This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/aB5BTwFM1GkHltsLxl4xVTjJVbk.roa File: aB5BTwFM1GkHltsLxl4xVTjJVbk.roa (raw, json) Hash identifier: Zs3VbsvkuiKkW16KsemamPimx1XPIkjb0yYjG6M7CZY= Subject key identifier: 68:1E:41:4F:01:4C:D4:69:07:96:DB:0B:C6:5E:31:55:38:C9:55:B9 Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862 Certificate serial: 019B4BD5816ACA6939F2FAF074F9353F8E24 Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/aB5BTwFM1GkHltsLxl4xVTjJVbk.roa Signing time: Tue 23 Dec 2025 15:30:42 +0000 ROA not before: Tue 23 Dec 2025 15:30:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47583 IP address blocks: 31.97.0.0/23 maxlen: 24 31.97.2.0/24 maxlen: 24 31.97.3.0/24 maxlen: 24 31.97.4.0/22 maxlen: 24 31.97.8.0/21 maxlen: 24 31.97.16.0/20 maxlen: 24 31.97.32.0/21 maxlen: 24 31.97.40.0/22 maxlen: 24 31.97.44.0/22 maxlen: 24 31.97.48.0/22 maxlen: 24 31.97.52.0/22 maxlen: 24 31.97.56.0/22 maxlen: 24 31.97.60.0/22 maxlen: 24 31.97.64.0/24 maxlen: 24 31.97.65.0/24 maxlen: 24 31.97.66.0/23 maxlen: 24 31.97.68.0/23 maxlen: 24 31.97.70.0/23 maxlen: 24 31.97.72.0/22 maxlen: 24 31.97.76.0/22 maxlen: 24 31.97.80.0/20 maxlen: 24 31.97.96.0/21 maxlen: 24 31.97.104.0/21 maxlen: 24 31.97.112.0/21 maxlen: 24 31.97.120.0/21 maxlen: 24 31.97.128.0/20 maxlen: 24 31.97.144.0/22 maxlen: 24 31.97.148.0/23 maxlen: 24 31.97.150.0/24 maxlen: 24 31.97.151.0/24 maxlen: 24 31.97.152.0/21 maxlen: 24 31.97.160.0/20 maxlen: 24 31.97.176.0/23 maxlen: 24 31.97.178.0/24 maxlen: 24 31.97.179.0/24 maxlen: 24 31.97.180.0/22 maxlen: 24 31.97.184.0/23 maxlen: 24 31.97.186.0/24 maxlen: 24 31.97.187.0/24 maxlen: 24 31.97.188.0/22 maxlen: 24 31.97.192.0/21 maxlen: 24 31.97.200.0/21 maxlen: 24 31.97.208.0/21 maxlen: 24 31.97.216.0/23 maxlen: 24 31.97.218.0/23 maxlen: 24 31.97.220.0/22 maxlen: 24 31.97.224.0/20 maxlen: 24 31.97.240.0/20 maxlen: 24 69.62.64.0/23 maxlen: 24 69.62.66.0/23 maxlen: 24 69.62.68.0/22 maxlen: 24 69.62.72.0/21 maxlen: 24 69.62.80.0/22 maxlen: 24 69.62.84.0/23 maxlen: 24 69.62.86.0/23 maxlen: 24 69.62.88.0/21 maxlen: 24 69.62.96.0/21 maxlen: 24 69.62.104.0/24 maxlen: 24 69.62.105.0/24 maxlen: 24 69.62.106.0/23 maxlen: 24 69.62.108.0/22 maxlen: 24 69.62.112.0/22 maxlen: 24 69.62.116.0/22 maxlen: 24 69.62.120.0/23 maxlen: 24 69.62.122.0/24 maxlen: 24 69.62.123.0/24 maxlen: 24 69.62.124.0/24 maxlen: 24 69.62.125.0/24 maxlen: 24 