This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xSCESmodt3W3rILlaAhhsLjcbdY.roa File: xSCESmodt3W3rILlaAhhsLjcbdY.roa (raw, json) Hash identifier: 4SaAXPjccNY5YTnyh+QTToIS7TMWZEa3kJkAX9G+wmE= Subject key identifier: C5:20:84:4A:6A:1D:B7:75:B7:AC:82:E5:68:08:61:B0:B8:DC:6D:D6 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B21293F21E28047A75012C029070B39F2 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xSCESmodt3W3rILlaAhhsLjcbdY.roa Signing time: Mon 15 Dec 2025 08:38:29 +0000 ROA not before: Mon 15 Dec 2025 08:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62206 IP address blocks: 5.181.84.0/24 maxlen: 24 5.181.87.0/24 maxlen: 24 45.9.29.0/24 maxlen: 24 45.13.189.0/24 maxlen: 24 45.13.190.0/24 maxlen: 24 45.94.171.0/24 maxlen: 24 45.132.180.0/24 maxlen: 24 45.132.182.0/23 maxlen: 24 77.83.39.0/24 maxlen: 24 146.19.125.0/24 maxlen: 24 185.43.248.0/24 maxlen: 24 185.43.249.0/24 maxlen: 24 185.43.251.0/24 maxlen: 24 185.200.62.0/24 maxlen: 24 185.200.63.0/24 maxlen: 24 193.30.240.0/24 maxlen: 24 193.30.242.0/24 maxlen: 24 193.30.243.0/24 maxlen: 24 193.57.43.0/24 maxlen: 24 194.242.96.0/24 maxlen: 24 194.242.98.0/24 maxlen: 24 194.242.99.0/24 maxlen: 24 195.177.92.0/24 maxlen: 24 195.177.94.0/24 maxlen: 24 195.177.95.0/24 maxlen: 24 195.211.188.0/24 maxlen: 24 195.211.189.0/24 maxlen: 24 195.211.190.0/24 maxlen: 24 195.211.191.0/24 maxlen: 24 2a01:7120::/32 maxlen: 32 2a01:7120:7::/48 maxlen: 48 2a07:9200::/29 maxlen: 32 2a07:9201::/32 maxlen: 32 2a07:9206::/32 maxlen: 32 2a07:9207::/32 maxlen: 32 2a09:340::/32 maxlen: 32 2a09:342::/32 maxlen: 32 2a09:346::/32 maxlen: 32 2a09:c440::/32 maxlen: 32 2a0c:5d40::/32 maxlen: 32 2a0c:a580::/29 maxlen: 32 2a0c:a580::/32 maxlen: 32 2a0c:a581::/32 maxlen: 32 2a0c:a584::/32 maxlen: 32 2a0c:a586::/32 maxlen: 32 2a10:dfc0::/29 maxlen: 32 2a10:dfc0::/32 maxlen: 32 2a10:fac0::/32 maxlen: 32 2a11:580::/29 maxlen: 29 2a11:580::/32 maxlen: 32 2a11:1600::/32 maxlen: 32 2a11:2a80::/32 maxlen: 32 2a11:3900::/32 maxlen: 32 2a11:d680::/32 maxlen: 32 2a12:9f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:29:3f:21:e2:80:47:a7:50:12:c0:29:07:0b:39:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Dec 15 08:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c520844a6a1db775b7ac82e5680861b0b8dc6dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:48:5c:6b:c4:b1:aa:83:b6:70:7c:a2:8a:bd: 9a:a9:4b:8d:1e:51:c0:44:b8:49:76:ab:93:e3:3d: c6:53:07:0b:24:06:4b:cf:c1:a4:98:a8:0f:e0:72: 73:fe:55:ac:46:54:a5:17:dd:51:04:fc:2a:16:fd: 3d:d8:33:4a:89:8e:8b:08:57:8f:2f:2f:bc:a9:37: fb:fb:4d:17:62:39:c2:be:b7:56:5b:9c:ad:7c:b9: 02:5c:be:36:3c:14:fc:f7:f8:ef:2b:e1:c3:b2:d2: 17:ea:80:97:cc:b4:43:be:08:e9:07:ff:e0:cf:9b: c5:5c:be:63:19:b2:b7:f6:35:82:d9:09:59:f5:71: f8:da:64:d1:39:39:f2:23:22:42:09:1e:05:2c:01: 94:60:fd:08:3f:d2:4d:c6:b4:6f:54:45:e0:9c:a7: 80:b0:ac:1d:a0:ca:c7:d9:e1:9a:26:3b:98:d1:64: 1c:cd:57:8f:ab:9a:c8:ce:12:c3:43:12:34:48:3f: a4:50:00:37:8b:a0:c6:27:c6:23:d2:32:bb:de:bc: 0f:a9:44:7b:36:59:6e:cf:fc:19:0c:a0:a4:d0:3f: ba:23:d1:2b:89:42:d7:36:1b:65:2a:8a:d3:67:48: bf:aa:4a:dd:97:4f:3d:51:ed:70:97:bc:16:ae:4b: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:20:84:4A:6A:1D:B7:75:B7:AC:82:E5:68:08:61:B0:B8:DC:6D:D6 