This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/_qUQH-C47BNroyNwSiM_yIICM1Q.roa File: _qUQH-C47BNroyNwSiM_yIICM1Q.roa (raw, json) Hash identifier: M7wXkFLCh1xf6ARJBINRS+CZ5o11Olshd9eYM5z+kMk= Subject key identifier: FE:A5:10:1F:E0:B8:EC:13:6B:A3:23:70:4A:23:3F:C8:82:02:33:54 Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Certificate serial: 019B0784EAC3B42C5E0EEC03F88E1A65B8CF Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/_qUQH-C47BNroyNwSiM_yIICM1Q.roa Signing time: Wed 10 Dec 2025 09:08:29 +0000 ROA not before: Wed 10 Dec 2025 09:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59588 IP address blocks: 5.252.132.0/22 maxlen: 24 5.252.135.0/24 maxlen: 24 45.153.116.0/23 maxlen: 23 45.153.116.0/24 maxlen: 24 45.153.117.0/24 maxlen: 24 45.153.118.0/23 maxlen: 23 45.153.118.0/24 maxlen: 24 45.153.119.0/24 maxlen: 24 151.236.160.0/23 maxlen: 23 151.236.160.0/24 maxlen: 24 151.236.161.0/24 maxlen: 24 151.236.162.0/23 maxlen: 23 151.236.162.0/24 maxlen: 24 151.236.163.0/24 maxlen: 24 151.236.164.0/23 maxlen: 23 151.236.164.0/24 maxlen: 24 151.236.165.0/24 maxlen: 24 151.236.166.0/23 maxlen: 23 151.236.166.0/24 maxlen: 24 151.236.167.0/24 maxlen: 24 151.236.168.0/23 maxlen: 23 151.236.168.0/24 maxlen: 24 151.236.169.0/24 maxlen: 24 151.236.170.0/23 maxlen: 23 151.236.170.0/24 maxlen: 24 151.236.171.0/24 maxlen: 24 151.236.172.0/23 maxlen: 23 151.236.172.0/24 maxlen: 24 151.236.173.0/24 maxlen: 24 151.236.174.0/23 maxlen: 23 151.236.174.0/24 maxlen: 24 151.236.175.0/24 maxlen: 24 151.236.176.0/23 maxlen: 23 151.236.176.0/24 maxlen: 24 151.236.177.0/24 maxlen: 24 151.236.178.0/23 maxlen: 23 151.236.178.0/24 maxlen: 24 151.236.179.0/24 maxlen: 24 151.236.180.0/23 maxlen: 23 151.236.180.0/24 maxlen: 24 151.236.181.0/24 maxlen: 24 151.236.182.0/23 maxlen: 24 151.236.182.0/24 maxlen: 24 151.236.183.0/24 maxlen: 24 151.236.186.0/24 maxlen: 24 151.236.188.0/23 maxlen: 23 151.236.188.0/24 maxlen: 24 151.236.189.0/24 maxlen: 24 151.236.190.0/23 maxlen: 23 151.236.190.0/24 maxlen: 24 151.236.191.0/24 maxlen: 24 194.59.28.0/23 maxlen: 24 194.59.28.0/24 maxlen: 24 194.59.29.0/24 maxlen: 24 198.160.164.0/24 maxlen: 24 198.160.165.0/24 maxlen: 24 198.160.166.0/24 maxlen: 24 198.160.167.0/24 maxlen: 24 198.160.168.0/23 maxlen: 23 198.160.168.0/24 maxlen: 24 198.160.169.0/24 maxlen: 24 198.176.116.0/23 maxlen: 23 198.176.116.0/24 maxlen: 24 198.176.117.0/24 maxlen: 24 2a10:2200:1::/48 maxlen: 48 2a10:2200:2::/48 maxlen: 48 2a10:2200:3::/48 maxlen: 48 2a10:2200:4::/48 maxlen: 48 2a10:2200:b::/48 maxlen: 48 2a10:2200:c::/48 maxlen: 48 2a10:2200:d::/48 maxlen: 48 2a10:2200:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:84:ea:c3:b4:2c:5e:0e:ec:03:f8:8e:1a:65:b8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b Validity Not Before: Dec 10 09:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fea5101fe0b8ec136ba323704a233fc882023354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1a:10:98:ce:bb:6c:a8:c2:57:26:80:d7:01: 13:44:f9:fa:3c:4d:f2:29:f9:f0:de:4a:84:24:2e: 3c:be:53:e9:c3:d1:2c:70:7c:a8:5c:13:32:d7:f5: 30:11:88:ac:3c:a5:d0:60:ec:16:98:39:5a:97:2b: 79:32:a2:59:b0:fe:27:9d:01:5f:1d:73:e4:10:ee: 95:dd:ea:d1:77:56:f1:2d:80:78:43:ef:fa:f1:a6: b2:81:9d:a3:45:b4:4c:40:6d:b4:a4:49:7a:e0:0d: 1a:29:9e:35:75:1f:d7:d2:ae:1f:d3:2b:21:02:1b: c2:99:4e:b3:a1:0f:a1:03:6d:fd:b2:76:0d:bc:6e: 50:5c:dd:e7:59:07:be:b0:54:9f:fc:5b:6f:d1:52: 6b:86:d0:32:61:e3:09:5c:53:29:b2:81:6d:94:b8: