This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yuTbAA6Uznkl4CV-Fbi_A4KqGH8.roa File: yuTbAA6Uznkl4CV-Fbi_A4KqGH8.roa (raw, json) Hash identifier: 0G9CArYStCNJMpD1j3105zz/QKBlXfR/S/uVdZEz9ts= Subject key identifier: CA:E4:DB:00:0E:94:CE:79:25:E0:25:7E:15:B8:BF:03:82:AA:18:7F Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019AA769BBD2E565F8EB9EB59785AA280CBC Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yuTbAA6Uznkl4CV-Fbi_A4KqGH8.roa Signing time: Fri 21 Nov 2025 17:15:15 +0000 ROA not before: Fri 21 Nov 2025 17:15:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35346 IP address blocks: 45.67.116.0/24 maxlen: 24 91.242.64.0/18 maxlen: 24 91.242.70.0/23 maxlen: 24 91.242.72.0/23 maxlen: 24 91.242.74.0/24 maxlen: 24 91.242.78.0/24 maxlen: 24 91.242.79.0/24 maxlen: 24 91.242.80.0/24 maxlen: 24 91.242.85.0/24 maxlen: 24 91.242.97.0/24 maxlen: 24 91.242.99.0/24 maxlen: 24 91.242.102.0/24 maxlen: 24 91.242.103.0/24 maxlen: 24 91.242.108.0/22 maxlen: 22 91.242.112.0/20 maxlen: 20 91.242.112.0/24 maxlen: 24 91.242.113.0/24 maxlen: 24 91.242.114.0/24 maxlen: 24 91.242.115.0/24 maxlen: 24 91.242.116.0/24 maxlen: 24 91.242.117.0/24 maxlen: 24 91.242.118.0/24 maxlen: 24 91.242.119.0/24 maxlen: 24 91.242.120.0/24 maxlen: 24 91.242.121.0/24 maxlen: 24 91.242.122.0/24 maxlen: 24 178.175.176.0/22 maxlen: 24 194.114.144.0/24 maxlen: 25 194.114.144.128/27 maxlen: 27 195.138.108.0/24 maxlen: 24 2a07:5540::/29 maxlen: 29 2a07:c040::/29 maxlen: 29 2a09:700::/29 maxlen: 29 2a09:15c0::/29 maxlen: 29 2a09:3ac0::/29 maxlen: 29 2a09:4440::/29 maxlen: 29 2a09:4c40::/29 maxlen: 29 2a09:63c0::/29 maxlen: 29 2a09:7640::/29 maxlen: 29 2a09:7b40::/29 maxlen: 29 2a09:7f00::/29 maxlen: 29 2a09:a480::/29 maxlen: 29 2a09:bdc0::/29 maxlen: 29 2a09:ca40::/29 maxlen: 29 2a09:e400::/29 maxlen: 29 2a09:f6c0::/29 maxlen: 29 2a09:f940::/29 maxlen: 29 2a09:fdc0::/29 maxlen: 29 2a0a:3700::/29 maxlen: 29 2a0a:3780::/29 maxlen: 29 2a0a:6000::/29 maxlen: 29 2a0a:ef00::/29 maxlen: 29 2a0b:280::/29 maxlen: 29 2a0b:5d00::/29 maxlen: 29 2a0c:380::/29 maxlen: 29 2a0c:3600::/32 maxlen: 32 2a0c:3780::/29 maxlen: 29 2a0c:57c0::/29 maxlen: 29 2a0c:ae00::/29 maxlen: 29 2a0d:1a00::/29 maxlen: 29 2a0d:dac0::/29 maxlen: 29 2a0d:fb00::/29 maxlen: 29 2a0e:f80::/29 maxlen: 29 2a0e:2080::/29 maxlen: 29 2a0e:2500::/29 maxlen: 29 2a0e:3380::/29 maxlen: 29 2a0e:3540::/29 maxlen: 29 2a0e:3c40::/29 maxlen: 29 2a0e:7880::/29 maxlen: 29 2a0e:b000::/29 maxlen: 29 2a0e:c3c0::/29 maxlen: 29 2a0e:c700::/29 maxlen: 29 2a0e:c800::/29 maxlen: 29 2a0e:d180::/29 maxlen: 29 2a0e:d880::/29 maxlen: 29 2a0e:e540::/29 maxlen: 29 2a0e:e8c0::/29 maxlen: 29 2a0e:e940::/29 maxlen: 29 2a0e:f540::/29 maxlen: 29 2a0f:740::/29 