This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/Ba_JHV9ylRxTQmTYJsqk9UnuRv8.roa File: Ba_JHV9ylRxTQmTYJsqk9UnuRv8.roa (raw, json) Hash identifier: HP5ipS0AuqdQ0P4txBXCUHYc1t75J5WQZU8qMk7yU4M= Subject key identifier: 05:AF:C9:1D:5F:72:95:1C:53:42:64:D8:26:CA:A4:F5:49:EE:46:FF Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 019ABFE65ABC6F75FF74A7E8F58133CDB95F Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/Ba_JHV9ylRxTQmTYJsqk9UnuRv8.roa Signing time: Wed 26 Nov 2025 11:22:16 +0000 ROA not before: Wed 26 Nov 2025 11:22:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8368 IP address blocks: 46.243.24.0/21 maxlen: 24 62.213.192.0/19 maxlen: 24 62.213.238.0/24 maxlen: 24 78.41.64.0/21 maxlen: 24 78.110.192.0/20 maxlen: 24 82.146.96.0/19 maxlen: 24 85.158.208.0/21 maxlen: 24 87.237.8.0/21 maxlen: 24 88.82.32.0/19 maxlen: 24 89.35.16.0/21 maxlen: 24 89.250.176.0/20 maxlen: 24 91.197.108.0/22 maxlen: 24 94.140.160.0/19 maxlen: 24 94.158.248.0/24 maxlen: 24 94.158.250.0/24 maxlen: 24 95.171.160.0/19 maxlen: 24 178.132.8.0/21 maxlen: 24 185.39.124.0/22 maxlen: 24 185.47.0.0/22 maxlen: 24 185.48.100.0/22 maxlen: 24 185.78.180.0/22 maxlen: 24 185.81.224.0/22 maxlen: 24 185.90.184.0/22 maxlen: 22 185.174.64.0/22 maxlen: 24 185.214.4.0/22 maxlen: 24 185.224.236.0/22 maxlen: 22 188.64.72.0/21 maxlen: 24 188.118.0.0/18 maxlen: 24 195.110.54.0/23 maxlen: 24 195.144.64.0/19 maxlen: 24 195.225.100.0/22 maxlen: 24 213.193.200.0/21 maxlen: 24 213.193.224.0/21 maxlen: 24 213.193.248.0/23 maxlen: 24 2001:4158::/29 maxlen: 48 2001:4c40::/32 maxlen: 48 2a00:1fb8::/32 maxlen: 48 2a01:8c20::/32 maxlen: 48 2a0b:8b00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:e6:5a:bc:6f:75:ff:74:a7:e8:f5:81:33:cd:b9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Nov 26 11:22:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=05afc91d5f72951c534264d826caa4f549ee46ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:55:e7:f0:60:6a:7a:fe:78:c9:dc:13:58: 17:60:00:e6:18:e4:17:b1:3f:8e:2b:0b:ac:a0:87: 48:2a:7a:bd:08:35:e6:26:f4:88:d6:19:49:0b:13: 68:d9:82:24:d8:30:7e:5d:aa:6b:bd:7b:04:ce:2d: 64:2e:df:bd:55:7c:1f:10:28:95:9b:6d:50:3f:01: 29:77:90:0f:8c:91:c6:f9:68:d7:9d:99:90:9c:4b: f9:56:25:da:dd:9e:71:2c:ab:54:97:8c:27:1a:1a: 16:3d:eb:88:25:6d:ee:19:c8:d3:6e:d7:07:3b:44: d8:c4:21:6d:b9:ed:a0:4c:da:31:83:3d:b5:ba:60: 5d:86:3f:4a:95:a3:d8:89:a4:4b:fe:1e:c9:eb:ea: 50:42:a4:94:1a:11:0d:15:dc:88:d5:e9:e6:6e:cf: 49:8d:9c:49:f0:b1:f9:c5:d2:68:f8:35:45:89:16: 82:ae:c1:10:90:83:f9:b0:8a:43:69:45:54:fc:49: 72:88:fd:4f:36:35:c6:f0:14:48:b3:9c:0c:be:f8: aa:16:60:a3:80:af:81:b8:52:07:ac:a5:33:45:20: c0:9f:ff:23:cf:00:d4:66:d6:ff:54:97:90:4a:3b: 05:78:5a:05:ff:d8:ab:44:b1:0d:33:7b:2f:e5:f4: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AF:C9:1D:5F:72:95:1C:53:42:64:D8:26:CA:A4:F5:49:EE:46:FF X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/Ba_JHV9ylRxTQmTYJsqk9UnuRv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.24.0/21 62.213.192.0/19 62.213.238.0/24 78.41.64.0/21 78.110.192.0/20 