This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/DvF8t9IlxmCDE7eFFlHlL3S7BtQ.roa File: DvF8t9IlxmCDE7eFFlHlL3S7BtQ.roa (raw, json) Hash identifier: q1i0GBgyIfuASOH5psAfGMqR7ZZC66TTNfURWKBgMUE= Subject key identifier: 0E:F1:7C:B7:D2:25:C6:60:83:13:B7:85:16:51:E5:2F:74:BB:06:D4 Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019A72FD8575B71CBB6C4EE3B8A87211A626 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/DvF8t9IlxmCDE7eFFlHlL3S7BtQ.roa Signing time: Tue 11 Nov 2025 12:56:48 +0000 ROA not before: Tue 11 Nov 2025 12:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203020 IP address blocks: 2.57.76.0/22 maxlen: 32 14.102.20.0/24 maxlen: 32 14.102.21.0/24 maxlen: 32 14.102.28.0/22 maxlen: 32 14.102.39.0/24 maxlen: 32 14.102.49.0/24 maxlen: 32 14.102.51.0/24 maxlen: 32 14.102.58.0/24 maxlen: 32 14.102.124.0/24 maxlen: 32 31.14.26.0/24 maxlen: 32 45.78.84.0/22 maxlen: 32 45.78.88.0/23 maxlen: 32 45.120.188.0/24 maxlen: 32 45.120.189.0/24 maxlen: 32 45.120.190.0/24 maxlen: 32 45.120.191.0/24 maxlen: 32 62.101.168.0/21 maxlen: 32 62.101.176.0/21 maxlen: 32 62.101.184.0/21 maxlen: 32 77.81.92.0/22 maxlen: 32 85.217.190.0/23 maxlen: 32 85.217.220.0/23 maxlen: 32 86.104.76.0/22 maxlen: 32 86.104.192.0/24 maxlen: 32 86.104.195.0/24 maxlen: 32 86.106.176.0/23 maxlen: 32 89.32.132.0/22 maxlen: 32 89.38.155.0/24 maxlen: 32 89.40.81.0/24 maxlen: 32 89.46.242.0/24 maxlen: 32 89.104.122.0/23 maxlen: 32 89.223.22.0/23 maxlen: 32 91.92.17.0/24 maxlen: 32 91.92.20.0/24 maxlen: 32 91.92.22.0/23 maxlen: 32 91.92.64.0/24 maxlen: 32 91.92.138.0/24 maxlen: 32 91.92.178.0/23 maxlen: 32 91.92.216.0/23 maxlen: 32 91.92.218.0/24 maxlen: 32 91.192.212.0/22 maxlen: 32 91.203.128.0/22 maxlen: 32 91.233.108.0/22 maxlen: 32 91.235.208.0/22 maxlen: 32 92.114.60.0/22 maxlen: 32 92.114.81.0/24 maxlen: 32 92.255.0.0/24 maxlen: 32 92.255.52.0/24 maxlen: 32 92.255.64.0/24 maxlen: 32 92.255.80.0/22 maxlen: 32 93.113.52.0/23 maxlen: 24 93.114.136.0/23 maxlen: 32 93.114.236.0/22 maxlen: 32 93.115.4.0/23 maxlen: 32 94.139.48.0/21 maxlen: 32 94.139.56.0/22 maxlen: 32 94.139.60.0/23 maxlen: 32 94.139.224.0/20 maxlen: 24 94.176.0.0/23 maxlen: 32 94.176.172.0/22 maxlen: 32 94.177.14.0/23 maxlen: 32 103.61.13.0/24 maxlen: 32 103.61.14.0/24 maxlen: 32 