This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1_MFWoVkb429eX8rKfIKltwJQjs.roa File: 1_MFWoVkb429eX8rKfIKltwJQjs.roa (raw, json) Hash identifier: 6kTHxIyLa3nfqMWu4gHIEoH7gvlMi1Y6M4luxJXYzJA= Subject key identifier: D7:F3:05:5A:85:64:6F:8D:BD:79:7F:2B:29:F2:0A:96:DC:09:42:3B Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019AD679A941D26FF552A575B6137C164FE5 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1_MFWoVkb429eX8rKfIKltwJQjs.roa Signing time: Sun 30 Nov 2025 20:34:48 +0000 ROA not before: Sun 30 Nov 2025 20:34:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62206 IP address blocks: 5.181.84.0/24 maxlen: 24 5.181.87.0/24 maxlen: 24 45.9.29.0/24 maxlen: 24 45.13.189.0/24 maxlen: 24 45.13.190.0/24 maxlen: 24 45.94.171.0/24 maxlen: 24 45.132.180.0/24 maxlen: 24 45.132.182.0/23 maxlen: 24 77.83.39.0/24 maxlen: 24 146.19.125.0/24 maxlen: 24 185.43.248.0/24 maxlen: 24 185.43.249.0/24 maxlen: 24 185.43.251.0/24 maxlen: 24 185.200.62.0/24 maxlen: 24 185.200.63.0/24 maxlen: 24 193.30.240.0/24 maxlen: 24 193.30.242.0/24 maxlen: 24 193.30.243.0/24 maxlen: 24 193.57.43.0/24 maxlen: 24 194.242.96.0/24 maxlen: 24 194.242.98.0/24 maxlen: 24 194.242.99.0/24 maxlen: 24 195.177.92.0/24 maxlen: 24 195.177.93.0/24 maxlen: 24 195.177.94.0/24 maxlen: 24 195.177.95.0/24 maxlen: 24 195.211.188.0/24 maxlen: 24 195.211.189.0/24 maxlen: 24 195.211.190.0/24 maxlen: 24 195.211.191.0/24 maxlen: 24 2a01:7120::/32 maxlen: 32 2a01:7120:7::/48 maxlen: 48 2a07:9200::/29 maxlen: 32 2a07:9201::/32 maxlen: 32 2a07:9206::/32 maxlen: 32 2a07:9207::/32 maxlen: 32 2a09:340::/32 maxlen: 32 2a09:342::/32 maxlen: 32 2a09:346::/32 maxlen: 32 2a09:c440::/32 maxlen: 32 2a0c:5d40::/32 maxlen: 32 2a0c:a580::/29 maxlen: 32 2a0c:a580::/32 maxlen: 32 2a0c:a581::/32 maxlen: 32 2a0c:a584::/32 maxlen: 32 2a0c:a586::/32 maxlen: 32 2a10:dfc0::/29 maxlen: 32 2a10:dfc0::/32 maxlen: 32 2a10:fac0::/32 maxlen: 32 2a11:580::/29 maxlen: 29 2a11:580::/32 maxlen: 32 2a11:1600::/32 maxlen: 32 2a11:2a80::/32 maxlen: 32 2a11:3900::/32 maxlen: 32 2a11:d680::/32 maxlen: 32 2a12:9f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d6:79:a9:41:d2:6f:f5:52:a5:75:b6:13:7c:16:4f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Nov 30 20:34:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7f3055a85646f8dbd797f2b29f20a96dc09423b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:63:32:ac:b1:9f:c4:dd:6f:ed:89:0a:5f:a4: 81:0d:f8:10:dc:63:bc:fd:23:da:52:e6:c1:22:81: 0b:66:87:f3:26:73:64:55:97:e7:2b:29:1d:cd:b5: 04:99:34:44:78:df:b8:60:16:09:61:57:49:5e:9f: dc:2a:66:f5:e7:19:f5:21:38:04:57:2d:a2:b3:10: 72:48:54:66:fa:e3:0b:55:45:09:0f:b5:63:a2:73: 04:ea:6d:32:b8:79:76:98:62:59:6c:ed:f2:02:17: e3:f2:f3:e6:48:fb:37:74:c7:7e:65:41:b0:5c:9f: 84:f0:2a:08:89:e7:b9:a3:26:df:c2:32:5f:2a:5f: 73:30:78:35:62:44:3f:1d:91:5e:e7:75:e4:f7:f0: c0:79:f2:b8:68:b4:7c:62:e1:d3:ac:68:99:c4:82: 52:dd:a6:5f:8f:29:68:7c:cb:ae:eb:9e:29:c4:5f: 63:f3:49:d6:8a:46:02:88:74:af:80:1e:7d:4d:b3: 09:e9:23:bc:42:42:d8:28:24:02:8a:bb:df:9d:c5: c8:42:76:11:83:bc:fa:ee:40:e1:13:16:ee:7b:63: b8:a6:8d:c2:ba:a1:79:ac:7e:03:72:81:38:73:0b: a2:6b:30:0f:12:ca:46:e0:73:ba:ba:19:80:01:ce: a1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F3:05:5A:85:64:6F:8D:BD:79:7F:2B:29:F2:0A:96:DC:09:42:3B