This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/uWnBYjlDT-EHIr2cPRZc1mertTY.roa File: uWnBYjlDT-EHIr2cPRZc1mertTY.roa (raw, json) Hash identifier: ZGIgStgXIAihMerE9Ow0ch/sCGbCo1zrXLSrSykkugM= Subject key identifier: B9:69:C1:62:39:43:4F:E1:07:22:BD:9C:3D:16:5C:D6:67:AB:B5:36 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019ADE4CD4AC28D8DEEE016E180725AC916D Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/uWnBYjlDT-EHIr2cPRZc1mertTY.roa Signing time: Tue 02 Dec 2025 09:02:48 +0000 ROA not before: Tue 02 Dec 2025 09:02:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 5.157.132.0/22 maxlen: 22 5.157.136.0/24 maxlen: 24 5.157.139.0/24 maxlen: 24 5.157.152.0/21 maxlen: 21 5.157.160.0/22 maxlen: 22 5.157.168.0/22 maxlen: 24 5.157.172.0/22 maxlen: 24 5.157.192.0/22 maxlen: 22 5.157.196.0/22 maxlen: 22 5.157.200.0/21 maxlen: 21 5.157.208.0/21 maxlen: 21 5.157.216.0/22 maxlen: 24 5.157.220.0/22 maxlen: 24 5.157.228.0/22 maxlen: 22 5.157.232.0/21 maxlen: 21 5.157.248.0/21 maxlen: 21 37.35.48.0/22 maxlen: 22 37.35.52.0/24 maxlen: 24 62.216.72.0/22 maxlen: 22 62.216.72.0/24 maxlen: 24 62.216.73.0/24 maxlen: 24 62.216.74.0/24 maxlen: 24 62.216.75.0/24 maxlen: 24 62.216.80.0/22 maxlen: 22 62.216.80.0/24 maxlen: 24 62.216.81.0/24 maxlen: 24 62.216.82.0/24 maxlen: 24 62.216.83.0/24 maxlen: 24 62.216.89.0/24 maxlen: 24 62.216.90.0/24 maxlen: 24 62.216.92.0/24 maxlen: 24 62.216.93.0/24 maxlen: 24 62.216.94.0/24 maxlen: 24 62.216.95.0/24 maxlen: 24 91.225.14.0/24 maxlen: 24 91.235.123.0/24 maxlen: 24 146.66.214.0/24 maxlen: 24 178.157.68.0/22 maxlen: 22 178.157.76.0/24 maxlen: 24 178.157.94.0/24 maxlen: 24 178.157.100.0/24 maxlen: 24 178.157.101.0/24 maxlen: 24 178.157.108.0/24 maxlen: 24 178.157.112.0/21 maxlen: 21 178.157.120.0/22 maxlen: 22 185.76.60.0/24 maxlen: 24 185.76.62.0/24 maxlen: 24 188.74.128.0/24 maxlen: 24 188.74.144.0/22 maxlen: 22 188.74.148.0/22 maxlen: 22 188.74.155.0/24 maxlen: 24 188.74.160.0/24 maxlen: 24 188.74.163.0/24 maxlen: 24 188.74.164.0/24 maxlen: 24 188.74.171.0/24 maxlen: 24 188.74.180.0/24 maxlen: 24 188.74.184.0/22 maxlen: 22 188.74.192.0/21 maxlen: 21 188.74.200.0/21 maxlen: 21 188.74.212.0/22 maxlen: 22 188.74.216.0/21 maxlen: 21 188.74.224.0/21 maxlen: 21 188.74.232.0/21 maxlen: 21 188.74.248.0/21 maxlen: 21 188.119.128.0/20 maxlen: 24 188.119.168.0/21 maxlen: 21 188.119.