103.82.151.0/24 maxlen: 32 103.82.223.0/24 maxlen: 32 103.206.14.0/23 maxlen: 32 103.211.84.0/22 maxlen: 32 103.211.88.0/22 maxlen: 32 110.172.128.0/23 maxlen: 32 110.172.137.0/24 maxlen: 32 110.172.141.0/24 maxlen: 32 110.172.144.0/24 maxlen: 32 110.172.165.0/24 maxlen: 32 110.172.169.0/24 maxlen: 32 110.172.172.0/24 maxlen: 32 110.172.173.0/24 maxlen: 32 110.172.176.0/24 maxlen: 32 110.238.192.0/19 maxlen: 32 114.69.250.0/23 maxlen: 32 119.12.192.0/20 maxlen: 32 160.202.52.0/22 maxlen: 32 176.223.68.0/22 maxlen: 32 176.223.104.0/22 maxlen: 32 176.223.182.0/23 maxlen: 32 180.235.160.0/20 maxlen: 32 180.235.176.0/20 maxlen: 32 185.66.136.0/22 maxlen: 32 188.94.84.0/22 maxlen: 32 188.211.24.0/23 maxlen: 32 188.212.136.0/21 maxlen: 32 188.240.48.0/23 maxlen: 32 188.240.214.0/23 maxlen: 32 188.241.0.0/23 maxlen: 32 188.241.15.0/24 maxlen: 32 188.241.200.0/21 maxlen: 32 188.241.249.0/24 maxlen: 32 193.56.24.0/22 maxlen: 32 193.142.103.0/24 maxlen: 32 193.163.74.0/24 maxlen: 32 193.200.104.0/23 maxlen: 32 202.89.75.0/24 maxlen: 32 212.70.3.0/24 maxlen: 32 212.70.8.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:72:fd:85:75:b7:1c:bb:6c:4e:e3:b8:a8:72:11:a6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Nov 11 12:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0ef17cb7d225c6608313b7851651e52f74bb06d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:48:f9:ff:42:c9:ec:3a:ad:36:c9:c2:07: ae:d3:02:b1:6b:06:ce:fb:a5:a1:25:57:b1:af:b4: 56:f4:28:fa:12:d7:82:29:9e:e2:2e:0e:97:50:a9: d2:da:77:78:77:ab:01:74:a6:f6:11:0c:12:6f:73: 62:8c:eb:ad:de:57:ba:16:18:12:76:b0:2f:4f:5e: b7:09:04:22:09:ae:8c:56:f7:6d:1c:52:5d:9f:e7: 43:ca:ef:77:a1:7d:01:c7:71:0b:f3:ad:db:4c:d4: 50:9e:c4:9f:ef:f3:ff:4e:b8:d8:e0:9a:b7:41:ca: 5d:9e:eb:f9:6d:17:fc:d8:20:22:a3:fa:88:4d:7d: a2:02:c0:dc:f2:2b:12:9e:c8:2f:d7:6b:f2:18:84: 39:de:f8:4d:a7:70:f9:af:52:33:2c:54:30:42:51: e5:d8:08:7b:58:b4:dc:81:ae:82:fd:f3:da:cd:6d: 58:79:76:db:56:49:30:4f:9d:82:13:5a:66:5d:c1: 1e:03:f3:37:68:9e:f8:2e:8d:ff:59:93:9c:8f:d4: 4d:b3:22:b8:6d:e6:0c:22:25:43:a4:9c:aa:90:ed: 7d:05:79:1f:e7:08:25:0e:56:02:2d:1f:f6:9e:62: 88:f1:ce:0d:6b:7d:73:23:3d:31:78:02:1f:fc:07: 53:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F1:7C:B7:D2:25:C6:60:83:13:B7:85:16:51:E5:2F:74:BB:06:D4 