This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/RtQKuKnTGi_65CSqe6vNMA17298.roa File: RtQKuKnTGi_65CSqe6vNMA17298.roa (raw, json) Hash identifier: Lxi0kacqGh/qYSrtEzV02WDcRK48WVJ5UFgCKphFMbA= Subject key identifier: 46:D4:0A:B8:A9:D3:1A:2F:FA:E4:24:AA:7B:AB:CD:30:0D:7B:DB:DF Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019A528DE8286E6EA1EBDA99BB0331AB3375 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/RtQKuKnTGi_65CSqe6vNMA17298.roa Signing time: Wed 05 Nov 2025 05:47:03 +0000 ROA not before: Wed 05 Nov 2025 05:47:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197706 IP address blocks: 31.171.152.0/24 maxlen: 24 31.171.153.0/24 maxlen: 24 31.171.154.0/24 maxlen: 24 31.171.155.0/24 maxlen: 24 45.142.25.0/24 maxlen: 24 45.142.26.0/24 maxlen: 24 45.142.27.0/24 maxlen: 24 103.93.42.0/24 maxlen: 24 103.93.43.0/24 maxlen: 24 103.124.164.0/24 maxlen: 24 103.124.165.0/24 maxlen: 24 103.124.166.0/24 maxlen: 24 103.124.167.0/24 maxlen: 24 109.104.138.0/24 maxlen: 24 109.104.139.0/24 maxlen: 24 109.104.140.0/22 maxlen: 22 109.104.140.0/24 maxlen: 24 109.104.141.0/24 maxlen: 24 109.104.142.0/24 maxlen: 24 109.104.143.0/24 maxlen: 24 109.104.156.0/24 maxlen: 24 109.104.157.0/24 maxlen: 24 109.104.158.0/24 maxlen: 24 109.104.159.0/24 maxlen: 24 144.48.52.0/24 maxlen: 24 144.48.53.0/24 maxlen: 24 144.48.54.0/24 maxlen: 24 144.48.55.0/24 maxlen: 24 185.53.100.0/24 maxlen: 24 185.53.101.0/24 maxlen: 24 185.153.125.0/24 maxlen: 24 185.153.126.0/24 maxlen: 24 185.153.127.0/24 maxlen: 24 199.168.120.0/24 maxlen: 24 199.168.121.0/24 maxlen: 24 199.168.122.0/24 maxlen: 24 199.168.123.0/24 maxlen: 24 209.23.44.0/24 maxlen: 24 209.23.45.0/24 maxlen: 24 209.23.46.0/24 maxlen: 24 209.23.47.0/24 maxlen: 24 2a04:27c0::/29 maxlen: 48 2a04:27c0:fffd::/48 maxlen: 48 2a04:27c0:fffe::/48 maxlen: 48 2a09:6e40::/29 maxlen: 48 2a09:6e47::/48 maxlen: 48 2a09:6ec0::/29 maxlen: 48 2a0d:27c0::/29 maxlen: 48 2a0d:27c4::/32 maxlen: 32 2a0d:42c0::/29 maxlen: 48 2a0d:4a40::/29 maxlen: 48 2a0d:4a46::/32 maxlen: 32 2a0e:3f00::/29 maxlen: 48 2a0e:3f01::/48 maxlen: 48 2a0e:4f00::/29 maxlen: 48 2a0e:4f05::/32 maxlen: 32 2a0e:d4c0::/29 maxlen: 48 2a0f:42c0::/29 maxlen: 48 2a0f:a880::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:8d:e8:28:6e:6e:a1:eb:da:99:bb:03:31:ab:33:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Nov 5 05:47:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=46d40ab8a9d31a2ffae424aa7babcd300d7bdbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:40:2f:17:b5:d5:a1:d8:6f:af:7e:f4:7d:72: c5:c6:17:33:d2:98:5e:8c:f3:63:f1:89:dc:cf:87: 1e:fd:7c:c6:e2:cc:9e:be:42:62:94:6e:ed:b5:43: c1:fd:0d:dc:5f:e3:1f:d4:fc:06:cd:22:56:85:12: 76:1e:62:77:51:4e:57:1b:83:49:ac:ae:86:66:57: e5:17:9f:27:09:c3:7f:c3:03:55:2a:c1:6a:d9:55: 24:d5:ba:f2:c7:c4:89:c2:6e:fe:8b:34:bf:3c:10: e8:85:f3:06:a5:2a:7e:25:3e:0d:57:8d:dc:74:ba: d6:db:68:8e:ac:ed:a6:cc:29:f3:61:87:29:6b:17: 72:c0:5f:be:34:c8:a3:7d:5c:df:6a:5f:fc:d0:ab: 51:71:18:35:04:39:d0:6f:e6:dc:c5:9c:5f:c4:cd: ab:e9:18:e2:58:8b:e5:99:64:f3:44:7d:ad:af:55: dc:79:3f:25:bc:ff:bd:d4:2c:0b:9f:76:5c:0a:11: a9:a3:64:34:c2:29:fb:8a:53:c6:cd:b6:8b:58:dd: 