This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/6xfqdVr2jF32rSy7icNqWgHttLA.roa File: 6xfqdVr2jF32rSy7icNqWgHttLA.roa (raw, json) Hash identifier: FpY8qcmRoy+bH3GHVBo4cJVFWYC49NnHRpg2uW/KoyU= Subject key identifier: EB:17:EA:75:5A:F6:8C:5D:F6:AD:2C:BB:89:C3:6A:5A:01:ED:B4:B0 Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e Certificate serial: 019B27B76873DDD130A0B356D267087D4AEE Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/6xfqdVr2jF32rSy7icNqWgHttLA.roa Signing time: Tue 16 Dec 2025 15:11:29 +0000 ROA not before: Tue 16 Dec 2025 15:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8881 IP address blocks: 24.40.128.0/18 maxlen: 18 46.142.0.0/16 maxlen: 16 46.142.0.0/18 maxlen: 20 46.142.64.0/19 maxlen: 20 46.142.96.0/19 maxlen: 19 46.142.96.0/20 maxlen: 20 46.142.128.0/19 maxlen: 19 46.142.160.0/19 maxlen: 19 46.142.214.0/24 maxlen: 24 46.142.224.0/19 maxlen: 19 46.189.0.0/17 maxlen: 17 46.189.116.0/24 maxlen: 24 61.8.128.0/19 maxlen: 21 62.72.64.0/19 maxlen: 19 62.72.70.0/24 maxlen: 24 62.214.0.0/16 maxlen: 16 62.214.224.0/19 maxlen: 19 62.217.32.0/19 maxlen: 19 62.220.0.0/19 maxlen: 19 80.241.192.0/20 maxlen: 20 80.242.160.0/19 maxlen: 19 82.119.160.0/19 maxlen: 19 82.140.0.0/18 maxlen: 18 82.140.48.0/20 maxlen: 20 82.144.32.0/19 maxlen: 19 82.145.0.0/19 maxlen: 19 82.194.96.0/19 maxlen: 19 82.207.128.0/17 maxlen: 17 82.207.192.0/19 maxlen: 19 82.207.224.0/19 maxlen: 19 83.135.0.0/16 maxlen: 16 83.135.0.0/20 maxlen: 20 83.135.64.0/19 maxlen: 19 83.135.96.0/19 maxlen: 19 83.135.160.0/21 maxlen: 21 83.135.168.0/21 maxlen: 21 83.135.176.0/22 maxlen: 22 83.135.184.0/21 maxlen: 21 83.135.208.0/20 maxlen: 20 83.135.224.0/22 maxlen: 22 83.135.240.0/22 maxlen: 22 84.19.192.0/19 maxlen: 19 87.122.0.0/15 maxlen: 15 87.122.0.0/20 maxlen: 20 87.122.16.0/20 maxlen: 20 87.122.32.0/19 maxlen: 19 87.122.64.0/19 maxlen: 20 87.122.96.0/19 maxlen: 19 87.122.128.0/21 maxlen: 21 87.122.144.0/20 maxlen: 20 87.122.160.0/20 maxlen: 20 87.122.192.0/19 maxlen: 19 87.122.224.0/19 maxlen: 20 87.123.0.0/19 maxlen: 20 87.123.32.0/19 maxlen: 19 87.123.64.0/20 maxlen: 20 87.123.80.0/20 maxlen: 20 87.123.96.0/19 maxlen: 19 87.123.128.0/19 maxlen: 19 87.123.160.0/20 maxlen: 20 87.123.194.0/24 maxlen: 24 87.123.196.0/24 maxlen: 24 87.123.224.0/20 maxlen: 20 87.123.240.0/21 maxlen: 21 88.130.0.0/16 maxlen: 16 88.130.32.0/20 maxlen: 20 88.130.48.0/20 maxlen: 24 88.130.64.0/19 maxlen: 19 88.130.96.0/19 maxlen: 19 88.130.144.0/20 