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/DvF8t9IlxmCDE7eFFlHlL3S7BtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.76.0/22 14.102.20.0/23 14.102.28.0/22 14.102.39.0/24 14.102.49.0/24 14.102.51.0/24 14.102.58.0/24 14.102.124.0/24 31.14.26.0/24 45.78.84.0-45.78.89.255 45.120.188.0/22 62.101.168.0-62.101.191.255 77.81.92.0/22 85.217.190.0/23 85.217.220.0/23 86.104.76.0/22 86.104.192.0/24 86.104.195.0/24 86.106.176.0/23 89.32.132.0/22 89.38.155.0/24 89.40.81.0/24 89.46.242.0/24 89.104.122.0/23 89.223.22.0/23 91.92.17.0/24 91.92.20.0/24 91.92.22.0/23 91.92.64.0/24 91.92.138.0/24 91.92.178.0/23 91.92.216.0-91.92.218.255 91.192.212.0/22 91.203.128.0/22 91.233.108.0/22 91.235.208.0/22 92.114.60.0/22 92.114.81.0/24 92.255.0.0/24 92.255.52.0/24 92.255.64.0/24 92.255.80.0/22 93.113.52.0/23 93.114.136.0/23 93.114.236.0/22 93.115.4.0/23 94.139.48.0-94.139.61.255 94.139.224.0/20 94.176.0.0/23 94.176.172.0/22 94.177.14.0/23 103.61.13.0-103.61.14.255 103.82.151.0/24 103.82.223.0/24 103.206.14.0/23 103.211.84.0-103.211.91.255 110.172.128.0/23 110.172.137.0/24 110.172.141.0/24 110.172.144.0/24 110.172.165.0/24 110.172.169.0/24 110.172.172.0/23 110.172.176.0/24 110.238.192.0/19 114.69.250.0/23 119.12.192.0/20 160.202.52.0/22 176.223.68.0/22 176.223.104.0/22 176.223.182.0/23 180.235.160.0/19 185.66.136.0/22 188.94.84.0/22 188.211.24.0/23 188.212.136.0/21 188.240.48.0/23 188.240.214.0/23 188.241.0.0/23 188.241.15.0/24 188.241.200.0/21 188.241.249.0/24 193.56.24.0/22 193.142.103.0/24 193.163.74.0/24 193.200.104.0/23 202.89.75.0/24 212.70.3.0/24 212.70.8.0/21 Signature Algorithm: sha256WithRSAEncryption 15:d0:c7:7a:99:bb:f0:21:03:2f:7a:01:19:05:73:82:4f:7b: e9:cd:bf:84:a4:b8:c9:bf:1d:5d:6b:93:39:3e:e1:61:c3:82: 25:e1:18:db:33:0c:46:2e:0b:04:7a:77:c6:51:31:8d:0b:08: 81:48:29:49:75:84:e2:4e:37:79:bf:c5:07:0a:d9:54:c9:59: 7a:80:0b:88:cd:df:78:f6:fd:73:b3:a9:bf:25:0c:75:90:45: 10:5f:b3:6f:f0:9d:09:fe:2b:fe:0d:60:0d:40:26:6f:25:83: 5d:fd:b0:9a:fa:aa:39:97:97:1b:1f:35:7a:27:82:ce:cd:a0: 32:a3:59:e5:7c:b3:74:89:77:25:6e:e2:e8:33:ce:ba:f7:2c: ab:ad:c3:51:87:1e:d7:42:d8:f9:4c:17:8f:9c:21:4f:5e:0b: 9b:2a:16:07:6a:35:e3:48:2d:f4:50:9d:8b:5c:b6:0a:98:a4: fb:e6:ce:6a:24:a2:3a:18:c8:54:b9:6c:9b:e7:d5:f7:86:69: 01:2e:77:bd:b0:07:d9:d9:d8:97:84:18:f1:92:dc:3c:09:c6: d9:d8:63:a4:98:f3:f6:20:4d:af:19:0c:7b:43:ea:9d:0c:f2: 8d:07:56:e4:6b:ad:ce:f4:db:8e:9d:6d:03:d3:17:57:38:6a: 53:f2:9d:bb -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgISAZpy/YV1txy7bE7juKhyEaYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjUxMTExMTI1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWYxN2NiN2QyMjVjNjYwODMxM2I3ODUxNjUxZTUyZjc0YmIwNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l5I+f9Cyew6rTbJwgeu0wKxawbO +6WhJVexr7RW9Cj6EteCKZ7iLg6XUKnS2nd4d6sBdKb2EQwSb3NijOut3le6FhgS drAvT163CQQiCa6MVvdtHFJdn+dDyu93oX0Bx3EL863bTNRQnsSf7/P/TrjY4Jq3 Qcpdnuv5bRf82CAio/qITX2iAsDc8isSnsgv12vyGIQ53vhNp3D5r1IzLFQwQlHl 2Ah7WLTcga6C/fPazW1YeXbbVkkwT52CE1pmXcEeA/M3aJ74Lo3/WZOcj9RNsyK4 beYMIiVDpJyqkO19BXkf5wglDlYCLR/2nmKI8c4Na31zIz0xeAIf/AdTAQIDAQAB o4IEUzCCBE8wHQYDVR0OBBYEFA7xfLfSJcZggxO3hRZR5S90uwbUMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEvRHZGOHQ5SWx4bUNERTdlRkZsSGxMM1M3QnRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICZwYIKwYBBQUHAQcBAf8EggJWMIICUjCCAk4EAgABMIIC RgMEAgI5TAMEAQ5mFAMEAg5mHAMEAA5mJwMEAA5mMQMEAA5mMwMEAA5mOgMEAA5m fAMEAB8OGjAMAwQCLU5UAwQBLU5YAwQCLXi8MAwDBAM+ZagDBAY+ZYADBAJNUVwD BAFV2b4DBAFV2dwDBAJWaEwDBABWaMADBABWaMMDBAFWarADBAJZIIQDBABZJpsD BABZKFEDBABZLvIDBAFZaHoDBAFZ3xYDBABbXBEDBABbXBQDBAFbXBYDBABbXEAD BABbXIoDBAFbXLIwDAMEA1tc2AMEAFtc2gMEAlvA1AMEAlvLgAMEAlvpbAMEAlvr 0AMEAlxyPAMEAFxyUQMEAFz/AAMEAFz/NAMEAFz/QAMEAlz/UAMEAV1xNAMEAV1y iAMEAl1y7AMEAV1zBDAMAwQEXoswAwQBXos8AwQEXovgAwQBXrAAAwQCXrCsAwQB XrEOMAwDBABnPQ0DBABnPQ4DBABnUpcDBABnUt8DBAFnzg4wDAMEAmfTVAMEAmfT WAMEAW6sgAMEAG6siQMEAG6sjQMEAG6skAMEAG6spQMEAG6sqQMEAW6srAMEAG6s sAMEBW7uwAMEAXJF+gMEBHcMwAMEAqDKNAMEArDfRAMEArDfaAMEAbDftgMEBbTr oAMEArlCiAMEArxeVAMEAbzTGAMEA7zUiAMEAbzwMAMEAbzw1gMEAbzxAAMEALzx DwMEA7zxyAMEALzx+QMEAsE4GAMEAMGOZwMEAMGjSgMEAcHIaAMEAMpZSwMEANRG AwMEA9RGCDANBgkqhkiG9w0BAQsFAAOCAQEAFdDHepm78CEDL3oBGQVzgk976c2/ hKS4yb8dXWuTOT7hYcOCJeEY2zMMRi4LBHp3xlExjQsIgUgpSXWE4k43eb/FBwrZ VMlZeoALiM3fePb9c7OpvyUMdZBFEF+zb/CdCf4r/g1gDUAmbyWDXf2wmvqqOZeX Gx81eieCzs2gMqNZ5XyzdIl3JW7i6DPOuvcsq63DUYce10LY+UwXj5whT14LmyoW B2o140gt9FCdi1y2Cpik++bOaiSiOhjIVLlsm+fV94ZpAS53vbAH2dnYl4QY8ZLc PAnG2dhjpJjz9iBNrxkMe0PqnQzyjQdW5GutzvTbjp1tA9MXVzhqU/Kduw== -----END CERTIFICATE-----Generated at Thu Dec 4 07:30:36 2025 by rpki-client