This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/ZvGCFhuBxDOtsm0tH0ckprzlN14.roa File: ZvGCFhuBxDOtsm0tH0ckprzlN14.roa (raw, json) Hash identifier: B7us8cduOuoCgxcoM4UE2exXlDYOnkX04npadJBsbXM= Subject key identifier: 66:F1:82:16:1B:81:C4:33:AD:B2:6D:2D:1F:47:24:A6:BC:E5:37:5E Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850 Certificate serial: 019A77857814CFB97B6454FA9AB757F035D6 Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/ZvGCFhuBxDOtsm0tH0ckprzlN14.roa Signing time: Wed 12 Nov 2025 10:03:47 +0000 ROA not before: Wed 12 Nov 2025 10:03:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44407 IP address blocks: 37.140.224.0/21 maxlen: 21 37.157.56.0/22 maxlen: 24 45.81.80.0/22 maxlen: 22 45.87.56.0/22 maxlen: 22 45.132.248.0/22 maxlen: 24 45.148.108.0/22 maxlen: 22 45.156.228.0/22 maxlen: 22 46.247.224.0/19 maxlen: 19 62.244.76.0/22 maxlen: 24 62.244.78.0/23 maxlen: 24 62.244.94.0/23 maxlen: 23 62.244.108.0/22 maxlen: 24 62.244.116.0/24 maxlen: 24 62.244.118.0/24 maxlen: 24 62.244.120.0/21 maxlen: 24 62.244.124.0/22 maxlen: 24 79.132.144.0/20 maxlen: 20 80.240.160.0/20 maxlen: 20 85.112.192.0/19 maxlen: 19 86.105.88.0/21 maxlen: 21 86.107.248.0/21 maxlen: 21 89.35.208.0/21 maxlen: 21 89.43.156.0/22 maxlen: 24 93.190.208.0/21 maxlen: 24 93.190.212.0/22 maxlen: 22 185.16.48.0/22 maxlen: 22 185.102.176.0/22 maxlen: 24 185.176.176.0/22 maxlen: 22 185.181.152.0/22 maxlen: 22 185.183.60.0/22 maxlen: 22 185.183.64.0/22 maxlen: 22 185.183.252.0/22 maxlen: 22 185.184.4.0/22 maxlen: 22 185.198.224.0/22 maxlen: 22 185.204.252.0/22 maxlen: 22 185.209.140.0/22 maxlen: 22 185.223.148.0/22 maxlen: 22 185.243.120.0/22 maxlen: 22 194.36.192.0/22 maxlen: 22 195.123.7.0/24 maxlen: 24 195.177.108.0/22 maxlen: 22 217.26.192.0/20 maxlen: 20 2001:4000::/32 maxlen: 32 2a0a:1c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:85:78:14:cf:b9:7b:64:54:fa:9a:b7:57:f0:35:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850 Validity Not Before: Nov 12 10:03:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=66f182161b81c433adb26d2d1f4724a6bce5375e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:de:b7:1d:65:a7:e4:5e:83:39:2c:b8:64: 4c:ef:dd:e8:69:b2:f3:4e:33:99:ab:62:57:9d:eb: 07:95:3e:78:29:54:96:f2:8b:51:a6:33:49:d2:5a: e8:de:44:d1:b2:37:0e:10:3c:61:93:d4:31:04:f2: f0:32:a3:b5:36:62:6a:29:a0:a7:6c:f9:98:15:8f: ee:80:d1:c0:ab:c8:53:42:d7:bd:4f:3e:cb:6a:a4: e7:9e:92:32:76:5e:2f:15:7d:29:b0:32:be:de:ae: e8:d0:ab:f1:66:ce:04:8d:ff:b1:46:01:46:e3:69: 53:b0:68:c5:51:89:b0:69:f5:91:66:23:31:2c:fb: 9c:80:c3:50:8f:ee:89:2b:67:d4:56:21:11:27:79: 07:52:94:29:32:e9:c3:c2:2c:5e:ec:f7:46:27:c2: 5e:d8:77:1a:d9:11:1e:1d:25:5a:cd:00:27:fc:ec: 94:42:75:c5:67:90:38:32:23:15:20:bf:82:87:31: bf:c7:58:9b:1b:14:0c:d8:db:10:75:e7:9b:f0:6b: 42:26:0d:4f:10:72:c5:39:36:28:52:7d:b6:99:04: 86:28:57:b1:ed:9e:2e:e3:fa:de:dd:28:66:ce:2f: e3:0c:8f:c1:0f:6c:9e:48:34:58:75:ea:c4:a4:36: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F1:82:16:1B:81:C4:33:AD:B2:6D:2D:1F:47:24:A6:BC:E5:37:5E X509v3 Authority Key Identifier: keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/ZvGCFhuBxDOtsm0tH0ckprzlN14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.224.0/21 37.157.56.0/22 45.81.80.0/22 45.87.56.0/22 45.132.248.0/22 45.148.108.0/22 45.156.228.0/22 46.247.224.0/19 