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xSCESmodt3W3rILlaAhhsLjcbdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.84.0/24 5.181.87.0/24 45.9.29.0/24 45.13.189.0-45.13.190.255 45.94.171.0/24 45.132.180.0/24 45.132.182.0/23 77.83.39.0/24 146.19.125.0/24 185.43.248.0/23 185.43.251.0/24 185.200.62.0/23 193.30.240.0/24 193.30.242.0/23 193.57.43.0/24 194.242.96.0/24 194.242.98.0/23 195.177.92.0/24 195.177.94.0/23 195.211.188.0/22 IPv6: 2a01:7120::/32 2a07:9200::/29 2a09:340::/32 2a09:342::/32 2a09:346::/32 2a09:c440::/32 2a0c:5d40::/32 2a0c:a580::/29 2a10:dfc0::/29 2a10:fac0::/32 2a11:580::/29 2a11:1600::/32 2a11:2a80::/32 2a11:3900::/32 2a11:d680::/32 2a12:9f00::/32 Signature Algorithm: sha256WithRSAEncryption a2:90:52:8a:4f:59:8a:0e:bc:77:d5:ef:d5:bd:41:af:b9:92: 90:fd:22:75:4f:80:5d:63:0b:a7:96:1c:9c:c5:67:15:50:f6: 4b:bb:c6:27:2f:c6:47:04:38:73:0a:49:6b:16:09:52:3d:33: 55:24:40:a0:af:d8:f1:bc:5b:54:f2:6b:07:88:7d:4b:6e:96: 0d:85:21:01:4c:e3:f0:0b:49:b9:34:b1:1e:cc:40:9a:ca:44: c3:66:c1:db:f3:d4:77:c9:04:77:29:76:f4:e7:ba:cc:98:96: b9:59:c3:12:f1:5e:66:b1:f2:27:20:8f:a6:8d:a8:05:ab:34: 1e:27:93:5e:17:14:52:67:c9:37:8f:24:d2:76:83:97:c0:6b: 45:bb:05:7e:24:ab:3c:36:de:88:0e:ff:6a:63:91:f5:e8:93: c5:79:89:45:b1:a0:21:c0:20:25:e0:95:cd:12:59:47:d1:d1: 43:26:72:de:f8:fe:dd:e1:ce:98:ea:55:8a:48:f1:10:66:d4: e0:6c:76:5e:9d:d9:b6:c3:cb:b0:18:bc:fa:76:ac:7b:df:0f: 46:3b:8d:ce:f8:e9:7e:5a:9b:27:c6:7e:ae:10:1a:09:3f:54: 25:9a:42:97:27:e4:36:3b:ad:ad:89:92:3e:ef:dc:00:d8:2f: b6:3f:a1:f1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAZshKT8h4oBHp1ASwCkHCznyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMjE1MDgzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTIwODQ0YTZhMWRiNzc1YjdhYzgyZTU2ODA4NjFiMGI4ZGM2ZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8khca8SxqoO2cHyiir2aqUuNHlHA RLhJdquT4z3GUwcLJAZLz8GkmKgP4HJz/lWsRlSlF91RBPwqFv092DNKiY6LCFeP Ly+8qTf7+00XYjnCvrdWW5ytfLkCXL42PBT89/jvK+HDstIX6oCXzLRDvgjpB//g z5vFXL5jGbK39jWC2QlZ9XH42mTROTnyIyJCCR4FLAGUYP0IP9JNxrRvVEXgnKeA sKwdoMrH2eGaJjuY0WQczVePq5rIzhLDQxI0SD+kUAA3i6DGJ8Yj0jK73rwPqUR7 Nlluz/wZDKCk0D+6I9EriULXNhtlKorTZ0i/qkrdl089Ue1wl7wWrktZkQIDAQAB o4IDAzCCAv8wHQYDVR0OBBYEFMUghEpqHbd1t6yC5WgIYbC43G3WMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEveFNDRVNtb2R0M1czcklMbGFBaGhzTGpjYmRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCBhwQCAAEwgYAD BAAFtVQDBAAFtVcDBAAtCR0wDAMEAC0NvQMEAC0NvgMEAC1eqwMEAC2EtAMEAS2E tgMEAE1TJwMEAJITfQMEAbkr+AMEALkr+wMEAbnIPgMEAMEe8AMEAcEe8gMEAME5 KwMEAMLyYAMEAcLyYgMEAMOxXAMEAcOxXgMEAsPTvDB2BAIAAjBwAwUAKgFxIAMF AyoHkgADBQAqCQNAAwUAKgkDQgMFACoJA0YDBQAqCcRAAwUAKgxdQAMFAyoMpYAD BQMqEN/AAwUAKhD6wAMFAyoRBYADBQAqERYAAwUAKhEqgAMFACoROQADBQAqEdaA AwUAKhKfADANBgkqhkiG9w0BAQsFAAOCAQEAopBSik9Zig68d9Xv1b1Br7mSkP0i dU+AXWMLp5YcnMVnFVD2S7vGJy/GRwQ4cwpJaxYJUj0zVSRAoK/Y8bxbVPJrB4h9 S26WDYUhAUzj8AtJuTSxHsxAmspEw2bB2/PUd8kEdyl29Oe6zJiWuVnDEvFeZrHy JyCPpo2oBas0HieTXhcUUmfJN48k0naDl8BrRbsFfiSrPDbeiA7/amOR9eiTxXmJ RbGgIcAgJeCVzRJZR9HRQyZy3vj+3eHOmOpVikjxEGbU4Gx2Xp3ZtsPLsBi8+nas e98PRjuNzvjpflqbJ8Z+rhAaCT9UJZpClyfkNjutrYmSPu/cANgvtj+h8Q== -----END CERTIFICATE-----Generated at Tue Dec 16 09:29:02 2025 by rpki-client