This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/M1e_sHBZe8qgiUREj14kOD1XlAM.roa File: M1e_sHBZe8qgiUREj14kOD1XlAM.roa (raw, json) Hash identifier: d7KGc1JohmxwmIRoXPt7y5NJGhBi1FLXs4b6xoFAzhc= Subject key identifier: 33:57:BF:B0:70:59:7B:CA:A0:89:44:44:8F:5E:24:38:3D:57:94:03 Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Certificate serial: 019B31FDB746CCF355AC4145A0C17E5AAF85 Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/M1e_sHBZe8qgiUREj14kOD1XlAM.roa Signing time: Thu 18 Dec 2025 15:04:29 +0000 ROA not before: Thu 18 Dec 2025 15:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6848 IP address blocks: 5.23.128.0/17 maxlen: 17 46.253.160.0/20 maxlen: 20 62.205.64.0/18 maxlen: 18 78.20.0.0/14 maxlen: 14 78.29.192.0/18 maxlen: 18 81.82.0.0/15 maxlen: 15 81.164.0.0/15 maxlen: 15 82.143.64.0/18 maxlen: 18 82.210.64.0/19 maxlen: 19 83.217.128.0/19 maxlen: 19 84.192.0.0/13 maxlen: 13 85.28.64.0/18 maxlen: 18 85.255.192.0/24 maxlen: 24 85.255.193.0/24 maxlen: 24 85.255.194.0/24 maxlen: 24 85.255.195.0/24 maxlen: 24 85.255.197.0/24 maxlen: 24 85.255.198.0/24 maxlen: 24 85.255.199.0/24 maxlen: 24 85.255.200.0/24 maxlen: 24 85.255.201.0/24 maxlen: 24 85.255.202.0/24 maxlen: 24 85.255.203.0/24 maxlen: 24 85.255.204.0/24 maxlen: 24 85.255.205.0/24 maxlen: 24 85.255.206.0/24 maxlen: 24 85.255.207.0/24 maxlen: 24 94.72.64.0/19 maxlen: 19 94.224.0.0/14 maxlen: 14 141.134.0.0/15 maxlen: 15 157.173.128.0/18 maxlen: 18 178.116.0.0/14 maxlen: 14 185.23.244.0/22 maxlen: 22 185.30.52.0/22 maxlen: 22 185.35.52.0/24 maxlen: 24 185.35.53.0/24 maxlen: 24 185.35.54.0/24 maxlen: 24 185.35.55.0/24 maxlen: 24 185.152.56.0/24 maxlen: 24 185.152.57.0/24 maxlen: 24 185.152.58.0/24 maxlen: 24 185.152.59.0/24 maxlen: 24 185.248.40.0/22 maxlen: 22 188.44.64.0/19 maxlen: 19 188.95.146.0/23 maxlen: 23 188.137.192.0/19 maxlen: 19 188.188.0.0/15 maxlen: 15 195.16.0.0/19 maxlen: 19 195.130.128.0/19 maxlen: 19 195.162.192.0/19 maxlen: 19 212.76.224.0/19 maxlen: 19 212.88.224.0/19 maxlen: 19 212.123.0.0/19 maxlen: 19 213.118.0.0/15 maxlen: 15 213.132.128.0/19 maxlen: 19 213.214.32.0/19 maxlen: 19 213.224.0.0/16 maxlen: 16 213.251.64.0/18 maxlen: 18 217.72.224.0/20 maxlen: 20 217.168.120.0/21 maxlen: 21 2a00:1cf8::/32 maxlen: 32 2a01:498::/32 maxlen: 32 2a01:498:200::/40 maxlen: 40 2a01:498:500::/40 maxlen: 