maxlen: 20 88.130.160.0/22 maxlen: 22 88.130.172.0/22 maxlen: 22 88.130.194.0/23 maxlen: 23 88.130.216.0/21 maxlen: 21 89.27.128.0/17 maxlen: 17 89.207.200.0/21 maxlen: 21 89.244.0.0/14 maxlen: 14 89.244.76.0/22 maxlen: 22 89.244.80.0/20 maxlen: 20 89.244.96.0/22 maxlen: 22 89.244.120.0/21 maxlen: 21 89.244.176.0/20 maxlen: 20 89.244.192.0/19 maxlen: 20 89.245.0.0/20 maxlen: 20 89.245.16.0/20 maxlen: 20 89.245.32.0/19 maxlen: 19 89.245.64.0/19 maxlen: 19 89.245.96.0/20 maxlen: 20 89.245.158.0/24 maxlen: 24 89.245.159.0/24 maxlen: 24 89.245.176.0/21 maxlen: 21 89.245.192.0/19 maxlen: 19 89.245.224.0/19 maxlen: 20 89.246.32.0/19 maxlen: 19 89.246.96.0/21 maxlen: 21 89.246.112.0/20 maxlen: 20 89.246.122.0/24 maxlen: 24 89.246.124.0/22 maxlen: 22 89.246.160.0/21 maxlen: 21 89.246.192.0/19 maxlen: 19 89.247.0.0/19 maxlen: 19 89.247.32.0/19 maxlen: 19 89.247.32.0/20 maxlen: 20 89.247.112.0/21 maxlen: 21 89.247.112.0/22 maxlen: 22 89.247.144.0/20 maxlen: 20 89.247.160.0/20 maxlen: 20 89.247.179.0/24 maxlen: 24 89.247.216.0/22 maxlen: 22 89.247.232.0/21 maxlen: 21 89.247.240.0/21 maxlen: 21 89.247.252.0/22 maxlen: 22 94.134.0.0/15 maxlen: 15 94.134.64.0/18 maxlen: 23 94.134.89.0/24 maxlen: 24 94.134.128.0/17 maxlen: 23 104.151.0.0/17 maxlen: 17 143.58.64.0/18 maxlen: 18 185.108.228.0/23 maxlen: 23 185.128.68.0/22 maxlen: 22 193.219.15.0/24 maxlen: 24 195.167.208.0/20 maxlen: 20 195.202.32.0/19 maxlen: 19 195.226.96.0/19 maxlen: 19 195.226.160.0/19 maxlen: 19 202.71.128.0/20 maxlen: 24 202.89.144.0/20 maxlen: 20 212.7.128.0/19 maxlen: 19 212.80.224.0/19 maxlen: 19 212.93.0.0/19 maxlen: 19 212.204.0.0/19 maxlen: 19 213.30.192.0/18 maxlen: 18 213.138.32.0/19 maxlen: 19 213.138.35.0/24 maxlen: 24 213.139.128.0/19 maxlen: 19 213.182.128.0/19 maxlen: 19 217.9.32.0/19 maxlen: 19 217.9.96.0/19 maxlen: 19 217.27.192.0/20 maxlen: 20 217.65.16.0/20 maxlen: 20 217.78.128.0/20 maxlen: 20 217.199.64.0/20 maxlen: 20 2001:7b0::/32 maxlen: 32 2001:9e8::/32 maxlen: 32 2001:9e8::/35 maxlen: 35 2001:9e8:2000::/35 maxlen: 35 2001:9e8:4000::/35 maxlen: 35 2001:9e8:6000::/35 maxlen: 35 2001:9e8:8000::/35 maxlen: 35 2001:9e8:a000::/35 maxlen: 35 2001:9e8:c000::/35 maxlen: 35 2001:9e8:e000::/35 maxlen: 36 2001:1438::/32 maxlen: 36 2001:1438:1::/48 maxlen: 56 2001:1438:300::/56 maxlen: 56 2001:16b8::/32 maxlen: 40 2a00:fb8::/29 maxlen: 29 2a00:fb8::/35 maxlen: 35 2a00:fb8:2000::/35 maxlen: 35 2a00:fb8:4000::/35 maxlen: 35 2a00:fb8:6000::/35 maxlen: 35 