This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/athLVj_bLnS6ONrg1SqgZ_w3vOg.roa File: athLVj_bLnS6ONrg1SqgZ_w3vOg.roa (raw, json) Hash identifier: 5hHR50C5RmGJHgqxv1QJUzWt08kiAaahrFcOmc9vXe8= Subject key identifier: 6A:D8:4B:56:3F:DB:2E:74:BA:38:DA:E0:D5:2A:A0:67:FC:37:BC:E8 Certificate issuer: /CN=2a0134676b8e371d44ef9d8587fdcd2b3b987ca1 Certificate serial: 019AEE320FBF9D3CA7DDBB5519ACA48EC6F8 Authority key identifier: 2A:01:34:67:6B:8E:37:1D:44:EF:9D:85:87:FD:CD:2B:3B:98:7C:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/athLVj_bLnS6ONrg1SqgZ_w3vOg.roa Signing time: Fri 05 Dec 2025 11:07:29 +0000 ROA not before: Fri 05 Dec 2025 11:07:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12754 IP address blocks: 188.225.128.0/17 maxlen: 17 188.225.128.0/23 maxlen: 23 188.225.130.0/24 maxlen: 24 188.225.131.0/24 maxlen: 24 188.225.132.0/24 maxlen: 24 188.225.133.0/24 maxlen: 24 188.225.134.0/23 maxlen: 23 188.225.134.0/24 maxlen: 24 188.225.135.0/24 maxlen: 24 188.225.137.0/24 maxlen: 24 188.225.138.0/24 maxlen: 24 188.225.139.0/24 maxlen: 24 188.225.140.0/23 maxlen: 23 188.225.140.0/24 maxlen: 24 188.225.141.0/24 maxlen: 24 188.225.142.0/24 maxlen: 24 188.225.143.0/24 maxlen: 24 188.225.144.0/24 maxlen: 24 188.225.145.0/24 maxlen: 24 188.225.146.0/24 maxlen: 24 188.225.148.0/23 maxlen: 23 188.225.148.0/24 maxlen: 24 188.225.149.0/24 maxlen: 24 188.225.150.0/24 maxlen: 24 188.225.151.0/24 maxlen: 24 188.225.152.0/24 maxlen: 24 188.225.153.0/24 maxlen: 24 188.225.154.0/24 maxlen: 24 188.225.156.0/23 maxlen: 23 188.225.156.0/24 maxlen: 24 188.225.157.0/24 maxlen: 24 188.225.158.0/24 maxlen: 24 188.225.159.0/24 maxlen: 24 188.225.164.0/23 maxlen: 23 188.225.164.0/24 maxlen: 24 188.225.166.0/23 maxlen: 23 188.225.168.0/23 maxlen: 23 188.225.170.0/23 maxlen: 23 188.225.170.0/24 maxlen: 24 188.225.171.0/24 maxlen: 24 188.225.172.0/24 maxlen: 24 188.225.173.0/24 maxlen: 24 188.225.174.0/23 maxlen: 23 188.225.174.0/24 maxlen: 24 188.225.175.0/24 maxlen: 24 188.225.176.0/23 maxlen: 23 188.225.176.0/24 maxlen: 24 188.225.177.0/24 maxlen: 24 188.225.178.0/23 maxlen: 23 188.225.178.0/24 maxlen: 24 188.225.179.0/24 maxlen: 24 188.225.180.0/23 maxlen: 23 188.225.180.0/24 maxlen: 24 188.225.181.0/24 maxlen: 24 188.225.182.0/23 maxlen: 23 188.225.182.0/24 maxlen: 24 188.225.183.0/24 maxlen: 24 188.225.184.0/23 maxlen: 23 188.225.184.0/24 maxlen: 24 188.225.185.0/24 maxlen: 24 188.225.186.0/23 maxlen: 23 188.225.186.0/24 maxlen: 24 188.225.190.0/24 maxlen: 24 188.225.191.0/24 maxlen: 24 188.225.192.0/23 maxlen: 23 188.225.192.0/24 maxlen: 24 188.225.193.0/24 maxlen: 24 