40 2a01:498:8500::/40 maxlen: 40 2a02:1800::/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fd:b7:46:cc:f3:55:ac:41:45:a0:c1:7e:5a:af:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Validity Not Before: Dec 18 15:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3357bfb070597bcaa08944448f5e24383d579403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:30:10:40:0a:1b:47:ac:67:fd:e1:28:df: b4:24:d2:a1:51:ab:eb:eb:a8:79:8e:63:8e:72:ef: 3e:1d:36:4f:7c:26:fb:1b:bf:55:45:0c:c7:fa:1c: 46:63:66:34:1e:fb:3e:8c:fc:eb:ff:14:20:f0:85: 69:b2:92:16:7d:83:4e:85:2a:69:91:84:ef:2d:e9: 02:34:34:b9:92:8b:2c:af:53:9b:cf:9a:8e:72:0e: 8a:89:2c:50:4f:43:27:53:95:1a:fe:8a:99:2a:27: c3:ba:d9:08:0e:98:c5:d8:ca:0b:67:5e:3a:52:53: ca:5c:32:1b:46:e1:24:d5:94:b9:6f:35:e0:f1:79: 26:c1:c7:b1:a9:b9:82:55:ef:02:2b:c9:ef:60:3f: f3:47:af:16:0c:77:49:1a:a0:21:7c:8f:83:31:a8: 3a:aa:85:f5:b4:bf:b3:3d:3f:0f:ef:47:e7:ce:7c: 57:0a:37:0c:42:0e:f9:b4:ed:5c:5b:2e:fa:a5:75: e5:c2:81:07:d7:88:e3:55:65:af:92:5a:c4:31:df: e2:76:46:d8:9a:49:37:da:97:d7:f5:e0:d9:52:43: 88:e0:91:77:f5:c8:9d:2c:80:d9:09:1b:e0:68:7e: 40:4c:f6:c5:3f:87:ba:22:21:9c:8f:52:92:30:da: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:57:BF:B0:70:59:7B:CA:A0:89:44:44:8F:5E:24:38:3D:57:94:03 X509v3 Authority Key Identifier: keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/M1e_sHBZe8qgiUREj14kOD1XlAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.128.0/17 46.253.160.0/20 62.205.64.0/18 78.20.0.0/14 78.29.192.0/18 81.82.0.0/15 81.164.0.0/15 82.143.64.0/18 82.210.64.0/19 83.217.128.0/19 84.192.0.0/13 85.28.64.0/18 85.255.192.0/22 85.255.197.0-85.255.207.255 94.72.64.0/19 94.224.0.0/14 141.134.0.0/15 157.173.128.0/18 178.116.0.0/14 185.23.244.0/22 185.30.52.0/22 185.35.52.0/22 185.152.56.0/22 185.248.40.0/22 188.44.64.0/19 188.95.146.0/23 188.137.192.0/19 188.188.0.0/15 195.16.0.0/19 195.130.128.0/19 195.162.192.0/19 212.76.224.0/19 212.88.224.0/19 212.123.0.0/19 213.118.0.0/15 213.132.128.0/19 213.214.32.0/19 213.224.0.0/16 213.251.64.0/18 217.72.224.0/20 217.168.120.0/21 IPv6: 2a00:1cf8::/32 2a01:498::/32 2a02:1800::/24 Signature Algorithm: sha256WithRSAEncryption 0b:90:10:58:ba:ac:84:b2:a2:fb:1c:d3:f6:21:ac:82:15:87: ee:cd:dd:6b:30:0a:c5:60:50:c9:c1:44:fa:2c:14:12:6f:6c: 71:50:95:8b:b1:34:ff:27:47:e9:2d:2f:42:8b:69:df:c7:68: 