This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/a2xX_3muv_KdeXmbIcyCSQsy7ug.roa File: a2xX_3muv_KdeXmbIcyCSQsy7ug.roa (raw, json) Hash identifier: 7VcYDIFfx6wD/ZfRM5IUR4rKQKovvqIy++rRvyworCs= Subject key identifier: 6B:6C:57:FF:79:AE:BF:F2:9D:79:79:9B:21:CC:82:49:0B:32:EE:E8 Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Certificate serial: 019B45B7B2AF4C09EF265CB4684DE154ACBA Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/a2xX_3muv_KdeXmbIcyCSQsy7ug.roa Signing time: Mon 22 Dec 2025 11:00:25 +0000 ROA not before: Mon 22 Dec 2025 11:00:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13285 IP address blocks: 2.96.0.0/13 maxlen: 24 62.24.128.0/17 maxlen: 24 62.241.160.0/19 maxlen: 24 78.144.0.0/13 maxlen: 24 79.77.0.0/16 maxlen: 24 79.78.0.0/15 maxlen: 24 80.40.0.0/13 maxlen: 24 81.1.64.0/18 maxlen: 24 81.86.0.0/16 maxlen: 24 81.178.0.0/15 maxlen: 24 83.67.0.0/16 maxlen: 24 84.43.0.0/17 maxlen: 24 87.242.128.0/17 maxlen: 24 89.168.128.0/17 maxlen: 24 89.240.0.0/14 maxlen: 24 92.16.0.0/12 maxlen: 24 145.255.240.0/21 maxlen: 24 185.24.12.0/22 maxlen: 24 185.173.120.0/22 maxlen: 24 185.175.48.0/22 maxlen: 24 185.175.144.0/22 maxlen: 24 193.218.99.0/24 maxlen: 24 194.106.32.0/19 maxlen: 24 194.247.224.0/19 maxlen: 24 195.112.0.0/18 maxlen: 24 195.137.0.0/17 maxlen: 24 195.149.0.0/18 maxlen: 24 212.1.128.0/19 maxlen: 24 212.67.96.0/19 maxlen: 24 212.74.96.0/19 maxlen: 24 212.139.0.0/16 maxlen: 24 212.159.128.0/18 maxlen: 24 213.78.0.0/16 maxlen: 24 2001:7e0::/32 maxlen: 32 2001:4a00::/27 maxlen: 27 2a00:4340::/32 maxlen: 32 2a0b:db00::/29 maxlen: 29 2a0b:e900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b7:b2:af:4c:09:ef:26:5c:b4:68:4d:e1:54:ac:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Validity Not Before: Dec 22 11:00:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6b6c57ff79aebff29d79799b21cc82490b32eee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:85:4e:96:a4:ef:9c:24:5e:45:22:bf:2a: bf:66:5a:39:44:b9:59:99:7d:46:8d:2a:ab:5f:b8: f1:67:c6:d5:df:c2:f8:93:fa:24:d7:7f:6a:74:77: e7:9e:ff:5f:61:1d:66:43:96:5e:2f:8c:f8:4b:0e: 1e:9c:04:97:5b:fc:f5:9b:ca:7c:f1:12:db:ea:6d: 5a:2c:42:a5:a1:c7:93:af:b5:60:18:fd:c7:23:4a: d8:d4:e3:10:d4:e8:63:b9:a1:72:ec:22:d6:62:91: 3f:a0:e7:0a:f4:e1:b8:60:19:c5:3d:29:f6:23:8f: 37:46:ec:4c:e7:c0:af:db:d0:c9:62:9d:41:bd:16: f8:97:d6:b5:cf:b9:28:68:71:11:f1:a8:84:67:9a: 8e:e2:04:b5:4c:9b:28:17:8f:25:12:e1:48:fa:8d: ee:31:bd:b8:85:36:9e:d4:a4:37:e3:5a:90:97:18: fa:b8:f8:3a:4e:ee:69:95:ea:76:eb:6a:b3:fa:a6: 90:26:4c:cc:61:bc:e3:c9:c5:53:00:6b:11:27:53: a2:fc:c3:72:46:bf:ce:23:0e:67:d1:f4:07:fd:d6: f6:9c:3d:2b:14:b2:5d:af:89:75:d2:36:c0:ef:86: 18:4a:1c:01:e3:ca:3b:a0:df:0d:0c:05:c7:b8:4b: 61:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6C:57:FF:79:AE:BF:F2:9D:79:79:9B:21:CC:82:49:0B:32:EE:E8 X509v3 Authority Key Identifier: keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/a2xX_3muv_KdeXmbIcyCSQsy7ug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.96.0.0/13 62.24.128.0/17 62.241.160.0/19 78.144.0.0/13 79.77.0.0-79.79.255.255 80.40.0.0/13 81.1.64.0/18 