This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-HTaKwCRuomW6Xa05CVtSgmQbBQ.roa File: 1-HTaKwCRuomW6Xa05CVtSgmQbBQ.roa (raw, json) Hash identifier: 0Fg1SnhPxumbnaPnUdg90VE/CF4rTQi6yyEvYrJAWb8= Subject key identifier: F8:74:DA:2B:00:91:BA:89:96:E9:76:B4:E4:25:6D:4A:09:90:6C:14 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 019B074A520AB25B78FB9579C7B0A52B9626 Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-HTaKwCRuomW6Xa05CVtSgmQbBQ.roa Signing time: Wed 10 Dec 2025 08:04:29 +0000 ROA not before: Wed 10 Dec 2025 08:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8926 IP address blocks: 5.56.64.0/18 maxlen: 24 37.75.16.0/20 maxlen: 24 37.75.64.0/18 maxlen: 24 46.55.0.0/17 maxlen: 24 85.204.176.0/21 maxlen: 24 86.104.196.0/22 maxlen: 24 86.105.56.0/21 maxlen: 24 86.105.80.0/21 maxlen: 21 86.105.172.0/22 maxlen: 22 86.105.208.0/22 maxlen: 24 86.106.144.0/21 maxlen: 21 86.106.208.0/20 maxlen: 24 86.106.224.0/19 maxlen: 24 86.107.64.0/22 maxlen: 22 86.107.160.0/21 maxlen: 24 89.32.56.0/21 maxlen: 21 89.32.136.0/21 maxlen: 21 89.32.172.0/22 maxlen: 22 89.32.252.0/22 maxlen: 22 89.34.64.0/22 maxlen: 22 89.34.68.0/22 maxlen: 22 89.34.192.0/21 maxlen: 21 89.34.204.0/22 maxlen: 22 89.34.232.0/22 maxlen: 22 89.35.8.0/21 maxlen: 24 89.35.40.0/21 maxlen: 21 89.35.84.0/22 maxlen: 22 89.35.200.0/22 maxlen: 22 89.36.156.0/22 maxlen: 22 89.37.44.0/22 maxlen: 22 89.37.104.0/24 maxlen: 24 89.38.32.0/22 maxlen: 22 89.38.64.0/22 maxlen: 22 89.38.76.0/22 maxlen: 22 89.39.76.0/22 maxlen: 22 89.39.84.0/22 maxlen: 22 89.39.96.0/21 maxlen: 24 89.39.112.0/21 maxlen: 24 89.40.228.0/22 maxlen: 22 89.41.64.0/18 maxlen: 24 89.42.64.0/22 maxlen: 22 89.42.72.0/21 maxlen: 21 89.42.104.0/22 maxlen: 22 89.42.128.0/22 maxlen: 22 89.42.180.0/22 maxlen: 22 89.42.224.0/22 maxlen: 22 89.43.128.0/22 maxlen: 22 89.43.168.0/22 maxlen: 22 89.44.152.0/22 maxlen: 22 89.45.40.0/22 maxlen: 22 89.46.164.0/22 maxlen: 22 92.114.128.0/17 maxlen: 24 92.115.0.0/16 maxlen: 24 93.113.64.0/21 maxlen: 24 93.113.80.0/21 maxlen: 21 93.113.92.0/22 maxlen: 22 93.113.244.0/22 maxlen: 22 93.115.136.0/21 maxlen: 21 93.116.0.0/16 maxlen: 24 93.117.48.0/20 maxlen: 24 93.117.68.0/22 maxlen: 22 93.117.72.0/21 maxlen: 21 93.117.128.0/21 maxlen: 24 93.117.140.0/22 maxlen: 22 93.117.144.0/21 maxlen: 21 93.117.156.0/22 maxlen: 22 93.117.160.0/21 maxlen: 21 93.117.168.0/22 maxlen: 22 93.118.176.0/22 maxlen: 22 93.118.188.0/22 maxlen: 22 93.119.96.0/21 maxlen: 21 