This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/Pcc8I-k2KPNs-XB7v4Mf0KvmjNI.roa File: Pcc8I-k2KPNs-XB7v4Mf0KvmjNI.roa (raw, json) Hash identifier: G/ILdpnlQM/05QVAavE3OhnAKNi1LoszjvjcIB+1APE= Subject key identifier: 3D:C7:3C:23:E9:36:28:F3:6C:F9:70:7B:BF:83:1F:D0:AB:E6:8C:D2 Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Certificate serial: 019AF889C49F21989DDA78A2F7E034D543E0 Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/Pcc8I-k2KPNs-XB7v4Mf0KvmjNI.roa Signing time: Sun 07 Dec 2025 11:19:29 +0000 ROA not before: Sun 07 Dec 2025 11:19:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206996 IP address blocks: 5.249.160.0/24 maxlen: 24 5.249.161.0/24 maxlen: 24 5.249.162.0/24 maxlen: 24 5.249.163.0/24 maxlen: 24 5.249.164.0/24 maxlen: 24 5.249.165.0/24 maxlen: 24 5.249.166.0/24 maxlen: 24 45.141.36.0/24 maxlen: 24 45.141.37.0/24 maxlen: 24 45.146.252.0/24 maxlen: 24 45.146.253.0/24 maxlen: 24 45.146.254.0/24 maxlen: 24 45.146.255.0/24 maxlen: 24 88.214.56.0/24 maxlen: 24 88.214.57.0/24 maxlen: 24 88.214.58.0/24 maxlen: 24 88.214.59.0/24 maxlen: 24 92.42.44.0/24 maxlen: 24 92.42.45.0/24 maxlen: 24 92.42.46.0/24 maxlen: 24 92.42.47.0/24 maxlen: 24 134.255.216.0/24 maxlen: 24 134.255.217.0/24 maxlen: 24 134.255.218.0/24 maxlen: 24 134.255.219.0/24 maxlen: 24 134.255.231.0/24 maxlen: 24 134.255.232.0/24 maxlen: 24 134.255.233.0/24 maxlen: 24 134.255.234.0/24 maxlen: 24 147.189.168.0/24 maxlen: 24 147.189.169.0/24 maxlen: 24 147.189.170.0/24 maxlen: 24 147.189.171.0/24 maxlen: 24 147.189.172.0/24 maxlen: 24 147.189.173.0/24 maxlen: 24 147.189.174.0/24 maxlen: 24 147.189.175.0/24 maxlen: 24 185.223.28.0/24 maxlen: 24 185.223.29.0/24 maxlen: 24 185.223.30.0/24 maxlen: 24 185.223.31.0/24 maxlen: 24 185.239.236.0/24 maxlen: 24 185.239.237.0/24 maxlen: 24 185.239.238.0/24 maxlen: 24 185.239.239.0/24 maxlen: 24 185.249.196.0/24 maxlen: 24 185.249.197.0/24 maxlen: 24 185.249.198.0/24 maxlen: 24 185.249.199.0/24 maxlen: 24 193.23.126.0/24 maxlen: 24 193.23.127.0/24 maxlen: 24 193.23.160.0/24 maxlen: 24 193.23.161.0/24 maxlen: 24 193.34.69.0/24 maxlen: 24 193.203.238.0/24 maxlen: 24 194.156.88.0/24 maxlen: 24 194.156.89.0/24 maxlen: 24 194.156.90.0/24 maxlen: 24 194.156.91.0/24 maxlen: 24 2a0c:3580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:89:c4:9f:21:98:9d:da:78:a2:f7:e0:34:d5:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Validity Not Before: Dec 7 11:19:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3dc73c23e93628f36cf9707bbf831fd0abe68cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:63:f8:56:88:84:b4:5c:7a:66:66:89:27: 57:95:7e:cf:d7:69:c4:23:45:75:64:56:5a:21:74: 81:cc:a0:23:9f:d0:dc:68:c8:ba:69:4a:b2:42:85: 56:2c:7c:3c:70:75:51:b1:23:19:6b:cd:08:df:fa: a8:94:3a:b6:70:c0:cd:bb:51:d9:62:4a:79:43:10: 7f:55:cb:f6:38:37:3d:ae:57:23:23:de:cf:ec:2f: 1b:63:c8:e7:bb:d5:08:bc:37:f3:12:05:a3:92:27: f6:80:eb:e6:57:f8:73:3a:e1:0d:cc:de:d6:8a:4f: 6e:e5:fd:b5:b4:33:70:24:81:96:10:54:71:bc:f6: ea:a6:d0:a9:9e:9e:b5:5f:31:7b:5a:19:2e:1d:50: 92:8e:c6:f3:31:bd:90:9a:d9:13:b3:78:56:47:c5: 49:df:4b:3c:12:0a:90:89:6e:42:74:43:c3:c9:16: 0f:9f:c5:1f:15:45:f2:92:03:b5:42:7b:fa:d4:06: 