This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/1-gZpOs3LH1weRxZdstqPTs_RNSg.roa File: 1-gZpOs3LH1weRxZdstqPTs_RNSg.roa (raw, json) Hash identifier: Z5X+P39homZ9mxVyuxmWtTONjlTrK0M0M943Iro6YG4= Subject key identifier: FA:06:69:3A:CD:CB:1F:5C:1E:47:16:5D:B2:DA:8F:4E:CF:D1:35:28 Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df Certificate serial: 019B1C1531715F0EEEFCF5D2EC20619FE8F0 Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/1-gZpOs3LH1weRxZdstqPTs_RNSg.roa Signing time: Sun 14 Dec 2025 08:58:29 +0000 ROA not before: Sun 14 Dec 2025 08:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48944 IP address blocks: 5.23.112.0/21 maxlen: 21 5.23.112.0/22 maxlen: 22 5.23.116.0/22 maxlen: 22 95.130.56.0/21 maxlen: 21 95.130.56.0/24 maxlen: 24 95.130.57.0/24 maxlen: 24 95.130.58.0/24 maxlen: 24 95.130.59.0/24 maxlen: 24 95.130.60.0/24 maxlen: 24 95.130.61.0/24 maxlen: 24 95.130.62.0/24 maxlen: 24 95.130.63.0/24 maxlen: 24 109.72.192.0/20 maxlen: 20 109.72.192.0/21 maxlen: 21 109.72.192.0/24 maxlen: 24 109.72.193.0/24 maxlen: 24 109.72.194.0/24 maxlen: 24 109.72.195.0/24 maxlen: 24 109.72.196.0/24 maxlen: 24 109.72.197.0/24 maxlen: 24 109.72.198.0/24 maxlen: 24 109.72.199.0/24 maxlen: 24 109.72.200.0/21 maxlen: 21 109.72.200.0/24 maxlen: 24 109.72.201.0/24 maxlen: 24 109.72.202.0/24 maxlen: 24 109.72.203.0/24 maxlen: 24 109.72.204.0/24 maxlen: 24 109.72.205.0/24 maxlen: 24 109.72.206.0/24 maxlen: 24 109.72.207.0/24 maxlen: 24 109.238.176.0/20 maxlen: 20 109.238.176.0/21 maxlen: 21 109.238.184.0/21 maxlen: 21 109.238.184.0/24 maxlen: 24 176.67.64.0/20 maxlen: 20 176.67.64.0/21 maxlen: 21 176.67.64.0/22 maxlen: 22 176.67.64.0/23 maxlen: 23 176.67.64.0/24 maxlen: 24 176.67.65.0/24 maxlen: 24 176.67.66.0/23 maxlen: 23 176.67.66.0/24 maxlen: 24 176.67.67.0/24 maxlen: 24 176.67.68.0/22 maxlen: 22 176.67.68.0/23 maxlen: 23 176.67.68.0/24 maxlen: 24 176.67.69.0/24 maxlen: 24 176.67.70.0/23 maxlen: 23 176.67.70.0/24 maxlen: 24 176.67.71.0/24 maxlen: 24 176.67.72.0/21 maxlen: 21 176.67.72.0/22 maxlen: 22 176.67.72.0/23 maxlen: 23 176.67.72.0/24 maxlen: 24 176.67.73.0/24 maxlen: 24 176.67.74.0/23 maxlen: 23 176.67.74.0/24 maxlen: 24 176.67.75.0/24 maxlen: 24 176.67.76.0/22 maxlen: 22 176.67.76.0/23 maxlen: 23 176.67.76.0/24 maxlen: 24 176.67.77.0/24 maxlen: 24 176.67.78.0/23 maxlen: 23 176.67.78.0/24 maxlen: 24 176.67.79.0/24 maxlen: 24 185.11.176.0/22 maxlen: 22 185.11.176.0/23 maxlen: 23 185.11.176.0/24 maxlen: 24 185.11.177.0/24 maxlen: 24 