93.119.108.0/22 maxlen: 22 93.119.128.0/21 maxlen: 21 93.119.140.0/22 maxlen: 22 93.119.144.0/21 maxlen: 24 93.119.160.0/21 maxlen: 21 93.119.196.0/22 maxlen: 22 93.119.200.0/21 maxlen: 24 93.119.228.0/22 maxlen: 22 93.119.232.0/21 maxlen: 24 94.176.64.0/20 maxlen: 24 109.185.0.0/16 maxlen: 24 178.132.112.0/20 maxlen: 24 178.132.128.0/18 maxlen: 24 185.28.104.0/22 maxlen: 24 188.208.96.0/22 maxlen: 22 188.208.104.0/22 maxlen: 22 188.208.112.0/22 maxlen: 22 188.208.120.0/22 maxlen: 24 188.208.126.0/24 maxlen: 24 188.208.127.0/24 maxlen: 24 188.208.192.0/22 maxlen: 22 188.208.204.0/22 maxlen: 22 188.209.216.0/21 maxlen: 24 188.210.240.0/21 maxlen: 21 188.210.248.0/22 maxlen: 22 188.212.0.0/22 maxlen: 22 188.212.8.0/21 maxlen: 21 188.212.24.0/21 maxlen: 21 188.212.40.0/21 maxlen: 21 188.213.36.0/22 maxlen: 22 188.213.52.0/22 maxlen: 22 188.213.220.0/22 maxlen: 22 188.213.236.0/22 maxlen: 22 188.213.244.0/22 maxlen: 22 188.214.60.0/22 maxlen: 22 188.214.136.0/22 maxlen: 24 188.214.146.0/24 maxlen: 24 188.214.147.0/24 maxlen: 24 188.214.200.0/21 maxlen: 21 188.215.252.0/22 maxlen: 22 188.237.0.0/16 maxlen: 24 212.0.192.0/19 maxlen: 32 2a02:a30::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:4a:52:0a:b2:5b:78:fb:95:79:c7:b0:a5:2b:96:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Dec 10 08:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f874da2b0091ba8996e976b4e4256d4a09906c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:8a:30:88:50:e7:22:96:cc:d0:f3:05:2b: c0:0e:5a:bb:57:b7:2b:ef:0b:87:22:dd:ee:3a:86: 24:cd:96:e0:9e:c3:47:8b:c4:f6:14:de:98:23:ba: 86:7c:c7:fd:6c:d3:4b:49:32:60:54:36:df:6d:4f: f3:58:d5:44:97:2f:c2:26:3e:fd:59:7c:7b:ac:29: 48:e4:11:56:a4:d5:f4:ee:79:ef:94:7c:90:0b:de: b1:51:52:ee:b2:92:ee:27:1b:f5:62:c9:7e:25:ff: 8f:29:e9:d4:a5:0c:e8:b8:78:c9:e7:3f:ae:42:8b: 58:31:18:7c:70:73:2e:6b:d6:88:d9:70:52:9c:6e: 21:75:14:48:de:2e:78:91:29:a2:d5:1d:3a:44:c2: bd:63:5d:28:ed:8e:06:ba:5e:ea:60:b1:8c:a0:94: bc:dd:df:ac:1d:94:4d:a9:a9:32:3a:ad:78:51:f3: e9:bf:07:0d:56:65:32:ce:4d:cd:81:71:f3:56:a4: a7:15:bf:b3:47:fc:ec:63:30:e3:dd:53:a0:bd:9b: fd:62:8b:bd:75:0a:01:f9:49:82:a7:a2:f6:aa:2f: 9f:79:f9:12:9e:b4:58:a3:c5:fe:f7:09:94:92:dd: dd:e1:17:99:35:4c:68:dc:8d:72:9d:a2:35:d4:ed: c9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:74:DA:2B:00:91:BA:89:96:E9:76:B4:E4:25:6D:4A:09:90:6C:14 X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-HTaKwCRuomW6Xa05CVtSgmQbBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.64.0/18 