This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cQ8UZLrmVgtqs1YiOhGltNjYYWU.roa File: cQ8UZLrmVgtqs1YiOhGltNjYYWU.roa (raw, json) Hash identifier: ZuX/wGiPzbihgi8PsyD0uGOSxtFF7hk4kupio9954+U= Subject key identifier: 71:0F:14:64:BA:E6:56:0B:6A:B3:56:22:3A:11:A5:B4:D8:D8:61:65 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B30EBF9668EB4AD9EA61B2A8E2FA0BF1A Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cQ8UZLrmVgtqs1YiOhGltNjYYWU.roa Signing time: Thu 18 Dec 2025 10:05:29 +0000 ROA not before: Thu 18 Dec 2025 10:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8866 IP address blocks: 37.157.136.0/21 maxlen: 24 37.157.160.0/19 maxlen: 24 46.10.0.0/16 maxlen: 24 46.10.128.0/19 maxlen: 19 46.10.166.0/23 maxlen: 24 46.10.193.0/24 maxlen: 24 46.249.64.0/19 maxlen: 24 62.73.64.0/18 maxlen: 24 62.176.64.0/19 maxlen: 24 62.176.96.0/19 maxlen: 24 62.176.96.0/23 maxlen: 24 62.176.117.0/24 maxlen: 24 62.176.124.54/32 maxlen: 32 77.78.0.0/18 maxlen: 24 77.85.0.0/16 maxlen: 24 77.85.128.0/19 maxlen: 24 77.85.160.0/21 maxlen: 24 77.85.168.0/22 maxlen: 24 77.85.172.0/23 maxlen: 24 77.85.174.0/24 maxlen: 24 77.85.176.0/20 maxlen: 24 77.85.196.0/24 maxlen: 24 77.85.198.0/24 maxlen: 24 78.154.0.0/19 maxlen: 24 79.100.0.0/16 maxlen: 24 82.137.64.0/18 maxlen: 24 82.146.0.0/22 maxlen: 24 82.146.6.0/23 maxlen: 24 82.146.11.0/24 maxlen: 24 82.146.24.0/23 maxlen: 24 82.146.28.0/23 maxlen: 24 82.146.31.0/24 maxlen: 24 83.148.64.0/18 maxlen: 24 83.228.0.0/17 maxlen: 32 83.228.61.0/24 maxlen: 24 84.40.64.0/18 maxlen: 24 84.40.89.0/24 maxlen: 24 84.238.128.0/22 maxlen: 24 84.238.134.0/23 maxlen: 24 84.238.136.0/22 maxlen: 24 84.238.140.0/23 maxlen: 24 84.238.142.0/23 maxlen: 24 84.238.144.0/21 maxlen: 24 84.238.152.0/22 maxlen: 24 84.238.156.0/22 maxlen: 24 84.238.165.0/24 maxlen: 24 84.238.167.0/24 maxlen: 24 84.238.168.0/21 maxlen: 24 84.238.178.0/23 maxlen: 24 84.238.180.0/22 maxlen: 24 84.238.192.0/22 maxlen: 24 84.238.204.0/22 maxlen: 24 85.187.22.0/23 maxlen: 24 85.187.24.0/21 maxlen: 24 85.187.32.0/21 maxlen: 24 85.187.46.0/23 maxlen: 24 85.187.64.0/18 maxlen: 24 87.116.82.0/24 maxlen: 24 87.126.0.0/16 maxlen: 24 87.126.134.0/24 maxlen: 24 87.243.80.0/20 maxlen: 24 87.243.96.0/21 maxlen: 24 87.243.104.0/21 maxlen: 24 87.243.112.0/22 maxlen: 22 87.243.116.0/22 maxlen: 24 87.243.120.0/21 maxlen: 24 87.254.160.0/19 maxlen: 24 87.254.160.0/23 maxlen: 24 87.254.162.0/23 maxlen: 24 87.254.162.0/24 maxlen: 24 87.254.163.0/24 maxlen: 24 87.254.164.0/23 maxlen: 24 87.254.164.0/24 maxlen: 