81.86.0.0/16 81.178.0.0/15 83.67.0.0/16 84.43.0.0/17 87.242.128.0/17 89.168.128.0/17 89.240.0.0/14 92.16.0.0/12 145.255.240.0/21 185.24.12.0/22 185.173.120.0/22 185.175.48.0/22 185.175.144.0/22 193.218.99.0/24 194.106.32.0/19 194.247.224.0/19 195.112.0.0/18 195.137.0.0/17 195.149.0.0/18 212.1.128.0/19 212.67.96.0/19 212.74.96.0/19 212.139.0.0/16 212.159.128.0/18 213.78.0.0/16 IPv6: 2001:7e0::/32 2001:4a00::/27 2a00:4340::/32 2a0b:db00::/29 2a0b:e900::/29 Signature Algorithm: sha256WithRSAEncryption 74:36:cf:92:84:8b:02:14:d9:88:d9:81:4f:1e:5c:f1:51:9c: e0:c9:60:76:ca:60:02:21:ce:f8:3b:39:f2:45:6d:3a:51:94: 81:2a:f9:32:f5:64:78:7a:6f:ca:a5:a9:9a:71:bc:7d:80:48: a7:0e:0a:1f:ca:55:b4:c1:91:7c:18:3c:d6:36:ca:8f:03:7f: 62:e4:12:42:04:a2:41:52:24:50:4d:79:c8:cf:5d:c5:6b:ef: 65:b7:1d:a5:81:77:a2:a0:95:b6:8b:76:c9:cf:0d:24:0d:e3: 51:ee:fd:31:54:8b:06:18:f2:6e:4d:69:d6:5e:1f:44:8b:41: 6c:bf:fa:16:9f:c0:81:54:fa:e4:65:55:75:60:16:62:c7:b9: 89:b8:bb:06:5d:27:a0:8f:47:c7:07:e9:bd:8d:ca:a8:42:77: 3e:c7:5b:c6:d6:3b:bc:a7:3e:9f:12:52:10:7b:00:90:61:fa: 63:4f:d1:8a:10:b8:09:55:64:81:e3:64:d3:17:bf:7e:60:af: 6c:e0:d2:a1:21:b3:e9:c8:8c:32:33:f9:48:f2:34:ab:91:2e: a9:d7:88:11:5e:f2:a4:8c:b7:0b:61:16:22:09:9a:03:f8:ab: 5b:bf:ab:1d:1f:ee:c0:7f:e8:62:db:6f:3e:aa:d3:f2:7a:9f: ad:12:cb:27 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZtFt7KvTAnvJly0aE3hVKy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh ZGIzZWMwHhcNMjUxMjIyMTEwMDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjZjNTdmZjc5YWViZmYyOWQ3OTc5OWIyMWNjODI0OTBiMzJlZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQGFTpak75wkXkUivyq/Zlo5RLlZ mX1GjSqrX7jxZ8bV38L4k/ok139qdHfnnv9fYR1mQ5ZeL4z4Sw4enASXW/z1m8p8 8RLb6m1aLEKloceTr7VgGP3HI0rY1OMQ1OhjuaFy7CLWYpE/oOcK9OG4YBnFPSn2 I483RuxM58Cv29DJYp1BvRb4l9a1z7koaHER8aiEZ5qO4gS1TJsoF48lEuFI+o3u Mb24hTae1KQ341qQlxj6uPg6Tu5plep262qz+qaQJkzMYbzjycVTAGsRJ1Oi/MNy Rr/OIw5n0fQH/db2nD0rFLJdr4l10jbA74YYShwB48o7oN8NDAXHuEthVQIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFGtsV/95rr/ynXl5myHMgkkLMu7oMB8GA1UdIwQY MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt MGQ4ZjdkZDhjY2U2LzEvYTJ4WF8zbXV2X0tkZVhtYkljeUNTUXN5N3VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2 LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBAYIKwYBBQUHAQcBAf8EgfQwgfEwgcMEAgABMIG8AwMD AmADBAc+GIADBAU+8aADAwNOkDAKAwMAT00DAwRPQAMDA1AoAwQGUQFAAwMAUVYD AwFRsgMDAFNDAwQHVCsAAwQHV/KAAwQHWaiAAwMCWfADAwRcEAMEA5H/8AMEArkY DAMEArmteAMEArmvMAMEArmvkAMEAMHaYwMEBcJqIAMEBcL34AMEBsNwAAMEB8OJ AAMEBsOVAAMEBdQBgAMEBdRDYAMEBdRKYAMDANSLAwQG1J+AAwMA1U4wKQQCAAIw IwMFACABB+ADBQUgAUoAAwUAKgBDQAMFAyoL2wADBQMqC+kAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Ns+ShIsCFNmI2YFPHlzxUZzgyWB2ymACIc74OznyRW06UZSBKvky 9WR4em/Kpamacbx9gEinDgofylW0wZF8GDzWNsqPA39i5BJCBKJBUiRQTXnIz13F a+9ltx2lgXeioJW2i3bJzw0kDeNR7v0xVIsGGPJuTWnWXh9Ei0Fsv/oWn8CBVPrk ZVV1YBZix7mJuLsGXSegj0fHB+m9jcqoQnc+x1vG1ju8pz6fElIQewCQYfpjT9GK ELgJVWSB42TTF79+YK9s4NKhIbPpyIwyM/lI8jSrkS6p14gRXvKkjLcLYRYiCZoD +Ktbv6sdH+7Af+hi228+qtPyep+tEssn -----END CERTIFICATE-----Generated at Sat Dec 27 07:21:33 2025 by rpki-client