f6:30:92:be:38:da:7b:d7:c7:a6:6e:44:39:ef:ab: 42:fe:82:eb:ce:34:44:c9:49:2e:b5:ad:2b:6f:27: 62:63:3f:45:4c:d6:dc:6c:e8:f8:c4:63:02:d6:fd: 12:a4:b0:1d:54:f0:d5:dc:55:84:fa:e5:da:48:38: 00:b9:f2:f8:99:7f:de:c7:18:8a:ca:a5:79:e9:b9: d4:80:82:96:78:17:2d:dc:32:ce:59:fc:d8:89:d8: ca:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A5:10:1F:E0:B8:EC:13:6B:A3:23:70:4A:23:3F:C8:82:02:33:54 X509v3 Authority Key Identifier: keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/_qUQH-C47BNroyNwSiM_yIICM1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.132.0/22 45.153.116.0/22 151.236.160.0-151.236.183.255 151.236.186.0/24 151.236.188.0/22 194.59.28.0/23 198.160.164.0-198.160.169.255 198.176.116.0/23 IPv6: 2a10:2200:1::-2a10:2200:4:ffff:ffff:ffff:ffff:ffff 2a10:2200:b::-2a10:2200:d:ffff:ffff:ffff:ffff:ffff 2a10:2200:f::/48 Signature Algorithm: sha256WithRSAEncryption 65:64:bb:9c:91:7c:d1:4d:e3:96:36:59:2a:71:84:6b:17:aa: 9a:b1:7a:5f:73:54:3f:83:8a:ec:d9:19:c3:d8:20:cb:6d:1a: 43:fb:70:3d:75:8c:56:91:ba:6f:18:a2:73:92:7e:ba:95:64: 90:af:09:76:28:1e:7c:e1:06:c0:c3:cb:eb:67:d5:8f:aa:91: 49:8c:5e:a5:c2:cf:18:25:36:9b:b5:26:8c:03:3e:41:09:c3: d1:c0:32:22:96:87:e6:66:31:17:21:53:d1:41:d3:99:76:3a: bf:5d:92:4c:a9:34:ff:22:38:37:9a:83:a9:41:6d:47:4c:60: 01:c3:07:7a:7f:1a:ad:66:b9:3c:ca:c0:0e:a7:35:83:8c:2a: 1d:8a:2b:8a:56:55:58:fe:c6:63:bf:da:ce:42:b4:d8:74:93: 65:66:87:17:8a:54:ee:9e:0f:0a:91:3c:af:1a:dd:45:42:ff: da:29:f8:83:07:15:06:61:33:89:6a:22:75:7e:80:ba:59:0f: b7:37:c1:7b:b7:6c:8c:56:ac:c7:14:4b:e6:ce:e1:81:77:c3: a7:fe:9c:ec:ad:ab:77:17:01:18:a8:d8:64:7c:e0:ce:9e:7f: da:a5:2a:59:06:51:2c:6a:8f:60:20:95:67:50:ed:d5:c3:db: 3b:52:06:c2 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZsHhOrDtCxeDuwD+I4aZbjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMTkyZThkNzg1NTgxZjcyYjE4NjQ0MjI0YmQ4YzNmYThh MmQxMWIwHhcNMjUxMjEwMDkwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWE1MTAxZmUwYjhlYzEzNmJhMzIzNzA0YTIzM2ZjODgyMDIzMzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BoQmM67bKjCVyaA1wETRPn6PE3y Kfnw3kqEJC48vlPpw9EscHyoXBMy1/UwEYisPKXQYOwWmDlalyt5MqJZsP4nnQFf HXPkEO6V3erRd1bxLYB4Q+/68aaygZ2jRbRMQG20pEl64A0aKZ41dR/X0q4f0ysh AhvCmU6zoQ+hA239snYNvG5QXN3nWQe+sFSf/Ftv0VJrhtAyYeMJXFMpsoFtlLj2 MJK+ONp718embkQ576tC/oLrzjREyUkuta0rbydiYz9FTNbcbOj4xGMC1v0SpLAd VPDV3FWE+uXaSDgAufL4mX/exxiKyqV56bnUgIKWeBct3DLOWfzYidjKQQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFP6lEB/guOwTa6MjcEojP8iCAjNUMB8GA1UdIwQY MBaAFJIZLo14VYH3KxhkQiS9jD+ootEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1Mzct MDA4NWEzNjVhMjVmLzEvX3FVUUgtQzQ3Qk5yb3lOd1NpTV95SUlDTTFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kOWIzOTctZTEwNS00YWM5LTg1MzctMDA4NWEzNjVhMjVm LzEva2hrdWpYaFZnZmNyR0dSQ0pMMk1QNmlpMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBGBAIAATBAAwQCBfyE AwQCLZl0MAwDBAWX7KADBAOX7LADBACX7LoDBAKX7LwDBAHCOxwwDAMEAsagpAME AcagqAMEAcawdDA3BAIAAjAxMBIDBwAqECIAAAEDBwAqECIAAAQwEgMHACoQIgAA CwMHASoQIgAADAMHACoQIgAADzANBgkqhkiG9w0BAQsFAAOCAQEAZWS7nJF80U3j ljZZKnGEaxeqmrF6X3NUP4OK7NkZw9ggy20aQ/twPXWMVpG6bxiic5J+upVkkK8J digefOEGwMPL62fVj6qRSYxepcLPGCU2m7UmjAM+QQnD0cAyIpaH5mYxFyFT0UHT mXY6v12STKk0/yI4N5qDqUFtR0xgAcMHen8arWa5PMrADqc1g4wqHYorilZVWP7G Y7/azkK02HSTZWaHF4pU7p4PCpE8rxrdRUL/2in4gwcVBmEziWoidX6AulkPtzfB e7dsjFasxxRL5s7hgXfDp/6c7K2rdxcBGKjYZHzgzp5/2qUqWQZRLGqPYCCVZ1Dt 1cPbO1IGwg== -----END CERTIFICATE-----Generated at Tue Dec 16 05:15:09 2025 by rpki-client