This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/_11pVetKcRxH5Mux6SQ0q_W6nko.roa File: _11pVetKcRxH5Mux6SQ0q_W6nko.roa (raw, json) Hash identifier: xth5tm0U+e+fq0ZH4yXPggFQaHKD6f3c94qC+hf+z3U= Subject key identifier: FF:5D:69:55:EB:4A:71:1C:47:E4:CB:B1:E9:24:34:AB:F5:BA:9E:4A Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Certificate serial: 019B407071BA3508A243C088A7812A234EFC Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/_11pVetKcRxH5Mux6SQ0q_W6nko.roa Signing time: Sun 21 Dec 2025 10:24:29 +0000 ROA not before: Sun 21 Dec 2025 10:24:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13150 IP address blocks: 85.255.16.0/24 maxlen: 24 85.255.17.0/24 maxlen: 24 85.255.19.0/24 maxlen: 24 85.255.20.0/24 maxlen: 24 85.255.21.0/24 maxlen: 24 85.255.22.0/24 maxlen: 24 85.255.23.0/24 maxlen: 24 85.255.24.0/24 maxlen: 24 85.255.25.0/24 maxlen: 24 85.255.26.0/24 maxlen: 24 85.255.27.0/24 maxlen: 24 85.255.28.0/24 maxlen: 24 85.255.29.0/24 maxlen: 24 85.255.30.0/24 maxlen: 24 85.255.31.0/24 maxlen: 24 159.117.224.0/24 maxlen: 24 159.117.225.0/24 maxlen: 24 159.117.226.0/24 maxlen: 24 159.117.227.0/24 maxlen: 24 159.117.229.0/24 maxlen: 24 159.117.230.0/24 maxlen: 24 159.117.231.0/24 maxlen: 24 159.117.232.0/24 maxlen: 24 159.117.233.0/24 maxlen: 24 159.117.234.0/24 maxlen: 24 159.117.237.0/24 maxlen: 24 185.114.120.0/24 maxlen: 24 185.114.121.0/24 maxlen: 24 185.114.122.0/24 maxlen: 24 185.114.123.0/24 maxlen: 24 209.206.0.0/24 maxlen: 24 209.206.1.0/24 maxlen: 24 209.206.2.0/24 maxlen: 24 209.206.3.0/24 maxlen: 24 209.206.4.0/24 maxlen: 24 209.206.5.0/24 maxlen: 24 209.206.6.0/24 maxlen: 24 209.206.7.0/24 maxlen: 24 209.206.8.0/24 maxlen: 24 209.206.9.0/24 maxlen: 24 209.206.10.0/24 maxlen: 24 209.206.11.0/24 maxlen: 24 209.206.12.0/24 maxlen: 24 209.206.13.0/24 maxlen: 24 209.206.14.0/24 maxlen: 24 209.206.15.0/24 maxlen: 24 209.206.16.0/24 maxlen: 24 209.206.17.0/24 maxlen: 24 209.206.18.0/24 maxlen: 24 209.206.19.0/24 maxlen: 24 209.206.20.0/24 maxlen: 24 209.206.21.0/24 maxlen: 24 209.206.22.0/24 maxlen: 24 209.206.23.0/24 maxlen: 24 209.206.24.0/24 maxlen: 24 209.206.25.0/24 maxlen: 24 209.206.26.0/24 maxlen: 24 209.206.27.0/24 maxlen: 24 209.206.28.0/24 maxlen: 24 209.206.29.0/24 maxlen: 24 209.206.30.0/24 maxlen: 24 209.206.31.0/24 maxlen: 24 216.252.176.0/24 maxlen: 24 216.252.177.0/24 maxlen: 24 216.252.178.0/24 maxlen: 24 216.252.179.0/24 maxlen: 24 216.252.180.0/24 maxlen: 24 216.252.181.0/24 maxlen: 24 216.252.182.0/24 maxlen: 24 216.252.183.0/24 maxlen: 24 216.252.184.0/24 maxlen: 24 216.252.185.0/24 maxlen: 24 216.252.186.0/24 maxlen: 24 216.252.187.0/24 maxlen: 24 216.252.189.0/24 maxlen: 24 216.252.190.0/24 maxlen: 24 216.252.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:70:71:ba:35:08:a2:43:c0:88:a7:81:2a:23:4e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Validity Not Before: Dec 21 10:24:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff5d6955eb4a711c47e4cbb1e92434abf5ba9e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a5:10:cb:1c:23:19:41:6e:52:b8:9a:76:4a: 95:af:92:7d:4a:fd:c2:3e:f8:a8:0c:43:69:d3:52: 2b:ae:c4:af:f4:83:5f:3f:dc:51:90:e3:55:2b:b5: b3:ef:d4:fb:06:20:cc:c0:e9:e1:8a:f4:e1:d1:01: d0:45:61:2f:f1:d6:8f:f6:53:0d:cd:c2:67:33:1c: 32:71:e4:ae:e5:59:3d:06:5a:e2:2b:5d:00:aa:05: 