9d:81:fa:ba:0d:fc:74:c7:8e:38:73:48:8f:4d:a8: 80:0b:55:d9:a9:ad:d2:98:7f:0f:64:f1:9e:d5:37: fc:40:b7:5b:21:45:37:4f:05:b3:14:4c:03:3b:16: 6f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D4:0A:B8:A9:D3:1A:2F:FA:E4:24:AA:7B:AB:CD:30:0D:7B:DB:DF X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/RtQKuKnTGi_65CSqe6vNMA17298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.152.0/22 45.142.25.0-45.142.27.255 103.93.42.0/23 103.124.164.0/22 109.104.138.0-109.104.143.255 109.104.156.0/22 144.48.52.0/22 185.53.100.0/23 185.153.125.0-185.153.127.255 199.168.120.0/22 209.23.44.0/22 IPv6: 2a04:27c0::/29 2a09:6e40::/29 2a09:6ec0::/29 2a0d:27c0::/29 2a0d:42c0::/29 2a0d:4a40::/29 2a0e:3f00::/29 2a0e:4f00::/29 2a0e:d4c0::/29 2a0f:42c0::/29 2a0f:a880::/29 Signature Algorithm: sha256WithRSAEncryption 1a:7a:3c:12:8a:b2:b0:a2:e1:90:34:00:a5:44:65:1c:44:16: 6b:68:6b:b6:97:54:82:1b:eb:38:49:5f:5c:51:09:c5:1a:0f: da:5e:85:c6:af:71:2d:6a:69:72:d6:02:ee:21:e3:81:91:d1: c0:b5:b8:b8:f8:b1:11:02:5a:cf:fd:48:62:76:4d:6a:be:fa: 91:7c:4a:65:22:e1:34:be:8c:33:ff:c4:1d:12:41:d6:b0:28: a1:e5:af:2a:4d:06:0c:df:c3:ff:01:0d:32:bc:65:a0:82:a0: c7:0b:e6:37:f9:75:9a:07:b8:d9:c3:b4:1a:57:25:33:fe:c7: c4:1f:f7:fd:fe:33:c9:76:d9:f4:3e:4b:05:3d:b4:02:44:2c: 8a:4a:95:f6:6d:d9:d9:ca:67:9b:80:bd:7f:07:f6:f9:34:b7: 65:93:e5:d5:01:ee:eb:9c:f8:51:d7:6e:ce:87:bf:7a:c3:d0: 4e:7a:d9:f6:39:bf:8d:6b:22:3b:b5:84:03:28:dd:79:07:36: 9d:16:26:dc:b3:04:bb:0e:70:4e:9b:06:c6:a4:e7:6b:00:21: fc:fc:a8:16:45:28:37:1d:42:15:24:88:f2:09:ca:93:93:f9: 70:cb:36:ce:4f:cf:be:fe:df:73:15:69:6e:85:e4:53:d1:c5: 34:ed:e7:aa -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZpSjegobm6h69qZuwMxqzN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjUxMTA1MDU0NzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmQ0MGFiOGE5ZDMxYTJmZmFlNDI0YWE3YmFiY2QzMDBkN2JkYmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0AvF7XVodhvr370fXLFxhcz0phe jPNj8Yncz4ce/XzG4syevkJilG7ttUPB/Q3cX+Mf1PwGzSJWhRJ2HmJ3UU5XG4NJ rK6GZlflF58nCcN/wwNVKsFq2VUk1bryx8SJwm7+izS/PBDohfMGpSp+JT4NV43c dLrW22iOrO2mzCnzYYcpaxdywF++NMijfVzfal/80KtRcRg1BDnQb+bcxZxfxM2r 6RjiWIvlmWTzRH2tr1XceT8lvP+91CwLn3ZcChGpo2Q0win7ilPGzbaLWN2dgfq6 Dfx0x444c0iPTaiAC1XZqa3SmH8PZPGe1Tf8QLdbIUU3TwWzFEwDOxZvNwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEbUCrip0xov+uQkqnurzTANe9vfMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvUnRRS3VLblRHaV82NUNTcWU2dk5NQTE3Mjk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHKBggrBgEFBQcBBwEB/wSBujCBtzBgBAIAATBaAwQCH6uY MAwDBAAtjhkDBAItjhgDBAFnXSoDBAJnfKQwDAMEAW1oigMEBG1ogAMEAm1onAME ApAwNAMEAbk1ZDAMAwQAuZl9AwQHuZkAAwQCx6h4AwQC0RcsMFMEAgACME0DBQMq BCfAAwUDKgluQAMFAyoJbsADBQMqDSfAAwUDKg1CwAMFAyoNSkADBQMqDj8AAwUD Kg5PAAMFAyoO1MADBQMqD0LAAwUDKg+ogDANBgkqhkiG9w0BAQsFAAOCAQEAGno8 EoqysKLhkDQApURlHEQWa2hrtpdUghvrOElfXFEJxRoP2l6Fxq9xLWppctYC7iHj gZHRwLW4uPixEQJaz/1IYnZNar76kXxKZSLhNL6MM//EHRJB1rAooeWvKk0GDN/D /wENMrxloIKgxwvmN/l1mge42cO0GlclM/7HxB/3/f4zyXbZ9D5LBT20AkQsikqV 9m3Z2cpnm4C9fwf2+TS3ZZPl1QHu65z4Udduzoe/esPQTnrZ9jm/jWsiO7WEAyjd eQc2nRYm3LMEuw5wTpsGxqTnawAh/PyoFkUoNx1CFSSI8gnKk5P5cMs2zk/Pvv7f cxVpboXkU9HFNO3nqg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:52 2025 by rpki-client