This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/tDQpfMPQ62TUhzzN7eQO6cYHshw.roa File: tDQpfMPQ62TUhzzN7eQO6cYHshw.roa (raw, json) Hash identifier: J3cKO6Wf/6hxB4gMHmpPso+VbrUvrPBulC0sm0JJPXE= Subject key identifier: B4:34:29:7C:C3:D0:EB:64:D4:87:3C:CD:ED:E4:0E:E9:C6:07:B2:1C Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f Certificate serial: 019B4B7E5834411F77636F0A53511F7DE147 Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/tDQpfMPQ62TUhzzN7eQO6cYHshw.roa Signing time: Tue 23 Dec 2025 13:55:29 +0000 ROA not before: Tue 23 Dec 2025 13:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9146 IP address blocks: 31.176.128.0/17 maxlen: 21 31.176.128.0/19 maxlen: 19 31.176.128.0/20 maxlen: 20 31.176.144.0/20 maxlen: 20 31.176.160.0/19 maxlen: 19 31.176.160.0/20 maxlen: 20 31.176.176.0/20 maxlen: 20 31.176.192.0/20 maxlen: 20 31.176.208.0/21 maxlen: 21 31.176.216.0/22 maxlen: 22 31.176.220.0/22 maxlen: 22 31.176.224.0/20 maxlen: 20 31.176.240.0/20 maxlen: 20 37.203.64.0/18 maxlen: 21 37.203.64.0/20 maxlen: 20 37.203.80.0/20 maxlen: 20 37.203.96.0/20 maxlen: 20 37.203.112.0/22 maxlen: 22 37.203.120.0/22 maxlen: 22 37.203.124.0/22 maxlen: 22 80.65.64.0/19 maxlen: 21 80.65.64.0/20 maxlen: 20 80.65.64.0/21 maxlen: 21 80.65.64.0/22 maxlen: 22 80.65.68.0/22 maxlen: 22 80.65.72.0/21 maxlen: 21 80.65.72.0/22 maxlen: 22 80.65.76.0/22 maxlen: 22 80.65.80.0/20 maxlen: 20 80.65.80.0/21 maxlen: 21 80.65.80.0/22 maxlen: 22 80.65.84.0/22 maxlen: 22 80.65.88.0/21 maxlen: 21 80.65.88.0/22 maxlen: 22 80.65.92.0/22 maxlen: 22 85.92.224.0/19 maxlen: 19 85.92.226.0/24 maxlen: 24 85.92.227.0/24 maxlen: 24 85.92.228.0/23 maxlen: 23 85.92.230.0/24 maxlen: 24 85.92.232.0/21 maxlen: 21 85.92.240.0/21 maxlen: 21 85.92.252.0/22 maxlen: 26 89.146.128.0/18 maxlen: 21 89.146.128.0/20 maxlen: 20 89.146.144.0/20 maxlen: 20 89.146.160.0/20 maxlen: 20 89.146.176.0/20 maxlen: 20 92.36.128.0/17 maxlen: 21 92.36.128.0/19 maxlen: 19 92.36.128.0/21 maxlen: 21 92.36.136.0/21 maxlen: 21 92.36.144.0/20 maxlen: 20 92.36.160.0/19 maxlen: 19 92.36.160.0/20 maxlen: 20 92.36.176.0/20 maxlen: 20 92.36.192.0/19 maxlen: 19 92.36.192.0/20 maxlen: 20 92.36.192.0/21 maxlen: 21 92.36.208.0/20 maxlen: 20 92.36.224.0/19 maxlen: 19 92.36.224.0/20 maxlen: 20 92.36.232.0/22 maxlen: 22 92.36.236.0/22 maxlen: 22 92.36.240.0/21 maxlen: 21 109.163.128.0/18 maxlen: 18 109.163.128.0/19 maxlen: 19 109.163.128.0/22 maxlen: 22 109.163.132.0/22 maxlen: 22 109.163.136.0/21 maxlen: 21 109.163.144.0/23 maxlen: 23 109.163.146.0/24 maxlen: 24 109.163.147.0/24 maxlen: 24 109.163.148.0/22 maxlen: 22 109.163.152.0/21 maxlen: 21 109.163.160.0/20 maxlen: 20 109.163.160.0/21 maxlen: 21 109.163.168.0/21 maxlen: 23 109.163.168.0/23 maxlen: 23 109.163.170.0/24 maxlen: 24 109.163.171.0/24 maxlen: 24 109.163.172.0/22 maxlen: 22 109.163.176.0/20 maxlen: 21 109.163.176.0/21 maxlen: 21 109.163.184.0/21 maxlen: 21 109.163.184.0/22 maxlen: 22 109.163.188.0/23 