This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/YiL-LgYwYTCjIbiHkUVBG7tfFRY.roa File: YiL-LgYwYTCjIbiHkUVBG7tfFRY.roa (raw, json) Hash identifier: SRcC32x7R1pMAtrHALKFJDhDvfNieE3sp+OsJIw5r3c= Subject key identifier: 62:22:FE:2E:06:30:61:30:A3:21:B8:87:91:45:41:1B:BB:5F:15:16 Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df Certificate serial: 019A58BB8D0910C1A801BDD84A2D431BBC1D Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/YiL-LgYwYTCjIbiHkUVBG7tfFRY.roa Signing time: Thu 06 Nov 2025 10:34:37 +0000 ROA not before: Thu 06 Nov 2025 10:34:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48944 IP address blocks: 5.23.112.0/21 maxlen: 21 5.23.112.0/22 maxlen: 22 5.23.116.0/22 maxlen: 22 95.130.56.0/21 maxlen: 21 95.130.56.0/24 maxlen: 24 95.130.57.0/24 maxlen: 24 95.130.58.0/24 maxlen: 24 95.130.59.0/24 maxlen: 24 95.130.60.0/24 maxlen: 24 95.130.61.0/24 maxlen: 24 95.130.62.0/24 maxlen: 24 95.130.63.0/24 maxlen: 24 109.72.192.0/20 maxlen: 20 109.72.192.0/21 maxlen: 21 109.72.192.0/24 maxlen: 24 109.72.193.0/24 maxlen: 24 109.72.194.0/24 maxlen: 24 109.72.195.0/24 maxlen: 24 109.72.196.0/24 maxlen: 24 109.72.197.0/24 maxlen: 24 109.72.198.0/24 maxlen: 24 109.72.199.0/24 maxlen: 24 109.72.200.0/21 maxlen: 21 109.72.200.0/24 maxlen: 24 109.72.201.0/24 maxlen: 24 109.72.202.0/24 maxlen: 24 109.72.203.0/24 maxlen: 24 109.72.204.0/24 maxlen: 24 109.72.205.0/24 maxlen: 24 109.72.206.0/24 maxlen: 24 109.72.207.0/24 maxlen: 24 109.238.176.0/20 maxlen: 20 109.238.176.0/21 maxlen: 21 109.238.184.0/21 maxlen: 21 109.238.184.0/24 maxlen: 24 176.67.64.0/20 maxlen: 20 176.67.64.0/21 maxlen: 21 176.67.64.0/22 maxlen: 22 176.67.64.0/23 maxlen: 23 176.67.64.0/24 maxlen: 24 176.67.65.0/24 maxlen: 24 176.67.66.0/23 maxlen: 23 176.67.66.0/24 maxlen: 24 176.67.67.0/24 maxlen: 24 176.67.68.0/22 maxlen: 22 176.67.68.0/23 maxlen: 23 176.67.68.0/24 maxlen: 24 176.67.69.0/24 maxlen: 24 176.67.70.0/23 maxlen: 23 176.67.70.0/24 maxlen: 24 176.67.71.0/24 maxlen: 24 176.67.72.0/21 maxlen: 21 176.67.72.0/22 maxlen: 22 176.67.72.0/23 maxlen: 23 176.67.72.0/24 maxlen: 24 176.67.73.0/24 maxlen: 24 176.67.74.0/23 maxlen: 23 176.67.74.0/24 maxlen: 24 176.67.75.0/24 maxlen: 24 176.67.76.0/22 maxlen: 22 176.67.76.0/23 maxlen: 23 176.67.76.0/24 maxlen: 24 176.67.77.0/24 maxlen: 24 176.67.78.0/23 maxlen: 23 176.67.78.0/24 maxlen: 24 176.67.79.0/24 maxlen: 24 185.11.176.0/22 maxlen: 22 185.11.176.0/23 