This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/aJGyBw7nv2EawjPo3wD_Y42gKSg.roa File: aJGyBw7nv2EawjPo3wD_Y42gKSg.roa (raw, json) Hash identifier: 7nd/5C3vLV4aF0pS8SU+HWw+oAfsq3HH2A9GvZHaOLo= Subject key identifier: 68:91:B2:07:0E:E7:BF:61:1A:C2:33:E8:DF:00:FF:63:8D:A0:29:28 Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 019B220D35E2F12471BF419BE1EEE44CC71E Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/aJGyBw7nv2EawjPo3wD_Y42gKSg.roa Signing time: Mon 15 Dec 2025 12:47:29 +0000 ROA not before: Mon 15 Dec 2025 12:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197540 IP address blocks: 2.56.96.0/22 maxlen: 22 5.45.96.0/20 maxlen: 32 5.181.48.0/22 maxlen: 22 5.252.224.0/22 maxlen: 22 37.120.160.0/19 maxlen: 32 37.120.160.0/20 maxlen: 22 37.120.176.0/22 maxlen: 22 37.120.182.0/23 maxlen: 24 37.120.184.0/21 maxlen: 22 37.221.192.0/21 maxlen: 32 45.9.60.0/22 maxlen: 22 45.83.104.0/22 maxlen: 22 45.90.4.0/22 maxlen: 22 45.129.180.0/22 maxlen: 22 45.132.244.0/22 maxlen: 22 45.136.28.0/22 maxlen: 22 45.142.176.0/22 maxlen: 22 45.157.176.0/22 maxlen: 22 46.38.224.0/20 maxlen: 32 46.38.240.0/21 maxlen: 32 46.38.248.0/22 maxlen: 32 46.38.252.0/22 maxlen: 32 46.232.248.0/22 maxlen: 22 81.16.16.0/22 maxlen: 22 85.209.48.0/22 maxlen: 22 85.235.64.0/22 maxlen: 22 89.58.0.0/22 maxlen: 22 89.58.4.0/22 maxlen: 22 89.58.8.0/22 maxlen: 22 89.58.12.0/22 maxlen: 22 89.58.16.0/21 maxlen: 21 89.58.20.0/24 maxlen: 24 89.58.24.0/22 maxlen: 22 89.58.28.0/22 maxlen: 22 89.58.32.0/22 maxlen: 22 89.58.36.0/22 maxlen: 22 89.58.40.0/22 maxlen: 22 89.58.44.0/22 maxlen: 22 89.58.48.0/22 maxlen: 22 89.58.52.0/22 maxlen: 22 89.58.56.0/22 maxlen: 22 89.58.60.0/22 maxlen: 22 91.132.144.0/22 maxlen: 22 91.204.44.0/22 maxlen: 24 92.60.36.0/22 maxlen: 22 93.177.64.0/22 maxlen: 22 152.89.104.0/22 maxlen: 22 159.195.1.0/24 maxlen: 24 159.195.4.0/22 maxlen: 22 159.195.8.0/22 maxlen: 22 159.195.20.0/22 maxlen: 22 159.195.24.0/22 maxlen: 22 159.195.28.0/22 maxlen: 22 159.195.32.0/22 maxlen: 22 159.195.36.0/22 maxlen: 22 159.195.40.0/22 maxlen: 22 159.195.44.0/22 maxlen: 22 159.195.48.0/22 maxlen: 22 159.195.52.0/22 maxlen: 22 159.195.56.0/22 maxlen: 22 159.195.60.0/22 