37.75.16.0/20 37.75.64.0/18 46.55.0.0/17 85.204.176.0/21 86.104.196.0/22 86.105.56.0/21 86.105.80.0/21 86.105.172.0/22 86.105.208.0/22 86.106.144.0/21 86.106.208.0-86.106.255.255 86.107.64.0/22 86.107.160.0/21 89.32.56.0/21 89.32.136.0/21 89.32.172.0/22 89.32.252.0/22 89.34.64.0/21 89.34.192.0/21 89.34.204.0/22 89.34.232.0/22 89.35.8.0/21 89.35.40.0/21 89.35.84.0/22 89.35.200.0/22 89.36.156.0/22 89.37.44.0/22 89.37.104.0/24 89.38.32.0/22 89.38.64.0/22 89.38.76.0/22 89.39.76.0/22 89.39.84.0/22 89.39.96.0/21 89.39.112.0/21 89.40.228.0/22 89.41.64.0/18 89.42.64.0/22 89.42.72.0/21 89.42.104.0/22 89.42.128.0/22 89.42.180.0/22 89.42.224.0/22 89.43.128.0/22 89.43.168.0/22 89.44.152.0/22 89.45.40.0/22 89.46.164.0/22 92.114.128.0-92.115.255.255 93.113.64.0/21 93.113.80.0/21 93.113.92.0/22 93.113.244.0/22 93.115.136.0/21 93.116.0.0/16 93.117.48.0/20 93.117.68.0-93.117.79.255 93.117.128.0/21 93.117.140.0-93.117.151.255 93.117.156.0-93.117.171.255 93.118.176.0/22 93.118.188.0/22 93.119.96.0/21 93.119.108.0/22 93.119.128.0/21 93.119.140.0-93.119.151.255 93.119.160.0/21 93.119.196.0-93.119.207.255 93.119.228.0-93.119.239.255 94.176.64.0/20 109.185.0.0/16 178.132.112.0-178.132.191.255 185.28.104.0/22 188.208.96.0/22 188.208.104.0/22 188.208.112.0/22 188.208.120.0/22 188.208.126.0/23 188.208.192.0/22 188.208.204.0/22 188.209.216.0/21 188.210.240.0-188.210.251.255 188.212.0.0/22 188.212.8.0/21 188.212.24.0/21 188.212.40.0/21 188.213.36.0/22 188.213.52.0/22 188.213.220.0/22 188.213.236.0/22 188.213.244.0/22 188.214.60.0/22 188.214.136.0/22 188.214.146.0/23 188.214.200.0/21 188.215.252.0/22 188.237.0.0/16 212.0.192.0/19 IPv6: 2a02:a30::/29 Signature Algorithm: sha256WithRSAEncryption 28:7a:c3:3e:db:36:f9:0e:9d:10:30:6a:e1:32:8e:78:ab:c8: 08:6b:80:52:36:40:62:64:26:a1:a1:e2:cf:c4:dc:c7:27:f9: bf:cb:a5:bd:b2:2e:1f:d4:a9:3f:d0:ac:8a:ab:3b:91:4a:8a: f3:9e:b8:36:71:00:2e:e4:85:e6:a1:49:69:9d:71:04:d7:05: 9b:23:30:8d:8b:18:0c:8c:ef:1d:51:e2:2f:ee:1e:9f:0e:29: 28:4a:c7:e3:2f:6b:e8:1a:1e:d7:33:a1:0b:63:ed:f6:86:73: b7:e5:e8:be:06:b6:ad:dc:ae:cf:a2:b6:51:05:e1:43:5b:d7: ac:bd:47:c2:ce:4b:0b:2e:e6:8a:89:e1:99:76:31:a9:8f:33: d5:8a:84:ca:c0:a4:cd:65:44:70:f4:0a:ab:4c:c6:35:83:fa: 6b:5d:b2:4b:ae:fd:d0:9c:7b:41:57:51:d1:33:fe:9b:5c:86: 86:77:82:c7:e2:25:c5:c7:44:6c:0b:1d:c9:db:0f:0c:5a:d5: 62:b1:72:43:3e:12:31:a8:48:4d:60:23:3b:ed:b7:79:fc:47: bf:bd:2e:17:14:75:04:8b:0f:ad:8f:bd:16:9d:eb:bb:af:b0: 