This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wA9mEFLI2UY_RkoS8vOoDsaOSGo.roa File: wA9mEFLI2UY_RkoS8vOoDsaOSGo.roa (raw, json) Hash identifier: bYkGq0D46l1JCiWyuKYXooVgR27ZNUClLszMhm1QcaU= Subject key identifier: C0:0F:66:10:52:C8:D9:46:3F:46:4A:12:F2:F3:A8:0E:C6:8E:48:6A Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B017D572B929D49A46BFF4039E9E7EE03 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wA9mEFLI2UY_RkoS8vOoDsaOSGo.roa Signing time: Tue 09 Dec 2025 05:02:29 +0000 ROA not before: Tue 09 Dec 2025 05:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31205 IP address blocks: 31.173.240.0/23 maxlen: 23 31.173.242.0/23 maxlen: 23 31.173.244.0/22 maxlen: 22 37.29.86.0/23 maxlen: 23 46.232.200.0/24 maxlen: 24 46.232.202.0/23 maxlen: 23 78.25.92.0/23 maxlen: 23 78.25.94.0/23 maxlen: 23 83.149.48.0/24 maxlen: 24 83.149.49.0/24 maxlen: 24 83.149.50.0/24 maxlen: 24 83.149.51.0/24 maxlen: 24 83.169.248.0/22 maxlen: 22 83.169.252.0/22 maxlen: 22 85.26.224.0/24 maxlen: 24 85.26.226.0/24 maxlen: 24 85.26.227.0/24 maxlen: 24 85.26.228.0/24 maxlen: 24 85.26.229.0/24 maxlen: 24 85.26.230.0/24 maxlen: 24 85.26.231.0/24 maxlen: 24 128.204.66.0/24 maxlen: 24 128.204.67.0/24 maxlen: 24 178.176.48.0/24 maxlen: 24 178.176.240.0/22 maxlen: 22 178.176.244.0/22 maxlen: 22 178.177.208.0/21 maxlen: 21 178.178.200.0/24 maxlen: 24 185.210.140.0/23 maxlen: 23 185.210.142.0/23 maxlen: 23 188.162.0.0/24 maxlen: 24 188.162.1.0/24 maxlen: 24 188.162.2.0/23 maxlen: 23 188.162.4.0/22 maxlen: 22 188.162.8.0/23 maxlen: 23 188.162.10.0/23 maxlen: 23 188.162.12.0/23 maxlen: 23 188.162.14.0/23 maxlen: 23 188.162.72.0/22 maxlen: 22 188.162.76.0/23 maxlen: 23 188.162.78.0/24 maxlen: 24 188.162.79.0/24 maxlen: 24 188.162.80.0/24 maxlen: 24 188.162.81.0/24 maxlen: 24 188.162.82.0/24 maxlen: 24 188.162.83.0/24 maxlen: 24 188.162.84.0/24 maxlen: 24 188.162.85.0/24 maxlen: 24 188.162.86.0/24 maxlen: 24 188.162.87.0/24 maxlen: 24 188.162.88.0/24 maxlen: 24 188.162.89.0/24 maxlen: 24 188.162.90.0/23 maxlen: 23 188.162.92.0/22 maxlen: 22 188.170.240.0/22 maxlen: 22 188.170.247.0/24 maxlen: 24 2a03:d000:6400::/40 maxlen: 40 2a03:d000:6500::/40 maxlen: 40 2a03:d000:67fe::/48 maxlen: 48 2a03:d000:67ff::/48 maxlen: 48 2a03:d000:6802::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:01:7d:57:2b:92:9d:49:a4:6b:ff:40:39:e9:e7:ee:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Dec 9 05:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c00f661052c8d9463f464a12f2f3a80ec68e486a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:61:37:2a:82:da:11:c7:5d:00:70:7f:bf: 79:eb:17:77:c6:db:f1:e5:72:05:73:bd:71:26:95: 8c:b0:a5:bd:1c:a3:11:98:54:bc:bc:c7:a0:e0:8c: 07:f1:7e:c2:c6:d2:c3:7f:69:58:f9:fa:eb:b7:e7: 6c:3b:db:f2:6d:6b:d3:6c:d2:aa:ce:bd:cb:6a:25: 64:48:58:5d:60:57:a4:9e:96:b4:65:4d:2c:47:56: f3:44:d8:34:2b:17:74:54:53:5d:9c:ff:15:5d:64: 6c:c8:81:d9:5a:bd:cd:e8:79:1c:89:d2:77:48:e5: 9a:10:ec:9a:3a:91:e7:f5:f6:f4:1d:0e:d9:20:1e: 42:d0:37:9f:e1:30:45:7b:de:e9:ad:66:91:0e:6b: 5e:67:e8:f2:13:51:df:a8:81:50:de:4c:f9:18:55: 58:82:16:64:d8:60:88:e0:84:77:df:a8:28:2e:e9: ac:33:16:80:7b:42:f8:1a:c9:41:1c:9f:5d:d9:4a: 6d:01:5f:50:07:e8:ac:4d:a7:09:76:64:f7:89:5a: 