maxlen: 23 185.11.176.0/24 maxlen: 24 185.11.177.0/24 maxlen: 24 185.11.178.0/23 maxlen: 23 185.11.178.0/24 maxlen: 24 185.11.179.0/24 maxlen: 24 185.193.208.0/22 maxlen: 22 185.193.208.0/23 maxlen: 23 185.193.208.0/24 maxlen: 24 185.193.209.0/24 maxlen: 24 185.193.210.0/23 maxlen: 23 185.193.210.0/24 maxlen: 24 185.193.211.0/24 maxlen: 24 185.214.36.0/24 maxlen: 24 185.214.37.0/24 maxlen: 24 185.214.38.0/24 maxlen: 24 185.214.39.0/24 maxlen: 24 185.226.132.0/22 maxlen: 22 185.226.132.0/23 maxlen: 23 185.226.132.0/24 maxlen: 24 185.226.133.0/24 maxlen: 24 185.226.134.0/23 maxlen: 23 185.226.134.0/24 maxlen: 24 185.226.135.0/24 maxlen: 24 185.246.4.0/22 maxlen: 22 185.246.4.0/23 maxlen: 23 185.246.4.0/24 maxlen: 24 185.246.5.0/24 maxlen: 24 185.246.6.0/23 maxlen: 23 185.246.6.0/24 maxlen: 24 185.246.7.0/24 maxlen: 24 2a02:d2c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:bb:8d:09:10:c1:a8:01:bd:d8:4a:2d:43:1b:bc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df Validity Not Before: Nov 6 10:34:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6222fe2e06306130a321b8879145411bbb5f1516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:18:54:b1:af:da:33:68:c7:6c:81:90:bb: fa:e4:df:d9:7c:7b:29:d4:fc:d8:0c:35:a2:c8:21: fb:bb:c4:83:69:d9:18:c7:e9:3f:95:5e:dc:0a:40: 75:08:8d:99:3e:15:d8:90:0f:a3:68:b2:15:a2:aa: a3:dd:72:8d:a3:c2:d0:69:62:68:f1:55:88:d6:b4: 3b:1e:e7:a3:4f:11:a8:ed:11:86:8d:43:1e:67:8d: 41:2f:d4:aa:72:8a:c3:15:fb:4d:78:62:df:f6:9d: 89:e5:4e:96:24:ed:75:f9:d0:5b:e2:2a:2c:2c:be: 7a:2e:bd:b3:a9:54:a6:22:69:31:4b:54:4f:56:49: c0:41:08:b9:b5:20:ed:12:a2:48:bd:f1:c0:0e:af: 0f:5d:74:da:5f:82:aa:10:96:d3:d9:48:56:a7:3e: b6:c5:60:af:3b:47:53:84:76:3a:62:94:3b:02:6a: 63:a6:2d:fd:df:e4:ef:3c:c3:25:fe:8f:f3:ae:13: 07:22:d8:3d:14:fb:87:e7:39:12:9e:8b:7c:92:e1: df:71:12:f2:85:92:a6:55:d3:d2:56:e1:df:f5:34: 47:f4:c2:cd:77:de:3e:2e:e6:0a:4a:89:dc:37:d4: aa:56:83:4e:39:94:6f:3f:70:14:d2:46:c1:f8:82: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:22:FE:2E:06:30:61:30:A3:21:B8:87:91:45:41:1B:BB:5F:15:16 X509v3 Authority Key Identifier: keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/YiL-LgYwYTCjIbiHkUVBG7tfFRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.112.0/21 95.130.56.0/21 109.72.192.0/20 109.238.176.0/20 176.67.64.0/20 185.11.176.0/22 185.193.208.0/22 185.214.36.0/22 185.226.132.0/22 185.246.4.0/22 IPv6: 2a02:d2c0::/29 Signature Algorithm: sha256WithRSAEncryption 4e:f4:c5:02:94:17:01:8c:a8:fc:7b:d0:0d:69:9b:f9:10:44: 3f:39:45:91:03:38:f3:2e:3f:99:03:38:d2:58:08:fd:72:fd: 09:a3:97:6f:ae:c3:a1:53:d8:15:7a:a4:38:5e:ba:7e:a2:e6: 18:2f:e0:c2:88:d3:e8:a1:46:2c:5b:93:bb:1a:e6:20:5f:33: d0:ca:56:1f:92:40:04:3c:20:96:e8:11:5b:54:4c:8b:e7:94: 10:a2:f5:66:76:82:1c:2e:f5:4b:12:81:88:31:29:29:7a:bb: cd:91:0b:a2:76:49:4a:ac:d7:f8:01:55:ec:b1:05:ac:b3:a2: 02:2d:a2:a4:53:d8:98:0a:59:22:e4:22:65:f7:ff:25:8c:93: a0:bb:a4:85:ae:ae:30:c0:c8:04:df:c8:0e:5b:70:ba:12:5b: 81:27:2e:da:10:6b:3a:f1:07:07:14:55:2a:4b:8d:56:3d:d6: be:aa:3f:15:90:89:92:4b:10:01:cd:8d:08:a5:24:b1:7f:82: 1d:8f:78:7c:8d:d8:d9:17:5c:4f:68:d1:2b:e1:11:83:48:e7: 75:a6:50:25:03:8a:d9:cb:8d:fb:0f:dc:df:55:b1:51:09:7c: 28:1f:53:7f:47:88:f7:40:3e:d0:cb:31:c1:59:43:52:41:57: d0:e1:62:da -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZpYu40JEMGoAb3YSi1DG7wdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0Y2FjY2VlZTM1ZmY4N2NkNjc4ZWY2YTkyMjYyY2VmY2U4 NDkyZGYwHhcNMjUxMTA2MTAzNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MjIyZmUyZTA2MzA2MTMwYTMyMWI4ODc5MTQ1NDExYmJiNWYxNTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRoYVLGv2jNox2yBkLv65N/ZfHsp 1PzYDDWiyCH7u8SDadkYx+k/lV7cCkB1CI2ZPhXYkA+jaLIVoqqj3XKNo8LQaWJo 8VWI1rQ7HuejTxGo7RGGjUMeZ41BL9SqcorDFftNeGLf9p2J5U6WJO11+dBb4ios LL56Lr2zqVSmImkxS1RPVknAQQi5tSDtEqJIvfHADq8PXXTaX4KqEJbT2UhWpz62 xWCvO0dThHY6YpQ7Ampjpi393+TvPMMl/o/zrhMHItg9FPuH5zkSnot8kuHfcRLy hZKmVdPSVuHf9TRH9MLNd94+LuYKSoncN9SqVoNOOZRvP3AU0kbB+IJA9QIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFGIi/i4GMGEwoyG4h5FFQRu7XxUWMB8GA1UdIwQY MBaAFCTKzO7jX/h81njvapImLO/OhJLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAt YTI5ZWIxMzllNzlkLzEvWWlMLUxnWXdZVENqSWJpSGtVVkJHN3RmRlJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAtYTI5ZWIxMzllNzlk LzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDBRdwAwQD X4I4AwQEbUjAAwQEbe6wAwQEsENAAwQCuQuwAwQCucHQAwQCudYkAwQCueKEAwQC ufYEMA0EAgACMAcDBQMqAtLAMA0GCSqGSIb3DQEBCwUAA4IBAQBO9MUClBcBjKj8 e9ANaZv5EEQ/OUWRAzjzLj+ZAzjSWAj9cv0Jo5dvrsOhU9gVeqQ4Xrp+ouYYL+DC iNPooUYsW5O7GuYgXzPQylYfkkAEPCCW6BFbVEyL55QQovVmdoIcLvVLEoGIMSkp ervNkQuidklKrNf4AVXssQWss6ICLaKkU9iYClki5CJl9/8ljJOgu6SFrq4wwMgE 38gOW3C6EluBJy7aEGs68QcHFFUqS41WPda+qj8VkImSSxABzY0IpSSxf4Idj3h8 jdjZF1xPaNEr4RGDSOd1plAlA4rZy437D9zfVbFRCXwoH1N/R4j3QD7QyzHBWUNS QVfQ4WLa -----END CERTIFICATE-----Generated at Sat Dec 6 21:14:28 2025 by rpki-client