This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/etlbUFteHzXPvG6vYL-3d8VcdxI.roa File: etlbUFteHzXPvG6vYL-3d8VcdxI.roa (raw, json) Hash identifier: aZ+znjkeucDXkvgukuotLILSxG3/3ZauahNwKZkUKTI= Subject key identifier: 7A:D9:5B:50:5B:5E:1F:35:CF:BC:6E:AF:60:BF:B7:77:C5:5C:77:12 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B4A9A0806EAB0E73222DF86C293010905 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/etlbUFteHzXPvG6vYL-3d8VcdxI.roa Signing time: Tue 23 Dec 2025 09:46:07 +0000 ROA not before: Tue 23 Dec 2025 09:46:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201942 IP address blocks: 31.170.100.0/22 maxlen: 24 37.32.99.0/24 maxlen: 24 45.90.238.0/24 maxlen: 24 45.131.132.0/23 maxlen: 24 45.137.160.0/22 maxlen: 24 45.147.104.0/22 maxlen: 24 45.147.116.0/22 maxlen: 24 45.159.76.0/22 maxlen: 24 62.106.87.0/24 maxlen: 24 81.21.228.0/22 maxlen: 24 85.115.192.0/22 maxlen: 24 88.135.64.0/22 maxlen: 24 91.235.40.0/24 maxlen: 24 91.235.41.0/24 maxlen: 24 91.238.239.0/24 maxlen: 24 92.60.34.0/24 maxlen: 24 92.60.35.0/24 maxlen: 24 93.92.228.0/22 maxlen: 24 93.189.120.0/24 maxlen: 24 93.189.123.0/24 maxlen: 24 95.214.144.0/22 maxlen: 24 109.230.194.0/24 maxlen: 24 109.230.250.0/24 maxlen: 24 185.91.108.0/22 maxlen: 24 185.105.12.0/22 maxlen: 24 185.105.232.0/22 maxlen: 24 185.106.124.0/22 maxlen: 24 185.107.152.0/22 maxlen: 24 185.118.52.0/23 maxlen: 23 185.118.54.0/23 maxlen: 23 185.119.48.0/22 maxlen: 24 185.128.52.0/22 maxlen: 24 185.129.104.0/22 maxlen: 24 185.150.78.0/23 maxlen: 24 185.163.168.0/22 maxlen: 24 185.163.232.0/22 maxlen: 24 185.166.172.0/22 maxlen: 24 185.175.152.0/22 maxlen: 24 185.176.188.0/22 maxlen: 24 185.179.228.0/22 maxlen: 24 185.179.232.0/22 maxlen: 24 185.189.64.0/22 maxlen: 24 185.196.40.0/22 maxlen: 24 185.196.42.0/24 maxlen: 24 185.196.43.0/24 maxlen: 24 185.197.216.0/22 maxlen: 24 185.199.44.0/22 maxlen: 24 185.199.55.0/24 maxlen: 24 185.200.228.0/22 maxlen: 24 185.201.152.0/22 maxlen: 24 185.202.204.0/22 maxlen: 24 185.204.108.0/24 maxlen: 24 185.204.244.0/22 maxlen: 24 185.212.84.0/22 maxlen: 24 185.216.28.0/22 maxlen: 24 185.217.12.0/22 maxlen: 24 185.218.16.0/22 maxlen: 24 185.220.240.0/22 maxlen: 24 185.221.16.0/22 maxlen: 24 185.222.188.0/22 maxlen: 24 185.223.220.0/22 maxlen: 24 185.224.220.0/22 maxlen: 24 185.226.8.0/22 maxlen: 24 185.226.28.0/22 maxlen: 24 185.227.176.0/22 maxlen: 24 185.227.204.0/24 maxlen: 24 185.230.48.0/22 maxlen: 24 185.239.252.0/22 maxlen: 24 185.239.252.0/24 maxlen: 24 185.239.253.0/24 maxlen: 24 185.239.255.0/24 maxlen: 24 185.245.32.0/23 maxlen: 23 185.247.4.0/24 maxlen: 24 193.17.180.0/22 maxlen: 24 193.17.180.0/24 maxlen: 24 193.17.182.0/24 maxlen: 24 193.35.88.0/22 maxlen: 24 193.105.66.0/24 maxlen: 24 193.162.15.0/24 maxlen: 24 194.35.40.0/24 maxlen: 24 194.41.116.0/22 maxlen: 24 194.41.118.0/24 maxlen: 24 195.182.13.0/24 maxlen: 24 212.80.208.0/22 maxlen: 24 212.115.44.0/22 maxlen: 24 213.232.