69.62.126.0/23 maxlen: 24 72.60.0.0/20 maxlen: 24 72.60.16.0/22 maxlen: 24 72.60.20.0/22 maxlen: 24 72.60.24.0/21 maxlen: 24 72.60.32.0/21 maxlen: 24 72.60.40.0/22 maxlen: 24 72.60.44.0/22 maxlen: 24 72.60.48.0/20 maxlen: 24 72.60.64.0/21 maxlen: 24 72.60.72.0/21 maxlen: 24 72.60.80.0/21 maxlen: 24 72.60.88.0/21 maxlen: 24 72.60.96.0/21 maxlen: 24 72.60.104.0/21 maxlen: 24 72.60.112.0/20 maxlen: 24 72.60.128.0/24 maxlen: 24 72.60.129.0/24 maxlen: 24 72.60.130.0/23 maxlen: 24 72.60.132.0/23 maxlen: 24 72.60.134.0/23 maxlen: 24 72.60.136.0/21 maxlen: 24 72.60.144.0/20 maxlen: 24 72.60.160.0/20 maxlen: 24 72.60.176.0/21 maxlen: 24 72.60.184.0/21 maxlen: 24 72.60.192.0/21 maxlen: 24 72.60.200.0/21 maxlen: 24 72.60.208.0/22 maxlen: 24 72.60.212.0/22 maxlen: 24 72.60.216.0/21 maxlen: 24 72.60.224.0/21 maxlen: 24 72.60.232.0/21 maxlen: 24 72.60.240.0/20 maxlen: 24 72.61.0.0/20 maxlen: 24 72.61.16.0/22 maxlen: 24 72.61.20.0/22 maxlen: 24 72.61.24.0/21 maxlen: 24 72.61.32.0/19 maxlen: 24 72.61.64.0/20 maxlen: 24 72.61.80.0/20 maxlen: 24 72.61.96.0/20 maxlen: 24 72.61.112.0/20 maxlen: 24 72.61.128.0/21 maxlen: 24 72.61.136.0/22 maxlen: 24 72.61.140.0/22 maxlen: 24 72.61.144.0/22 maxlen: 24 72.61.148.0/22 maxlen: 24 72.61.152.0/21 maxlen: 24 72.61.160.0/21 maxlen: 24 72.61.168.0/21 maxlen: 24 72.61.176.0/20 maxlen: 24 72.61.192.0/21 maxlen: 24 72.61.200.0/21 maxlen: 24 72.61.208.0/21 maxlen: 24 72.61.216.0/21 maxlen: 24 72.61.224.0/19 maxlen: 24 72.62.0.0/22 maxlen: 24 72.62.4.0/22 maxlen: 24 72.62.4.0/23 maxlen: 24 72.62.8.0/21 maxlen: 24 72.62.16.0/20 maxlen: 24 72.62.32.0/19 maxlen: 24 72.62.64.0/20 maxlen: 24 72.62.80.0/21 maxlen: 24 72.62.88.0/21 maxlen: 24 72.62.96.0/21 maxlen: 24 72.62.104.0/21 maxlen: 24 72.62.112.0/21 maxlen: 24 72.62.120.0/21 maxlen: 24 72.62.128.0/22 maxlen: 24 72.62.132.0/22 maxlen: 24 72.62.136.0/21 maxlen: 24 72.62.144.0/20 maxlen: 24 72.62.160.0/20 maxlen: 24 72.62.176.0/20 maxlen: 24 72.62.192.0/21 maxlen: 24 72.62.200.0/21 maxlen: 24 72.62.208.0/23 maxlen: 24 72.62.210.0/23 maxlen: 24 72.62.212.0/22 maxlen: 24 72.62.216.0/21 maxlen: 24 72.62.224.0/21 maxlen: 24 72.62.232.0/21 maxlen: 24 72.62.240.0/20 maxlen: 24 76.13.0.0/20 maxlen: 24 76.13.16.0/21 maxlen: 24 76.13.24.0/21 maxlen: 24 76.13.64.0/21 maxlen: 24 76.13.72.0/22 maxlen: 24 76.13.80.0/20 maxlen: 24 103.199.184.0/22 maxlen: 24 148.222.52.0/24 maxlen: 24 148.222.53.0/24 