maxlen: 22 159.195.64.0/22 maxlen: 22 159.195.68.0/22 maxlen: 22 159.195.72.0/22 maxlen: 22 159.195.76.0/22 maxlen: 22 159.195.80.0/22 maxlen: 22 159.195.84.0/22 maxlen: 22 159.195.96.0/22 maxlen: 22 159.195.100.0/22 maxlen: 22 185.16.60.0/22 maxlen: 32 185.162.248.0/22 maxlen: 32 185.163.116.0/22 maxlen: 22 185.170.112.0/22 maxlen: 32 185.183.156.0/22 maxlen: 32 185.194.140.0/22 maxlen: 22 185.207.104.0/22 maxlen: 32 185.228.136.0/22 maxlen: 32 185.233.104.0/22 maxlen: 32 185.243.8.0/22 maxlen: 32 185.244.192.0/22 maxlen: 32 188.68.32.0/19 maxlen: 32 192.145.44.0/22 maxlen: 22 193.30.120.0/22 maxlen: 22 193.31.24.0/22 maxlen: 22 194.13.80.0/22 maxlen: 22 194.55.12.0/22 maxlen: 22 194.59.204.0/22 maxlen: 22 195.128.100.0/22 maxlen: 22 213.109.160.0/22 maxlen: 22 2a03:4000::/32 maxlen: 48 2a03:4000:63:1000::/52 maxlen: 52 2a03:4001::/32 maxlen: 48 2a0a:4cc0::/40 maxlen: 40 2a0a:4cc0::/43 maxlen: 43 2a0a:4cc0:40::/43 maxlen: 43 2a0a:4cc0:40:2000::/56 maxlen: 56 2a0a:4cc0:80::/43 maxlen: 43 2a0a:4cc0:c0::/43 maxlen: 43 2a0a:4cc0:c1:6000::/52 maxlen: 52 2a0a:4cc0:c1:b000::/52 maxlen: 52 2a0a:4cc0:c1:d000::/52 maxlen: 52 2a0a:4cc0:c1:e000::/52 maxlen: 52 2a0a:4cc0:c1:f000::/52 maxlen: 52 2a0a:4cc0:c2:1000::/52 maxlen: 52 2a0a:4cc0:c2:2000::/52 maxlen: 52 2a0a:4cc0:c2:3000::/52 maxlen: 52 2a0a:4cc0:c2:4000::/52 maxlen: 52 2a0a:4cc0:c2:5000::/52 maxlen: 52 2a0a:4cc0:fe::/48 maxlen: 48 2a0a:4cc0:ff::/48 maxlen: 48 2a0a:4cc0:ff:1000::/52 maxlen: 52 2a0a:4cc0:100::/48 maxlen: 48 2a0a:4cc0:104::/48 maxlen: 48 2a0a:4cc0:104::/52 maxlen: 52 2a0a:4cc0:104:1000::/52 maxlen: 52 2a0a:4cc0:2000:4000::/56 maxlen: 56 2a0a:4cc0:2000:4200::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:0d:35:e2:f1:24:71:bf:41:9b:e1:ee:e4:4c:c7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Dec 15 12:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6891b2070ee7bf611ac233e8df00ff638da02928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:aa:db:da:40:1d:aa:dd:30:ea:cf:80:ec: 03:9c:7c:37:7e:1a:36:10:0f:33:ad:f5:b9:63:0d: 5e:09:f9:28:79:07:bc:cb:c5:63:c5:d2:6f:37:fe: 47:0a:d4:42:36:65:38:07:a7:7a:a7:ff:15:ea:f2: 8b:ce:5f:59:68:97:9a:78:7d:17:40:e1:66:cc:d9: 