62.244.76.0/22 62.244.94.0/23 62.244.108.0/22 62.244.116.0/24 62.244.118.0/24 62.244.120.0/21 79.132.144.0/20 80.240.160.0/20 85.112.192.0/19 86.105.88.0/21 86.107.248.0/21 89.35.208.0/21 89.43.156.0/22 93.190.208.0/21 185.16.48.0/22 185.102.176.0/22 185.176.176.0/22 185.181.152.0/22 185.183.60.0-185.183.67.255 185.183.252.0/22 185.184.4.0/22 185.198.224.0/22 185.204.252.0/22 185.209.140.0/22 185.223.148.0/22 185.243.120.0/22 194.36.192.0/22 195.123.7.0/24 195.177.108.0/22 217.26.192.0/20 IPv6: 2001:4000::/32 2a0a:1c80::/29 Signature Algorithm: sha256WithRSAEncryption 9b:17:83:54:8c:2f:df:74:23:02:bd:61:dc:a3:8d:75:51:16: b4:24:89:c7:b3:d5:27:9c:8a:12:21:b4:9e:34:ef:02:a6:14: 4a:c2:4d:5d:fe:c7:d6:29:1c:8f:7e:d9:e6:bd:fb:90:ce:88: d1:e7:a9:d5:45:8a:b8:9b:c7:ea:06:16:ec:f3:85:88:70:ec: 74:62:b5:ed:e3:7f:b7:56:55:96:18:0c:15:34:ec:69:1c:d2: 72:bb:f7:50:0a:9c:dc:18:c1:2a:5b:85:e7:9b:49:ef:59:99: 4b:f5:3a:db:4b:e5:f8:87:41:ba:61:05:aa:6b:d5:0e:f7:e5: 9c:42:e1:cd:21:5b:66:4e:48:32:dd:62:e6:18:b8:aa:48:57: b6:76:e6:5f:b5:c5:ec:af:67:67:4b:64:31:9b:de:8d:6b:e3: 68:fd:d4:02:11:05:3f:11:fe:ec:41:ee:61:f4:92:18:5a:f0: 18:db:63:90:e1:70:e5:81:a8:bc:6c:f4:b8:47:64:86:06:9c: 26:8d:a6:37:54:8b:49:23:2b:43:b3:67:d8:92:c7:6a:03:ed: c0:ce:18:e4:21:ae:ef:32:75:d1:28:8a:9e:82:74:6f:07:91: d6:55:8f:41:0b:5b:98:2a:53:43:08:16:bf:2d:91:a0:4c:25: b0:1d:7e:24 -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgISAZp3hXgUz7l7ZFT6mrdX8DXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NjcyMTgzMWFmYjhiMzgzMDdiNDlmNWI5ZWU2MjkyYWQx ZTU4NTAwHhcNMjUxMTEyMTAwMzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmYxODIxNjFiODFjNDMzYWRiMjZkMmQxZjQ3MjRhNmJjZTUzNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/etx1lp+RegzksuGRM793oabLz TjOZq2JXnesHlT54KVSW8otRpjNJ0lro3kTRsjcOEDxhk9QxBPLwMqO1NmJqKaCn bPmYFY/ugNHAq8hTQte9Tz7LaqTnnpIydl4vFX0psDK+3q7o0KvxZs4Ejf+xRgFG 42lTsGjFUYmwafWRZiMxLPucgMNQj+6JK2fUViERJ3kHUpQpMunDwixe7PdGJ8Je 2Hca2REeHSVazQAn/OyUQnXFZ5A4MiMVIL+ChzG/x1ibGxQM2NsQdeeb8GtCJg1P EHLFOTYoUn22mQSGKFex7Z4u4/re3Shmzi/jDI/BD2yeSDRYderEpDZrAwIDAQAB o4IDDTCCAwkwHQYDVR0OBBYEFGbxghYbgcQzrbJtLR9HJKa85TdeMB8GA1UdIwQY MBaAFJlnIYMa+4s4MHtJ9bnuYpKtHlhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzIt YjRiZmU0NTZkZGUwLzEvWnZHQ0ZodUJ4RE90c20wdEgwY2twcnpsTjE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8xYzFlYjItMWY2NS00ZjcxLThiMzItYjRiZmU0NTZkZGUw LzEvbVdjaGd4cjdpemd3ZTBuMXVlNWlrcTBlV0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIQYIKwYBBQUHAQcBAf8EggEQMIIBDDCB8wQCAAEwgewD BAMljOADBAIlnTgDBAItUVADBAItVzgDBAIthPgDBAItlGwDBAItnOQDBAUu9+AD BAI+9EwDBAE+9F4DBAI+9GwDBAA+9HQDBAA+9HYDBAM+9HgDBARPhJADBARQ8KAD BAVVcMADBANWaVgDBANWa/gDBANZI9ADBAJZK5wDBANdvtADBAK5EDADBAK5ZrAD BAK5sLADBAK5tZgwDAMEArm3PAMEArm3QAMEArm3/AMEArm4BAMEArnG4AMEArnM /AMEArnRjAMEArnflAMEArnzeAMEAsIkwAMEAMN7BwMEAsOxbAMEBNkawDAUBAIA AjAOAwUAIAFAAAMFAyoKHIAwDQYJKoZIhvcNAQELBQADggEBAJsXg1SML990IwK9 YdyjjXVRFrQkicez1SecihIhtJ407wKmFErCTV3+x9YpHI9+2ea9+5DOiNHnqdVF iribx+oGFuzzhYhw7HRite3jf7dWVZYYDBU07Gkc0nK791AKnNwYwSpbheebSe9Z mUv1OttL5fiHQbphBapr1Q735ZxC4c0hW2ZOSDLdYuYYuKpIV7Z25l+1xeyvZ2dL ZDGb3o1r42j91AIRBT8R/uxB7mH0khha8BjbY5DhcOWBqLxs9LhHZIYGnCaNpjdU i0kjK0OzZ9iSx2oD7cDOGOQhru8yddEoip6CdG8HkdZVj0ELW5gqU0MIFr8tkaBM JbAdfiQ= -----END CERTIFICATE-----Generated at Sun Dec 7 10:41:59 2025 by rpki-client