This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/sImzEp4lFJG-tYukqwubP0DC_z4.roa File: sImzEp4lFJG-tYukqwubP0DC_z4.roa (raw, json) Hash identifier: nNsx6Qkv/8EtE4Fa7yJwqGVVK5IX9slqzB/jAXZq0p4= Subject key identifier: B0:89:B3:12:9E:25:14:91:BE:B5:8B:A4:AB:0B:9B:3F:40:C2:FF:3E Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8 Certificate serial: 019B5469ABB22D88183B8A135B7DED662461 Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/sImzEp4lFJG-tYukqwubP0DC_z4.roa Signing time: Thu 25 Dec 2025 07:29:29 +0000 ROA not before: Thu 25 Dec 2025 07:29:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39855 IP address blocks: 168.199.1.0/24 maxlen: 24 168.199.2.0/23 maxlen: 24 168.199.5.0/24 maxlen: 24 168.199.6.0/23 maxlen: 24 168.199.8.0/24 maxlen: 24 168.199.9.0/24 maxlen: 24 168.199.10.0/23 maxlen: 24 168.199.13.0/24 maxlen: 24 168.199.14.0/23 maxlen: 24 168.199.17.0/24 maxlen: 24 168.199.22.0/23 maxlen: 24 168.199.24.0/24 maxlen: 24 168.199.25.0/24 maxlen: 24 168.199.26.0/24 maxlen: 24 168.199.27.0/24 maxlen: 24 168.199.28.0/24 maxlen: 24 168.199.29.0/24 maxlen: 24 168.199.30.0/24 maxlen: 24 168.199.31.0/24 maxlen: 24 168.199.32.0/24 maxlen: 24 168.199.33.0/24 maxlen: 24 168.199.34.0/24 maxlen: 24 168.199.35.0/24 maxlen: 24 168.199.36.0/24 maxlen: 24 168.199.37.0/24 maxlen: 24 168.199.38.0/24 maxlen: 24 168.199.39.0/24 maxlen: 24 168.199.40.0/24 maxlen: 24 168.199.41.0/24 maxlen: 24 168.199.42.0/24 maxlen: 24 168.199.43.0/24 maxlen: 24 168.199.44.0/24 maxlen: 24 168.199.45.0/24 maxlen: 24 168.199.46.0/24 maxlen: 24 168.199.47.0/24 maxlen: 24 168.199.48.0/23 maxlen: 24 168.199.51.0/24 maxlen: 24 168.199.52.0/23 maxlen: 24 168.199.55.0/24 maxlen: 24 168.199.56.0/23 maxlen: 24 168.199.59.0/24 maxlen: 24 168.199.60.0/23 maxlen: 24 168.199.63.0/24 maxlen: 24 168.199.96.0/24 maxlen: 24 168.199.97.0/24 maxlen: 24 168.199.98.0/24 maxlen: 24 168.199.99.0/24 maxlen: 24 168.199.100.0/24 maxlen: 24 168.199.101.0/24 maxlen: 24 168.199.102.0/24 maxlen: 24 168.199.103.0/24 maxlen: 24 168.199.104.0/24 maxlen: 24 168.199.105.0/24 maxlen: 24 168.199.106.0/24 maxlen: 24 168.199.107.0/24 maxlen: 24 168.199.108.0/24 maxlen: 24 168.199.109.0/24 maxlen: 24 168.199.110.0/24 maxlen: 24 168.199.111.0/24 maxlen: 24 168.199.112.0/23 maxlen: 24 168.199.114.0/24 maxlen: 24 168.199.115.0/24 maxlen: 24 168.199.116.0/23 maxlen: 24 168.199.119.0/24 maxlen: 24 168.199.120.0/23 maxlen: 24 168.199.123.0/24 maxlen: 24 168.199.124.0/23 maxlen: 24 168.199.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:69:ab:b2:2d:88:18:3b:8a:13:5b:7d:ed:66:24:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8 Validity Not Before: Dec 25 07:29:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b089b3129e251491beb58ba4ab0b9b3f40c2ff3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:d5:2a:0a:db:1d:34:35:98:e3:f8:c1:e9: df:6f:3c:5e:31:db:3c:19:f8:6f:6c:01:9b:c6:bc: 11:3d:a3:e3:25:6f:93:55:eb:f6:85:37:40:55:a6: 02:29:90:6e:75:b6:f7:df:45:ad:88:df:6f:0f:18: 3f:c5:c3:22:d2:1c:2e:1b:16:9b:ec:22:a6:66:8e: fd:12:de:94:45:4b:7f:b2:bf:96:fa:c4:58:57:b7: 73:8d:77:bc:55:af:6a:c9:7f:f1:4d:2d:3f:5e:05: 7f:ab:00:94:30:cf:f4:8e:2d:43:b0:1a:8d:3a:99: 6d:93:9c:e7:50:3d:42:af:8c:62:23:56:00:4e:db: 12:23:f9:ee:04:0b:3c:c5:ab:1a:01:6a:d4:a1:41: f6:98:09:38:18:33:76:b1:93:bd:e3:b1:61:f1:9d: 49:12:7e:0a:59:7b:aa:0b:25:04:f4:5d:78:f6:3b: f9:4d:ef:28:a5:26:52:ad:79:0c:7e:8e:a4:a7:6f: ef:3b:be:69:81:c8:96:48:a8:96:ae:f8:ce:c4:51: a8:3a:3e:8c:1c:e9:d3:2f:49:be:62:65:b0:b0:08: 82:96:07:bb:1c:6e:13:83:84:df:ab:55:83:68:65: 43:61:29:c0:1a:64:06:b5:e7:b5:d8:1d:57:97:23: 3c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:89:B3:12:9E:25:14:91:BE:B5:8B:A4:AB:0B:9B:3F:40:C2:FF:3E X509v3 Authority Key Identifier: keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/sImzEp4lFJG-tYukqwubP0DC_z4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.199.1.0-168.199.3.255 168.199.5.0-168.199.11.255 168.199.13.0-168.199.15.255 168.199.17.0/24 168.199.22.0-168.199.49.255 168.199.51.0-168.199.53.255 168.199.55.0-168.199.57.255 168.199.59.0-168.199.61.255 168.199.63.0/24 168.199.96.0-168.199.117.255 168.199.119.0-168.199.121.255 168.199.123.0-168.199.125.255 168.199.127.0/24 Signature Algorithm: sha256WithRSAEncryption 49:73:6a:0f:9b:c3:d1:ac:df:0c:cf:e2:b1:64:fd:9c:db:bf: 37:a3:0d:57:5f:4f:92:c5:8e:e8:b3:7e:69:33:6e:99:c5:ce: dc:51:84:42:20:a0:ed:dd:ef:37:e1:4b:ad:2a:14:0f:34:f9: a6:66:66:f7:c5:ac:12:73:8f:6f:8b:fa:0e:0e:64:eb:6f:e6: 87:3d:cf:60:d4:0c:bf:96:f8:b2:14:30:5f:02:dd:7c:42:ec: 5b:bc:59:9c:f0:6e:cd:8a:2b:04:2a:d2:d1:d9:2a:e4:9b:d5: 81:65:ca:78:89:d9:12:af:96:d1:b3:46:53:60:26:32:48:74: b5:b5:59:17:6e:46:83:8f:9f:bd:66:7b:8d:0d:ec:04:a9:96: e6:1a:f0:03:82:ba:e6:8e:0d:ee:69:33:6f:a8:ed:98:b2:e6: 8f:60:52:fb:31:e0:71:4b:8f:d9:c4:63:53:87:5a:62:2a:ef: 8a:e4:89:39:cc:fe:38:56:eb:57:86:32:7d:bd:bd:ba:a4:de: d4:7c:e4:9e:3e:c5:b2:b7:bb:fa:b8:a4:1d:5e:10:e8:12:79: 25:26:7e:23:58:37:62:99:c1:eb:0f:17:9e:9f:91:86:ac:3a: 14:84:25:65:fd:01:bb:f9:88:a0:3f:8a:c8:db:f6:64:33:ea: d8:d5:c2:a7 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZtUaauyLYgYO4oTW33tZiRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjYwNWI0ZDI3ZjEzOTY4ZTg3OTRlNmVmMDkxMjIzNzQ4 ODE3ZDgwHhcNMjUxMjI1MDcyOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDg5YjMxMjllMjUxNDkxYmViNThiYTRhYjBiOWIzZjQwYzJmZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEHVKgrbHTQ1mOP4wenfbzxeMds8 GfhvbAGbxrwRPaPjJW+TVev2hTdAVaYCKZBudbb330WtiN9vDxg/xcMi0hwuGxab 7CKmZo79Et6URUt/sr+W+sRYV7dzjXe8Va9qyX/xTS0/XgV/qwCUMM/0ji1DsBqN Opltk5znUD1Cr4xiI1YATtsSI/nuBAs8xasaAWrUoUH2mAk4GDN2sZO947Fh8Z1J En4KWXuqCyUE9F149jv5Te8opSZSrXkMfo6kp2/vO75pgciWSKiWrvjOxFGoOj6M HOnTL0m+YmWwsAiClge7HG4Tg4Tfq1WDaGVDYSnAGmQGtee12B1XlyM8DQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFLCJsxKeJRSRvrWLpKsLmz9Awv8+MB8GA1UdIwQY MBaAFIJmBbTSfxOWjoeU5u8JEiN0iBfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEt MmQxOTE4YmExYzBlLzEvc0ltekVwNGxGSkctdFl1a3F3dWJQMERDX3o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9mYmNjMzItMzNjOC00MWZmLTg5ZmEtMmQxOTE4YmExYzBl LzEvZ21ZRnROSl9FNWFPaDVUbTd3a1NJM1NJRjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4wDAME AKjHAQMEAqjHADAMAwQAqMcFAwQCqMcIMAwDBACoxw0DBASoxwADBACoxxEwDAME AajHFgMEAajHMDAMAwQAqMczAwQBqMc0MAwDBACoxzcDBAGoxzgwDAMEAKjHOwME AajHPAMEAKjHPzAMAwQFqMdgAwQBqMd0MAwDBACox3cDBAGox3gwDAMEAKjHewME AajHfAMEAKjHfzANBgkqhkiG9w0BAQsFAAOCAQEASXNqD5vD0azfDM/isWT9nNu/ N6MNV19PksWO6LN+aTNumcXO3FGEQiCg7d3vN+FLrSoUDzT5pmZm98WsEnOPb4v6 Dg5k62/mhz3PYNQMv5b4shQwXwLdfELsW7xZnPBuzYorBCrS0dkq5JvVgWXKeInZ Eq+W0bNGU2AmMkh0tbVZF25Gg4+fvWZ7jQ3sBKmW5hrwA4K65o4N7mkzb6jtmLLm j2BS+zHgcUuP2cRjU4daYirviuSJOcz+OFbrV4Yyfb29uqTe1Hzknj7Fsre7+rik HV4Q6BJ5JSZ+I1g3YpnB6w8Xnp+Rhqw6FIQlZf0Bu/mIoD+KyNv2ZDPq2NXCpw== -----END CERTIFICATE-----Generated at Fri Dec 26 05:58:34 2025 by rpki-client