This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/d1JMnKGmH0j_PQDmtek3YiBlevU.roa File: d1JMnKGmH0j_PQDmtek3YiBlevU.roa (raw, json) Hash identifier: 7WHRVv9XJ7SlSWNf3i4YgPLblRedRi8OC7Lk3Fmx9gs= Subject key identifier: 77:52:4C:9C:A1:A6:1F:48:FF:3D:00:E6:B5:E9:37:62:20:65:7A:F5 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019B2D33CD8C32BFFC6ADC877A4C25E7A479 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/d1JMnKGmH0j_PQDmtek3YiBlevU.roa Signing time: Wed 17 Dec 2025 16:45:28 +0000 ROA not before: Wed 17 Dec 2025 16:45:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198193 IP address blocks: 31.214.155.0/24 maxlen: 24 37.252.98.0/24 maxlen: 24 37.252.100.0/24 maxlen: 24 37.252.101.0/24 maxlen: 24 89.32.64.0/24 maxlen: 24 89.32.65.0/24 maxlen: 24 89.32.66.0/24 maxlen: 24 89.32.67.0/24 maxlen: 24 158.255.239.0/24 maxlen: 24 162.33.200.0/22 maxlen: 22 162.33.204.0/22 maxlen: 22 162.33.204.0/24 maxlen: 24 162.33.205.0/24 maxlen: 24 162.33.206.0/24 maxlen: 24 162.33.207.0/24 maxlen: 24 185.66.172.0/24 maxlen: 24 185.66.174.0/24 maxlen: 24 185.86.208.0/23 maxlen: 23 185.88.202.0/23 maxlen: 23 185.206.121.0/24 maxlen: 24 185.212.114.0/24 maxlen: 24 185.225.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:33:cd:8c:32:bf:fc:6a:dc:87:7a:4c:25:e7:a4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Dec 17 16:45:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=77524c9ca1a61f48ff3d00e6b5e9376220657af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:b0:3e:cb:67:20:16:c7:cf:4b:36:3e:d0: 7d:82:79:f7:f4:a9:04:8b:b7:aa:52:fd:36:c6:f7: d1:d7:de:8f:09:8c:35:3f:6f:52:ea:0a:d3:ef:09: 3e:0b:f0:ed:43:83:e0:79:25:ac:57:62:26:88:29: 2e:60:40:97:5c:a4:da:da:26:75:38:61:b6:3d:f6: 64:8e:d6:e5:e7:ff:6c:03:09:c2:b0:30:44:88:2e: 43:58:30:9e:8a:be:ea:51:cb:de:d9:93:e0:98:5f: 83:56:f8:69:64:30:1b:8e:33:97:16:a4:ce:bd:57: 3e:e0:3c:f4:a1:81:8b:28:9f:43:4a:04:72:f0:aa: c0:97:b5:a5:4d:6b:bc:83:a7:e1:85:67:54:2d:36: c5:89:df:27:0b:95:09:ad:fb:f7:1a:9f:7d:a0:54: 42:dd:77:2e:50:c1:af:66:07:6f:83:9c:e1:51:38: 36:9f:6d:87:98:a4:8d:07:61:2e:bf:5b:c3:39:5c: 71:c4:3e:94:1b:46:40:5b:50:3a:7d:61:e7:0a:50: f5:0d:b4:f2:cb:64:dd:30:05:55:88:51:fc:3d:c0: 43:e9:01:3e:7b:d6:d6:b8:1b:0d:e9:ac:4e:58:87: b1:08:61:7f:ac:82:28:7e:23:c3:09:b8:ff:7f:e1: 09:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:52:4C:9C:A1:A6:1F:48:FF:3D:00:E6:B5:E9:37:62:20:65:7A:F5 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/d1JMnKGmH0j_PQDmtek3YiBlevU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.155.0/24 37.252.98.0/24 37.252.100.0/23 89.32.64.0/22 158.255.239.0/24 162.33.200.0/21 185.66.172.0/24 185.66.174.0/24 185.86.208.0/23 185.88.202.0/23 185.206.121.0/24 185.212.114.0/24 185.225.8.