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 03:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:4c:d4:ac:28:d8:de:ee:01:6e:18:07:25:ac:91:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Dec 2 09:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b969c16239434fe10722bd9c3d165cd667abb536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:cb:1c:c4:d1:ee:fd:35:b5:cb:9a:ac:77: 0f:39:fe:9d:5d:d2:fe:fa:80:d8:1f:45:d1:95:43: 0a:76:34:19:5c:18:61:38:26:85:1c:d8:1b:16:80: 52:1c:16:fb:82:9b:88:b6:85:7d:c9:7f:57:dc:29: db:e5:f8:d3:ac:b2:12:47:95:49:94:c9:c1:a0:e0: f4:e4:2e:88:ba:e4:de:e8:6d:1e:65:b1:5b:3b:90: c9:ef:d2:66:c5:22:25:ba:cc:3a:86:d5:d6:ae:0a: 1f:76:0b:1f:94:22:47:0e:e3:d6:bd:42:ed:bc:ec: bf:d1:30:6a:1b:35:98:14:1a:f4:f7:13:10:45:a2: 17:92:b2:37:bf:3b:b2:0d:75:be:6f:80:00:a6:05: fc:cf:64:6f:f3:0c:fb:fd:a2:8b:b2:83:6e:6f:39: aa:ff:1f:60:33:fb:ac:eb:55:54:7a:51:03:2f:7e: 88:9e:19:73:f8:a5:42:94:21:b7:d9:78:9b:21:d8: 01:15:e2:de:a3:96:64:6d:a3:6b:e0:10:5a:1a:38: 67:68:63:43:95:e8:71:cb:0b:26:1e:e0:c6:ba:53: 40:61:c0:e4:26:a9:aa:1c:85:53:32:2b:6f:4a:5a: 31:56:84:c1:e3:7c:86:fe:36:56:69:78:13:c5:e6: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:69:C1:62:39:43:4F:E1:07:22:BD:9C:3D:16:5C:D6:67:AB:B5:36 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/uWnBYjlDT-EHIr2cPRZc1mertTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.157.132.0-5.157.136.255 5.157.139.0/24 5.157.152.0-5.157.163.255 5.157.168.0/21 5.157.192.0/19 5.157.228.0-5.157.239.255 5.157.248.0/21 37.35.48.0-37.35.52.255 62.216.72.0/22 62.216.80.0/22 62.216.89.0-62.216.90.255 62.216.92.0/22 91.225.14.0/24 91.235.123.0/24 146.66.214.0/24 178.157.68.0/22 178.157.76.0/24 178.157.94.0/24 178.157.100.0/23 178.157.108.0/24 178.157.112.0-178.157.123.255 185.76.60.0/24 185.76.62.0/24 188.74.128.0/24 188.74.144.0/21 188.74.155.0/24 188.74.160.0/24 188.74.163.0-188.74.164.255 188.74.171.0/24 188.74.180.0/24 188.74.184.0/22 188.74.192.0/20 188.74.212.0-188.74.239.255 188.74.248.0/21 188.119.128.0/20 188.119.168.0/21 188.119.184.0/22 Signature Algorithm: sha256WithRSAEncryption 41:96:77:3f:10:a2:4b:c3:f8:b4:82:d2:fa:4f:99:b7:25:26: d6:82:4a:60:bc:ff:df:62:0b:48:c3:e2:e8:8e:00:46:8f:8e: 00:4c:8f:c5:af:7e:cf:6b:e8:76:3a:4a:a6:72:d9:c7:b0:57: 