This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/Bl6Nbv0jVL_fntRTwRV896gSPRo.roa File: Bl6Nbv0jVL_fntRTwRV896gSPRo.roa (raw, json) Hash identifier: fEF6EcZLjEuVY7FEXr3ZQggRTNtIIRsOHKu0ceYbmtQ= Subject key identifier: 06:5E:8D:6E:FD:23:54:BF:DF:9E:D4:53:C1:15:7C:F7:A8:12:3D:1A Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872 Certificate serial: 019B130E685CAD938A6B6ACEC7A23BF74F5D Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/Bl6Nbv0jVL_fntRTwRV896gSPRo.roa Signing time: Fri 12 Dec 2025 14:54:29 +0000 ROA not before: Fri 12 Dec 2025 14:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21369 IP address blocks: 157.203.6.0/23 maxlen: 23 157.203.6.0/24 maxlen: 24 157.203.7.0/24 maxlen: 24 157.203.36.0/23 maxlen: 23 157.203.36.0/24 maxlen: 24 157.203.37.0/24 maxlen: 24 157.203.40.0/23 maxlen: 23 157.203.40.0/24 maxlen: 24 157.203.41.0/24 maxlen: 24 157.203.42.0/23 maxlen: 23 157.203.42.0/24 maxlen: 24 157.203.43.0/24 maxlen: 24 157.203.48.0/23 maxlen: 23 157.203.48.0/24 maxlen: 24 157.203.49.0/24 maxlen: 24 157.203.52.0/23 maxlen: 23 157.203.52.0/24 maxlen: 24 157.203.53.0/24 maxlen: 24 157.203.56.0/23 maxlen: 23 157.203.56.0/24 maxlen: 24 157.203.57.0/24 maxlen: 24 157.203.58.0/23 maxlen: 23 157.203.59.0/24 maxlen: 24 157.203.60.0/23 maxlen: 23 157.203.60.0/24 maxlen: 24 157.203.61.0/24 maxlen: 24 157.203.62.0/23 maxlen: 23 157.203.62.0/24 maxlen: 24 157.203.92.0/23 maxlen: 23 157.203.120.0/23 maxlen: 23 157.203.120.0/24 maxlen: 24 157.203.142.0/24 maxlen: 24 157.203.143.0/24 maxlen: 24 157.203.176.0/23 maxlen: 23 157.203.176.0/24 maxlen: 24 157.203.177.0/24 maxlen: 24 157.203.178.0/23 maxlen: 23 157.203.178.0/24 maxlen: 24 157.203.179.0/24 maxlen: 24 157.203.180.0/23 maxlen: 23 157.203.180.0/24 maxlen: 24 157.203.181.0/24 maxlen: 24 157.203.242.0/23 maxlen: 23 157.203.242.0/24 maxlen: 24 157.203.243.0/24 maxlen: 24 157.203.254.0/23 maxlen: 23 157.203.254.0/24 maxlen: 24 157.203.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:0e:68:5c:ad:93:8a:6b:6a:ce:c7:a2:3b:f7:4f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872 Validity Not Before: Dec 12 14:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=065e8d6efd2354bfdf9ed453c1157cf7a8123d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:9e:6b:ba:79:aa:17:99:7b:7b:73:d2:00: ed:89:8e:4d:ad:8b:ee:ad:d5:e0:c4:07:dc:c5:c8: 06:e3:69:8f:6c:8d:ea:18:18:d6:9c:a3:6e:99:5b: c9:90:f5:2e:bc:6b:cf:1e:44:eb:c4:b2:d9:96:7d: e3:05:7a:69:22:55:0e:32:c7:75:6d:e1:a6:be:2e: d5:1f:13:b4:d3:11:0d:87:54:83:1e:f7:98:8e:48: 97:94:5c:d4:6e:49:6b:fc:a7:9f:61:24:0b:a9:da: eb:df:10:9c:55:d4:22:9e:4a:1c:6e:07:cc:80:ce: 38:35:a7:29:95:67:0c:9e:af:36:85:55:07:f1:ed: 81:b7:8e:f1:0b:00:f2:92:1c:76:03:26:07:03:9d: 11:51:49:9e:a5:79:17:e5:4d:82:a5:1c:e0:98:81: b9:9d:24:8d:51:08:6d:9c:b3:ce:50:18:52:cc:e6: 0c:00:99:3d:50:8b:2c:11:ee:de:25:ad:91:27:40: 4d:e5:11:cd:df:46:17:90:16:81:44:4a:74:3f:71: 09:02:87:6d:48:83:21:55:31:e3:32:06:2a:25:ab: 38:8a:ad:62:bd:71:e3:ec:7c:c5:66:2c:00:58:25: 