This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GtBuqUe0hvk2Yj6yZIpIsq1HSDw.roa File: GtBuqUe0hvk2Yj6yZIpIsq1HSDw.roa (raw, json) Hash identifier: aN6+yot5KIleyiuDwLXFAuF74ApkLZ9skr/xqruBhao= Subject key identifier: 1A:D0:6E:A9:47:B4:86:F9:36:62:3E:B2:64:8A:48:B2:AD:47:48:3C Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B1301975DAAB856A1666C567BA906A413 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GtBuqUe0hvk2Yj6yZIpIsq1HSDw.roa Signing time: Fri 12 Dec 2025 14:40:29 +0000 ROA not before: Fri 12 Dec 2025 14:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210906 IP address blocks: 85.254.2.0/24 maxlen: 24 85.254.4.0/24 maxlen: 24 85.254.7.0/24 maxlen: 24 85.254.30.0/24 maxlen: 24 85.254.40.0/24 maxlen: 24 85.254.42.0/23 maxlen: 23 85.254.51.0/24 maxlen: 24 85.254.59.0/24 maxlen: 24 85.254.64.0/23 maxlen: 23 85.254.76.0/22 maxlen: 22 85.254.84.0/23 maxlen: 23 85.254.103.0/24 maxlen: 24 85.254.112.0/22 maxlen: 22 85.254.124.0/23 maxlen: 23 85.254.126.0/24 maxlen: 24 85.254.128.0/22 maxlen: 22 85.254.134.0/24 maxlen: 24 85.254.137.0/24 maxlen: 24 85.254.138.0/23 maxlen: 23 85.254.140.0/24 maxlen: 24 85.254.174.0/23 maxlen: 23 85.254.180.0/23 maxlen: 23 159.148.26.0/24 maxlen: 24 159.148.54.0/24 maxlen: 24 159.148.62.0/24 maxlen: 24 159.148.66.0/24 maxlen: 24 159.148.126.0/24 maxlen: 24 159.148.128.0/24 maxlen: 24 159.148.130.0/24 maxlen: 24 159.148.158.0/24 maxlen: 24 159.148.163.0/24 maxlen: 24 159.148.166.0/23 maxlen: 23 159.148.179.0/24 maxlen: 24 159.148.180.0/24 maxlen: 24 159.148.204.0/24 maxlen: 24 159.148.216.0/24 maxlen: 24 159.148.218.0/24 maxlen: 24 159.148.234.0/24 maxlen: 24 159.148.241.0/24 maxlen: 24 159.148.246.0/23 maxlen: 23 159.148.248.0/24 maxlen: 24 185.7.236.0/24 maxlen: 24 185.27.94.0/24 maxlen: 24 185.47.92.0/22 maxlen: 22 185.211.96.0/22 maxlen: 22 188.64.180.0/22 maxlen: 24 217.69.121.0/24 maxlen: 24 217.69.125.0/24 maxlen: 24 217.69.126.0/24 maxlen: 24 217.69.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:01:97:5d:aa:b8:56:a1:66:6c:56:7b:a9:06:a4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Dec 12 14:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1ad06ea947b486f936623eb2648a48b2ad47483c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:26:f8:6a:ed:3c:ca:4c:4b:4a:52:08:d4: 18:63:83:03:94:63:72:1b:c4:40:36:dd:b7:e4:53: 64:50:51:79:ae:a7:a1:f8:63:db:be:60:b2:90:cf: 26:79:d6:53:92:ec:cb:4d:59:65:3a:a1:ba:bc:96: 81:e2:bf:23:fe:a5:57:8b:4f:0d:cb:79:02:05:41: 65:47:0f:5d:85:aa:02:c8:ff:8e:59:70:c7:ae:9c: ec:ec:62:a7:e9:fa:04:90:18:74:d0:50:40:7a:cd: 11:46:99:c0:81:c9:39:36:ec:e8:7f:eb:57:1d:4f: ab:88:94:1b:d7:cc:b3:b3:32:33:00:9f:8b:bb:d9: 5e:94:15:ea:88:e1:88:55:17:f8:f0:33:b9:06:2d: 77:8e:5f:79:8d:6e:53:f9:2d:2f:e5:46:5d:1d:02: 57:08:b2:9a:87:b9:61:e2:82:97:d7:63:63:68:af: 99:e8:a3:49:21:a3:d1:73:0a:d7:bf:b4:11:6d:7b: f5:50:5b:0d:6f:24:5d:ce:5b:a7:d5:33:35:98:00: de:ce:ed:70:01:4f:31:82:69:a5:75:c6:13:19:12: db:4f:b1:16:60:0f:28:0a:a7:ad:6a:87:f7:e2:ca: c2:43:fd:d8:ab:24:ae:0b:25:d1:33:e3:48:34:16: 37:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D0:6E:A9:47:B4:86:F9:36:62:3E:B2:64:8A:48:B2:AD:47:48:3C X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/GtBuqUe0hvk2Yj6yZIpIsq1HSDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.2.0/24 85.254.4.0/24 