This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/p0veRdP0JvJvQmVsHebDlIAh9qg.roa File: p0veRdP0JvJvQmVsHebDlIAh9qg.roa (raw, json) Hash identifier: ssgC4cmF6XkCdvwuhctAFAo9nU5G3XhQhCNdG/OjlGM= Subject key identifier: A7:4B:DE:45:D3:F4:26:F2:6F:42:65:6C:1D:E6:C3:94:80:21:F6:A8 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019A739295483F971D7DA5B26A1B914759AB Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/p0veRdP0JvJvQmVsHebDlIAh9qg.roa Signing time: Tue 11 Nov 2025 15:39:37 +0000 ROA not before: Tue 11 Nov 2025 15:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136258 IP address blocks: 46.16.128.0/24 maxlen: 24 46.16.129.0/24 maxlen: 24 46.16.130.0/24 maxlen: 24 46.16.131.0/24 maxlen: 24 109.104.152.0/24 maxlen: 24 109.104.153.0/24 maxlen: 24 109.104.155.0/24 maxlen: 24 147.78.0.0/24 maxlen: 24 147.78.1.0/24 maxlen: 24 147.78.2.0/24 maxlen: 24 147.78.3.0/24 maxlen: 24 185.126.236.0/24 maxlen: 24 185.126.237.0/24 maxlen: 24 185.126.238.0/24 maxlen: 24 185.126.239.0/24 maxlen: 24 185.213.20.0/24 maxlen: 24 185.213.21.0/24 maxlen: 24 185.213.23.0/24 maxlen: 24 2a11:840:1::/48 maxlen: 48 2a11:840:3::/48 maxlen: 48 2a11:840:4::/48 maxlen: 48 2a11:840:5::/48 maxlen: 48 2a11:840:6::/48 maxlen: 48 2a11:840:7::/48 maxlen: 48 2a11:840:8::/48 maxlen: 48 2a11:840:9::/48 maxlen: 48 2a11:840:10::/48 maxlen: 48 2a11:840:11::/48 maxlen: 48 2a11:840:12::/48 maxlen: 48 2a11:840:13::/48 maxlen: 48 2a11:840:14::/48 maxlen: 48 2a11:840:16::/48 maxlen: 48 2a11:840:17::/48 maxlen: 48 2a11:840:18::/48 maxlen: 48 2a11:840:19::/48 maxlen: 48 2a11:840:20::/48 maxlen: 48 2a11:840:21::/48 maxlen: 48 2a11:840:22::/48 maxlen: 48 2a11:840:23::/48 maxlen: 48 2a11:840:24::/48 maxlen: 48 2a11:840:25::/48 maxlen: 48 2a11:840:26::/48 maxlen: 48 2a11:840:28::/48 maxlen: 48 2a11:840:30::/48 maxlen: 48 2a11:840:33::/48 maxlen: 48 2a11:840:40::/48 maxlen: 48 2a11:840:41::/48 maxlen: 48 2a11:840:47::/48 maxlen: 48 2a11:840:48::/48 maxlen: 48 2a11:840:53::/48 maxlen: 48 2a11:840:54::/48 maxlen: 48 2a11:840:57::/48 maxlen: 48 2a11:840:60::/48 maxlen: 48 2a11:840:61::/48 maxlen: 48 2a11:840:62::/48 maxlen: 48 2a11:840:63::/48 maxlen: 48 2a11:840:64::/48 maxlen: 48 2a11:840:65::/48 maxlen: 48 2a11:840:66::/48 maxlen: 48 2a11:840:67::/48 maxlen: 48 2a11:840:68::/48 maxlen: 48 2a11:840:69::/48 