This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/nu3I9eXqzsxyr381zZAykxHEb48.roa File: nu3I9eXqzsxyr381zZAykxHEb48.roa (raw, json) Hash identifier: sofJYwKDaoPXa1Ml5pVH5Wsxog9sS/Y8Reqx+AuL+us= Subject key identifier: 9E:ED:C8:F5:E5:EA:CE:CC:72:AF:7F:35:CD:90:32:93:11:C4:6F:8F Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019B459C40002FF8F5DE2964510FEB3D294E Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/nu3I9eXqzsxyr381zZAykxHEb48.roa Signing time: Mon 22 Dec 2025 10:30:26 +0000 ROA not before: Mon 22 Dec 2025 10:30:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 62.171.228.0/22 maxlen: 24 62.171.232.0/21 maxlen: 24 62.171.240.0/22 maxlen: 24 62.171.244.0/22 maxlen: 24 62.171.248.0/24 maxlen: 24 194.154.24.0/22 maxlen: 24 194.154.28.0/22 maxlen: 24 194.238.40.0/23 maxlen: 24 194.238.42.0/23 maxlen: 24 194.238.44.0/22 maxlen: 24 194.238.56.0/22 maxlen: 24 194.238.72.0/22 maxlen: 24 194.238.76.0/22 maxlen: 24 194.238.78.0/24 maxlen: 24 194.238.79.0/24 maxlen: 24 194.238.80.0/22 maxlen: 24 194.238.84.0/22 maxlen: 24 194.238.88.0/22 maxlen: 24 194.238.92.0/22 maxlen: 24 213.18.245.0/24 maxlen: 24 217.177.0.0/21 maxlen: 24 217.177.8.0/22 maxlen: 24 217.177.12.0/22 maxlen: 24 217.177.32.0/24 maxlen: 24 217.177.33.0/24 maxlen: 24 217.177.34.0/24 maxlen: 24 217.177.35.0/24 maxlen: 24 217.177.40.0/22 maxlen: 24 217.177.44.0/22 maxlen: 24 217.177.72.0/24 maxlen: 24 217.177.73.0/24 maxlen: 24 217.177.74.0/24 maxlen: 24 217.177.75.0/24 maxlen: 24 217.177.80.0/22 maxlen: 24 217.177.84.0/22 maxlen: 24 217.179.4.0/23 maxlen: 24 217.179.6.0/24 maxlen: 24 217.179.7.0/24 maxlen: 24 217.179.72.0/22 maxlen: 24 217.179.72.0/23 maxlen: 24 217.179.88.0/24 maxlen: 24 217.179.91.0/24 maxlen: 24 217.179.228.0/22 maxlen: 24 217.180.15.0/24 maxlen: 24 217.180.20.0/24 maxlen: 24 217.180.21.0/24 maxlen: 24 217.180.22.0/23 maxlen: 24 217.180.40.0/22 maxlen: 24 217.180.44.0/24 maxlen: 24 217.180.45.0/24 maxlen: 24 217.180.46.0/24 maxlen: 24 217.180.47.0/24 maxlen: 24 217.180.52.0/24 maxlen: 24 217.180.53.0/24 maxlen: 24 217.180.54.0/24 maxlen: 24 217.180.55.0/24 maxlen: 24 217.180.60.0/24 maxlen: 24 217.181.80.0/21 maxlen: 24 217.181.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:9c:40:00:2f:f8:f5:de:29:64:51:0f:eb:3d:29:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Dec 22 10:30:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9eedc8f5e5eacecc72af7f35cd90329311c46f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:68:38:2d:18:a6:6d:bf:c2:66:ef:f5:00: 08:ca:6c:36:69:a9:0f:cd:dd:54:38:73:7f:cb:7e: 34:92:54:e6:27:1f:84:75:ad:96:40:7a:a3:78:2e: b1:e3:05:8e:2a:dd:09:a6:cb:4c:e5:83:7d:ee:81: 72:e7:a1:21:2c:83:9c:3a:06:4f:13:9a:da:a4:7d: 91:fb:47:96:f5:c8:6a:bb:cd:a2:d3:5e:f0:5a:f6: 78:c7:10:f8:7b:f8:91:13:5a:de:1d:da:fc:ce:f1: 2a:b8:55:44:52:47:05:6e:a5:c2:6f:69:bb:2a:42: 96:dc:07:cf:6a:03:86:a8:46:62:70:3d:77:8d:b2: 3d:b4:13:7e:58:e4:c8:4c:66:31:6d:f2:d4:7f:65: d4:19:c9:b6:53:35:b3:fa:b9:f9:a9:60:c1:8b:ba: e9:1d:4c:d1:dd:62:90:69:18:1e:09:83:4e:1a:c2: 6c:18:6c:08:e0:ec:56:8c:36:d1:c4:e0:75:66:71: d1:d3:cd:43:2d:14:76:d6:1b:f7:75:d2:97:f4:bd: 