maxlen: 23 109.163.190.0/23 maxlen: 23 109.175.0.0/17 maxlen: 21 109.175.0.0/19 maxlen: 19 109.175.4.0/23 maxlen: 23 109.175.6.0/23 maxlen: 23 109.175.8.0/24 maxlen: 24 109.175.12.0/23 maxlen: 23 109.175.14.0/23 maxlen: 23 109.175.15.0/24 maxlen: 24 109.175.16.0/22 maxlen: 22 109.175.20.0/23 maxlen: 23 109.175.22.0/23 maxlen: 23 109.175.24.0/24 maxlen: 24 109.175.26.0/24 maxlen: 24 109.175.28.0/23 maxlen: 23 109.175.30.0/24 maxlen: 24 109.175.32.0/19 maxlen: 19 109.175.32.0/21 maxlen: 21 109.175.38.0/23 maxlen: 23 109.175.40.0/22 maxlen: 22 109.175.44.0/23 maxlen: 23 109.175.46.0/23 maxlen: 23 109.175.48.0/20 maxlen: 20 109.175.64.0/20 maxlen: 20 109.175.96.0/19 maxlen: 19 109.175.96.0/22 maxlen: 22 109.175.96.0/23 maxlen: 23 109.175.98.0/23 maxlen: 23 109.175.100.0/22 maxlen: 22 109.175.100.0/23 maxlen: 23 109.175.102.0/23 maxlen: 23 109.175.104.0/22 maxlen: 22 109.175.104.0/23 maxlen: 23 109.175.106.0/23 maxlen: 23 109.175.108.0/22 maxlen: 22 109.175.112.0/22 maxlen: 22 109.175.116.0/22 maxlen: 22 109.175.120.0/22 maxlen: 22 109.175.124.0/22 maxlen: 22 185.12.76.0/24 maxlen: 24 185.12.78.0/23 maxlen: 23 195.222.32.0/19 maxlen: 21 195.222.32.0/20 maxlen: 20 195.222.32.0/21 maxlen: 21 195.222.40.0/21 maxlen: 21 195.222.48.0/20 maxlen: 20 195.222.48.0/21 maxlen: 21 195.222.49.0/24 maxlen: 24 195.222.56.0/21 maxlen: 21 2a02:27b0::/32 maxlen: 64 2a02:27b0:4100::/40 maxlen: 40 2a02:27b0:4200::/40 maxlen: 40 2a02:27b0:4300::/40 maxlen: 40 2a02:27b0:4400::/40 maxlen: 40 2a02:27b0:4500::/40 maxlen: 40 2a02:27b0:4800::/40 maxlen: 40 2a02:27b0:4900::/40 maxlen: 40 2a02:27b0:4a00::/40 maxlen: 40 2a02:27b0:4b00::/40 maxlen: 40 2a02:27b0:4c00::/40 maxlen: 40 2a02:27b0:4d00::/40 maxlen: 40 2a02:27b0:5300::/40 maxlen: 40 2a02:27b0:5500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.mft rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:7e:58:34:41:1f:77:63:6f:0a:53:51:1f:7d:e1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f Validity Not Before: Dec 23 13:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b434297cc3d0eb64d4873ccdede40ee9c607b21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:6a:dd:5d:6d:6e:23:c2:0e:a6:43:f8:f5: 7e:5a:f7:48:3d:fd:b8:d2:2a:eb:b7:39:df:37:a4: 68:26:67:7e:87:a0:1e:ef:e0:a0:85:9b:d8:d0:00: 7e:a7:e8:fb:36:81:cd:6e:c1:c7:b4:7e:d2:26:99: de:2e:dd:9d:e2:a4:a2:2f:b5:d1:f6:23:72:f9:df: d4:fe:b2:91:02:12:7f:06:98:db:6f:ce:0a:82:43: 44:ca:ab:72:ef:df:20:56:c9:29:25:0f:6a:a0:80: 73:95:19:94:4e:dd:d0:16:12:4b:c7:aa:27:a7:66: 59:71:72:33:36:bd:28:5c:ad:46:57:ad:c4:0c:be: c0:00:c8:cd:9b:fc:c5:90:0d:20:aa:3b:0c:f7:05: 38:6e:00:77:60:2d:44:11:5b:2e:8a:86:58:b4:27: 5f:68:46:ac:ae:d0:a7:ad:33:f6:1d:1f:49:4d:4d: 67:74:43:8a:45:e4:74:f5:48:50:34:69:98:ec:4a: dd:df:53:8e:8a:70:4c:37:a8:69:f9:65:bc:66:25: 21:6a:03:b0:03:35:fa:0a:44:ff:c6:65:b8:c1:49: 0d:8c:c0:63:33:ad:56:16:b7:07:60:75:96:69:f8: fc:ea:22:00:21:0f:c8:97:bf:0b:6d:1a:31:d2:67: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:34:29:7C:C3:D0:EB:64:D4:87:3C:CD:ED:E4:0E:E9:C6:07:B2:1C