188.225.198.0/23 maxlen: 23 188.225.202.0/24 maxlen: 24 188.225.203.0/24 maxlen: 24 188.225.204.0/24 maxlen: 24 188.225.205.0/24 maxlen: 24 188.225.210.0/24 maxlen: 24 188.225.211.0/24 maxlen: 24 188.225.212.0/24 maxlen: 24 188.225.213.0/24 maxlen: 24 188.225.214.0/24 maxlen: 24 188.225.215.0/24 maxlen: 24 188.225.216.0/24 maxlen: 24 188.225.217.0/24 maxlen: 24 188.225.218.0/24 maxlen: 24 188.225.219.0/24 maxlen: 24 188.225.220.0/24 maxlen: 24 188.225.221.0/24 maxlen: 24 188.225.222.0/24 maxlen: 24 188.225.224.0/23 maxlen: 23 188.225.224.0/24 maxlen: 24 188.225.225.0/24 maxlen: 24 188.225.226.0/24 maxlen: 24 188.225.227.0/24 maxlen: 24 188.225.228.0/24 maxlen: 24 188.225.229.0/24 maxlen: 24 188.225.230.0/24 maxlen: 24 188.225.231.0/24 maxlen: 24 188.225.232.0/24 maxlen: 24 188.225.233.0/24 maxlen: 24 188.225.234.0/24 maxlen: 24 188.225.235.0/24 maxlen: 24 188.225.236.0/24 maxlen: 24 188.225.237.0/24 maxlen: 24 2a00:4e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.mft rsync://rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:32:0f:bf:9d:3c:a7:dd:bb:55:19:ac:a4:8e:c6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a0134676b8e371d44ef9d8587fdcd2b3b987ca1 Validity Not Before: Dec 5 11:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6ad84b563fdb2e74ba38dae0d52aa067fc37bce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:67:20:6f:dc:b3:0b:42:8c:09:27:ea:51:9e: a3:54:71:b0:53:05:ad:b4:03:6e:17:a4:df:87:15: f2:07:dc:ff:89:4e:5e:39:c5:80:04:04:e8:a2:f2: 5a:05:a7:24:1a:24:1c:95:0e:03:e6:72:5a:35:00: ab:44:9c:58:e8:80:e7:f8:9a:4d:77:a1:5f:c6:81: 5a:65:ff:8b:49:4a:41:7c:1b:5e:eb:e8:9f:2f:63: 09:e0:28:a8:a5:bd:da:b1:16:dc:0b:c3:2d:fe:13: 72:0d:82:0e:d4:0a:76:74:2f:d1:26:d0:69:0e:0d: 73:03:a3:59:05:1c:cb:43:7b:a9:54:9f:db:a6:44: 8b:0f:fc:55:a3:67:76:4b:5a:56:40:d3:30:de:e6: f8:b0:94:35:6e:a2:17:0b:82:9f:45:c6:64:23:fe: 12:74:7c:57:8e:c3:22:46:3f:e6:1e:02:94:29:a8: 5d:fd:81:5f:4c:98:8e:6a:d8:46:fd:23:45:98:eb: 3f:46:20:3d:d3:0e:b9:89:3d:42:59:c2:c3:8e:89: c5:5a:0b:48:22:ac:b3:90:16:01:b7:d7:04:fc:90: 6d:bc:3c:f6:20:ff:b1:84:ec:97:69:16:6b:77:29: b7:a0:46:86:dd:64:aa:ce:5b:04:e2:f6:cd:24:6b: ef:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:4B:56:3F:DB:2E:74:BA:38:DA:E0:D5:2A:A0:67:FC:37:BC:E8 X509v3 Authority Key Identifier: keyid:2A:01:34:67:6B:8E:37:1D:44:EF:9D:85:87:FD:CD:2B:3B:98:7C:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgE0Z2uONx1E752Fh_3NKzuYfKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/athLVj_bLnS6ONrg1SqgZ_w3vOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fe39ca-9a22-4c09-906e-afdd304ccea5/1/KgE0Z2uONx1E752Fh_3NKzuYfKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.225.128.0/17 