0e:30:5f:2d:b6:61:45:5b:c9:4a:31:4a:ce:41:e2: 36:46:0f:12:a5:91:ea:c3:6e:30:75:71:43:3e:8c: e6:42:33:94:88:86:75:63:c5:24:bc:a2:da:0d:11: 93:47:94:da:e0:05:93:fb:2a:d8:28:08:47:51:9f: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C7:3C:23:E9:36:28:F3:6C:F9:70:7B:BF:83:1F:D0:AB:E6:8C:D2 X509v3 Authority Key Identifier: keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/Pcc8I-k2KPNs-XB7v4Mf0KvmjNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.249.160.0-5.249.166.255 45.141.36.0/23 45.146.252.0/22 88.214.56.0/22 92.42.44.0/22 134.255.216.0/22 134.255.231.0-134.255.234.255 147.189.168.0/21 185.223.28.0/22 185.239.236.0/22 185.249.196.0/22 193.23.126.0/23 193.23.160.0/23 193.34.69.0/24 193.203.238.0/24 194.156.88.0/22 IPv6: 2a0c:3580::/29 Signature Algorithm: sha256WithRSAEncryption 95:9c:0a:7c:b5:eb:69:0c:d7:2b:da:c0:2d:7a:50:ed:bf:3d: d4:0f:59:bd:6a:7e:99:8d:e6:8b:74:e8:ba:a3:4a:f9:95:22: 9b:89:1a:a4:45:ce:bd:20:0d:70:38:31:09:5c:8d:1a:28:89: b7:38:25:f6:0a:5e:26:e8:8d:f8:42:a2:a1:42:7c:87:ee:9c: 84:82:f0:a5:7d:9e:63:ab:f0:1b:28:7b:cd:b9:db:9c:80:84: 9b:ab:27:be:8f:17:a7:48:98:8b:74:c9:08:4d:54:dc:c2:c4: d0:2b:82:ad:c2:84:f0:4d:bd:39:f7:ed:cb:03:91:04:b2:f9: 60:65:19:dd:f8:32:31:83:ff:f2:d1:64:80:74:fc:dc:51:ec: 8c:9c:96:95:d4:4f:45:5c:7e:85:c2:da:1f:bf:9d:c5:de:8b: c5:3e:9f:09:7e:7f:04:ca:31:06:55:0d:96:ab:ae:f4:95:fb: d5:48:06:a2:bd:c6:94:d8:d6:bc:27:fe:93:d1:bc:5f:cf:13: c9:e4:5c:8f:a1:ab:e0:0e:43:cd:43:04:8d:8a:11:90:89:69: 4b:51:8e:11:56:86:e3:69:4a:5e:13:e3:5a:59:43:d7:8a:ce: 16:45:f7:ae:14:0d:cd:1b:4e:28:d7:2a:75:97:57:9f:db:91: e4:09:05:7e -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZr4icSfIZid2nii9+A01UPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz ZWNiNjAwHhcNMjUxMjA3MTExOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGM3M2MyM2U5MzYyOGYzNmNmOTcwN2JiZjgzMWZkMGFiZTY4Y2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4dj+FaIhLRcemZmiSdXlX7P12nE I0V1ZFZaIXSBzKAjn9DcaMi6aUqyQoVWLHw8cHVRsSMZa80I3/qolDq2cMDNu1HZ Ykp5QxB/Vcv2ODc9rlcjI97P7C8bY8jnu9UIvDfzEgWjkif2gOvmV/hzOuENzN7W ik9u5f21tDNwJIGWEFRxvPbqptCpnp61XzF7WhkuHVCSjsbzMb2QmtkTs3hWR8VJ 30s8EgqQiW5CdEPDyRYPn8UfFUXykgO1Qnv61AYOMF8ttmFFW8lKMUrOQeI2Rg8S pZHqw24wdXFDPozmQjOUiIZ1Y8UkvKLaDRGTR5Ta4AWT+yrYKAhHUZ+sXQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFD3HPCPpNijzbPlwe7+DH9Cr5ozSMB8GA1UdIwQY MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct ZTBkN2RkNWUyZTZmLzEvUGNjOEktazJLUE5zLVhCN3Y0TWYwS3Ztak5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzB2BAIAATBwMAwDBAUF +aADBAAF+aYDBAEtjSQDBAItkvwDBAJY1jgDBAJcKiwDBAKG/9gwDAMEAIb/5wME AIb/6gMEA5O9qAMEArnfHAMEArnv7AMEArn5xAMEAcEXfgMEAcEXoAMEAMEiRQME AMHL7gMEAsKcWDANBAIAAjAHAwUDKgw1gDANBgkqhkiG9w0BAQsFAAOCAQEAlZwK fLXraQzXK9rALXpQ7b891A9ZvWp+mY3mi3TouqNK+ZUim4kapEXOvSANcDgxCVyN GiiJtzgl9gpeJuiN+EKioUJ8h+6chILwpX2eY6vwGyh7zbnbnICEm6snvo8Xp0iY i3TJCE1U3MLE0CuCrcKE8E29OfftywORBLL5YGUZ3fgyMYP/8tFkgHT83FHsjJyW ldRPRVx+hcLaH7+dxd6LxT6fCX5/BMoxBlUNlquu9JX71UgGor3GlNjWvCf+k9G8 X88TyeRcj6Gr4A5DzUMEjYoRkIlpS1GOEVaG42lKXhPjWllD14rOFkX3rhQNzRtO KNcqdZdXn9uR5AkFfg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:09:27 2025 by rpki-client