9d:7d:0f:26:08:97:9f:93:9c:56:a4:53:af:92:5d: 36:46:42:b2:ba:89:9e:78:00:6f:cb:e8:8d:c2:50: fd:23:a4:16:f0:f6:b1:33:61:2d:5a:19:a9:15:69: f6:8c:d9:f9:a0:25:54:50:8a:33:6e:eb:7f:70:0d: b3:3f:81:71:9b:bc:2a:45:cf:b8:67:dd:30:99:81: 02:44:ab:1b:e6:5f:9a:aa:b9:09:8f:fa:fc:60:89: 5c:ea:21:55:e4:9c:98:4a:48:81:26:99:14:ac:fd: bf:4e:be:d3:05:2a:74:62:28:91:dd:92:2f:75:09: ee:6c:45:af:63:5a:fc:2a:d5:ba:4e:3b:d0:da:4e: e1:57:22:1b:4b:3e:e9:93:57:ac:38:70:b3:77:a7: e9:dc:13:48:86:c0:df:57:4c:2b:b9:a7:2d:41:db: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5D:69:55:EB:4A:71:1C:47:E4:CB:B1:E9:24:34:AB:F5:BA:9E:4A X509v3 Authority Key Identifier: keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/_11pVetKcRxH5Mux6SQ0q_W6nko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.255.16.0/23 85.255.19.0-85.255.31.255 159.117.224.0/22 159.117.229.0-159.117.234.255 159.117.237.0/24 185.114.120.0/22 209.206.0.0/19 216.252.176.0-216.252.187.255 216.252.189.0-216.252.191.255 Signature Algorithm: sha256WithRSAEncryption 1a:4e:7e:66:68:95:76:24:fe:5c:e0:27:62:9b:a9:a2:58:b8: 8a:bc:fa:b6:28:7a:64:88:47:18:0d:23:6a:20:71:53:5c:eb: 4e:f6:f9:6b:05:c0:b0:de:0a:15:e8:35:c3:d6:4d:c7:6b:c2: 1a:a2:27:a8:f1:b9:3a:4e:68:d9:71:07:72:5f:d0:cb:a1:66: 43:43:86:33:64:f5:69:b8:f1:df:51:f3:a2:1a:1b:22:e0:68: a4:44:49:f6:98:be:42:45:25:67:5a:6f:94:7d:81:fb:28:e7: f4:e8:e7:57:08:37:4f:be:c1:f1:34:3a:ed:13:06:9d:a1:0c: b6:4d:9d:ec:37:f3:2f:ed:b8:b1:fd:d0:39:45:11:f5:fc:4d: 64:e3:01:07:d1:18:cd:da:98:e7:fb:5f:17:0e:77:7c:c2:2b: 3a:a8:fe:1e:fb:e7:a9:37:8b:c8:01:0d:ca:ee:31:b0:0f:2d: b0:1e:97:6f:bb:19:67:bd:98:e5:ba:dd:8d:58:f6:e8:c1:76: 7b:23:4d:6d:1a:1b:e1:b0:f9:31:89:7e:db:6e:0e:50:50:27: bb:b2:8b:91:c2:70:e6:bf:93:36:c4:de:72:f1:be:3f:05:9a: 5e:8a:76:64:62:0a:4b:6e:a9:b8:87:cc:29:f4:e0:24:0a:57: 4c:c1:b6:9a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZtAcHG6NQiiQ8CIp4EqI078MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm N2U3NzcwHhcNMjUxMjIxMTAyNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjVkNjk1NWViNGE3MTFjNDdlNGNiYjFlOTI0MzRhYmY1YmE5ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KUQyxwjGUFuUriadkqVr5J9Sv3C PvioDENp01IrrsSv9INfP9xRkONVK7Wz79T7BiDMwOnhivTh0QHQRWEv8daP9lMN zcJnMxwyceSu5Vk9BlriK10AqgWdfQ8mCJefk5xWpFOvkl02RkKyuomeeABvy+iN wlD9I6QW8PaxM2EtWhmpFWn2jNn5oCVUUIozbut/cA2zP4Fxm7wqRc+4Z90wmYEC RKsb5l+aqrkJj/r8YIlc6iFV5JyYSkiBJpkUrP2/Tr7TBSp0YiiR3ZIvdQnubEWv Y1r8KtW6TjvQ2k7hVyIbSz7pk1esOHCzd6fp3BNIhsDfV0wruactQdvfDwIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFP9daVXrSnEcR+TLsekkNKv1up5KMB8GA1UdIwQY MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt YzE5OWM3YjRjYWMyLzEvXzExcFZldEtjUnhINU11eDZTUTBxX1c2bmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQBVf8QMAwD BABV/xMDBAVV/wADBAKfdeAwDAMEAJ915QMEAJ916gMEAJ917QMEArlyeAMEBdHO ADAMAwQE2PywAwQC2Py4MAwDBADY/L0DBAbY/IAwDQYJKoZIhvcNAQELBQADggEB ABpOfmZolXYk/lzgJ2KbqaJYuIq8+rYoemSIRxgNI2ogcVNc6072+WsFwLDeChXo NcPWTcdrwhqiJ6jxuTpOaNlxB3Jf0MuhZkNDhjNk9Wm48d9R86IaGyLgaKRESfaY vkJFJWdab5R9gfso5/To51cIN0++wfE0Ou0TBp2hDLZNnew38y/tuLH90DlFEfX8 TWTjAQfRGM3amOf7XxcOd3zCKzqo/h7756k3i8gBDcruMbAPLbAel2+7GWe9mOW6 3Y1Y9ujBdnsjTW0aG+Gw+TGJfttuDlBQJ7uyi5HCcOa/kzbE3nLxvj8Fml6KdmRi CktuqbiHzCn04CQKV0zBtpo= -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:30 2025 by rpki-client