2a00:fbc::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:b7:68:73:dd:d1:30:a0:b3:56:d2:67:08:7d:4a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e Validity Not Before: Dec 16 15:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eb17ea755af68c5df6ad2cbb89c36a5a01edb4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c7:87:5a:d3:7e:8d:36:b8:01:55:2b:21:1b: 26:fc:95:a4:0c:2f:01:77:a1:21:a8:c4:56:62:41: 4e:f2:61:7a:8d:17:4e:df:00:b7:52:a9:f4:de:29: d0:a5:c9:1e:3b:25:c1:6c:44:a0:fb:aa:0b:d4:8b: ab:7b:ca:07:95:bc:03:2f:5d:57:03:2d:75:06:90: a5:e6:62:de:55:6f:78:b0:9c:d3:70:4a:3b:09:f8: df:1c:97:d1:d3:c5:44:cc:a5:db:78:59:5b:97:ce: 1a:c9:4d:a9:73:92:75:3b:9e:59:bd:9b:23:d8:12: 3b:2e:a4:14:35:df:03:d0:83:50:0d:8d:86:5a:8f: 47:c0:28:1a:b1:bb:1d:bc:88:d9:85:a8:eb:cd:2f: f0:e3:ad:43:a3:32:2d:e4:4e:ec:35:55:24:dd:79: 29:6d:d5:94:47:5a:1c:51:cd:55:9c:67:a4:1d:a4: 27:df:46:34:84:98:12:60:99:2e:b6:a6:ae:1b:28: 5a:85:8f:41:ae:5c:32:6b:1f:3a:d8:88:f5:d4:76: bf:f8:a2:16:ea:e0:66:99:9c:98:bf:f9:81:af:e2: f7:64:2a:85:3e:3f:82:4d:19:53:5a:41:f5:ae:09: bc:b5:0b:f6:bf:e2:62:52:34:ca:34:9d:40:4c:91: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:17:EA:75:5A:F6:8C:5D:F6:AD:2C:BB:89:C3:6A:5A:01:ED:B4:B0 X509v3 Authority Key Identifier: keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/6xfqdVr2jF32rSy7icNqWgHttLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.40.128.0/18 46.142.0.0/16 46.189.0.0/17 61.8.128.0/19 62.72.64.0/19 62.214.0.0/16 62.217.32.0/19 62.220.0.0/19 80.241.192.0/20 80.242.160.0/19 82.119.160.0/19 82.140.0.0/18 82.144.32.0/19 82.145.0.0/19 82.194.96.0/19 82.207.128.0/17 83.135.0.0/16 84.19.192.0/19 87.122.0.0/15 88.130.0.0/16 89.27.128.0/17 89.207.200.0/21 89.244.0.0/14 94.134.0.0/15 104.151.0.0/17 143.58.64.0/18 185.108.228.0/23 185.128.68.0/22 193.219.15.0/24 195.167.208.0/20 195.202.32.0/19 195.226.96.0/19 195.226.160.0/19 202.71.128.0/20 202.89.144.0/20 212.7.128.0/19 212.80.224.0/19 212.93.0.0/19 212.204.0.0/19 213.30.192.0/18 213.138.32.0/19 213.139.128.0/19 213.182.128.0/19 217.9.32.0/19 217.9.96.0/19 217.27.192.0/20 217.65.16.0/20 217.78.128.0/20 217.199.64.0/20 IPv6: 2001:7b0::/32 2001:9e8::/32 2001:1438::/32 2001:16b8::/32 2a00:fb8::/29 Signature Algorithm: sha256WithRSAEncryption 50:7a:a2:b4:7c:0f:11:22:32:db:5a:2b:88:21:3f:2a:2a:07: 83:54:08:bb:f2:f2:34:ff:18:77:88:e8:b6:23:03:31:2d:d9: 6d:96:b1:ce:d3:1b:f6:ac:88:a0:e5:38:e6:9f:60:cc:9b:ec: ea:30:50:ed:71:de:48:e4:d5:69:0a:3c:ad:25:96:19:f6:82: 