 04:4d:1e:e5:02:ea:a6:f6:ae:b5:97:d1:60:f1:ec:1f:05:c5: 74:ec:0d:c6:6e:dd:86:2f:d6:35:94:b4:31:8a:b5:01:ee:e8: fe:79:46:4b:ac:64:e5:10:f9:f7:d5:35:34:5c:4c:56:76:ff: 76:9c:a5:f7:20:82:97:42:72:8e:85:3e:2f:aa:a0:c6:4f:3d: 71:5d:76:d1:b8:46:96:07:44:4f:71:72:a4:95:21:0c:07:e2: 18:ae:db:64:40:f3:10:61:87:d3:60:05:4b:76:19:b8:cf:8d: a5:af:74:a6:c8:d9:f6:dc:d8:1f:03:8a:62:64:ac:82:36:c1: 17:2b:f8:15:f1:98:83:9c:5c:2c:70:48:9c:7a:e6:8c:0b:79: 33:23:51:7c:d7:94:c9:41:7f:bb:2c:6f:b7:ac:b5:7a:f9:cc: c0:a1:d8:b6 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgISAZr+ODF6+Vc6PJCRKcNF/NKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjA4MTM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWZlNjAwODAxM2U1YzViZTQ5NzMwMTE3NTUxNDIwMTM4ZTdlZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy9HYyewAVBdSBUwG5w/KvPsbaHm B1agW93Bv9VUiUV/i7JOxzFN6LPytspyaAOea8+kNxB2/eGRuUdLZX0cD8nFXLCg 5xXO/GK/Jot3QryQfay8uBF/x0i8S1E694Y8RknNB7O4RBx2f2ns90DNcNhFfFuw +eb1KhFOsSzDQEyW1Fim1GwadZCg5lg/5DWXWyGWmDVg9bzoyk6r5N3G9+kI4e2n C+HoYwZjMtq3u0X/be1y+Xgfc/kKagnjBNRPTD7ZPCHXhIGvgGnk8VEEY/ihtOWy HYicC8rdfr/A2KmVJFJoOGj1Vwqail8Dc6MyoGmTwxTgS7hcIcpDxYbAjwIDAQAB o4IDlzCCA5MwHQYDVR0OBBYEFJ7+YAgBPlxb5JcwEXVRQgE45+7PMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvbnY1Z0NBRS1YRnZrbHpBUmRWRkNBVGpuN3M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBqwYIKwYBBQUHAQcBAf8EggGaMIIBljCCAZIEAgABMIIB igMEAGeTqgMEAGeUjQMEAGeVVQMEAGeYrwMEAIIxBQMEAIIxDgMEAIIxEQMEAIIx FgMEAIIxGDAMAwQAgjEfAwQAgjEgAwQAgjEnAwQAgjEqAwQAgjEvAwQAgjEzAwQA gjE3AwQAgjE8AwQAgjE+AwQAgjFEAwQAgjFGAwQAgjFRAwQAgjFUAwQAgjFZAwQA gjFcAwQAgjFgAwQAgjFlAwQAgjFoAwQBgjFuAwQAgjF6AwQAgjF9AwQAivkcAwQA ivk0AwQAivk2AwQBivk6AwQAivlNAwQAivlUAwQAivlWAwQAivlYAwQAivlbAwQA m9QiAwQAm9QsAwQAm9QuAwQAm9Q1AwQAm9Q3AwQAm9Q8AwQAm9Q/AwQAm9RDAwQB m9RKMAwDBACb1FEDBACb1FIDBACb1FkDBACb1FwDBACb1GADBACb1GUDBACb1GgD BACb1HMDBACb1HUDBACb1HoDBACb1H4DBACqqM8DBACqqNQDBACqqN8DBACqqOQD BACqqO4DBACqqPgwDQYJKoZIhvcNAQELBQADggEBACD7TxXmSTMLLwb46GVWvKCK bMjkqwcV1N3hP3hLQ7bdBWLBiyRcqMEemKHQ9oWmFXBtqlTX+v/miRhyWpGD3R9M LNPk3JV7EeY34btqVbHytDuV6USk5tdIRARNHuUC6qb2rrWX0WDx7B8FxXTsDcZu 3YYv1jWUtDGKtQHu6P55RkusZOUQ+ffVNTRcTFZ2/3acpfcggpdCco6FPi+qoMZP PXFddtG4RpYHRE9xcqSVIQwH4hiu22RA8xBhh9NgBUt2GbjPjaWvdKbI2fbc2B8D imJkrII2wRcr+BXxmIOcXCxwSJx65owLeTMjUXzXlMlBf7ssb7estXr5zMCh2LY= -----END CERTIFICATE-----Generated at Thu Dec 11 09:29:57 2025 by rpki-client