This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/WquoT-r_RWv_gBj5l1ySOeEj0wk.roa File: WquoT-r_RWv_gBj5l1ySOeEj0wk.roa (raw, json) Hash identifier: yof/v5Gz24OYwDnpZObMoIv5X1k8HKq3wORHbrgtFGY= Subject key identifier: 5A:AB:A8:4F:EA:FF:45:6B:FF:80:18:F9:97:5C:92:39:E1:23:D3:09 Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 019B07D0E654DE138C511C4060C981E774AD Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/WquoT-r_RWv_gBj5l1ySOeEj0wk.roa Signing time: Wed 10 Dec 2025 10:31:29 +0000 ROA not before: Wed 10 Dec 2025 10:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197540 IP address blocks: 2.56.96.0/22 maxlen: 22 5.45.96.0/20 maxlen: 32 5.181.48.0/22 maxlen: 22 5.252.224.0/22 maxlen: 22 37.120.160.0/19 maxlen: 32 37.120.160.0/20 maxlen: 22 37.120.176.0/22 maxlen: 22 37.120.182.0/23 maxlen: 24 37.120.184.0/21 maxlen: 22 37.221.192.0/21 maxlen: 32 45.9.60.0/22 maxlen: 22 45.83.104.0/22 maxlen: 22 45.90.4.0/22 maxlen: 22 45.129.180.0/22 maxlen: 22 45.132.244.0/22 maxlen: 22 45.136.28.0/22 maxlen: 22 45.142.176.0/22 maxlen: 22 45.157.176.0/22 maxlen: 22 46.38.224.0/20 maxlen: 32 46.38.240.0/21 maxlen: 32 46.38.248.0/22 maxlen: 32 46.38.252.0/22 maxlen: 32 46.232.248.0/22 maxlen: 22 81.16.16.0/22 maxlen: 22 85.209.48.0/22 maxlen: 22 85.235.64.0/22 maxlen: 22 89.58.0.0/22 maxlen: 22 89.58.4.0/22 maxlen: 22 89.58.8.0/22 maxlen: 22 89.58.12.0/22 maxlen: 22 89.58.16.0/21 maxlen: 21 89.58.20.0/24 maxlen: 24 89.58.24.0/22 maxlen: 22 89.58.28.0/22 maxlen: 22 89.58.32.0/22 maxlen: 22 89.58.36.0/22 maxlen: 22 89.58.40.0/22 maxlen: 22 89.58.44.0/22 maxlen: 22 89.58.48.0/22 maxlen: 22 89.58.52.0/22 maxlen: 22 89.58.56.0/22 maxlen: 22 89.58.60.0/22 maxlen: 22 91.132.144.0/22 maxlen: 22 91.204.44.0/22 maxlen: 24 92.60.36.0/22 maxlen: 22 93.177.64.0/22 maxlen: 22 152.89.104.0/22 maxlen: 22 159.195.1.0/24 maxlen: 24 159.195.4.0/22 maxlen: 22 159.195.8.0/22 maxlen: 22 159.195.20.0/22 maxlen: 22 159.195.24.0/22 maxlen: 22 159.195.28.0/22 maxlen: 22 159.195.32.0/22 maxlen: 22 159.195.36.0/22 maxlen: 22 159.195.40.0/22 maxlen: 22 159.195.44.0/22 maxlen: 22 159.195.48.0/22 maxlen: 22 159.195.52.0/22 maxlen: 22 159.195.56.0/22 maxlen: 22 159.195.60.0/22 maxlen: 22 159.195.64.0/22 maxlen: 22 159.195.68.0/22 maxlen: 22 159.195.72.0/22 maxlen: 22 159.195.76.0/22 maxlen: 22 159.195.80.0/22 maxlen: 22 159.195.84.0/22 maxlen: 22 159.195.96.0/22 maxlen: 22 159.195.100.0/22 maxlen: 22 185.16.60.0/22 maxlen: 32 185.162.248.0/22 maxlen: 32 185.163.116.0/22 maxlen: 22 185.170.112.0/22 maxlen: 32 185.183.156.0/22 maxlen: 32 185.194.140.0/22 maxlen: 22 185.207.104.0/22 maxlen: 32 185.228.136.0/22 maxlen: 32 185.233.104.0/22 maxlen: 32 185.243.8.0/22 maxlen: 32 185.244.192.0/22 maxlen: 32 188.68.32.0/19 maxlen: 32 192.145.44.0/22 maxlen: 22 193.30.120.0/22 maxlen: 22 193.31.24.0/22 maxlen: 22 194.13.80.0/22 maxlen: 22 194.55.12.0/22 maxlen: 22 194.59.204.0/22 