X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1_MFWoVkb429eX8rKfIKltwJQjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.84.0/24 5.181.87.0/24 45.9.29.0/24 45.13.189.0-45.13.190.255 45.94.171.0/24 45.132.180.0/24 45.132.182.0/23 77.83.39.0/24 146.19.125.0/24 185.43.248.0/23 185.43.251.0/24 185.200.62.0/23 193.30.240.0/24 193.30.242.0/23 193.57.43.0/24 194.242.96.0/24 194.242.98.0/23 195.177.92.0/22 195.211.188.0/22 IPv6: 2a01:7120::/32 2a07:9200::/29 2a09:340::/32 2a09:342::/32 2a09:346::/32 2a09:c440::/32 2a0c:5d40::/32 2a0c:a580::/29 2a10:dfc0::/29 2a10:fac0::/32 2a11:580::/29 2a11:1600::/32 2a11:2a80::/32 2a11:3900::/32 2a11:d680::/32 2a12:9f00::/32 Signature Algorithm: sha256WithRSAEncryption ae:9f:a9:2c:22:92:f1:2a:8f:2b:d5:be:7b:0a:7d:e0:42:db: 37:e7:69:2a:e7:22:4a:41:2a:a5:14:ae:c8:89:13:16:17:ab: 36:bf:b8:6c:d2:3d:aa:cc:a5:01:35:45:78:2a:65:ac:04:6c: dd:ec:38:38:25:5c:d3:b4:a0:02:a7:4d:6d:1d:3a:8e:91:14: 39:ab:34:27:37:0b:9c:6a:88:08:56:87:a9:1a:c2:93:31:17: a4:3f:49:df:f4:59:c1:89:ff:b8:f5:34:f6:17:40:f5:96:76: 5c:bb:6d:33:97:fd:ce:f2:6e:2a:38:5b:e6:fc:96:bc:9b:0c: da:38:f1:32:d5:57:34:69:7f:1e:c1:6f:a3:65:dd:ec:2c:76: 53:40:bf:d0:e5:57:34:79:ea:5f:31:d8:0b:c6:7a:a0:4b:81: 4b:68:52:c4:55:41:ee:76:30:45:d0:f4:77:f7:1e:24:f7:10: 27:ee:6d:b9:f1:fa:e4:db:07:09:3f:a0:37:44:a1:d8:10:6f: 3d:cc:ab:3c:71:07:8a:6f:a2:b2:fc:78:8a:8e:6a:c4:b8:a2: 0e:c3:14:a0:a0:69:eb:71:54:fd:da:e5:f5:ac:97:cd:2f:a6: 93:9e:eb:ff:f1:13:e3:99:69:c8:8e:a0:9b:d9:89:ae:d3:03: 1c:66:a3:d2 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgISAZrWealB0m/1UqV1thN8Fk/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMTMwMjAzNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2YzMDU1YTg1NjQ2ZjhkYmQ3OTdmMmIyOWYyMGE5NmRjMDk0MjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mMyrLGfxN1v7YkKX6SBDfgQ3GO8 /SPaUubBIoELZofzJnNkVZfnKykdzbUEmTREeN+4YBYJYVdJXp/cKmb15xn1ITgE Vy2isxBySFRm+uMLVUUJD7VjonME6m0yuHl2mGJZbO3yAhfj8vPmSPs3dMd+ZUGw XJ+E8CoIiee5oybfwjJfKl9zMHg1YkQ/HZFe53Xk9/DAefK4aLR8YuHTrGiZxIJS 3aZfjylofMuu654pxF9j80nWikYCiHSvgB59TbMJ6SO8QkLYKCQCirvfncXIQnYR g7z67kDhExbue2O4po3CuqF5rH4DcoE4cwuiazAPEspG4HO6uhmAAc6hJQIDAQAB o4IC+jCCAvYwHQYDVR0OBBYEFNfzBVqFZG+NvXl/KynyCpbcCUI7MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvMV9NRldvVmtiNDI5ZVg4cktmSUtsdHdKUWpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDgYIKwYBBQUHAQcBAf8Egf4wgfswgYAEAgABMHoDBAAF tVQDBAAFtVcDBAAtCR0wDAMEAC0NvQMEAC0NvgMEAC1eqwMEAC2EtAMEAS2EtgME AE1TJwMEAJITfQMEAbkr+AMEALkr+wMEAbnIPgMEAMEe8AMEAcEe8gMEAME5KwME AMLyYAMEAcLyYgMEAsOxXAMEAsPTvDB2BAIAAjBwAwUAKgFxIAMFAyoHkgADBQAq CQNAAwUAKgkDQgMFACoJA0YDBQAqCcRAAwUAKgxdQAMFAyoMpYADBQMqEN/AAwUA KhD6wAMFAyoRBYADBQAqERYAAwUAKhEqgAMFACoROQADBQAqEdaAAwUAKhKfADAN BgkqhkiG9w0BAQsFAAOCAQEArp+pLCKS8SqPK9W+ewp94ELbN+dpKuciSkEqpRSu yIkTFherNr+4bNI9qsylATVFeCplrARs3ew4OCVc07SgAqdNbR06jpEUOas0JzcL nGqICFaHqRrCkzEXpD9J3/RZwYn/uPU09hdA9ZZ2XLttM5f9zvJuKjhb5vyWvJsM 2jjxMtVXNGl/HsFvo2Xd7Cx2U0C/0OVXNHnqXzHYC8Z6oEuBS2hSxFVB7nYwRdD0 d/ceJPcQJ+5tufH65NsHCT+gN0Sh2BBvPcyrPHEHim+isvx4io5qxLiiDsMUoKBp 63FU/drl9ayXzS+mk57r//ET45lpyI6gm9mJrtMDHGaj0g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:46 2025 by rpki-client