185.11.178.0/23 maxlen: 23 185.11.178.0/24 maxlen: 24 185.11.179.0/24 maxlen: 24 185.193.208.0/22 maxlen: 22 185.193.208.0/23 maxlen: 23 185.193.208.0/24 maxlen: 24 185.193.209.0/24 maxlen: 24 185.193.210.0/23 maxlen: 23 185.193.210.0/24 maxlen: 24 185.193.211.0/24 maxlen: 24 185.214.36.0/24 maxlen: 24 185.214.37.0/24 maxlen: 24 185.214.38.0/24 maxlen: 24 185.214.39.0/24 maxlen: 24 185.226.132.0/22 maxlen: 22 185.226.132.0/23 maxlen: 23 185.226.132.0/24 maxlen: 24 185.226.133.0/24 maxlen: 24 185.226.134.0/23 maxlen: 23 185.226.134.0/24 maxlen: 24 185.226.135.0/24 maxlen: 24 185.246.4.0/22 maxlen: 22 185.246.4.0/23 maxlen: 23 185.246.4.0/24 maxlen: 24 185.246.5.0/24 maxlen: 24 185.246.6.0/23 maxlen: 23 185.246.6.0/24 maxlen: 24 185.246.7.0/24 maxlen: 24 2a02:d2c0::/29 maxlen: 29 2a02:d2c0::/30 maxlen: 30 2a02:d2c4::/30 maxlen: 30 2a02:d2c4::/31 maxlen: 31 2a02:d2c6::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:15:31:71:5f:0e:ee:fc:f5:d2:ec:20:61:9f:e8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df Validity Not Before: Dec 14 08:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa06693acdcb1f5c1e47165db2da8f4ecfd13528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0b:c6:70:bb:8d:12:f0:91:8e:b1:d8:14:a4: e9:94:70:20:e7:0e:df:0e:26:ef:6e:54:2d:25:f0: 2e:7f:1f:70:95:d7:fb:6b:21:7d:8b:40:e3:a8:36: 73:4e:57:4f:e6:03:94:be:ea:13:ad:1f:fe:c5:1c: 94:51:c1:24:c6:f1:f6:9f:e4:21:af:20:16:20:23: 73:f2:85:ab:59:25:ed:7f:29:17:f5:b2:78:49:60: b9:bf:12:2d:ab:be:49:17:df:01:77:6f:b5:73:2e: 19:77:48:af:1f:79:0f:00:10:be:43:74:50:73:64: 4a:67:c6:7a:2c:72:61:b5:f3:69:79:3a:52:8c:11: f5:c3:86:5b:47:2e:88:92:4f:7e:7d:75:97:44:3f: af:c9:32:19:d7:f7:22:6f:f4:22:98:6a:b9:9a:8d: 74:e3:71:99:25:38:90:04:1c:73:0b:82:66:73:a7: 87:bf:12:c2:e3:05:b2:a4:c6:6b:1c:e8:ea:25:41: 3c:f0:4d:4f:b5:38:25:70:44:36:c6:13:c6:38:9a: f4:63:ac:a6:54:44:83:e7:68:f3:4f:8e:79:7a:92: ac:30:ff:6a:91:90:fb:53:e8:90:5d:98:4c:fb:9b: e1:9a:49:7c:04:0c:d3:3d:88:c1:50:24:36:37:5b: 27:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:06:69:3A:CD:CB:1F:5C:1E:47:16:5D:B2:DA:8F:4E:CF:D1:35:28 X509v3 Authority Key Identifier: keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/1-gZpOs3LH1weRxZdstqPTs_RNSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.112.0/21 95.130.56.0/21 109.72.192.0/20 109.238.176.0/20 176.67.64.0/20 185.11.176.0/22 185.193.208.0/22 185.214.36.0/22 185.226.132.0/22 185.246.4.0/22 IPv6: 2a02:d2c0::/29 Signature Algorithm: sha256WithRSAEncryption 