maxlen: 22 195.128.100.0/22 maxlen: 22 213.109.160.0/22 maxlen: 22 2a03:4000::/32 maxlen: 48 2a03:4000:63:1000::/52 maxlen: 52 2a03:4001::/32 maxlen: 48 2a0a:4cc0::/40 maxlen: 40 2a0a:4cc0::/43 maxlen: 43 2a0a:4cc0:40::/43 maxlen: 43 2a0a:4cc0:40:2000::/56 maxlen: 56 2a0a:4cc0:80::/43 maxlen: 43 2a0a:4cc0:c0::/43 maxlen: 43 2a0a:4cc0:c1:6000::/52 maxlen: 52 2a0a:4cc0:c1:b000::/52 maxlen: 52 2a0a:4cc0:c1:d000::/52 maxlen: 52 2a0a:4cc0:c1:e000::/52 maxlen: 52 2a0a:4cc0:c1:f000::/52 maxlen: 52 2a0a:4cc0:c2:1000::/52 maxlen: 52 2a0a:4cc0:c2:2000::/52 maxlen: 52 2a0a:4cc0:c2:3000::/52 maxlen: 52 2a0a:4cc0:c2:4000::/52 maxlen: 52 2a0a:4cc0:c2:5000::/52 maxlen: 52 2a0a:4cc0:fe::/48 maxlen: 48 2a0a:4cc0:ff::/48 maxlen: 48 2a0a:4cc0:ff:1000::/52 maxlen: 52 2a0a:4cc0:100::/48 maxlen: 48 2a0a:4cc0:104::/48 maxlen: 48 2a0a:4cc0:104::/52 maxlen: 52 2a0a:4cc0:104:1000::/52 maxlen: 52 2a0a:4cc0:2000:4000::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:d0:e6:54:de:13:8c:51:1c:40:60:c9:81:e7:74:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Dec 10 10:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5aaba84feaff456bff8018f9975c9239e123d309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:79:fd:0d:cb:b9:08:ae:5b:a6:e6:06:93:7e: 1c:f1:7c:fb:dd:47:c0:82:73:69:ea:38:f3:24:9b: d8:ab:53:5c:81:49:a4:1e:1b:3f:e5:b9:59:7e:60: ab:01:2e:00:c8:db:e7:33:14:2c:9f:4d:4a:35:e7: 5a:6e:c6:04:96:26:1a:e4:79:ca:fa:f7:7a:45:22: 9c:cc:3c:7e:7c:d2:19:52:d5:77:61:e9:14:db:9f: bb:24:f5:e1:13:e4:c7:6d:ea:cc:79:dd:39:9d:b2: eb:23:3f:76:1b:b1:8f:88:36:eb:44:b0:27:fa:ba: 1d:3c:ac:60:b7:cf:b7:ec:26:f1:ea:07:2d:04:44: 93:d1:ef:b3:f9:e9:f9:e3:45:10:af:2a:7c:01:93: b8:db:07:b6:a2:8f:a8:6a:40:2a:05:e6:f8:90:fe: 1c:f5:f8:d0:41:7c:00:db:02:4a:06:07:a6:a1:28: 38:30:bd:66:2a:be:ea:44:39:a4:b2:d0:dc:0a:f0: 94:59:35:13:dc:43:15:2c:12:db:a8:c7:70:72:50: e9:c7:50:fa:9d:84:6e:24:0c:63:73:b9:bf:55:65: 5b:3f:db:18:95:6b:c2:1b:fa:0a:6a:5f:0a:8b:d3: b7:08:4c:57:3f:35:ad:05:31:60:2d:84:f7:3e:c6: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AB:A8:4F:EA:FF:45:6B:FF:80:18:F9:97:5C:92:39:E1:23:D3:09 X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/WquoT-r_RWv_gBj5l1ySOeEj0wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.96.0/22 5.45.96.0/20 5.181.48.0/22 5.252.224.0/22 37.120.160.0/19 37.221.192.0/21 45.9.60.0/22 45.83.104.0/22 45.90.4.0/22 45.129.180.0/22 45.132.244.0/22 45.136.28.0/22 45.142.176.0/22 45.157.176.0/22 46.38.224.0/19 46.232.248.0/22 81.16.16.0/22 85.209.48.0/22 85.235.64.0/22 89.58.0.0/18 91.132.144.0/22 91.204.44.0/22 92.60.36.0/22 93.177.64.0/22 152.89.104.0/22 159.195.1.0/24 159.195.4.0-159.195.11.255 159.195.20.0-159.195.87.255 159.195.96.0/21 185.16.60.0/22 185.162.248.0/22 185.163.116.0/22 185.170.112.0/22 185.183.156.0/22 185.194.140.0/22 185.207.104.0/22 185.228.136.0/22 185.233.104.0/22 185.243.8.0/22 185.244.192.0/22 188.68.32.0/19 192.145.44.0/22 