04:5c:4d:81:eb:7f:44:00:f9:b6:da:e5:e8:f0:74: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5E:8D:6E:FD:23:54:BF:DF:9E:D4:53:C1:15:7C:F7:A8:12:3D:1A X509v3 Authority Key Identifier: keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/Bl6Nbv0jVL_fntRTwRV896gSPRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.203.6.0/23 157.203.36.0/23 157.203.40.0/22 157.203.48.0/23 157.203.52.0/23 157.203.56.0/21 157.203.92.0/23 157.203.120.0/23 157.203.142.0/23 157.203.176.0-157.203.181.255 157.203.242.0/23 157.203.254.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:4c:65:7e:35:b2:b8:04:ab:34:ee:70:bc:46:e7:d7:1d:7b: bc:cc:1f:c9:6b:56:16:13:65:3e:cb:35:a8:04:07:3b:a8:a8: 48:68:50:8a:58:fd:07:88:ba:fa:5e:8a:ae:7d:af:f0:7e:dc: 80:37:dd:e1:cb:3b:df:b7:85:8c:c1:28:c0:7a:01:2d:21:40: 52:81:9d:c8:7c:09:9b:de:a5:70:21:02:8f:c1:d0:32:7e:92: 8d:10:44:11:d8:99:73:e4:16:a0:f1:8d:8f:98:a8:90:d7:1c: f5:50:8e:9e:b4:bf:a8:7d:27:d8:cb:46:7a:b4:a9:23:b6:80: 1c:73:ae:6b:a8:71:5f:dd:50:c3:4b:c0:2a:03:f2:53:44:92: 4b:4a:01:39:82:46:ce:4f:fd:3c:10:85:78:72:85:f6:70:ff: a3:8b:e0:82:47:6d:bb:d9:c6:d7:bb:5b:52:fb:5d:3e:0f:2c: ea:bf:bb:ab:c9:47:98:b5:94:cc:fa:81:f7:cc:98:7d:cc:be: 67:12:09:7f:05:89:68:21:8b:c7:1c:db:7e:4c:39:33:3d:78: ef:ec:f9:50:50:95:e9:80:7a:c2:08:8e:72:7c:73:3b:80:72: 26:0c:8e:6f:30:72:0e:d7:a9:b0:64:dd:af:c0:f3:a4:12:b3: 62:46:66:cb -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZsTDmhcrZOKa2rOx6I7909dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NWI3ODk5ODkzYjllMjQ4YmU2MTU1ZGY0NDVmNjMwYWU1 ZDY4NzIwHhcNMjUxMjEyMTQ1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjVlOGQ2ZWZkMjM1NGJmZGY5ZWQ0NTNjMTE1N2NmN2E4MTIzZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ6ea7p5qheZe3tz0gDtiY5NrYvu rdXgxAfcxcgG42mPbI3qGBjWnKNumVvJkPUuvGvPHkTrxLLZln3jBXppIlUOMsd1 beGmvi7VHxO00xENh1SDHveYjkiXlFzUbklr/KefYSQLqdrr3xCcVdQinkocbgfM gM44NacplWcMnq82hVUH8e2Bt47xCwDykhx2AyYHA50RUUmepXkX5U2CpRzgmIG5 nSSNUQhtnLPOUBhSzOYMAJk9UIssEe7eJa2RJ0BN5RHN30YXkBaBREp0P3EJAodt SIMhVTHjMgYqJas4iq1ivXHj7HzFZiwAWCUEXE2B639EAPm22uXo8HQBjwIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFAZejW79I1S/357UU8EVfPeoEj0aMB8GA1UdIwQY MBaAFFlbeJmJO54ki+YVXfRF9jCuXWhyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OWI3YTEtYjNjOC00NWE2LWI5OTEt N2M3OGViNWIyZDk0LzEvQmw2TmJ2MGpWTF9mbnRSVHdSVjg5NmdTUFJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy83OWI3YTEtYjNjOC00NWE2LWI5OTEtN2M3OGViNWIyZDk0 LzEvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQBncsGAwQB ncskAwQCncsoAwQBncswAwQBncs0AwQDncs4AwQBnctcAwQBnct4AwQBncuOMAwD BASdy7ADBAGdy7QDBAGdy/IDBAGdy/4wDQYJKoZIhvcNAQELBQADggEBAG9MZX41 srgEqzTucLxG59cde7zMH8lrVhYTZT7LNagEBzuoqEhoUIpY/QeIuvpeiq59r/B+ 3IA33eHLO9+3hYzBKMB6AS0hQFKBnch8CZvepXAhAo/B0DJ+ko0QRBHYmXPkFqDx jY+YqJDXHPVQjp60v6h9J9jLRnq0qSO2gBxzrmuocV/dUMNLwCoD8lNEkktKATmC Rs5P/TwQhXhyhfZw/6OL4IJHbbvZxte7W1L7XT4PLOq/u6vJR5i1lMz6gffMmH3M vmcSCX8FiWghi8cc235MOTM9eO/s+VBQlemAesIIjnJ8czuAciYMjm8wcg7XqbBk 3a/A86QSs2JGZss= -----END CERTIFICATE-----Generated at Fri Dec 26 09:34:34 2025 by rpki-client