maxlen: 48 2a11:840:70::/48 maxlen: 48 2a11:840:71::/48 maxlen: 48 2a11:840:72::/48 maxlen: 48 2a11:840:73::/48 maxlen: 48 2a11:840:73:1b::/64 maxlen: 64 2a11:840:74::/48 maxlen: 48 2a11:840:75::/48 maxlen: 48 2a11:840:76::/48 maxlen: 48 2a11:840:77::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:92:95:48:3f:97:1d:7d:a5:b2:6a:1b:91:47:59:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Nov 11 15:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a74bde45d3f426f26f42656c1de6c3948021f6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:e4:b1:7a:c7:35:cc:93:6a:07:a9:c7:a9: 27:98:53:1d:77:b1:89:9d:c2:51:67:b2:ba:03:94: c3:f1:df:c8:e2:c3:93:7c:47:c3:71:b3:5c:32:a8: 23:cf:ff:ac:62:df:38:a7:9b:dd:0a:4f:30:32:b0: cf:13:c5:7a:9f:65:f3:cb:9e:6e:1c:58:2c:a7:7d: 66:af:61:11:b6:1c:c0:43:07:0c:1b:3f:ea:4d:2b: 42:70:b4:ae:87:c1:c4:d2:dc:7a:69:bc:fe:08:82: 16:a5:08:82:4e:64:4b:66:e7:4d:eb:b1:65:0f:e0: c4:7b:4a:b5:ea:1e:78:64:81:da:fa:d1:36:05:a9: d0:81:a8:10:f9:20:6d:4e:d3:c3:8f:c2:89:db:10: 7a:8c:ce:48:a1:a5:70:6d:d6:48:12:f2:14:37:f0: f1:a7:b5:34:d7:7d:4b:1e:3f:bf:83:8e:d4:69:e7: aa:96:e5:e3:3a:c8:80:ba:a0:8e:f0:f8:13:c6:54: 50:ad:01:4b:9b:33:cb:df:8e:f8:4b:89:d3:3a:34: 09:58:76:57:9e:b9:ed:01:6a:1f:1b:f2:c8:5b:7d: 77:33:4f:07:5c:0a:f8:5d:10:3f:e8:9a:dc:df:91: 7e:cf:a8:b2:2b:7a:79:c6:6e:1e:57:c8:02:6a:55: b3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:DE:45:D3:F4:26:F2:6F:42:65:6C:1D:E6:C3:94:80:21:F6:A8 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/p0veRdP0JvJvQmVsHebDlIAh9qg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.128.0/22 109.104.152.0/23 109.104.155.0/24 147.78.0.0/22 185.126.236.0/22 185.213.20.0/23 185.213.23.0/24 IPv6: 2a11:840:1::/48 2a11:840:3::-2a11:840:9:ffff:ffff:ffff:ffff:ffff 2a11:840:10::-2a11:840:14:ffff:ffff:ffff:ffff:ffff 2a11:840:16::-2a11:840:19:ffff:ffff:ffff:ffff:ffff 2a11:840:20::-2a11:840:26:ffff:ffff:ffff:ffff:ffff 2a11:840:28::/48 2a11:840:30::/48 2a11:840:33::/48 2a11:840:40::/47 2a11:840:47::-2a11:840:48:ffff:ffff:ffff:ffff:ffff 2a11:840:53::-2a11:840:54:ffff:ffff:ffff:ffff:ffff 2a11:840:57::/48 2a11:840:60::-2a11:840:69:ffff:ffff:ffff:ffff:ffff 2a11:840:70::/45 Signature Algorithm: sha256WithRSAEncryption 6d:ea:9e:d4:d2:99:6a:57:19:51:72:e5:8f:ba:9b:42:fd:d7: 03:39:03:19:a3:24:93:c7:53:49:3e:54:3b:d7:e5:a4:b4:99: f4:9a:e4:8a:dc:90:eb:7d:34:b8:15:9a:ce:14:0e:ee:ba:fe: 89:1a:9c:93:00:44:51:40:b9:61:03:b4:74:55:41:1e:e4:8b: 06:f7:94:f5:96:76:f0:ea:6a:18:63:a1:7c:e9:57:c4:57:07: 9e:0b:33:35:e6:c8:1b:3d:7d:2a:ed:c1:59:48:60:6b:20:6f: 5d:ec:dc:fe:05:92:ee:db:cb:d9:72:6b:a3:ed:51:d5:d4:d8: 08:e2:f0:41:22:a1:e0:6e:c6:79:e7:20:e8:9e:96:fa:c8:5d: 62:e8:27:ec:24:04:dc:67:b8:8b:9c:3f:0e:25:b9:17:14:03: c9:c9:da:cb:fc:b8:e5:14:cc:3c:4c:a3:6d:6c:15:17:f5:39: ef:8a:e3:7b:04:e2:fa:91:51:01:9b:de:90:e1:4b:1e:09:e3: 4e:de:a3:c2:98:50:c0:de:52:65:e8:96:47:76:b9:ae:16:f8: 16:f1:e1:63:ca:eb:1f:e1:b0:ae:42:83:5e:37:90:5d:1a:46: 42:31:86:2d:35:5f:69:3d:d4:c5:30:33:89:65:8a:4e:e6:15: e2:e6:aa:b9 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAZpzkpVIP5cdfaWyahuRR1mrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjUxMTExMTUzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzRiZGU0NWQzZjQyNmYyNmY0MjY1NmMxZGU2YzM5NDgwMjFmNmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrzksXrHNcyTagepx6knmFMdd7GJ ncJRZ7K6A5TD8d/I4sOTfEfDcbNcMqgjz/+sYt84p5vdCk8wMrDPE8V6n2Xzy55u HFgsp31mr2ERthzAQwcMGz/qTStCcLSuh8HE0tx6abz+CIIWpQiCTmRLZudN67Fl D+DEe0q16h54ZIHa+tE2BanQgagQ+SBtTtPDj8KJ2xB6jM5IoaVwbdZIEvIUN/Dx p7U0131LHj+/g47UaeeqluXjOsiAuqCO8PgTxlRQrQFLmzPL3474S4nTOjQJWHZX nrntAWofG/LIW313M08HXAr4XRA/6Jrc35F+z6iyK3p5xm4eV8gCalWzgQIDAQAB o4IDCDCCAwQwHQYDVR0OBBYEFKdL3kXT9Cbyb0JlbB3mw5SAIfaoMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvcDB2ZVJkUDBKdkp2UW1Wc0hlYkRsSUFoOXFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzAwBAIAATAqAwQC LhCAAwQBbWiYAwQAbWibAwQCk04AAwQCuX7sAwQBudUUAwQAudUXMIHSBAIAAjCB ywMHACoRCEAAATASAwcAKhEIQAADAwcBKhEIQAAIMBIDBwQqEQhAABADBwAqEQhA ABQwEgMHASoRCEAAFgMHASoRCEAAGDASAwcFKhEIQAAgAwcAKhEIQAAmAwcAKhEI QAAoAwcAKhEIQAAwAwcAKhEIQAAzAwcBKhEIQABAMBIDBwAqEQhAAEcDBwAqEQhA AEgwEgMHACoRCEAAUwMHACoRCEAAVAMHACoRCEAAVzASAwcFKhEIQABgAwcBKhEI QABoAwcDKhEIQABwMA0GCSqGSIb3DQEBCwUAA4IBAQBt6p7U0plqVxlRcuWPuptC /dcDOQMZoySTx1NJPlQ71+WktJn0muSK3JDrfTS4FZrOFA7uuv6JGpyTAERRQLlh A7R0VUEe5IsG95T1lnbw6moYY6F86VfEVweeCzM15sgbPX0q7cFZSGBrIG9d7Nz+ BZLu28vZcmuj7VHV1NgI4vBBIqHgbsZ55yDonpb6yF1i6CfsJATcZ7iLnD8OJbkX FAPJydrL/LjlFMw8TKNtbBUX9TnviuN7BOL6kVEBm96Q4UseCeNO3qPCmFDA3lJl 6JZHdrmuFvgW8eFjyusf4bCuQoNeN5BdGkZCMYYtNV9pPdTFMDOJZYpO5hXi5qq5 -----END CERTIFICATE-----Generated at Fri Dec 5 07:04:03 2025 by rpki-client