24 87.254.165.0/24 maxlen: 24 87.254.166.0/23 maxlen: 24 87.254.168.0/24 maxlen: 24 87.254.169.0/24 maxlen: 24 87.254.170.0/23 maxlen: 24 87.254.172.0/23 maxlen: 24 87.254.172.0/24 maxlen: 24 87.254.173.0/24 maxlen: 24 88.87.0.0/19 maxlen: 24 90.154.128.0/17 maxlen: 24 93.152.128.0/18 maxlen: 24 93.152.192.0/21 maxlen: 24 93.152.200.0/22 maxlen: 24 93.152.204.0/24 maxlen: 24 93.152.236.0/22 maxlen: 24 94.236.144.0/21 maxlen: 24 94.236.144.0/24 maxlen: 24 94.236.146.0/24 maxlen: 24 94.236.149.0/24 maxlen: 24 94.236.151.0/24 maxlen: 24 94.236.152.0/21 maxlen: 24 94.236.152.0/24 maxlen: 24 94.236.153.0/24 maxlen: 24 94.236.154.0/24 maxlen: 24 94.236.160.0/19 maxlen: 24 94.236.160.0/24 maxlen: 24 94.236.161.0/24 maxlen: 24 94.236.163.0/24 maxlen: 24 94.236.164.0/24 maxlen: 24 94.236.170.0/23 maxlen: 24 94.236.172.0/24 maxlen: 24 94.236.173.0/24 maxlen: 24 94.236.174.0/24 maxlen: 24 94.236.175.0/24 maxlen: 24 94.236.176.0/23 maxlen: 24 94.236.179.0/24 maxlen: 24 94.236.180.0/22 maxlen: 24 94.236.184.0/21 maxlen: 24 94.236.204.0/24 maxlen: 24 94.236.205.0/24 maxlen: 24 94.236.228.0/24 maxlen: 24 94.236.229.0/24 maxlen: 24 94.236.231.0/24 maxlen: 24 94.236.234.0/24 maxlen: 24 94.236.235.0/24 maxlen: 24 94.236.238.0/24 maxlen: 24 94.236.240.0/20 maxlen: 24 95.42.0.0/15 maxlen: 24 95.43.0.0/17 maxlen: 24 95.43.206.0/24 maxlen: 24 95.43.220.0/22 maxlen: 24 95.43.224.0/24 maxlen: 32 95.87.192.0/18 maxlen: 24 109.120.192.0/18 maxlen: 24 109.199.128.0/19 maxlen: 24 151.237.140.0/23 maxlen: 24 185.20.156.0/22 maxlen: 24 185.211.200.0/22 maxlen: 24 188.254.254.0/24 maxlen: 24 212.5.128.0/19 maxlen: 24 212.25.32.0/19 maxlen: 24 212.39.64.0/19 maxlen: 24 212.50.64.0/19 maxlen: 24 212.72.198.0/24 maxlen: 24 212.72.199.0/24 maxlen: 24 212.72.202.0/23 maxlen: 24 212.72.212.0/24 maxlen: 24 212.72.214.0/24 maxlen: 24 212.72.221.0/24 maxlen: 24 213.16.32.0/19 maxlen: 24 213.16.60.0/24 maxlen: 24 213.91.128.0/17 maxlen: 24 213.130.64.0/22 maxlen: 24 213.130.76.0/23 maxlen: 24 213.130.77.0/24 maxlen: 24 213.130.78.0/23 maxlen: 24 213.130.92.0/23 maxlen: 24 213.130.95.0/24 maxlen: 24 217.75.139.0/24 maxlen: 24 2a00:e40::/32 maxlen: 64 2a01:5a8::/32 maxlen: 128 2a01:5a8:1:ffff::/64 maxlen: 64 2a01:5a8:2:4::/64 maxlen: 64 2a01:5a8:2:5::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:eb:f9:66:8e:b4:ad:9e:a6:1b:2a:8e:2f:a0:bf:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Dec 18 10:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=710f1464bae6560b6ab356223a11a5b4d8d86165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6b:d4:60:00:54:b1:f2:4d:5b:c7:7d:e6:ad: 