00:b3:87:63:91:d0:ae:9e:c3:3b:6a:a9:9e:29:85:52:a7:a7: 28:93:dd:3a:f3:52:d6:2a:6b:89:b6:1e:c4:20:ac:a3:80:d9: 21:ef:2a:75:8a:03:fa:17:82:b9:d6:d3:8c:18:3a:47:94:36: 9a:79:a3:b4:bb:c2:eb:39:72:1f:80:cd:01:ba:8a:52:d7:d3: 0a:c6:0e:3a:48:0a:99:6c:6a:51:3c:dc:d4:a5:b5:db:73:b2: c5:61:9c:f3:48:5c:78:47:0d:db:17:cf:f5:7f:81:3d:48:45: be:ff:82:2d:f7:39:92:34:8b:c9:da:f2:51:63:52:63:e4:a2: 70:04:6a:33:1f:15:1c:08:4b:48:57:6a:db:0a:38:59:d8:64: fb:5d:27:07:c2:41:83:55:36:fa:e2:97:a8:f4:fe:9d:1b:a4: f4:39:dd:e2:ce:8a:e4:d4:ad:26:bf:a4:1d:2e:16:38:c8:98: 03:00:5f:c1:cd:d3:a2:6f:66:ea:78:48:55:b0:91:fd:83:00: 4a:dc:53:fc:f1:a1:f0:ec:7d:0e:ce:b0:0e:8d:83:0f:fa:6e: 2a:a9:63:e4:ef:da:9d:c3:36:2c:cc:60:70:de:ad:7c:e5:5e: 47:59:4d:2c:13:e9:f7:17:7f:f5:fa:10:67:d8:2e:93:ca:69: c7:bd:22:4b -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZscFTFxXw7u/PXS7CBhn+jwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2FjY2VlZTM1ZmY4N2NkNjc4ZWY2YTkyMjYyY2VmY2U4 NDkyZGYwHhcNMjUxMjE0MDg1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTA2NjkzYWNkY2IxZjVjMWU0NzE2NWRiMmRhOGY0ZWNmZDEzNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwvGcLuNEvCRjrHYFKTplHAg5w7f DibvblQtJfAufx9wldf7ayF9i0DjqDZzTldP5gOUvuoTrR/+xRyUUcEkxvH2n+Qh ryAWICNz8oWrWSXtfykX9bJ4SWC5vxItq75JF98Bd2+1cy4Zd0ivH3kPABC+Q3RQ c2RKZ8Z6LHJhtfNpeTpSjBH1w4ZbRy6Ikk9+fXWXRD+vyTIZ1/cib/QimGq5mo10 43GZJTiQBBxzC4Jmc6eHvxLC4wWypMZrHOjqJUE88E1PtTglcEQ2xhPGOJr0Y6ym VESD52jzT455epKsMP9qkZD7U+iQXZhM+5vhmkl8BAzTPYjBUCQ2N1sngQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFPoGaTrNyx9cHkcWXbLaj07P0TUoMB8GA1UdIwQY MBaAFCTKzO7jX/h81njvapImLO/OhJLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAt YTI5ZWIxMzllNzlkLzEvMS1nWnBPczNMSDF3ZVJ4WmRzdHFQVHNfUk5TZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWMvNjY3MGY5LTQxOGUtNDI3NS04MDAwLWEyOWViMTM5ZTc5 ZC8xL0pNck03dU5mLUh6V2VPOXFraVlzNzg2RWt0OC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBkBggrBgEFBQcBBwEB/wRVMFMwQgQCAAEwPAMEAwUXcAME A1+COAMEBG1IwAMEBG3usAMEBLBDQAMEArkLsAMEArnB0AMEArnWJAMEArnihAME Arn2BDANBAIAAjAHAwUDKgLSwDANBgkqhkiG9w0BAQsFAAOCAQEAALOHY5HQrp7D O2qpnimFUqenKJPdOvNS1ipribYexCCso4DZIe8qdYoD+heCudbTjBg6R5Q2mnmj tLvC6zlyH4DNAbqKUtfTCsYOOkgKmWxqUTzc1KW123OyxWGc80hceEcN2xfP9X+B PUhFvv+CLfc5kjSLydryUWNSY+SicARqMx8VHAhLSFdq2wo4Wdhk+10nB8JBg1U2 +uKXqPT+nRuk9Dnd4s6K5NStJr+kHS4WOMiYAwBfwc3Tom9m6nhIVbCR/YMAStxT /PGh8Ox9Ds6wDo2DD/puKqlj5O/ancM2LMxgcN6tfOVeR1lNLBPp9xd/9foQZ9gu k8ppx70iSw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:29:23 2025 by rpki-client