82.146.96.0/19 85.158.208.0/21 87.237.8.0/21 88.82.32.0/19 89.35.16.0/21 89.250.176.0/20 91.197.108.0/22 94.140.160.0/19 94.158.248.0/24 94.158.250.0/24 95.171.160.0/19 178.132.8.0/21 185.39.124.0/22 185.47.0.0/22 185.48.100.0/22 185.78.180.0/22 185.81.224.0/22 185.90.184.0/22 185.174.64.0/22 185.214.4.0/22 185.224.236.0/22 188.64.72.0/21 188.118.0.0/18 195.110.54.0/23 195.144.64.0/19 195.225.100.0/22 213.193.200.0/21 213.193.224.0/21 213.193.248.0/23 IPv6: 2001:4158::/29 2001:4c40::/32 2a00:1fb8::/32 2a01:8c20::/32 2a0b:8b00::/29 Signature Algorithm: sha256WithRSAEncryption 45:93:9a:5f:3d:16:96:c0:b4:b2:1d:d3:e0:65:c5:de:d7:81: e5:50:c2:ce:ae:b6:20:0e:d6:d4:c0:13:3b:6f:6c:be:c9:87: 37:0a:a2:dc:c4:d6:55:d8:27:33:9e:1f:64:f6:e2:c7:4f:a2: 3d:4a:28:64:5b:81:fb:65:8d:f0:ec:ff:45:fc:e1:41:0e:ff: 5c:c2:d7:96:ff:f5:14:cd:7e:4b:72:9a:ba:4e:6c:cf:d3:80: 99:15:0a:9f:57:1e:3c:a5:26:6d:e6:0f:02:ff:18:e0:b0:d3: 5a:25:e1:86:ed:16:34:3c:a5:53:cc:8d:f8:46:1c:4d:fc:29: c4:74:3e:27:c3:ad:d4:71:d5:bf:47:cf:44:34:17:2b:4f:13: 8e:63:66:19:a2:3f:3d:11:71:bd:aa:ff:51:dc:5e:dc:c9:f1: 9e:89:79:4f:48:fa:1a:e5:ee:a6:f3:78:21:ce:93:c8:fd:54: 16:c8:a3:7f:82:9a:70:6d:00:52:10:21:62:7a:b0:e5:03:11: f8:ca:09:c2:54:99:c0:62:dd:5c:42:74:f2:6b:6e:eb:32:cf: 1e:69:d4:12:70:34:4c:f0:e3:96:24:fc:44:3e:79:ff:5c:b3: 3b:dd:c0:f2:c7:59:f8:95:b9:22:a6:2c:5f:41:ed:1c:72:26: ac:0b:72:46 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgISAZq/5lq8b3X/dKfo9YEzzblfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjUxMTI2MTEyMjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWFmYzkxZDVmNzI5NTFjNTM0MjY0ZDgyNmNhYTRmNTQ5ZWU0NmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnJV5/Bganr+eMncE1gXYADmGOQX sT+OKwusoIdIKnq9CDXmJvSI1hlJCxNo2YIk2DB+XaprvXsEzi1kLt+9VXwfECiV m21QPwEpd5APjJHG+WjXnZmQnEv5ViXa3Z5xLKtUl4wnGhoWPeuIJW3uGcjTbtcH O0TYxCFtue2gTNoxgz21umBdhj9KlaPYiaRL/h7J6+pQQqSUGhENFdyI1enmbs9J jZxJ8LH5xdJo+DVFiRaCrsEQkIP5sIpDaUVU/ElyiP1PNjXG8BRIs5wMvviqFmCj gK+BuFIHrKUzRSDAn/8jzwDUZtb/VJeQSjsFeFoF/9irRLENM3sv5fSQaQIDAQAB o4IDAjCCAv4wHQYDVR0OBBYEFAWvyR1fcpUcU0Jk2CbKpPVJ7kb/MB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvQmFfSkhWOXlsUnhUUW1UWUpzcWs5VW51UnY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBFgYIKwYBBQUHAQcBAf8EggEFMIIBATCB0wQCAAEwgcwD BAMu8xgDBAU+1cADBAA+1e4DBANOKUADBARObsADBAVSkmADBANVntADBANX7QgD BAVYUiADBANZIxADBARZ+rADBAJbxWwDBAVejKADBABenvgDBABenvoDBAVfq6AD BAOyhAgDBAK5J3wDBAK5LwADBAK5MGQDBAK5TrQDBAK5UeADBAK5WrgDBAK5rkAD BAK51gQDBAK54OwDBAO8QEgDBAa8dgADBAHDbjYDBAXDkEADBALD4WQDBAPVwcgD BAPVweADBAHVwfgwKQQCAAIwIwMFAyABQVgDBQAgAUxAAwUAKgAfuAMFACoBjCAD BQMqC4sAMA0GCSqGSIb3DQEBCwUAA4IBAQBFk5pfPRaWwLSyHdPgZcXe14HlUMLO rrYgDtbUwBM7b2y+yYc3CqLcxNZV2Ccznh9k9uLHT6I9SihkW4H7ZY3w7P9F/OFB Dv9cwteW//UUzX5Lcpq6TmzP04CZFQqfVx48pSZt5g8C/xjgsNNaJeGG7RY0PKVT zI34RhxN/CnEdD4nw63UcdW/R89ENBcrTxOOY2YZoj89EXG9qv9R3F7cyfGeiXlP SPoa5e6m83ghzpPI/VQWyKN/gppwbQBSECFierDlAxH4ygnCVJnAYt1cQnTya27r Ms8eadQScDRM8OOWJPxEPnn/XLM73cDyx1n4lbkipixfQe0cciasC3JG -----END CERTIFICATE-----Generated at Thu Dec 4 07:45:38 2025 by rpki-client