1e:a1:8e:e5:9a:d3:0b:11:08:b5:2c:f6:24:62:9b:76:9d:bb: 00:b3:2b:92:e0:97:94:94:b6:92:1c:2c:f1:cb:b2:aa:42:c7: 10:f5:0b:64:ee:79:8e:97:52:14:22:3b:1a:51:c6:88:bc:9d: 67:cb:e3:7c:db:18:2c:d0:17:cf:1d:da:f9:8c:32:3e:f6:6c: 4f:d6:90:cb:db:3d:33:a7:22:ee:45:3a:4e:47:39:9a:10:a0: f1:b2:cf:d0:25:02:19:7c:cd:7f:1b:5b:e5:b2:bd:02:f3:45: b7:fb:1c:df:49:11:a6:fe:86:7c:da:90:7c:20:1e:a1:58:c2: e2:f7:0c:9c:92:9e:e3:78:58:d5:20:76:ab:e3:71:6b:4d:ec: 00:02:25:fb:32:24:03:47:36:97:ae:16:3f:91:c1:9e:44:32: c5:ee:87:cc:78:f5:46:a3:01:42:39:0f:ca:d4:81:1e:f2:6c: 0f:31:a9:02:12:2a:99:15:d8:02:e3:81:04:46:29:27:7c:57: b5:e1:ef:a1 -----BEGIN CERTIFICATE----- MIIGHzCCBQegAwIBAgISAZreTNSsKNje7gFuGAclrJFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUxMjAyMDkwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTY5YzE2MjM5NDM0ZmUxMDcyMmJkOWMzZDE2NWNkNjY3YWJiNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXzLHMTR7v01tcuarHcPOf6dXdL+ +oDYH0XRlUMKdjQZXBhhOCaFHNgbFoBSHBb7gpuItoV9yX9X3Cnb5fjTrLISR5VJ lMnBoOD05C6IuuTe6G0eZbFbO5DJ79JmxSIlusw6htXWrgofdgsflCJHDuPWvULt vOy/0TBqGzWYFBr09xMQRaIXkrI3vzuyDXW+b4AApgX8z2Rv8wz7/aKLsoNubzmq /x9gM/us61VUelEDL36Inhlz+KVClCG32XibIdgBFeLeo5ZkbaNr4BBaGjhnaGND lehxywsmHuDGulNAYcDkJqmqHIVTMitvSloxVoTB43yG/jZWaXgTxeZ8NQIDAQAB o4IDKzCCAycwHQYDVR0OBBYEFLlpwWI5Q0/hByK9nD0WXNZnq7U2MB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvdVduQllqbERULUVISXIyY1BSWmMxbWVydFRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBPwYIKwYBBQUHAQcBAf8EggEuMIIBKjCCASYEAgABMIIB HjAMAwQCBZ2EAwQABZ2IAwQABZ2LMAwDBAMFnZgDBAIFnaADBAMFnagDBAUFncAw DAMEAgWd5AMEBAWd4AMEAwWd+DAMAwQEJSMwAwQAJSM0AwQCPthIAwQCPthQMAwD BAA+2FkDBAA+2FoDBAI+2FwDBABb4Q4DBABb63sDBACSQtYDBAKynUQDBACynUwD BACynV4DBAGynWQDBACynWwwDAMEBLKdcAMEArKdeAMEALlMPAMEALlMPgMEALxK gAMEA7xKkAMEALxKmwMEALxKoDAMAwQAvEqjAwQAvEqkAwQAvEqrAwQAvEq0AwQC vEq4AwQEvErAMAwDBAK8StQDBAS8SuADBAO8SvgDBAS8d4ADBAO8d6gDBAK8d7gw DQYJKoZIhvcNAQELBQADggEBAEGWdz8QokvD+LSC0vpPmbclJtaCSmC8/99iC0jD 4uiOAEaPjgBMj8Wvfs9r6HY6SqZy2cewVx6hjuWa0wsRCLUs9iRim3aduwCzK5Lg l5SUtpIcLPHLsqpCxxD1C2TueY6XUhQiOxpRxoi8nWfL43zbGCzQF88d2vmMMj72 bE/WkMvbPTOnIu5FOk5HOZoQoPGyz9AlAhl8zX8bW+WyvQLzRbf7HN9JEab+hnza kHwgHqFYwuL3DJySnuN4WNUgdqvjcWtN7AACJfsyJANHNpeuFj+RwZ5EMsXuh8x4 9UajAUI5D8rUgR7ybA8xqQISKpkV2ALjgQRGKSd8V7Xh76E= -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:29 2025 by rpki-client