7b:2b:ae:94:93:95:6c:df:ee:ab:5e:8c:e3:04:e0: d7:70:21:1a:60:07:d0:08:a5:14:cc:2e:47:5a:52: 0d:da:0d:9d:ed:42:27:b9:69:b0:fe:d7:a4:0c:d3: 7b:e6:8d:f4:a2:58:c7:9f:5e:2a:6e:e7:8c:63:85: 0f:64:0e:cc:38:f3:9c:88:2c:c7:5b:d0:d7:44:b5: bf:68:ca:bc:e6:4a:98:9d:d0:b2:e6:6e:c0:00:51: c1:d8:6e:7a:ff:17:01:0a:40:82:bb:f0:17:bf:fb: 44:4d:b8:80:d8:80:5b:d4:bc:f8:ab:80:b4:c9:d7: 2d:ce:99:f7:d4:9f:8e:1d:63:e9:f0:89:86:42:ec: 77:de:fb:07:f9:6d:fb:cb:2e:89:79:a5:2d:fc:d4: c3:c8:40:c6:61:57:29:fe:93:f1:0f:69:ce:30:2d: c4:c9:74:d2:41:6b:cb:8d:08:61:43:f3:51:e1:f2: bd:c7:78:f0:f1:6c:66:f0:f2:e1:1c:2a:5d:ef:75: 1d:d8:e7:c7:ca:55:4d:c5:81:f8:4a:39:53:eb:eb: 5d:00:51:d1:ea:8e:9b:eb:41:22:5b:1e:02:aa:1f: 54:f7:31:7b:5e:70:04:26:46:ae:37:a0:c3:4c:cf: 9f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0F:14:64:BA:E6:56:0B:6A:B3:56:22:3A:11:A5:B4:D8:D8:61:65 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/cQ8UZLrmVgtqs1YiOhGltNjYYWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.136.0/21 37.157.160.0/19 46.10.0.0/16 46.249.64.0/19 62.73.64.0/18 62.176.64.0/18 77.78.0.0/18 77.85.0.0/16 78.154.0.0/19 79.100.0.0/16 82.137.64.0/18 82.146.0.0/22 82.146.6.0/23 82.146.11.0/24 82.146.24.0/23 82.146.28.0/23 82.146.31.0/24 83.148.64.0/18 83.228.0.0/17 84.40.64.0/18 84.238.128.0/22 84.238.134.0-84.238.159.255 84.238.165.0/24 84.238.167.0-84.238.175.255 84.238.178.0-84.238.183.255 84.238.192.0/22 84.238.204.0/22 85.187.22.0-85.187.39.255 85.187.46.0/23 85.187.64.0/18 87.116.82.0/24 87.126.0.0/16 87.243.80.0-87.243.127.255 87.254.160.0/19 88.87.0.0/19 90.154.128.0/17 93.152.128.0-93.152.204.255 93.152.236.0/22 94.236.144.0-94.236.191.255 94.236.204.0/23 94.236.228.0/23 94.236.231.0/24 94.236.234.0/23 94.236.238.0/24 94.236.240.0/20 95.42.0.0/15 95.87.192.0/18 109.120.192.0/18 109.199.128.0/19 151.237.140.0/23 185.20.156.0/22 185.211.200.0/22 188.254.254.0/24 212.5.128.0/19 212.25.32.0/19 212.39.64.0/19 212.50.64.0/19 212.72.198.0/23 212.72.202.0/23 212.72.212.0/24 212.72.214.0/24 212.72.221.0/24 213.16.32.0/19 213.91.128.0/17 213.130.64.0/22 213.130.76.0/22 213.130.92.0/23 213.130.95.0/24 217.75.139.0/24 IPv6: 2a00:e40::/32 2a01:5a8::/32 Signature Algorithm: sha256WithRSAEncryption 30:d2:ff:39:f4:a2:5c:93:ea:38:95:d6:7c:3a:99:08:e6:3a: 79:bf:7f:02:32:a9:7b:1e:5d:51:3c:43:69:b3:0e:bf:c8:38: fb:4b:94:48:30:b9:87:38:88:54:06:43:ea:85:06:47:3b:77: 0a:fd:43:4b:7d:7e:56:e9:fd:7e:ef:20:cd:b4:bd:66:33:a2: 6b:e3:c1:d7:f7:6e:de:86:16:71:a6:3b:0d:28:bb:f0:f7:b4: fc:9f:78:3e:cc:9a:06:fb:b7:c3:49:8f:71:9b:6a:08:78:ee: c8:d6:9d:0c:46:8c:21:45:1f:05:24:d6:54:16:79:60:d8:fe: ab:15:65:0c:45:34:6b:36:65:b7:c3:e6:83:25:43:54:89:47: e4:34:57:3c:04:9a:b9:6a:8c:5b:b0:52:67:8e:41:dd:c7:14: 5a:ab:52:4c:ba:e5:bd:11:b4:a7:7b:19:53:51:23:d5:f6:a7: 1a:c7:6b:3d:75:b8:f2:4a:fd:cc:bb:03:d0:cc:d6:7b:a7:b1: cf:5d:5b:86:25:2e:0d:21:d9:c2:8d:f4:0a:aa:4a:1c:5b:33: 22:a7:21:a8:37:c6:18:bf:ea:fe:00:38:43:69:12:90:1c:ed: a4:f5:4b:25:42:0f:34:c6:eb:63:5b:90:51:66:23:43:75:b5: 51:aa:3d:25 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgISAZsw6/lmjrStnqYbKo4voL8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjUxMjE4MTAwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTBmMTQ2NGJhZTY1NjBiNmFiMzU2MjIzYTExYTViNGQ4ZDg2MTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mvUYABUsfJNW8d95q17K66Uk5Vs 3+6rXozjBODXcCEaYAfQCKUUzC5HWlIN2g2d7UInuWmw/tekDNN75o30oljHn14q bueMY4UPZA7MOPOciCzHW9DXRLW/aMq85kqYndCy5m7AAFHB2G56/xcBCkCCu/AX v/tETbiA2IBb1Lz4q4C0ydctzpn31J+OHWPp8ImGQux33vsH+W37yy6JeaUt/NTD yEDGYVcp/pPxD2nOMC3EyXTSQWvLjQhhQ/NR4fK9x3jw8Wxm8PLhHCpd73Ud2OfH ylVNxYH4SjlT6+tdAFHR6o6b60EiWx4Cqh9U9zF7XnAEJkauN6DDTM+fwwIDAQAB o4ID9DCCA/AwHQYDVR0OBBYEFHEPFGS65lYLarNWIjoRpbTY2GFlMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvY1E4VVpMcm1WZ3RxczFZaU9oR2x0TmpZWVdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICCAYIKwYBBQUHAQcBAf8EggH3MIIB8zCCAdkEAgABMIIB 0QMEAyWdiAMEBSWdoAMDAC4KAwQFLvlAAwQGPklAAwQGPrBAAwQGTU4AAwMATVUD BAVOmgADAwBPZAMEBlKJQAMEAlKSAAMEAVKSBgMEAFKSCwMEAVKSGAMEAVKSHAME AFKSHwMEBlOUQAMEB1PkAAMEBlQoQAMEAlTugDAMAwQBVO6GAwQFVO6AAwQAVO6l MAwDBABU7qcDBARU7qAwDAMEAVTusgMEA1TusAMEAlTuwAMEAlTuzDAMAwQBVbsW AwQDVbsgAwQBVbsuAwQGVbtAAwQAV3RSAwMAV34wDAMEBFfzUAMEB1fzAAMEBVf+ oAMEBVhXAAMEB1qagDAMAwQHXZiAAwQAXZjMAwQCXZjsMAwDBARe7JADBAZe7IAD BAFe7MwDBAFe7OQDBABe7OcDBAFe7OoDBABe7O4DBARe7PADAwFfKgMEBl9XwAME Bm14wAMEBW3HgAMEAZftjAMEArkUnAMEArnTyAMEALz+/gMEBdQFgAMEBdQZIAME BdQnQAMEBdQyQAMEAdRIxgMEAdRIygMEANRI1AMEANRI1gMEANRI3QMEBdUQIAME B9VbgAMEAtWCQAMEAtWCTAMEAdWCXAMEANWCXwMEANlLizAUBAIAAjAOAwUAKgAO QAMFACoBBagwDQYJKoZIhvcNAQELBQADggEBADDS/zn0olyT6jiV1nw6mQjmOnm/ fwIyqXseXVE8Q2mzDr/IOPtLlEgwuYc4iFQGQ+qFBkc7dwr9Q0t9flbp/X7vIM20 vWYzomvjwdf3bt6GFnGmOw0ou/D3tPyfeD7Mmgb7t8NJj3Gbagh47sjWnQxGjCFF HwUk1lQWeWDY/qsVZQxFNGs2ZbfD5oMlQ1SJR+Q0VzwEmrlqjFuwUmeOQd3HFFqr Uky65b0RtKd7GVNRI9X2pxrHaz11uPJK/cy7A9DM1nunsc9dW4YlLg0h2cKN9Aqq ShxbMyKnIag3xhi/6v4AOENpEpAc7aT1SyVCDzTG62NbkFFmI0N1tVGqPSU= -----END CERTIFICATE-----Generated at Sat Dec 20 04:36:24 2025 by rpki-client