maxlen: 24 148.222.54.0/24 maxlen: 24 148.222.55.0/24 maxlen: 24 148.230.64.0/23 maxlen: 24 148.230.66.0/23 maxlen: 24 148.230.68.0/23 maxlen: 24 148.230.70.0/23 maxlen: 24 148.230.72.0/21 maxlen: 24 148.230.80.0/20 maxlen: 24 148.230.96.0/22 maxlen: 24 148.230.100.0/22 maxlen: 24 148.230.104.0/21 maxlen: 24 148.230.112.0/21 maxlen: 24 148.230.120.0/22 maxlen: 24 148.230.124.0/22 maxlen: 24 168.231.64.0/21 maxlen: 24 168.231.72.0/22 maxlen: 24 168.231.76.0/23 maxlen: 24 168.231.78.0/23 maxlen: 24 168.231.80.0/21 maxlen: 24 168.231.88.0/21 maxlen: 24 168.231.96.0/22 maxlen: 24 168.231.100.0/24 maxlen: 24 168.231.101.0/24 maxlen: 24 168.231.102.0/23 maxlen: 24 168.231.104.0/21 maxlen: 24 168.231.112.0/22 maxlen: 24 168.231.116.0/24 maxlen: 24 168.231.117.0/24 maxlen: 24 168.231.118.0/23 maxlen: 24 168.231.120.0/22 maxlen: 24 168.231.124.0/22 maxlen: 24 194.164.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:d5:81:6a:ca:69:39:f2:fa:f0:74:f9:35:3f:8e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862 Validity Not Before: Dec 23 15:30:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681e414f014cd4690796db0bc65e315538c955b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0f:87:e9:51:99:be:a2:e9:21:68:04:a1:e3: 56:98:09:56:8a:e8:95:7e:ad:84:c3:9b:e4:93:df: 3e:3b:50:78:61:3c:64:3c:21:23:43:ea:d5:05:83: 9c:8a:68:a2:6e:cd:2e:51:05:74:47:4b:ef:fc:6f: 95:eb:c2:e7:48:7c:c3:61:61:e1:96:4e:8a:10:e2: 4d:77:b6:70:72:63:bd:4c:46:6c:6c:03:8e:4f:74: 14:ad:96:9d:5a:86:49:07:a7:2a:ec:06:47:96:42: 22:05:e8:24:5b:cb:0a:be:fb:aa:fb:88:83:c8:ec: 0f:33:fa:1b:c5:c5:b8:3c:91:7f:c9:f4:ee:33:fa: 8f:d6:f3:95:91:a1:8d:66:f4:30:e8:8e:ca:a7:ec: d3:4b:83:3c:c8:fe:4b:c6:9a:d9:f3:e2:19:8c:27: b7:62:8b:fa:58:57:d1:c9:77:c7:3c:20:e9:25:d2: a2:fa:0f:2c:90:cb:5d:2a:70:45:61:14:57:be:a7: 10:da:72:e3:a1:27:c4:1f:e8:af:cc:7e:b4:4e:c1: c6:b9:d1:2b:69:08:05:7d:f7:fd:12:33:83:f3:34: 62:91:d7:61:0b:a4:5f:65:24:40:e5:17:23:46:0d: 9d:6b:9b:c2:73:e4:ac:a6:2b:7f:d6:67:cd:79:95: 52:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1E:41:4F:01:4C:D4:69:07:96:DB:0B:C6:5E:31:55:38:C9:55:B9 X509v3 Authority Key Identifier: keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/aB5BTwFM1GkHltsLxl4xVTjJVbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.97.0.0/16 69.62.64.0/18 72.60.0.0-72.62.255.255 76.13.0.0/19 76.13.64.0-76.13.75.255 76.13.80.0/20 103.199.184.0/22 