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:9a:08:06:ea:b0:e7:32:22:df:86:c2:93:01:09:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 23 09:46:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7ad95b505b5e1f35cfbc6eaf60bfb777c55c7712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:b7:1c:06:02:bb:69:7f:3b:56:c9:81:e5: 2d:d3:95:7b:40:62:6c:68:05:32:ff:66:19:a4:ea: 1e:02:08:45:37:48:48:06:1b:1a:5e:b2:b1:bd:24: 21:3d:08:69:32:38:b6:2b:5d:06:e5:dc:12:25:9b: 1e:1c:86:b3:0b:ee:95:bd:04:f9:05:a9:92:e1:c6: 2e:ee:68:17:74:1d:00:db:b2:8f:c5:04:d7:0a:66: 73:35:75:bd:3c:8b:10:11:3b:24:a4:94:ca:e9:6b: f3:5a:3c:17:88:28:4e:62:ac:5f:d5:c6:43:51:19: 51:07:94:ea:b5:4a:0b:1b:d0:7b:43:e3:26:95:c4: ef:94:13:d7:52:02:16:87:a1:04:db:50:14:78:02: 49:3a:97:7f:e4:f7:40:b2:a8:a2:60:d8:b1:be:63: cc:92:2e:c7:8e:7d:9b:1b:9f:98:fb:3d:fa:0f:8b: 1d:c8:d7:bb:3f:23:86:63:97:44:02:c0:24:97:4b: d1:b4:a6:39:a6:74:89:75:e0:2d:dd:e6:c7:d5:3e: 66:77:c7:1d:73:94:1c:c4:ac:68:a8:45:5e:86:92: 5b:09:2d:98:97:62:bf:5e:17:fb:db:ca:02:15:ed: 8f:31:0e:d1:a9:b0:77:fe:a7:00:e6:11:62:23:3f: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D9:5B:50:5B:5E:1F:35:CF:BC:6E:AF:60:BF:B7:77:C5:5C:77:12 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/etlbUFteHzXPvG6vYL-3d8VcdxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.100.0/22 37.32.99.0/24 45.90.238.0/24 45.131.132.0/23 45.137.160.0/22 45.147.104.0/22 45.147.116.0/22 45.159.76.0/22 62.106.87.0/24 81.21.228.0/22 85.115.192.0/22 88.135.64.0/22 91.235.40.0/23 91.238.239.0/24 92.60.34.0/23 93.92.228.0/22 93.189.120.0/24 93.189.123.0/24 95.214.144.0/22 109.230.194.0/24 109.230.250.0/24 185.91.108.0/22 185.105.12.0/22 185.105.232.0/22 185.106.124.0/22 185.107.152.0/22 185.118.52.0/22 185.119.48.0/22 185.128.52.0/22 185.129.104.0/22 185.150.78.0/23 185.163.168.0/22 185.163.232.0/22 185.166.172.0/22 185.175.152.0/22 185.176.188.0/22 185.179.228.0-185.179.235.255 185.189.64.0/22 185.196.40.0/22 185.197.216.0/22 185.199.44.0/22 185.199.55.0/24 185.200.228.0/22 185.201.152.0/22 185.202.204.0/22 185.204.108.0/24 185.204.244.0/22 185.212.84.0/22 185.216.28.0/22 185.217.12.0/22 185.218.16.0/22 185.220.240.0/22 185.221.16.0/22 185.222.188.0/22 185.223.220.0/22 185.224.220.0/22 185.226.8.0/22 185.226.28.0/22 185.227.176.0/22 185.227.204.0/24 185.230.48.0/22 185.239.252.0/22 185.245.32.0/23 185.247.4.0/24 193.17.180.0/22 193.35.88.0/22 193.105.66.0/24 193.162.15.0/24 194.35.40.0/24 194.41.116.0/22 195.182.13.0/24 212.80.208.0/22 212.115.44.0/22 213.232.232.0/24 Signature Algorithm: sha256WithRSAEncryption 40:f0:91:b6:77:80:4a:f6:0b:38:16:2b:ef:a1:34:20:61:87: fc:a1:de:85:a0:cc:50:7e:4c:e8:c6:61:45:a1:91:48:d6:fc: 15:c7:40:b7:d8:b5:0c:e9:05:8b:82:d2:9d:2d:dc:a7:10:e8: 44:13:56:04:18:7c:f6:d1:19:d4:eb:cf:c6:27:7c:33:de:84: 4a:16:ba:b0:04:69:9a:e7:fb:ef:c6:50:4a:7c:bc:95:13:3d: 56:cc:af:02:05:b8:07:ed:1d:83:e2:6a:99:06:57:6f:f6:92: 67:2b:1e:d4:15:20:4f:88:a8:19:5f:53:1b:d6:89:a4:41:f4: 2a:55:09:df:16:c9:c3:3e:bf:b3:ac:c1:2c:0c:6d:a9:23:33: 21:93:05:3e:af:65:0a:24:4b:fe:cf:f6:0d:4d:de:de:2b:16: a0:3a:c5:1c:b1:26:01:9f:f4:71:47:0e:61:50:61:e8:b1:e0: bb:20:0c:25:80:16:15:3b:4e:f3:b1:46:33:fa:28:99:7a:b2: 97:16:db:d2:aa:68:e1:ff:5c:5f:e6:53:06:6f:9d:07:58:3a: 67:d2:0a:6c:1f:ac:56:ab:66:dc:a7:36:5b:83:b7:ec:3e:07: c3:97:ef:b1:a4:89:d5:b5:a5:11:70:2c:64:11:b6:c8:6c:21: 4f:c8:5e:09 -----BEGIN CERTIFICATE----- MIIGxTCCBa2gAwIBAgISAZtKmggG6rDnMiLfhsKTAQkFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjIzMDk0NjA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWQ5NWI1MDViNWUxZjM1Y2ZiYzZlYWY2MGJmYjc3N2M1NWM3NzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4G3HAYCu2l/O1bJgeUt05V7QGJs aAUy/2YZpOoeAghFN0hIBhsaXrKxvSQhPQhpMji2K10G5dwSJZseHIazC+6VvQT5 BamS4cYu7mgXdB0A27KPxQTXCmZzNXW9PIsQETskpJTK6WvzWjwXiChOYqxf1cZD URlRB5TqtUoLG9B7Q+MmlcTvlBPXUgIWh6EE21AUeAJJOpd/5PdAsqiiYNixvmPM ki7Hjn2bG5+Y+z36D4sdyNe7PyOGY5dEAsAkl0vRtKY5pnSJdeAt3ebH1T5md8cd c5QcxKxoqEVehpJbCS2Yl2K/Xhf728oCFe2PMQ7RqbB3/qcA5hFiIz/D6wIDAQAB o4ID0TCCA80wHQYDVR0OBBYEFHrZW1BbXh81z7xur2C/t3fFXHcSMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvZXRsYlVGdGVIelhQdkc2dllMLTNkOFZjZHhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB5QYIKwYBBQUHAQcBAf8EggHUMIIB0DCCAcwEAgABMIIB xAMEAh+qZAMEACUgYwMEAC1a7gMEAS2DhAMEAi2JoAMEAi2TaAMEAi2TdAMEAi2f TAMEAD5qVwMEAlEV5AMEAlVzwAMEAliHQAMEAVvrKAMEAFvu7wMEAVw8IgMEAl1c 5AMEAF29eAMEAF29ewMEAl/WkAMEAG3mwgMEAG3m+gMEArlbbAMEArlpDAMEArlp 6AMEArlqfAMEArlrmAMEArl2NAMEArl3MAMEArmANAMEArmBaAMEAbmWTgMEArmj qAMEArmj6AMEArmmrAMEArmvmAMEArmwvDAMAwQCubPkAwQCubPoAwQCub1AAwQC ucQoAwQCucXYAwQCuccsAwQAucc3AwQCucjkAwQCucmYAwQCucrMAwQAucxsAwQC ucz0AwQCudRUAwQCudgcAwQCudkMAwQCudoQAwQCudzwAwQCud0QAwQCud68AwQC ud/cAwQCueDcAwQCueIIAwQCueIcAwQCueOwAwQAuePMAwQCueYwAwQCue/8AwQB ufUgAwQAufcEAwQCwRG0AwQCwSNYAwQAwWlCAwQAwaIPAwQAwiMoAwQCwil0AwQA w7YNAwQC1FDQAwQC1HMsAwQA1ejoMA0GCSqGSIb3DQEBCwUAA4IBAQBA8JG2d4BK 9gs4FivvoTQgYYf8od6FoMxQfkzoxmFFoZFI1vwVx0C32LUM6QWLgtKdLdynEOhE E1YEGHz20RnU68/GJ3wz3oRKFrqwBGma5/vvxlBKfLyVEz1WzK8CBbgH7R2D4mqZ Bldv9pJnKx7UFSBPiKgZX1Mb1omkQfQqVQnfFsnDPr+zrMEsDG2pIzMhkwU+r2UK JEv+z/YNTd7eKxagOsUcsSYBn/RxRw5hUGHoseC7IAwlgBYVO07zsUYz+iiZerKX FtvSqmjh/1xf5lMGb50HWDpn0gpsH6xWq2bcpzZbg7fsPgfDl++xpInVtaURcCxk EbbIbCFPyF4J -----END CERTIFICATE-----Generated at Wed Dec 24 10:44:52 2025 by rpki-client