193.30.120.0/22 193.31.24.0/22 194.13.80.0/22 194.55.12.0/22 194.59.204.0/22 195.128.100.0/22 213.109.160.0/22 IPv6: 2a03:4000::/31 2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff 2a0a:4cc0:104::/48 2a0a:4cc0:2000:4000::/56 Signature Algorithm: sha256WithRSAEncryption 7c:63:c7:fc:ae:35:03:8c:c8:4e:13:3a:6e:4a:0b:c8:27:7d: a3:ef:4b:72:24:2a:6d:fb:8e:ed:e8:37:30:78:d9:e8:38:fe: 99:bd:52:ea:cb:e6:7a:05:4e:1d:8e:3b:fb:2d:35:e4:c8:dc: b0:0e:72:0c:52:8e:0e:cb:db:8d:40:2e:8d:ee:9f:32:07:8d: c2:49:79:3c:89:2f:7a:76:0b:bd:38:e6:03:cf:7c:7e:ee:3a: 57:ea:b8:3c:00:60:8d:a3:e5:be:c7:88:ea:35:cd:f6:ab:c5: 5d:64:81:5c:01:68:3c:50:5a:c4:d5:21:65:7f:1c:fd:91:c6: cd:cf:36:61:c0:1f:ec:35:fe:55:78:c7:f3:7e:40:d7:30:c9: 98:0f:a3:f8:ce:58:75:24:a8:de:9a:85:a8:aa:21:81:04:93: 63:d5:ff:00:97:81:8c:d6:ed:f3:fe:95:87:90:44:bf:05:85: ae:d5:5b:6e:38:da:4b:ae:d0:21:10:43:f0:a2:e8:d1:f5:5b: d6:82:bf:ab:d7:30:5c:fc:94:95:b7:97:53:42:f0:24:d9:92: b1:36:8c:20:8d:50:ff:63:c7:35:47:0d:bd:b0:25:d1:71:4c: ad:86:85:b9:22:ce:9f:9b:80:3d:ac:cb:58:4c:fa:33:e3:c1: bd:6c:78:90 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgISAZsH0OZU3hOMURxAYMmB53StMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjUxMjEwMTAzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWFiYTg0ZmVhZmY0NTZiZmY4MDE4Zjk5NzVjOTIzOWUxMjNkMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknn9Dcu5CK5bpuYGk34c8Xz73UfA gnNp6jjzJJvYq1NcgUmkHhs/5blZfmCrAS4AyNvnMxQsn01KNedabsYEliYa5HnK +vd6RSKczDx+fNIZUtV3YekU25+7JPXhE+THberMed05nbLrIz92G7GPiDbrRLAn +rodPKxgt8+37Cbx6gctBEST0e+z+en540UQryp8AZO42we2oo+oakAqBeb4kP4c 9fjQQXwA2wJKBgemoSg4ML1mKr7qRDmkstDcCvCUWTUT3EMVLBLbqMdwclDpx1D6 nYRuJAxjc7m/VWVbP9sYlWvCG/oKal8Ki9O3CExXPzWtBTFgLYT3PsbNowIDAQAB o4IDdzCCA3MwHQYDVR0OBBYEFFqrqE/q/0Vr/4AY+ZdckjnhI9MJMB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEvV3F1b1Qtcl9SV3ZfZ0JqNWwxeVNPZUVqMHdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBiwYIKwYBBQUHAQcBAf8EggF6MIIBdjCCAT4EAgABMIIB NgMEAgI4YAMEBAUtYAMEAgW1MAMEAgX84AMEBSV4oAMEAyXdwAMEAi0JPAMEAi1T aAMEAi1aBAMEAi2BtAMEAi2E9AMEAi2IHAMEAi2OsAMEAi2dsAMEBS4m4AMEAi7o +AMEAlEQEAMEAlXRMAMEAlXrQAMEBlk6AAMEAluEkAMEAlvMLAMEAlw8JAMEAl2x QAMEAphZaAMEAJ/DATAMAwQCn8MEAwQCn8MIMAwDBAKfwxQDBAOfw1ADBAOfw2AD BAK5EDwDBAK5ovgDBAK5o3QDBAK5qnADBAK5t5wDBAK5wowDBAK5z2gDBAK55IgD BAK56WgDBAK58wgDBAK59MADBAW8RCADBALAkSwDBALBHngDBALBHxgDBALCDVAD BALCNwwDBALCO8wDBALDgGQDBALVbaAwMgQCAAIwLAMFASoDQAAwEAMFBioKTMAD BwAqCkzAAQADBwAqCkzAAQQDCAAqCkzAIABAMA0GCSqGSIb3DQEBCwUAA4IBAQB8 Y8f8rjUDjMhOEzpuSgvIJ32j70tyJCpt+47t6DcweNnoOP6ZvVLqy+Z6BU4djjv7 LTXkyNywDnIMUo4Oy9uNQC6N7p8yB43CSXk8iS96dgu9OOYDz3x+7jpX6rg8AGCN o+W+x4jqNc32q8VdZIFcAWg8UFrE1SFlfxz9kcbNzzZhwB/sNf5VeMfzfkDXMMmY D6P4zlh1JKjemoWoqiGBBJNj1f8Al4GM1u3z/pWHkES/BYWu1VtuONpLrtAhEEPw oujR9VvWgr+r1zBc/JSVt5dTQvAk2ZKxNowgjVD/Y8c1Rw29sCXRcUythoW5Is6f m4A9rMtYTPoz48G9bHiQ -----END CERTIFICATE-----Generated at Fri Dec 12 01:20:49 2025 by rpki-client