71:d6:4d:ec:07:56:aa:46:21:40:b1:d9:bd:bd:48: 9e:82:7f:69:51:c2:b2:f7:3d:fc:aa:84:ab:dc:3a: 4a:41:84:b3:a6:d0:06:5a:ba:86:fd:e5:59:9b:09: 13:8f:cf:7e:b2:68:6b:08:a4:4d:68:0d:76:a3:1a: 7c:f1:98:0a:a6:4c:8f:7f:31:26:18:4a:6d:a7:4e: 05:e8:07:31:55:28:74:be:fc:1a:1c:88:0f:a4:bf: 2e:48:83:4a:47:13:5f:be:f7:3f:d7:7f:e0:f6:7f: 64:3c:44:d0:c2:cd:5d:ce:05:b0:22:37:88:74:9d: 6b:cc:ba:63:89:6a:91:e9:c3:01:a5:13:78:16:c0: d9:e9:fb:f8:1b:67:fc:b0:a5:4b:cc:d2:23:5d:88: 5b:6e:87:af:2f:eb:5f:fc:be:5d:77:55:ec:fd:e2: b1:88:b9:a4:41:32:e1:ef:d7:bf:74:06:a5:89:c7: 63:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:91:B2:07:0E:E7:BF:61:1A:C2:33:E8:DF:00:FF:63:8D:A0:29:28 X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/aJGyBw7nv2EawjPo3wD_Y42gKSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.96.0/22 5.45.96.0/20 5.181.48.0/22 5.252.224.0/22 37.120.160.0/19 37.221.192.0/21 45.9.60.0/22 45.83.104.0/22 45.90.4.0/22 45.129.180.0/22 45.132.244.0/22 45.136.28.0/22 45.142.176.0/22 45.157.176.0/22 46.38.224.0/19 46.232.248.0/22 81.16.16.0/22 85.209.48.0/22 85.235.64.0/22 89.58.0.0/18 91.132.144.0/22 91.204.44.0/22 92.60.36.0/22 93.177.64.0/22 152.89.104.0/22 159.195.1.0/24 159.195.4.0-159.195.11.255 159.195.20.0-159.195.87.255 159.195.96.0/21 185.16.60.0/22 185.162.248.0/22 185.163.116.0/22 185.170.112.0/22 185.183.156.0/22 185.194.140.0/22 185.207.104.0/22 185.228.136.0/22 185.233.104.0/22 185.243.8.0/22 185.244.192.0/22 188.68.32.0/19 192.145.44.0/22 193.30.120.0/22 193.31.24.0/22 194.13.80.0/22 194.55.12.0/22 194.59.204.0/22 195.128.100.0/22 213.109.160.0/22 IPv6: 2a03:4000::/31 2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff 2a0a:4cc0:104::/48 2a0a:4cc0:2000:4000::/56 2a0a:4cc0:2000:4200::/56 Signature Algorithm: sha256WithRSAEncryption 8b:c0:db:94:c2:2c:03:95:99:ca:85:a4:ce:a6:4d:11:be:68: 1f:05:6a:62:c8:79:fe:28:e2:67:8f:6b:8b:31:31:8e:6f:92: fd:70:e9:49:e5:2b:c6:74:8b:fa:94:f8:8f:53:64:97:65:b1: bf:d6:7e:ab:90:3d:6f:58:f5:40:62:52:3d:94:f2:43:f5:24: c1:9e:3c:1d:7c:0d:c1:f6:4d:77:f4:a9:e3:59:ba:ed:63:c4: 0b:4a:9d:41:f0:bb:3a:31:22:17:e1:52:88:99:fe:c4:f3:57: d9:3f:97:fa:44:bc:86:b5:14:9b:09:3c:73:98:50:38:c2:71: dd:3e:2f:82:84:3e:1c:6d:c5:d3:e2:d7:ee:37:22:fd:b4:63: a1:ca:ce:de:03:ef:72:02:bd:4b:6c:03:7a:fe:ee:e3:4a:8f: 3c:e0:bd:b3:0e:ec:07:60:60:45:bb:83:da:8c:22:2b:6e:23: 2a:f1:3b:25:d2:4e:6a:96:1c:a1:2d:cc:33:98:e6:f2:dd:b3: ba:fc:da:a1:ed:8a:06:c9:fc:d7:94:d0:cb:8e:9c:85:4b:d4: b3:6c:ec:66:ad:ba:1e:15:2d:f2:ac:e1:c3:e8:cb:b4:83:4d: 91:17:5f:69:42:4e:88:48:7c:23:a8:23:22:40:8f:20:47:01: 5d:d9:fc:9e -----BEGIN CERTIFICATE----- MIIGdTCCBV2gAwIBAgISAZsiDTXi8SRxv0Gb4e7kTMceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjUxMjE1MTI0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODkxYjIwNzBlZTdiZjYxMWFjMjMzZThkZjAwZmY2MzhkYTAyOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSOq29pAHardMOrPgOwDnHw3fho2 EA8zrfW5Yw1eCfkoeQe8y8VjxdJvN/5HCtRCNmU4B6d6p/8V6vKLzl9ZaJeaeH0X QOFmzNlx1k3sB1aqRiFAsdm9vUiegn9pUcKy9z38qoSr3DpKQYSzptAGWrqG/eVZ mwkTj89+smhrCKRNaA12oxp88ZgKpkyPfzEmGEptp04F6AcxVSh0vvwaHIgPpL8u SINKRxNfvvc/13/g9n9kPETQws1dzgWwIjeIdJ1rzLpjiWqR6cMBpRN4FsDZ6fv4 G2f8sKVLzNIjXYhbboevL+tf/L5dd1Xs/eKxiLmkQTLh79e/dAalicdjsQIDAQAB o4IDgTCCA30wHQYDVR0OBBYEFGiRsgcO579hGsIz6N8A/2ONoCkoMB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEvYUpHeUJ3N252MkVhd2pQbzN3RF9ZNDJnS1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBlQYIKwYBBQUHAQcBAf8EggGEMIIBgDCCAT4EAgABMIIB NgMEAgI4YAMEBAUtYAMEAgW1MAMEAgX84AMEBSV4oAMEAyXdwAMEAi0JPAMEAi1T aAMEAi1aBAMEAi2BtAMEAi2E9AMEAi2IHAMEAi2OsAMEAi2dsAMEBS4m4AMEAi7o +AMEAlEQEAMEAlXRMAMEAlXrQAMEBlk6AAMEAluEkAMEAlvMLAMEAlw8JAMEAl2x QAMEAphZaAMEAJ/DATAMAwQCn8MEAwQCn8MIMAwDBAKfwxQDBAOfw1ADBAOfw2AD BAK5EDwDBAK5ovgDBAK5o3QDBAK5qnADBAK5t5wDBAK5wowDBAK5z2gDBAK55IgD BAK56WgDBAK58wgDBAK59MADBAW8RCADBALAkSwDBALBHngDBALBHxgDBALCDVAD BALCNwwDBALCO8wDBALDgGQDBALVbaAwPAQCAAIwNgMFASoDQAAwEAMFBioKTMAD BwAqCkzAAQADBwAqCkzAAQQDCAAqCkzAIABAAwgAKgpMwCAAQjANBgkqhkiG9w0B AQsFAAOCAQEAi8DblMIsA5WZyoWkzqZNEb5oHwVqYsh5/ijiZ49rizExjm+S/XDp SeUrxnSL+pT4j1Nkl2Wxv9Z+q5A9b1j1QGJSPZTyQ/UkwZ48HXwNwfZNd/Sp41m6 7WPEC0qdQfC7OjEiF+FSiJn+xPNX2T+X+kS8hrUUmwk8c5hQOMJx3T4vgoQ+HG3F 0+LX7jci/bRjocrO3gPvcgK9S2wDev7u40qPPOC9sw7sB2BgRbuD2owiK24jKvE7 JdJOapYcoS3MM5jm8t2zuvzaoe2KBsn815TQy46chUvUs2zsZq26HhUt8qzhw+jL tINNkRdfaUJOiEh8I6gjIkCPIEcBXdn8ng== -----END CERTIFICATE-----Generated at Sat Dec 20 11:11:07 2025 by rpki-client