This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/DXOChViOlpgI8TJV63mUU0oEnak.roa File: DXOChViOlpgI8TJV63mUU0oEnak.roa (raw, json) Hash identifier: BJSPeM0idTJzRNi/YSiIYo3QQ3KDkZuOfBcEMjf//2c= Subject key identifier: 0D:73:82:85:58:8E:96:98:08:F1:32:55:EB:79:94:53:4A:04:9D:A9 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B278B77A2BB6D44DA758A5311C748DB26 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/DXOChViOlpgI8TJV63mUU0oEnak.roa Signing time: Tue 16 Dec 2025 14:23:30 +0000 ROA not before: Tue 16 Dec 2025 14:23:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12716 IP address blocks: 37.63.0.0/20 maxlen: 20 37.63.16.0/22 maxlen: 22 37.63.20.0/22 maxlen: 24 37.63.24.0/22 maxlen: 22 37.63.28.0/22 maxlen: 24 37.63.32.0/22 maxlen: 24 37.63.96.0/22 maxlen: 22 62.204.154.0/23 maxlen: 23 78.90.18.0/23 maxlen: 23 78.90.44.0/23 maxlen: 23 78.90.62.0/24 maxlen: 24 78.90.73.0/24 maxlen: 24 78.90.124.0/24 maxlen: 24 78.90.218.0/23 maxlen: 23 83.97.30.0/24 maxlen: 24 84.252.40.0/23 maxlen: 23 85.118.64.0/22 maxlen: 22 85.118.68.0/23 maxlen: 24 85.118.70.0/24 maxlen: 24 85.118.71.0/24 maxlen: 24 85.118.72.0/23 maxlen: 23 85.118.74.0/24 maxlen: 24 85.118.76.0/22 maxlen: 22 85.118.80.0/22 maxlen: 22 85.118.84.0/24 maxlen: 24 85.118.92.0/24 maxlen: 24 85.118.93.0/24 maxlen: 24 89.215.62.0/23 maxlen: 23 151.251.44.0/22 maxlen: 22 151.251.68.0/22 maxlen: 22 151.251.121.0/24 maxlen: 24 151.251.126.0/23 maxlen: 23 151.251.192.0/22 maxlen: 22 151.251.196.0/24 maxlen: 24 151.251.200.0/22 maxlen: 22 151.251.204.0/22 maxlen: 22 151.251.238.0/24 maxlen: 24 151.251.239.0/24 maxlen: 24 151.251.240.0/20 maxlen: 20 176.222.0.0/20 maxlen: 24 185.151.156.0/22 maxlen: 22 185.224.160.0/23 maxlen: 23 212.104.116.0/22 maxlen: 24 213.226.17.0/24 maxlen: 24 213.226.19.0/24 maxlen: 24 213.226.36.0/24 maxlen: 24 213.226.40.0/24 maxlen: 24 213.226.51.0/24 maxlen: 24 213.226.56.0/24 maxlen: 24 213.226.57.0/24 maxlen: 24 213.226.59.0/24 maxlen: 24 2001:1ac8:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:8b:77:a2:bb:6d:44:da:75:8a:53:11:c7:48:db:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Dec 16 14:23:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0d738285588e969808f13255eb7994534a049da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6e:4b:a1:62:46:4b:e6:02:7a:f8:30:6b:ac: aa:11:f6:db:c3:2b:31:0f:7c:67:9c:93:4f:15:37: d7:b2:af:a8:16:cf:f5:a0:0e:e2:35:04:72:aa:90: c0:5d:f0:94:2d:9f:52:de:b3:9f:fa:a0:cc:95:9b: 46:ea:b6:8c:94:4d:63:be:f8:73:d2:47:c8:1f:66: 42:ce:f8:ca:e1:a0:e1:25:4f:30:26:09:be:07:8a: eb:bf:6a:d3:e3:13:ba:4a:1f:79:2c:36:79:4e:c1: bf:ba:01:03:73:5c:a0:d8:47:ca:9a:96:18:42:a6: 3a:e0:54:43:ba:b3:92:d8:28:27:04:59:9a:db:3b: 0c:a7:da:07:51:c0:60:1a:0c:c0:e4:b1:d3:01:ff: 84:74:49:5b:0e:85:ce:0e:8f:7a:fb:0f:f3:c1:95: 54:0a:26:d6:c9:e3:28:62:68:f0:44:ff:94:e3:9a: b2:f2:6f:fb:2f:5b:30:96:4a:76:6b:2c:a8:34:ed: 2b:02:f1:b2:c4:2a:9f:4c:85:20:99:2a:08:d2:9c: b3:41:d1:f8:2e:4d:2d:6d:af:b2:81:4f:40:61:c6: 57:c8:c5:63:85:6d:bb:8b:71:44:f5:38:0a:a0:02: 50:56:41:d1:11:51:96:36:73:6b:70:f2:05:90:d0: 30:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:73:82:85:58:8E:96:98:08:F1:32:55:EB:79:94:53:4A:04:9D:A9 