3f:69:c9:32:e1:c8:19:13:fa:b7:f3:fc:ae:a0:53:34:49:75: d0:d0:e0:eb -----BEGIN CERTIFICATE----- MIIHrjCCBpagAwIBAgISAZsHSlIKslt4+5V5x7ClK5YmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjUxMjEwMDgwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODc0ZGEyYjAwOTFiYTg5OTZlOTc2YjRlNDI1NmQ0YTA5OTA2YzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06mKMIhQ5yKWzNDzBSvADlq7V7cr 7wuHIt3uOoYkzZbgnsNHi8T2FN6YI7qGfMf9bNNLSTJgVDbfbU/zWNVEly/CJj79 WXx7rClI5BFWpNX07nnvlHyQC96xUVLuspLuJxv1Ysl+Jf+PKenUpQzouHjJ5z+u QotYMRh8cHMua9aI2XBSnG4hdRRI3i54kSmi1R06RMK9Y10o7Y4Gul7qYLGMoJS8 3d+sHZRNqakyOq14UfPpvwcNVmUyzk3NgXHzVqSnFb+zR/zsYzDj3VOgvZv9You9 dQoB+UmCp6L2qi+fefkSnrRYo8X+9wmUkt3d4ReZNUxo3I1ynaI11O3JYQIDAQAB o4IEujCCBLYwHQYDVR0OBBYEFPh02isAkbqJlul2tOQlbUoJkGwUMB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvMS1IVGFLd0NSdW9tVzZYYTA1Q1Z0U2dtUWJCUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTEvYjQ1ZDc5LWE0ZDctNDQ2MC1iZmU3LWJiZWEyOTE4ZTEw Mi8xL29naU9CdFZUel9LVDBuZjAxMnc2Y1F2WXN2Yy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAs0GCCsGAQUFBwEHAQH/BIICvDCCArgwggKlBAIAATCC Ap0DBAYFOEADBAQlSxADBAYlS0ADBAcuNwADBANVzLADBAJWaMQDBANWaTgDBANW aVADBAJWaawDBAJWadADBANWapAwCwMEBFZq0AMDAFZqAwQCVmtAAwQDVmugAwQD WSA4AwQDWSCIAwQCWSCsAwQCWSD8AwQDWSJAAwQDWSLAAwQCWSLMAwQCWSLoAwQD WSMIAwQDWSMoAwQCWSNUAwQCWSPIAwQCWSScAwQCWSUsAwQAWSVoAwQCWSYgAwQC WSZAAwQCWSZMAwQCWSdMAwQCWSdUAwQDWSdgAwQDWSdwAwQCWSjkAwQGWSlAAwQC WSpAAwQDWSpIAwQCWSpoAwQCWSqAAwQCWSq0AwQCWSrgAwQCWSuAAwQCWSuoAwQC WSyYAwQCWS0oAwQCWS6kMAsDBAdccoADAwJccAMEA11xQAMEA11xUAMEAl1xXAME Al1x9AMEA11ziAMDAF10AwQEXXUwMAwDBAJddUQDBARddUADBANddYAwDAMEAl11 jAMEA111kDAMAwQCXXWcAwQCXXWoAwQCXXawAwQCXXa8AwQDXXdgAwQCXXdsAwQD XXeAMAwDBAJdd4wDBANdd5ADBANdd6AwDAMEAl13xAMEBF13wDAMAwQCXXfkAwQE XXfgAwQEXrBAAwMAbbkwDAMEBLKEcAMEBrKEgAMEArkcaAMEArzQYAMEArzQaAME ArzQcAMEArzQeAMEAbzQfgMEArzQwAMEArzQzAMEA7zR2DAMAwQEvNLwAwQCvNL4 AwQCvNQAAwQDvNQIAwQDvNQYAwQDvNQoAwQCvNUkAwQCvNU0AwQCvNXcAwQCvNXs AwQCvNX0AwQCvNY8AwQCvNaIAwQBvNaSAwQDvNbIAwQCvNf8AwMAvO0DBAXUAMAw DQQCAAIwBwMFAyoCCjAwDQYJKoZIhvcNAQELBQADggEBACh6wz7bNvkOnRAwauEy jniryAhrgFI2QGJkJqGh4s/E3Mcn+b/Lpb2yLh/UqT/QrIqrO5FKivOeuDZxAC7k heahSWmdcQTXBZsjMI2LGAyM7x1R4i/uHp8OKShKx+Mva+gaHtczoQtj7faGc7fl 6L4Gtq3crs+itlEF4UNb16y9R8LOSwsu5oqJ4Zl2MamPM9WKhMrApM1lRHD0CqtM xjWD+mtdskuu/dCce0FXUdEz/ptchoZ3gsfiJcXHRGwLHcnbDwxa1WKxckM+EjGo SE1gIzvtt3n8R7+9LhcUdQSLD62PvRad67uvsD9pyTLhyBkT+rfz/K6gUzRJddDQ 4Os= -----END CERTIFICATE-----Generated at Wed Dec 10 10:53:26 2025 by rpki-client