85.254.7.0/24 85.254.30.0/24 85.254.40.0/24 85.254.42.0/23 85.254.51.0/24 85.254.59.0/24 85.254.64.0/23 85.254.76.0/22 85.254.84.0/23 85.254.103.0/24 85.254.112.0/22 85.254.124.0-85.254.126.255 85.254.128.0/22 85.254.134.0/24 85.254.137.0-85.254.140.255 85.254.174.0/23 85.254.180.0/23 159.148.26.0/24 159.148.54.0/24 159.148.62.0/24 159.148.66.0/24 159.148.126.0/24 159.148.128.0/24 159.148.130.0/24 159.148.158.0/24 159.148.163.0/24 159.148.166.0/23 159.148.179.0-159.148.180.255 159.148.204.0/24 159.148.216.0/24 159.148.218.0/24 159.148.234.0/24 159.148.241.0/24 159.148.246.0-159.148.248.255 185.7.236.0/24 185.27.94.0/24 185.47.92.0/22 185.211.96.0/22 188.64.180.0/22 217.69.121.0/24 217.69.125.0-217.69.127.255 Signature Algorithm: sha256WithRSAEncryption 2f:b5:d5:c4:ee:49:92:0b:d7:9e:74:4d:ff:40:53:25:07:ef: 78:3b:cc:d0:aa:37:35:f4:02:c2:4c:fa:c1:dd:63:a7:7f:d6: c4:79:ec:89:fc:f7:a6:87:00:16:36:9f:0c:49:ad:15:09:8a: 72:cd:2e:14:7b:fb:e5:3c:ff:17:cc:71:f5:74:33:e8:97:91: de:24:b3:94:b8:87:5c:35:3a:53:25:be:f0:08:26:7d:9f:43: ca:ba:59:03:63:31:a7:58:1b:8b:8d:50:5c:94:88:ab:81:55: 3a:76:bf:82:b5:8a:bb:29:b3:c0:e5:10:2c:3f:2c:1d:11:b5: 2a:35:33:4f:02:41:b6:6a:88:ed:c7:d5:80:56:d0:f2:9d:d1: 0d:0b:15:ad:7c:77:a7:b5:9b:d0:f8:c3:e4:7a:25:3d:37:f7: 60:1f:85:4a:11:49:ab:84:30:c2:99:2f:75:ae:ef:06:7b:30: ea:c5:44:2f:53:68:c2:de:7d:03:ab:9f:36:40:9e:15:52:52: ea:67:22:88:e0:ff:14:de:15:bf:7b:94:3f:bc:08:6e:7e:22: a0:88:dc:dc:5f:b4:52:5b:2c:b9:bc:69:08:be:6b:4f:a7:52: c3:e9:5c:27:f4:12:7d:15:74:a1:3a:c9:f8:9d:09:b9:4f:cb: 3b:4c:8f:9a -----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgISAZsTAZddqrhWoWZsVnupBqQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjUxMjEyMTQ0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWQwNmVhOTQ3YjQ4NmY5MzY2MjNlYjI2NDhhNDhiMmFkNDc0ODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qcm+GrtPMpMS0pSCNQYY4MDlGNy G8RANt235FNkUFF5rqeh+GPbvmCykM8medZTkuzLTVllOqG6vJaB4r8j/qVXi08N y3kCBUFlRw9dhaoCyP+OWXDHrpzs7GKn6foEkBh00FBAes0RRpnAgck5Nuzof+tX HU+riJQb18yzszIzAJ+Lu9lelBXqiOGIVRf48DO5Bi13jl95jW5T+S0v5UZdHQJX CLKah7lh4oKX12NjaK+Z6KNJIaPRcwrXv7QRbXv1UFsNbyRdzlun1TM1mADezu1w AU8xgmmldcYTGRLbT7EWYA8oCqetaof34srCQ/3YqySuCyXRM+NINBY3xwIDAQAB o4IDNzCCAzMwHQYDVR0OBBYEFBrQbqlHtIb5NmI+smSKSLKtR0g8MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvR3RCdXFVZTBodmsyWWo2eVpJcElzcTFIU0R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBSwYIKwYBBQUHAQcBAf8EggE6MIIBNjCCATIEAgABMIIB KgMEAFX+AgMEAFX+BAMEAFX+BwMEAFX+HgMEAFX+KAMEAVX+KgMEAFX+MwMEAFX+ OwMEAVX+QAMEAlX+TAMEAVX+VAMEAFX+ZwMEAlX+cDAMAwQCVf58AwQAVf5+AwQC Vf6AAwQAVf6GMAwDBABV/okDBABV/owDBAFV/q4DBAFV/rQDBACflBoDBACflDYD BACflD4DBACflEIDBACflH4DBACflIADBACflIIDBACflJ4DBACflKMDBAGflKYw DAMEAJ+UswMEAJ+UtAMEAJ+UzAMEAJ+U2AMEAJ+U2gMEAJ+U6gMEAJ+U8TAMAwQB n5T2AwQAn5T4AwQAuQfsAwQAuRteAwQCuS9cAwQCudNgAwQCvEC0AwQA2UV5MAwD BADZRX0DBAfZRQAwDQYJKoZIhvcNAQELBQADggEBAC+11cTuSZIL1550Tf9AUyUH 73g7zNCqNzX0AsJM+sHdY6d/1sR57In896aHABY2nwxJrRUJinLNLhR7++U8/xfM cfV0M+iXkd4ks5S4h1w1OlMlvvAIJn2fQ8q6WQNjMadYG4uNUFyUiKuBVTp2v4K1 irsps8DlECw/LB0RtSo1M08CQbZqiO3H1YBW0PKd0Q0LFa18d6e1m9D4w+R6JT03 92AfhUoRSauEMMKZL3Wu7wZ7MOrFRC9TaMLefQOrnzZAnhVSUupnIojg/xTeFb97 lD+8CG5+IqCI3NxftFJbLLm8aQi+a0+nUsPpXCf0En0VdKE6yfidCblPyztMj5o= -----END CERTIFICATE-----Generated at Thu Dec 18 02:00:17 2025 by rpki-client