148.222.52.0/22 148.230.64.0/18 168.231.64.0/18 194.164.148.0/22 Signature Algorithm: sha256WithRSAEncryption 10:5c:69:45:2d:30:ca:90:0e:44:14:7b:3f:f3:cd:19:27:69: 25:e3:dc:43:02:8c:ec:d0:23:e1:e8:2c:ea:93:0d:4a:f3:40: 26:bf:89:4e:3b:6d:df:49:24:c8:0b:2c:db:a5:49:71:a6:3c: d5:4c:44:60:5b:11:42:ba:36:70:f0:c8:97:01:6b:d6:ef:49: 7b:4e:4d:06:5b:18:6a:03:1d:fb:4a:f1:57:05:4d:d5:da:f1: a4:5c:91:91:0b:a7:45:a1:86:a4:6e:a5:04:00:30:22:b4:54: e2:f0:43:ed:a8:a1:3e:da:66:97:57:ef:5e:ba:8a:ac:4a:e1: 07:d4:b6:94:3a:0d:d9:0e:94:81:72:3e:fe:f9:1d:0f:bc:a6: ab:b4:a5:93:29:15:2f:2f:fc:e8:03:19:2f:85:f9:a8:28:bd: e0:d2:fb:fe:36:99:9a:21:e2:cb:ae:b7:04:b1:30:d4:30:9d: 97:a5:a5:54:e7:af:01:af:d4:73:58:d6:5b:48:7f:e2:61:f3: 16:c4:4c:d1:9c:35:9f:85:f7:06:c2:0c:75:4e:e9:00:2b:d9: 68:8b:1b:41:a9:0f:01:c5:f3:7e:24:a1:b0:cb:0b:e8:60:bc: 4b:57:5a:8b:db:b2:9c:14:bd:6f:c3:a4:c8:2d:dd:9b:7f:18: e0:16:d9:fb -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZtL1YFqymk58vrwdPk1P44kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy ZWQ4NjIwHhcNMjUxMjIzMTUzMDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODFlNDE0ZjAxNGNkNDY5MDc5NmRiMGJjNjVlMzE1NTM4Yzk1NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw+H6VGZvqLpIWgEoeNWmAlWiuiV fq2Ew5vkk98+O1B4YTxkPCEjQ+rVBYOcimiibs0uUQV0R0vv/G+V68LnSHzDYWHh lk6KEOJNd7ZwcmO9TEZsbAOOT3QUrZadWoZJB6cq7AZHlkIiBegkW8sKvvuq+4iD yOwPM/obxcW4PJF/yfTuM/qP1vOVkaGNZvQw6I7Kp+zTS4M8yP5LxprZ8+IZjCe3 Yov6WFfRyXfHPCDpJdKi+g8skMtdKnBFYRRXvqcQ2nLjoSfEH+ivzH60TsHGudEr aQgFfff9EjOD8zRikddhC6RfZSRA5RcjRg2da5vCc+Sspit/1mfNeZVS7wIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFGgeQU8BTNRpB5bbC8ZeMVU4yVW5MB8GA1UdIwQY MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt ZWE2N2E5ODYyNWZlLzEvYUI1QlR3Rk0xR2tIbHRzTHhsNHhWVGpKVmJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBVBAIAATBPAwMAH2EDBAZF PkAwCgMDAkg8AwMASD4DBAVMDQAwDAMEBkwNQAMEAkwNSAMEBEwNUAMEAmfHuAME ApTeNAMEBpTmQAMEBqjnQAMEAsKklDANBgkqhkiG9w0BAQsFAAOCAQEAEFxpRS0w ypAORBR7P/PNGSdpJePcQwKM7NAj4egs6pMNSvNAJr+JTjtt30kkyAss26VJcaY8 1UxEYFsRQro2cPDIlwFr1u9Je05NBlsYagMd+0rxVwVN1drxpFyRkQunRaGGpG6l BAAwIrRU4vBD7aihPtpml1fvXrqKrErhB9S2lDoN2Q6UgXI+/vkdD7ymq7SlkykV Ly/86AMZL4X5qCi94NL7/jaZmiHiy663BLEw1DCdl6WlVOevAa/Uc1jWW0h/4mHz FsRM0Zw1n4X3BsIMdU7pACvZaIsbQakPAcXzfiShsMsL6GC8S1dai9uynBS9b8Ok yC3dm38Y4BbZ+w== -----END CERTIFICATE-----Generated at Wed Dec 24 18:37:23 2025 by rpki-client