66:28:f5:0d:92:67:06:18:30:5b:a4:c9:08:e9:8b: 75:98:32:52:1b:0e:c2:07:cf:13:51:41:1b:7e:17: c0:c4:8d:52:14:17:7b:9a:7b:cd:ea:7a:2e:a8:e4: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:ED:C8:F5:E5:EA:CE:CC:72:AF:7F:35:CD:90:32:93:11:C4:6F:8F X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/nu3I9eXqzsxyr381zZAykxHEb48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.171.228.0-62.171.248.255 194.154.24.0/21 194.238.40.0/21 194.238.56.0/22 194.238.72.0-194.238.95.255 213.18.245.0/24 217.177.0.0/20 217.177.32.0/22 217.177.40.0/21 217.177.72.0/22 217.177.80.0/21 217.179.4.0/22 217.179.72.0/22 217.179.88.0/24 217.179.91.0/24 217.179.228.0/22 217.180.15.0/24 217.180.20.0/22 217.180.40.0/21 217.180.52.0/22 217.180.60.0/24 217.181.80.0-217.181.91.255 Signature Algorithm: sha256WithRSAEncryption 4b:74:99:7a:5e:22:0a:e1:d2:91:b6:95:7b:74:24:50:dd:86: 4c:dc:48:14:80:30:a3:1a:d2:67:1d:26:57:f1:87:21:02:3e: ef:71:d2:3f:b9:31:53:e1:50:45:1b:f5:e1:0e:63:ed:c3:ce: 43:86:7c:0b:29:0d:5b:50:db:01:f9:32:d5:29:20:12:2d:9c: f1:68:71:97:88:d2:27:fa:ce:f1:46:91:58:44:2d:77:48:dc: 16:a2:3c:2f:24:ca:e3:23:82:af:63:b9:02:fe:1a:c5:81:d8: 39:9d:b8:21:60:83:45:09:87:f6:f5:7a:4a:8a:17:0f:24:5a: 02:cd:74:12:b2:01:8c:79:7b:7e:a8:61:c1:29:68:5e:4a:db: 49:12:3d:f8:e2:67:cb:6a:9c:83:30:80:1d:e6:28:98:6f:84: a3:12:b1:79:39:ad:ef:f1:3d:e1:bb:f0:ee:25:dc:5b:61:0c: af:9b:d5:da:72:26:ee:5a:22:32:63:e6:f1:26:3b:88:cb:ba: ee:33:a4:29:3f:5e:3e:09:25:65:b7:13:51:1c:bd:1f:e8:f2: 1d:c6:18:10:ad:92:68:f7:2f:fa:62:02:2e:d6:c7:46:bd:e4: 5a:dc:f1:a1:d0:d8:bb:bc:54:b6:9d:d6:39:c0:91:5b:41:b8: a4:c5:f0:35 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZtFnEAAL/j13ilkUQ/rPSlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjUxMjIyMTAzMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWVkYzhmNWU1ZWFjZWNjNzJhZjdmMzVjZDkwMzI5MzExYzQ2ZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/1oOC0Ypm2/wmbv9QAIymw2aakP zd1UOHN/y340klTmJx+Eda2WQHqjeC6x4wWOKt0JpstM5YN97oFy56EhLIOcOgZP E5rapH2R+0eW9chqu82i017wWvZ4xxD4e/iRE1reHdr8zvEquFVEUkcFbqXCb2m7 KkKW3AfPagOGqEZicD13jbI9tBN+WOTITGYxbfLUf2XUGcm2UzWz+rn5qWDBi7rp HUzR3WKQaRgeCYNOGsJsGGwI4OxWjDbRxOB1ZnHR081DLRR21hv3ddKX9L1mKPUN kmcGGDBbpMkI6Yt1mDJSGw7CB88TUUEbfhfAxI1SFBd7mnvN6nouqOQS2wIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFJ7tyPXl6s7Mcq9/Nc2QMpMRxG+PMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvbnUzSTllWHF6c3h5cjM4MXpaQXlreEhFYjQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwwDAME Aj6r5AMEAD6r+AMEA8KaGAMEA8LuKAMEAsLuODAMAwQDwu5IAwQFwu5AAwQA1RL1 AwQE2bEAAwQC2bEgAwQD2bEoAwQC2bFIAwQD2bFQAwQC2bMEAwQC2bNIAwQA2bNY AwQA2bNbAwQC2bPkAwQA2bQPAwQC2bQUAwQD2bQoAwQC2bQ0AwQA2bQ8MAwDBATZ tVADBALZtVgwDQYJKoZIhvcNAQELBQADggEBAEt0mXpeIgrh0pG2lXt0JFDdhkzc SBSAMKMa0mcdJlfxhyECPu9x0j+5MVPhUEUb9eEOY+3DzkOGfAspDVtQ2wH5MtUp IBItnPFocZeI0if6zvFGkVhELXdI3BaiPC8kyuMjgq9juQL+GsWB2DmduCFgg0UJ h/b1ekqKFw8kWgLNdBKyAYx5e36oYcEpaF5K20kSPfjiZ8tqnIMwgB3mKJhvhKMS sXk5re/xPeG78O4l3FthDK+b1dpyJu5aIjJj5vEmO4jLuu4zpCk/Xj4JJWW3E1Ec vR/o8h3GGBCtkmj3L/piAi7Wx0a95Frc8aHQ2Lu8VLad1jnAkVtBuKTF8DU= -----END CERTIFICATE-----Generated at Tue Dec 30 21:08:00 2025 by rpki-client