IPv6: 2a00:4e80::/32 Signature Algorithm: sha256WithRSAEncryption b5:7d:ca:76:57:ca:9d:bd:08:c4:37:8e:5b:46:d6:8f:da:c9: 82:dd:5c:64:4c:6d:1b:f8:4e:8f:8c:59:ca:e9:d0:cb:2b:b0: 6e:9b:b4:18:1a:22:c9:3e:bf:58:90:de:7b:ca:1c:c3:8d:c7: ac:71:18:6b:84:12:7f:fd:7e:72:a7:64:33:ec:47:90:38:0b: bb:e4:36:75:af:c5:37:7b:92:ab:38:0a:03:d5:cd:97:7e:fe: de:9c:96:f1:76:26:6f:95:66:3b:92:26:5a:9e:24:25:47:29: 4d:40:c6:27:97:fb:21:bb:ca:1c:50:ba:80:23:a6:d5:50:9d: 0d:e8:77:63:47:48:60:57:25:62:ac:23:44:11:b9:16:92:b1: 6e:69:ed:57:72:c2:b4:30:9f:ba:1a:a2:1e:76:4a:cc:5f:25: 47:75:88:33:e0:94:46:f8:b8:3d:2f:8d:8c:f6:e2:1f:c0:62: a0:b3:2a:66:cb:50:f8:7e:e6:e3:f5:01:5c:1b:be:29:cb:04: b9:e6:b0:06:69:af:eb:af:3e:e3:1f:10:d9:eb:e6:62:a0:cc: 4b:36:83:11:aa:c2:bd:03:1e:e8:08:90:2c:69:8e:57:71:d9: 17:c9:72:7c:80:2b:d5:03:0a:a9:84:5f:da:24:e8:c3:6f:4d: f4:ae:c9:00 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZruMg+/nTyn3btVGaykjsb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhMDEzNDY3NmI4ZTM3MWQ0NGVmOWQ4NTg3ZmRjZDJiM2I5 ODdjYTEwHhcNMjUxMjA1MTEwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWQ4NGI1NjNmZGIyZTc0YmEzOGRhZTBkNTJhYTA2N2ZjMzdiY2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Gcgb9yzC0KMCSfqUZ6jVHGwUwWt tANuF6TfhxXyB9z/iU5eOcWABAToovJaBackGiQclQ4D5nJaNQCrRJxY6IDn+JpN d6FfxoFaZf+LSUpBfBte6+ifL2MJ4Ciopb3asRbcC8Mt/hNyDYIO1Ap2dC/RJtBp Dg1zA6NZBRzLQ3upVJ/bpkSLD/xVo2d2S1pWQNMw3ub4sJQ1bqIXC4KfRcZkI/4S dHxXjsMiRj/mHgKUKahd/YFfTJiOathG/SNFmOs/RiA90w65iT1CWcLDjonFWgtI IqyzkBYBt9cE/JBtvDz2IP+xhOyXaRZrdym3oEaG3WSqzlsE4vbNJGvv0wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGrYS1Y/2y50ujja4NUqoGf8N7zoMB8GA1UdIwQY MBaAFCoBNGdrjjcdRO+dhYf9zSs7mHyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2dFMFoydU9OeDFFNzUyRmhfM05LenVZZktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mZTM5Y2EtOWEyMi00YzA5LTkwNmUt YWZkZDMwNGNjZWE1LzEvYXRoTFZqX2JMblM2T05yZzFTcWdaX3czdk9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9mZTM5Y2EtOWEyMi00YzA5LTkwNmUtYWZkZDMwNGNjZWE1 LzEvS2dFMFoydU9OeDFFNzUyRmhfM05LenVZZktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHvOGAMA0E AgACMAcDBQAqAE6AMA0GCSqGSIb3DQEBCwUAA4IBAQC1fcp2V8qdvQjEN45bRtaP 2smC3VxkTG0b+E6PjFnK6dDLK7Bum7QYGiLJPr9YkN57yhzDjcescRhrhBJ//X5y p2Qz7EeQOAu75DZ1r8U3e5KrOAoD1c2Xfv7enJbxdiZvlWY7kiZaniQlRylNQMYn l/shu8ocULqAI6bVUJ0N6HdjR0hgVyVirCNEEbkWkrFuae1XcsK0MJ+6GqIedkrM XyVHdYgz4JRG+Lg9L42M9uIfwGKgsypmy1D4fubj9QFcG74pywS55rAGaa/rrz7j HxDZ6+ZioMxLNoMRqsK9Ax7oCJAsaY5XcdkXyXJ8gCvVAwqphF/aJOjDb030rskA -----END CERTIFICATE-----Generated at Sat Dec 6 14:16:31 2025 by rpki-client