8e:7e:ce:2a:c3:f8:3d:08:e3:90:49:ac:68:95:58:87:93:27: 3f:70:3c:26:9d:0d:d2:94:56:4f:00:e0:df:81:0b:c0:c2:6e: c0:d0:0c:19:94:a5:c4:f3:78:c4:98:4c:62:07:18:1a:3e:1d: 31:b6:70:a0:47:60:1e:fc:df:0f:97:e5:63:4c:37:05:f3:f9: 86:75:f0:86:9a:b8:58:e7:32:4c:2d:1e:7b:42:02:8e:8f:22: 83:9a:ad:2c:2c:f1:ec:2e:51:f2:50:14:92:44:3b:06:61:fe: 78:a9:35:1d:8a:2f:61:93:4c:a8:6c:29:7f:cd:82:a4:79:ef: 4d:30:4e:14:22:03:19:09:0e:77:06:d8:6f:0c:70:fc:48:df: 00:4a:97:5d:6e:d5:77:88:de:5a:22:d1:d3:e8:f5:65:74:8c: d6:01:42:43:1e:8a:2a:a2:82:8a:33:c1:f8:30:d1:a5:1e:ae: 8e:3c:65:8a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISAZsnt2hz3dEwoLNW0mcIfUruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0 NjQzMmUwHhcNMjUxMjE2MTUxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjE3ZWE3NTVhZjY4YzVkZjZhZDJjYmI4OWMzNmE1YTAxZWRiNGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MeHWtN+jTa4AVUrIRsm/JWkDC8B d6EhqMRWYkFO8mF6jRdO3wC3Uqn03inQpckeOyXBbESg+6oL1Iure8oHlbwDL11X Ay11BpCl5mLeVW94sJzTcEo7CfjfHJfR08VEzKXbeFlbl84ayU2pc5J1O55ZvZsj 2BI7LqQUNd8D0INQDY2GWo9HwCgasbsdvIjZhajrzS/w461DozIt5E7sNVUk3Xkp bdWUR1ocUc1VnGekHaQn30Y0hJgSYJkutqauGyhahY9Brlwyax862Ij11Ha/+KIW 6uBmmZyYv/mBr+L3ZCqFPj+CTRlTWkH1rgm8tQv2v+JiUjTKNJ1ATJEaaQIDAQAB o4IDVzCCA1MwHQYDVR0OBBYEFOsX6nVa9oxd9q0su4nDaloB7bSwMB8GA1UdIwQY MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt NjQzYTQxNTlhYjQ2LzEvNnhmcWRWcjJqRjMyclN5N2ljTnFXZ0h0dExBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2 LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBawYIKwYBBQUHAQcBAf8EggFaMIIBVjCCAScEAgABMIIB HwMEBhgogAMDAC6OAwQHLr0AAwQFPQiAAwQFPkhAAwMAPtYDBAU+2SADBAU+3AAD BARQ8cADBAVQ8qADBAVSd6ADBAZSjAADBAVSkCADBAVSkQADBAVSwmADBAdSz4AD AwBThwMEBVQTwAMDAVd6AwMAWIIDBAdZG4ADBANZz8gDAwJZ9AMDAV6GAwQHaJcA AwQGjzpAAwQBuWzkAwQCuYBEAwQAwdsPAwQEw6fQAwQFw8ogAwQFw+JgAwQFw+Kg AwQEykeAAwQEylmQAwQF1AeAAwQF1FDgAwQF1F0AAwQF1MwAAwQG1R7AAwQF1Yog AwQF1YuAAwQF1baAAwQF2QkgAwQF2QlgAwQE2RvAAwQE2UEQAwQE2U6AAwQE2cdA MCkEAgACMCMDBQAgAQewAwUAIAEJ6AMFACABFDgDBQAgARa4AwUDKgAPuDANBgkq hkiG9w0BAQsFAAOCAQEAUHqitHwPESIy21oriCE/KioHg1QIu/LyNP8Yd4jotiMD MS3ZbZaxztMb9qyIoOU45p9gzJvs6jBQ7XHeSOTVaQo8rSWWGfaCjn7OKsP4PQjj kEmsaJVYh5MnP3A8Jp0N0pRWTwDg34ELwMJuwNAMGZSlxPN4xJhMYgcYGj4dMbZw oEdgHvzfD5flY0w3BfP5hnXwhpq4WOcyTC0ee0ICjo8ig5qtLCzx7C5R8lAUkkQ7 BmH+eKk1HYovYZNMqGwpf82CpHnvTTBOFCIDGQkOdwbYbwxw/EjfAEqXXW7Vd4je WiLR0+j1ZXSM1gFCQx6KKqKCijPB+DDRpR6ujjxlig== -----END CERTIFICATE-----Generated at Sat Dec 20 01:46:11 2025 by rpki-client