3b:67:cc:cc:a7:9e:66:33:04:3d:d3:12:1b:60:16: 23:1f:d5:77:46:df:5d:d6:af:86:80:cb:89:1b:76: 94:94:46:bf:08:a9:a5:db:4a:18:eb:7f:23:62:c7: 3e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0F:66:10:52:C8:D9:46:3F:46:4A:12:F2:F3:A8:0E:C6:8E:48:6A X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wA9mEFLI2UY_RkoS8vOoDsaOSGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.173.240.0/21 37.29.86.0/23 46.232.200.0/24 46.232.202.0/23 78.25.92.0/22 83.149.48.0/22 83.169.248.0/21 85.26.224.0/24 85.26.226.0-85.26.231.255 128.204.66.0/23 178.176.48.0/24 178.176.240.0/21 178.177.208.0/21 178.178.200.0/24 185.210.140.0/22 188.162.0.0/20 188.162.72.0-188.162.95.255 188.170.240.0/22 188.170.247.0/24 IPv6: 2a03:d000:6400::/39 2a03:d000:67fe::/47 2a03:d000:6802::/48 Signature Algorithm: sha256WithRSAEncryption 23:49:f5:0d:81:23:9a:82:c0:0d:8d:9e:84:b6:ab:62:9d:4a: 78:d9:93:8f:ca:70:29:8a:2d:1d:07:57:3c:74:fc:60:26:92: 37:6d:2e:8e:31:f7:b6:11:35:d0:1f:40:53:9a:bf:00:1c:32: 01:91:d6:e0:e1:bb:ed:63:79:16:52:16:8f:3e:dc:6c:75:35: 58:6c:fc:c5:06:19:77:51:b1:90:1e:45:df:a8:c0:36:dd:d0: 57:9d:d7:3f:47:67:5b:71:ad:6e:cb:fe:4a:26:bf:91:0e:1c: 87:af:36:87:f6:a5:73:35:0a:07:56:85:97:a0:ac:eb:60:6e: 26:c3:7d:21:22:d7:e0:8f:10:10:a7:a5:cd:48:c3:af:f1:c7: 73:ea:40:3f:5d:5c:0e:5d:4c:70:42:32:0c:28:19:df:33:53: ba:1d:32:45:76:5b:7c:71:bd:4b:d0:e1:0a:dc:35:28:d1:93: f6:69:5c:18:a7:7d:90:ee:58:d0:33:d1:94:91:27:5c:c0:ba: 59:52:ef:4b:ba:82:c2:9e:b5:4c:0b:44:ee:41:c4:e6:85:f1: b3:6c:ce:bb:86:ca:96:83:b3:33:b6:06:3b:94:d2:b9:c7:33: e8:61:c0:bf:7e:37:a6:c8:fd:a3:0d:eb:56:7e:e8:44:9f:53: a3:f5:6e:79 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZsBfVcrkp1JpGv/QDnp5+4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjUxMjA5MDUwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDBmNjYxMDUyYzhkOTQ2M2Y0NjRhMTJmMmYzYTgwZWM2OGU0ODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssFhNyqC2hHHXQBwf7956xd3xtvx 5XIFc71xJpWMsKW9HKMRmFS8vMeg4IwH8X7CxtLDf2lY+frrt+dsO9vybWvTbNKq zr3LaiVkSFhdYFeknpa0ZU0sR1bzRNg0Kxd0VFNdnP8VXWRsyIHZWr3N6HkcidJ3 SOWaEOyaOpHn9fb0HQ7ZIB5C0Def4TBFe97prWaRDmteZ+jyE1HfqIFQ3kz5GFVY ghZk2GCI4IR336goLumsMxaAe0L4GslBHJ9d2UptAV9QB+isTacJdmT3iVo7Z8zM p55mMwQ90xIbYBYjH9V3Rt9d1q+GgMuJG3aUlEa/CKml20oY638jYsc+2wIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFMAPZhBSyNlGP0ZKEvLzqA7GjkhqMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvd0E5bUVGTEkyVVlfUmtvUzh2T29Ec2FPU0dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBiQQCAAEwgYIDBAMf rfADBAElHVYDBAAu6MgDBAEu6MoDBAJOGVwDBAJTlTADBANTqfgDBABVGuAwDAME AVUa4gMEA1Ua4AMEAYDMQgMEALKwMAMEA7Kw8AMEA7Kx0AMEALKyyAMEArnSjAME BLyiADAMAwQDvKJIAwQFvKJAAwQCvKrwAwQAvKr3MCAEAgACMBoDBgEqA9AAZAMH ASoD0ABn/gMHACoD0ABoAjANBgkqhkiG9w0BAQsFAAOCAQEAI0n1DYEjmoLADY2e hLarYp1KeNmTj8pwKYotHQdXPHT8YCaSN20ujjH3thE10B9AU5q/ABwyAZHW4OG7 7WN5FlIWjz7cbHU1WGz8xQYZd1GxkB5F36jANt3QV53XP0dnW3Gtbsv+Sia/kQ4c h682h/alczUKB1aFl6Cs62BuJsN9ISLX4I8QEKelzUjDr/HHc+pAP11cDl1McEIy DCgZ3zNTuh0yRXZbfHG9S9DhCtw1KNGT9mlcGKd9kO5Y0DPRlJEnXMC6WVLvS7qC wp61TAtE7kHE5oXxs2zOu4bKloOzM7YGO5TSuccz6GHAv343psj9ow3rVn7oRJ9T o/VueQ== -----END CERTIFICATE-----Generated at Fri Dec 12 12:17:55 2025 by rpki-client