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:72:82:bd:2e:7d:4f:3e:f6:0a:88:27:db:a6:63:be:6c:81: 1e:68:ff:16:55:0a:e3:4d:f6:f0:c6:d2:bb:ff:9e:e3:a1:65: 68:22:c9:1e:da:29:3b:8b:ec:4e:58:4e:9f:33:48:21:49:5f: db:22:23:25:df:e1:ae:e3:6d:e6:74:36:3b:2b:e2:04:b0:f2: 64:ae:81:cb:15:84:07:8f:25:c7:01:bf:b5:29:e0:31:ab:fb: c1:5f:ae:1c:0d:e6:94:8f:fe:36:ec:da:df:71:4b:28:58:bd: d5:4c:3a:d9:83:75:63:3f:38:c1:d4:c8:49:c0:3f:51:e7:6e: 5e:08:fd:d3:05:81:c7:51:ad:f5:5a:ae:a7:6b:9f:2c:34:d1: ab:0c:b3:9b:d1:b3:02:f3:7a:b0:9c:39:c5:7f:fc:0f:7d:c5: 13:1c:17:15:2a:ce:de:96:ed:98:85:1a:cf:65:cf:2f:ed:b0: e7:6b:1a:f1:2d:f7:d3:33:4a:02:e9:8c:03:94:37:31:ad:2b: cb:39:52:e3:24:99:ef:c9:cc:22:7b:62:c6:26:4b:79:a2:2d: e9:63:b6:db:2b:c2:d5:72:13:20:c1:87:6f:73:27:61:96:56: 52:38:a5:e5:e9:0e:b7:80:bc:db:87:40:c6:ff:0b:c8:03:45: 40:9a:3a:14 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZstM82MMr/8atyHekwl56R5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUxMjE3MTY0NTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzUyNGM5Y2ExYTYxZjQ4ZmYzZDAwZTZiNWU5Mzc2MjIwNjU3YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZKwPstnIBbHz0s2PtB9gnn39KkE i7eqUv02xvfR196PCYw1P29S6grT7wk+C/DtQ4PgeSWsV2ImiCkuYECXXKTa2iZ1 OGG2PfZkjtbl5/9sAwnCsDBEiC5DWDCeir7qUcve2ZPgmF+DVvhpZDAbjjOXFqTO vVc+4Dz0oYGLKJ9DSgRy8KrAl7WlTWu8g6fhhWdULTbFid8nC5UJrfv3Gp99oFRC 3XcuUMGvZgdvg5zhUTg2n22HmKSNB2Euv1vDOVxxxD6UG0ZAW1A6fWHnClD1DbTy y2TdMAVViFH8PcBD6QE+e9bWuBsN6axOWIexCGF/rIIofiPDCbj/f+EJwQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFHdSTJyhph9I/z0A5rXpN2IgZXr1MB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvZDFKTW5LR21IMGpfUFFEbXRlazNZaUJsZXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAH9abAwQA JfxiAwQBJfxkAwQCWSBAAwQAnv/vAwQDoiHIAwQAuUKsAwQAuUKuAwQBuVbQAwQB uVjKAwQAuc55AwQAudRyAwQAueEIMA0GCSqGSIb3DQEBCwUAA4IBAQCecoK9Ln1P PvYKiCfbpmO+bIEeaP8WVQrjTfbwxtK7/57joWVoIske2ik7i+xOWE6fM0ghSV/b IiMl3+Gu423mdDY7K+IEsPJkroHLFYQHjyXHAb+1KeAxq/vBX64cDeaUj/427Nrf cUsoWL3VTDrZg3VjPzjB1MhJwD9R525eCP3TBYHHUa31Wq6na58sNNGrDLOb0bMC 83qwnDnFf/wPfcUTHBcVKs7elu2YhRrPZc8v7bDnaxrxLffTM0oC6YwDlDcxrSvL OVLjJJnvycwie2LGJkt5oi3pY7bbK8LVchMgwYdvcydhllZSOKXl6Q63gLzbh0DG /wvIA0VAmjoU -----END CERTIFICATE-----Generated at Sat Dec 20 20:42:37 2025 by rpki-client