22:99:c5:b3:ea:09:c6:01:01:ef:00:0c:5c:85:8b:3d:2e:1e: a6:4e:21:06:75:7d:fa:ce:5f:43:b3:16:a3:82:a1:66:da:fd: 94:ab:2c:63:e0:75:88:1e:ff:e7:fe:f1:a9:1d:d5:d6:b5:bc: 01:6c:be:93:dc:bb:73:ac:42:85:56:79:d0:c9:bb:ca:6a:81: 2c:b9:ab:69:53:ac:6d:04:c2:6a:ba:22:74:af:0a:79:26:46: 0d:30:db:f8:6b:54:8b:0a:c8:8c:f6:62:a8:cd:c6:b2:1b:e2: 6d:48:9c:ab:3f:ec:02:1e:c1:82:d6:53:8e:64:fb:41:db:f2: cf:10:e4:e9:a9:5a:b6:26:9b:78:66:8a:16:26:ab:49:54:49: d6:d2:82:3f:06:56:e8:05:91:01:31:21:32:ef:b5:a5:ef:c2: 34:20:0d:2d:d9:85:35:71:1e:dc:f4:e6:4a:fa:4f:30:9d:87: 5b:28:a2:c8:0c:08:65:e4:06:d7:f4:a0:53:6d:64:cd:de:00: d6:79:e9:cc -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgISAZsx/bdGzPNVrEFFoMF+Wq+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx YTg2ODAwHhcNMjUxMjE4MTUwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzU3YmZiMDcwNTk3YmNhYTA4OTQ0NDQ4ZjVlMjQzODNkNTc5NDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2IwEEAKG0esZ/3hKN+0JNKhUavr 66h5jmOOcu8+HTZPfCb7G79VRQzH+hxGY2Y0Hvs+jPzr/xQg8IVpspIWfYNOhSpp kYTvLekCNDS5kossr1Obz5qOcg6KiSxQT0MnU5Ua/oqZKifDutkIDpjF2MoLZ146 UlPKXDIbRuEk1ZS5bzXg8XkmwcexqbmCVe8CK8nvYD/zR68WDHdJGqAhfI+DMag6 qoX1tL+zPT8P70fnznxXCjcMQg75tO1cWy76pXXlwoEH14jjVWWvklrEMd/idkbY mkk32pfX9eDZUkOI4JF39cidLIDZCRvgaH5ATPbFP4e6IiGcj1KSMNrQXQIDAQAB o4IDGzCCAxcwHQYDVR0OBBYEFDNXv7BwWXvKoIlERI9eJDg9V5QDMB8GA1UdIwQY MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt MTM4Yjc4N2RlM2UzLzEvTTFlX3NIQlplOHFnaVVSRWoxNGtPRDFYbEFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCB+wQCAAEwgfQD BAcFF4ADBAQu/aADBAY+zUADAwJOFAMEBk4dwAMDAVFSAwMBUaQDBAZSj0ADBAVS 0kADBAVT2YADAwNUwAMEBlUcQAMEAlX/wDAMAwQAVf/FAwQEVf/AAwQFXkhAAwMC XuADAwGNhgMEBp2tgAMDArJ0AwQCuRf0AwQCuR40AwQCuSM0AwQCuZg4AwQCufgo AwQFvCxAAwQBvF+SAwQFvInAAwMBvLwDBAXDEAADBAXDgoADBAXDosADBAXUTOAD BAXUWOADBAXUewADAwHVdgMEBdWEgAMEBdXWIAMDANXgAwQG1ftAAwQE2UjgAwQD 2ah4MBoEAgACMBQDBQAqABz4AwUAKgEEmAMEACoCGDANBgkqhkiG9w0BAQsFAAOC AQEAC5AQWLqshLKi+xzT9iGsghWH7s3dazAKxWBQycFE+iwUEm9scVCVi7E0/ydH 6S0vQotp38doIpnFs+oJxgEB7wAMXIWLPS4epk4hBnV9+s5fQ7MWo4KhZtr9lKss Y+B1iB7/5/7xqR3V1rW8AWy+k9y7c6xChVZ50Mm7ymqBLLmraVOsbQTCaroidK8K eSZGDTDb+GtUiwrIjPZiqM3GshvibUicqz/sAh7BgtZTjmT7QdvyzxDk6alatiab eGaKFiarSVRJ1tKCPwZW6AWRATEhMu+1pe/CNCANLdmFNXEe3PTmSvpPMJ2HWyii yAwIZeQG1/SgU21kzd4A1nnpzA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:08 2025 by rpki-client