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/DXOChViOlpgI8TJV63mUU0oEnak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.63.0.0-37.63.35.255 37.63.96.0/22 62.204.154.0/23 78.90.18.0/23 78.90.44.0/23 78.90.62.0/24 78.90.73.0/24 78.90.124.0/24 78.90.218.0/23 83.97.30.0/24 84.252.40.0/23 85.118.64.0-85.118.74.255 85.118.76.0-85.118.84.255 85.118.92.0/23 89.215.62.0/23 151.251.44.0/22 151.251.68.0/22 151.251.121.0/24 151.251.126.0/23 151.251.192.0-151.251.196.255 151.251.200.0/21 151.251.238.0-151.251.255.255 176.222.0.0/20 185.151.156.0/22 185.224.160.0/23 212.104.116.0/22 213.226.17.0/24 213.226.19.0/24 213.226.36.0/24 213.226.40.0/24 213.226.51.0/24 213.226.56.0/23 213.226.59.0/24 IPv6: 2001:1ac8:1::/48 Signature Algorithm: sha256WithRSAEncryption 63:68:a4:be:1c:87:21:73:58:72:5e:f5:6f:aa:71:d3:b7:45: 02:3a:a3:89:21:5a:43:8e:cd:84:03:d7:f6:d9:0e:17:3e:8c: d1:38:63:64:9a:26:f3:30:33:78:cc:0e:c4:7e:a5:6e:0e:f9: 7d:48:57:f5:e8:4e:d0:02:f2:af:d0:ef:36:4a:17:0a:42:f9: c5:e5:ba:74:1c:9f:7e:05:66:30:07:19:7a:b8:90:8d:5a:a1: a0:8c:d9:03:d7:c7:a5:73:f2:ba:51:f3:eb:98:ab:e9:e9:3d: a8:b4:c1:ae:ea:7d:76:44:53:5f:5c:42:ad:2d:4b:38:cb:6b: 42:61:7b:96:b3:4d:89:21:4a:72:19:c5:c7:68:c8:c2:6b:3d: 4f:58:a8:aa:f4:66:70:6e:67:99:53:62:17:13:3c:8d:bd:2e: ce:74:41:73:f2:2c:44:c9:79:df:f9:6c:27:79:32:3b:87:cb: 20:99:95:50:60:85:e2:ad:e9:99:21:36:61:13:46:91:f1:7e: c6:b7:4d:d9:21:37:9b:39:f6:48:4f:14:3a:24:4d:80:ea:59: fa:5e:bb:34:d0:80:db:2b:83:af:82:f7:2b:9b:65:ab:e8:03: 52:33:84:e3:3a:a3:94:34:61:f1:93:6b:75:22:bf:f4:91:05: 98:af:dd:af -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISAZsni3eiu21E2nWKUxHHSNsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjUxMjE2MTQyMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDczODI4NTU4OGU5Njk4MDhmMTMyNTVlYjc5OTQ1MzRhMDQ5ZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W5LoWJGS+YCevgwa6yqEfbbwysx D3xnnJNPFTfXsq+oFs/1oA7iNQRyqpDAXfCULZ9S3rOf+qDMlZtG6raMlE1jvvhz 0kfIH2ZCzvjK4aDhJU8wJgm+B4rrv2rT4xO6Sh95LDZ5TsG/ugEDc1yg2EfKmpYY QqY64FRDurOS2CgnBFma2zsMp9oHUcBgGgzA5LHTAf+EdElbDoXODo96+w/zwZVU CibWyeMoYmjwRP+U45qy8m/7L1swlkp2ayyoNO0rAvGyxCqfTIUgmSoI0pyzQdH4 Lk0tba+ygU9AYcZXyMVjhW27i3FE9TgKoAJQVkHREVGWNnNrcPIFkNAwzwIDAQAB o4IDCDCCAwQwHQYDVR0OBBYEFA1zgoVYjpaYCPEyVet5lFNKBJ2pMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvRFhPQ2hWaU9scGdJOFRKVjYzbVVVMG9FbmFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHAYIKwYBBQUHAQcBAf8EggELMIIBBzCB8wQCAAEwgeww CwMDACU/AwQCJT8gAwQCJT9gAwQBPsyaAwQBTloSAwQBTlosAwQATlo+AwQATlpJ AwQATlp8AwQBTlraAwQAU2EeAwQBVPwoMAwDBAZVdkADBABVdkowDAMEAlV2TAME AFV2VAMEAVV2XAMEAVnXPgMEApf7LAMEApf7RAMEAJf7eQMEAZf7fjAMAwQGl/vA AwQAl/vEAwQDl/vIMAsDBAGX++4DAwKX+AMEBLDeAAMEArmXnAMEAbngoAMEAtRo dAMEANXiEQMEANXiEwMEANXiJAMEANXiKAMEANXiMwMEAdXiOAMEANXiOzAPBAIA AjAJAwcAIAEayAABMA0GCSqGSIb3DQEBCwUAA4IBAQBjaKS+HIchc1hyXvVvqnHT t0UCOqOJIVpDjs2EA9f22Q4XPozROGNkmibzMDN4zA7EfqVuDvl9SFf16E7QAvKv 0O82ShcKQvnF5bp0HJ9+BWYwBxl6uJCNWqGgjNkD18elc/K6UfPrmKvp6T2otMGu 6n12RFNfXEKtLUs4y2tCYXuWs02JIUpyGcXHaMjCaz1PWKiq9GZwbmeZU2IXEzyN vS7OdEFz8ixEyXnf+WwneTI7h8sgmZVQYIXiremZITZhE0aR8X7Gt03ZITebOfZI TxQ6JE2A6ln6Xrs00IDbK4Ovgvcrm2Wr6ANSM4TjOqOUNGHxk2t1Ir/0kQWYr92v -----END CERTIFICATE-----Generated at Fri Dec 19 00:56:34 2025 by rpki-client