This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/WajP5tLioaX2Ro2cswqvvjdGPQM.roa File: WajP5tLioaX2Ro2cswqvvjdGPQM.roa (raw, json) Hash identifier: sEIrgpW5WhiY7JBDfxS8K7V3ujO4klv15fpTFTGiTlE= Subject key identifier: 59:A8:CF:E6:D2:E2:A1:A5:F6:46:8D:9C:B3:0A:AF:BE:37:46:3D:03 Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Certificate serial: 019B2263468C35F30457717CFEB1F49AFA45 Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/WajP5tLioaX2Ro2cswqvvjdGPQM.roa Signing time: Mon 15 Dec 2025 14:21:29 +0000 ROA not before: Mon 15 Dec 2025 14:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210079 IP address blocks: 5.35.100.0/24 maxlen: 24 5.35.101.0/24 maxlen: 24 5.35.102.0/24 maxlen: 24 37.143.8.0/23 maxlen: 23 37.143.10.0/23 maxlen: 23 37.143.12.0/23 maxlen: 23 37.143.14.0/23 maxlen: 23 46.254.16.0/23 maxlen: 23 46.254.18.0/23 maxlen: 23 46.254.20.0/23 maxlen: 23 46.254.22.0/24 maxlen: 24 46.254.23.0/24 maxlen: 24 91.201.40.0/22 maxlen: 22 91.218.228.0/23 maxlen: 23 91.218.230.0/23 maxlen: 23 95.181.224.0/24 maxlen: 24 95.181.225.0/24 maxlen: 24 95.181.226.0/24 maxlen: 24 95.181.227.0/24 maxlen: 24 95.181.228.0/24 maxlen: 24 95.181.229.0/24 maxlen: 24 95.181.230.0/24 maxlen: 24 95.181.231.0/24 maxlen: 24 95.183.8.0/23 maxlen: 23 95.183.10.0/24 maxlen: 24 95.183.11.0/24 maxlen: 24 95.183.12.0/24 maxlen: 24 95.183.13.0/24 maxlen: 24 95.183.14.0/24 maxlen: 24 95.183.15.0/24 maxlen: 24 130.49.172.0/22 maxlen: 24 130.49.172.0/24 maxlen: 24 178.57.216.0/23 maxlen: 24 178.57.218.0/23 maxlen: 24 178.57.220.0/23 maxlen: 23 178.57.220.0/24 maxlen: 24 178.57.221.0/24 maxlen: 24 178.57.222.0/23 maxlen: 24 178.217.100.0/24 maxlen: 24 178.217.101.0/24 maxlen: 24 185.11.246.0/23 maxlen: 23 185.12.92.0/22 maxlen: 22 185.12.92.0/24 maxlen: 24 185.12.93.0/24 maxlen: 24 185.12.94.0/24 maxlen: 24 185.12.95.0/24 maxlen: 24 185.22.232.0/23 maxlen: 23 185.22.234.0/23 maxlen: 23 185.87.192.0/24 maxlen: 24 185.87.193.0/24 maxlen: 24 185.87.194.0/24 maxlen: 24 185.87.195.0/24 maxlen: 24 185.87.196.0/24 maxlen: 24 185.87.197.0/24 maxlen: 24 185.87.198.0/24 maxlen: 24 185.87.199.0/24 maxlen: 24 185.221.152.0/22 maxlen: 24 185.221.154.0/24 maxlen: 24 185.221.155.0/24 maxlen: 24 212.8.247.0/24 maxlen: 24 217.144.96.0/24 maxlen: 24 217.144.97.0/24 maxlen: 24 217.144.98.0/24 maxlen: 24 217.144.99.0/24 maxlen: 24 217.144.100.0/24 maxlen: 24 217.144.101.0/24 maxlen: 24 217.144.103.0/24 