X509v3 Authority Key Identifier: keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/tDQpfMPQ62TUhzzN7eQO6cYHshw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.176.128.0/17 37.203.64.0/18 80.65.64.0/19 85.92.224.0/19 89.146.128.0/18 92.36.128.0/17 109.163.128.0/18 109.175.0.0/17 185.12.76.0/24 185.12.78.0/23 195.222.32.0/19 IPv6: 2a02:27b0::/32 Signature Algorithm: sha256WithRSAEncryption a0:9f:7a:0c:01:73:bb:5f:9e:cc:65:9c:40:7f:61:4a:cf:7c: 8d:4e:da:4f:03:47:b6:f0:fd:98:43:76:61:5f:95:5b:cb:e9: a6:dc:92:54:33:e1:46:b1:a7:7f:74:4d:f2:57:23:47:16:f8: 39:2f:a5:dc:07:06:76:6b:0f:8d:7c:ba:22:e2:a0:a0:72:d6: 30:45:e9:6c:ff:d5:78:42:63:4d:32:cb:3a:5c:33:b4:ef:f6: e8:6f:cd:a5:99:be:94:c1:1a:48:66:39:32:72:bd:8b:9a:13: 66:14:e9:ab:04:c2:cc:06:e7:6c:32:9e:b8:04:e4:8e:ae:2b: 47:4f:84:a5:2a:cd:84:31:2c:37:94:eb:e0:ca:f8:cd:6a:d3: 0c:ba:11:44:ba:e2:45:37:97:d8:50:1f:4b:78:48:94:15:29: aa:f1:3e:08:7c:60:06:68:38:71:2e:09:f5:76:ae:a8:83:89: b2:1e:bd:c9:af:13:bb:8d:64:cb:5a:cc:bd:d7:47:91:62:6b: 9f:1e:29:b7:75:a5:8b:90:63:79:dd:14:3b:3b:96:70:f3:b6: a3:2f:76:db:bf:d0:7a:e6:38:e0:06:13:e2:41:eb:9b:3a:7d: 22:f3:15:69:18:b5:41:cd:a6:a7:a9:87:71:27:70:02:15:f1: 55:a4:ae:37 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZtLflg0QR93Y28KU1EffeFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5ZTViMDE0ZTU2OTE4NmZiODRhMjAyNDk1NGNjY2M5Yzkx YjFlM2YwHhcNMjUxMjIzMTM1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDM0Mjk3Y2MzZDBlYjY0ZDQ4NzNjY2RlZGU0MGVlOWM2MDdiMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUdq3V1tbiPCDqZD+PV+WvdIPf24 0irrtznfN6RoJmd+h6Ae7+CghZvY0AB+p+j7NoHNbsHHtH7SJpneLt2d4qSiL7XR 9iNy+d/U/rKRAhJ/Bpjbb84KgkNEyqty798gVskpJQ9qoIBzlRmUTt3QFhJLx6on p2ZZcXIzNr0oXK1GV63EDL7AAMjNm/zFkA0gqjsM9wU4bgB3YC1EEVsuioZYtCdf aEasrtCnrTP2HR9JTU1ndEOKReR09UhQNGmY7Erd31OOinBMN6hp+WW8ZiUhagOw AzX6CkT/xmW4wUkNjMBjM61WFrcHYHWWafj86iIAIQ/Il78LbRox0mdIFQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFLQ0KXzD0Otk1Ic8ze3kDunGB7IcMB8GA1UdIwQY MBaAFOnlsBTlaRhvuEogJJVMzMnJGx4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2Qt MmJiMWVmYzU3YTg2LzEvdERRcGZNUFE2MlRVaHp6TjdlUU82Y1lIc2h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kNzM2N2QtN2JiZi00Njk3LTk2Y2QtMmJiMWVmYzU3YTg2 LzEvNmVXd0ZPVnBHRy00U2lBa2xVek15Y2tiSGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQHH7CAAwQG JctAAwQFUEFAAwQFVVzgAwQGWZKAAwQHXCSAAwQGbaOAAwQHba8AAwQAuQxMAwQB uQxOAwQFw94gMA0EAgACMAcDBQAqAiewMA0GCSqGSIb3DQEBCwUAA4IBAQCgn3oM AXO7X57MZZxAf2FKz3yNTtpPA0e28P2YQ3ZhX5Vby+mm3JJUM+FGsad/dE3yVyNH Fvg5L6XcBwZ2aw+NfLoi4qCgctYwRels/9V4QmNNMss6XDO07/bob82lmb6UwRpI Zjkycr2LmhNmFOmrBMLMBudsMp64BOSOritHT4SlKs2EMSw3lOvgyvjNatMMuhFE uuJFN5fYUB9LeEiUFSmq8T4IfGAGaDhxLgn1dq6og4myHr3JrxO7jWTLWsy910eR YmufHim3daWLkGN53RQ7O5Zw87ajL3bbv9B65jjgBhPiQeubOn0i8xVpGLVBzaan qYdxJ3ACFfFVpK43 -----END CERTIFICATE-----Generated at Wed Dec 24 10:28:36 2025 by rpki-client