maxlen: 24 2a03:80c0::/48 maxlen: 48 2a03:80c0:1::/48 maxlen: 48 2a03:c980:db::/48 maxlen: 48 2a03:c980:e5::/48 maxlen: 48 2a03:c980:5fb5::/48 maxlen: 48 2a03:c980:5fb7::/48 maxlen: 48 2a03:c980:b239::/48 maxlen: 48 2a03:c980:b916::/48 maxlen: 48 2a03:c980:b957::/48 maxlen: 48 2a03:c980:beef::/48 maxlen: 48 2a03:c980:d990::/48 maxlen: 48 2a03:c980:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:63:46:8c:35:f3:04:57:71:7c:fe:b1:f4:9a:fa:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89 Validity Not Before: Dec 15 14:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=59a8cfe6d2e2a1a5f6468d9cb30aafbe37463d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:67:b5:c6:89:de:ed:89:32:21:4e:bb:7f:8e: e2:41:fd:76:50:0a:be:fc:32:dd:ef:df:e9:d5:4d: 59:a1:28:1f:8a:33:97:b9:bf:97:b8:73:35:b6:01: b2:97:cb:01:9b:25:59:28:ae:74:91:87:0f:46:07: 6f:c4:d9:87:de:32:0e:af:bb:e2:56:65:cd:52:66: ba:0b:94:ba:95:c3:ae:91:ff:e6:82:32:cc:f2:aa: 69:67:ca:9b:b9:03:5f:22:32:48:20:f1:45:0b:93: 77:a1:cb:c0:b3:aa:44:e9:d0:5b:e3:08:38:f9:f7: 40:f4:e5:85:e4:68:f7:18:65:6e:9a:85:f7:6f:c6: 0c:ab:9b:93:d8:01:09:6e:c6:55:4e:b7:0f:b3:18: 2e:6d:59:da:47:85:bb:99:7e:67:07:69:ea:b3:fb: 69:c4:8f:a3:67:3b:1b:fc:aa:ec:ce:b0:49:a2:68: 17:d1:06:af:9c:df:67:83:d5:2d:1b:f9:78:91:76: 92:90:38:a0:20:12:73:40:0d:40:b5:59:5c:61:20: 88:3e:4d:0d:a5:73:82:e4:cc:a4:3d:2c:4f:c9:4a: 2c:57:2b:91:57:86:51:f8:8e:99:3c:e0:d9:d4:a4: b7:a4:62:9f:29:b4:18:8b:58:29:00:3f:ef:49:bc: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A8:CF:E6:D2:E2:A1:A5:F6:46:8D:9C:B3:0A:AF:BE:37:46:3D:03 X509v3 Authority Key Identifier: keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/WajP5tLioaX2Ro2cswqvvjdGPQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.100.0-5.35.102.255 37.143.8.0/21 46.254.16.0/21 91.201.40.0/22 91.218.228.0/22 95.181.224.0/21 95.183.8.0/21 130.49.172.0/22 178.57.216.0/21 178.217.100.0/23 185.11.246.0/23 185.12.92.0/22 185.22.232.0/22 185.87.192.0/21 185.221.152.0/22 212.8.247.0/24 217.144.96.0-217.144.101.255 217.144.103.0/24 IPv6: 2a03:80c0::/47 2a03:c980:db::/48 2a03:c980:e5::/48 2a03:c980:5fb5::/48 2a03:c980:5fb7::/48 2a03:c980:b239::/48 2a03:c980:b916::/48 2a03:c980:b957::/48 2a03:c980:beef::/48 2a03:c980:d990::/48 2a03:c980:dead::/48 Signature Algorithm: sha256WithRSAEncryption 74:d1:68:10:85:cc:60:3d:df:c4:39:e3:3a:cd:02:0c:56:68: 94:6c:34:32:70:23:4d:8e:f9:b3:90:45:60:8a:b1:59:a6:84: db:46:36:06:50:e3:da:e2:d4:b8:fa:05:c0:39:0a:9f:61:3e: ec:81:6e:d7:ef:c2:62:91:8d:b9:4a:c4:9f:a8:05:32:1e:a9: 22:1f:ae:c3:25:d8:d7:52:36:4c:23:79:82:f9:4f:4d:00:c1: 5b:23:b2:d8:a6:62:a8:37:e9:c0:04:cf:97:13:77:44:b4:e3: 97:5e:f8:80:33:a5:06:20:82:45:3d:14:ed:b3:dc:76:4d:a5: 0a:48:7b:5b:d0:96:33:52:68:00:50:eb:e8:74:97:31:f5:c6: fa:55:58:d7:f0:18:b1:95:c2:d9:1e:5b:0a:c1:0c:f2:4b:93: a5:e8:7d:3e:6a:18:08:05:f6:df:a2:89:54:31:b8:b4:e7:9e: 53:8d:29:0b:93:31:b3:65:48:a8:49:07:13:8c:4f:65:7c:ce: 90:0b:11:05:33:ad:9a:0d:cb:a8:0b:ed:c2:5d:6e:5a:95:0d: 55:1c:fe:4b:ee:c2:8f:fc:2c:9c:d5:bb:f0:14:da:92:76:5e: 4a:2c:73:7e:90:39:6a:3a:d4:1e:56:84:46:4e:f5:94:99:9c: 19:2c:39:b3 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgISAZsiY0aMNfMEV3F8/rH0mvpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3 NGFkODkwHhcNMjUxMjE1MTQyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWE4Y2ZlNmQyZTJhMWE1ZjY0NjhkOWNiMzBhYWZiZTM3NDYzZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlme1xone7YkyIU67f47iQf12UAq+ /DLd79/p1U1ZoSgfijOXub+XuHM1tgGyl8sBmyVZKK50kYcPRgdvxNmH3jIOr7vi VmXNUma6C5S6lcOukf/mgjLM8qppZ8qbuQNfIjJIIPFFC5N3ocvAs6pE6dBb4wg4 +fdA9OWF5Gj3GGVumoX3b8YMq5uT2AEJbsZVTrcPsxgubVnaR4W7mX5nB2nqs/tp xI+jZzsb/KrszrBJomgX0QavnN9ng9UtG/l4kXaSkDigIBJzQA1AtVlcYSCIPk0N pXOC5MykPSxPyUosVyuRV4ZR+I6ZPODZ1KS3pGKfKbQYi1gpAD/vSbyP/QIDAQAB o4IC7zCCAuswHQYDVR0OBBYEFFmoz+bS4qGl9kaNnLMKr743Rj0DMB8GA1UdIwQY MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt NGMyMWE1MDVmMzQ2LzEvV2FqUDV0TGlvYVgyUm8yY3N3cXZ2amRHUFFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2 LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAwYIKwYBBQUHAQcBAf8EgfMwgfAwgYIEAgABMHwwDAME AgUjZAMEAAUjZgMEAyWPCAMEAy7+EAMEAlvJKAMEAlva5AMEA1+14AMEA1+3CAME AoIxrAMEA7I52AMEAbLZZAMEAbkL9gMEArkMXAMEArkW6AMEA7lXwAMEArndmAME ANQI9zAMAwQF2ZBgAwQB2ZBkAwQA2ZBnMGkEAgACMGMDBwEqA4DAAAADBwAqA8mA ANsDBwAqA8mAAOUDBwAqA8mAX7UDBwAqA8mAX7cDBwAqA8mAsjkDBwAqA8mAuRYD BwAqA8mAuVcDBwAqA8mAvu8DBwAqA8mA2ZADBwAqA8mA3q0wDQYJKoZIhvcNAQEL BQADggEBAHTRaBCFzGA938Q54zrNAgxWaJRsNDJwI02O+bOQRWCKsVmmhNtGNgZQ 49ri1Lj6BcA5Cp9hPuyBbtfvwmKRjblKxJ+oBTIeqSIfrsMl2NdSNkwjeYL5T00A wVsjstimYqg36cAEz5cTd0S045de+IAzpQYggkU9FO2z3HZNpQpIe1vQljNSaABQ 6+h0lzH1xvpVWNfwGLGVwtkeWwrBDPJLk6XofT5qGAgF9t+iiVQxuLTnnlONKQuT MbNlSKhJBxOMT2V8zpALEQUzrZoNy6gL7cJdblqVDVUc/kvuwo/8LJzVu/AU2pJ2 Xkosc36QOWo61B5WhEZO9ZSZnBksObM= -----END CERTIFICATE-----Generated at Sun Dec 21 06:01:18 2025 by rpki-client