maxlen: 29 2a0f:1b40::/29 maxlen: 29 2a0f:3900::/29 maxlen: 29 2a0f:4840::/29 maxlen: 29 2a0f:6200::/29 maxlen: 29 2a0f:82c0::/29 maxlen: 29 2a0f:9380::/29 maxlen: 29 2a0f:b200::/29 maxlen: 29 2a0f:da00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:69:bb:d2:e5:65:f8:eb:9e:b5:97:85:aa:28:0c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Nov 21 17:15:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cae4db000e94ce7925e0257e15b8bf0382aa187f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:7c:f4:92:23:ad:a0:53:0a:a5:cd:e5:b3: 08:60:15:9a:8d:44:1b:9f:2a:40:a2:7c:54:2a:34: 54:99:3b:67:c7:79:0d:5a:fc:47:6f:f1:da:a9:ce: 19:d2:19:84:94:1a:37:7e:83:76:68:47:8c:79:ce: a6:c1:de:38:0a:f7:2f:36:89:25:e2:51:51:50:c3: 18:92:17:30:d7:76:f3:c3:0a:64:e2:66:b6:6e:21: 7a:4a:e9:0a:41:ae:da:8e:94:c3:9b:f6:bd:5e:ea: c3:7a:d1:51:4c:c5:d8:01:7c:02:a8:23:08:db:46: d2:a6:bb:62:fb:4d:3d:07:3d:41:24:0d:95:12:64: 6b:33:13:c9:4b:b7:ea:ef:c9:ea:ed:4f:c4:c1:c5: 18:40:a2:e4:a2:d0:c8:42:84:1f:d3:de:d5:20:83: fd:f6:e2:88:ee:19:bd:db:05:90:5f:ec:f9:a8:ba: f5:89:ec:0e:ae:1b:10:11:d6:d4:3c:7d:88:fa:f4: 7a:f0:bf:17:b8:ac:7e:9f:18:0d:68:b9:a4:75:4a: dd:1e:58:09:de:45:c0:3b:bb:a5:e1:b0:31:44:6e: 60:cc:61:54:b1:c5:e9:9f:be:5b:e8:6c:0c:a7:6b: 20:f3:af:a4:cc:4e:f4:ef:47:06:7b:48:43:91:98: 38:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E4:DB:00:0E:94:CE:79:25:E0:25:7E:15:B8:BF:03:82:AA:18:7F X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/yuTbAA6Uznkl4CV-Fbi_A4KqGH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.116.0/24 91.242.64.0/18 178.175.176.0/22 194.114.144.0/24 195.138.108.0/24 IPv6: 2a07:5540::/29 2a07:c040::/29 2a09:700::/29 2a09:15c0::/29 2a09:3ac0::/29 2a09:4440::/29 2a09:4c40::/29 2a09:63c0::/29 2a09:7640::/29 2a09:7b40::/29 2a09:7f00::/29 2a09:a480::/29 2a09:bdc0::/29 2a09:ca40::/29 2a09:e400::/29 2a09:f6c0::/29 2a09:f940::/29 2a09:fdc0::/29 2a0a:3700::/29 2a0a:3780::/29 2a0a:6000::/29 2a0a:ef00::/29 2a0b:280::/29 2a0b:5d00::/29 2a0c:380::/29 2a0c:3600::/32 2a0c:3780::/29 2a0c:57c0::/29 2a0c:ae00::/29 2a0d:1a00::/29 2a0d:dac0::/29 2a0d:fb00::/29 2a0e:f80::/29 2a0e:2080::/29 2a0e:2500::/29 2a0e:3380::/29 2a0e:3540::/29 2a0e:3c40::/29 2a0e:7880::/29 2a0e:b000::/29 2a0e:c3c0::/29 2a0e:c700::/29 2a0e:c800::/29 2a0e:d180::/29 2a0e:d880::/29 2a0e:e540::/29 2a0e:e8c0::/29 2a0e:e940::/29 2a0e:f540::/29 2a0f:740::/29 2a0f:1b40::/29 2a0f:3900::/29 2a0f:4840::/29 2a0f:6200::/29 2a0f:82c0::/29 2a0f:9380::/29 2a0f:b200::/29 2a0f:da00::/29 Signature Algorithm: sha256WithRSAEncryption 54:c8:cb:7f:ac:dd:20:1c:03:a7:2b:8b:f6:49:13:c4:2d:af: eb:3c:7f:be:9e:7f:c4:0b:fa:29:c4:bf:a8:89:5c:ed:13:f4: 57:6f:16:9c:36:23:d4:6f:3a:31:65:69:1b:6d:44:b8:31:93: 77:de:b0:e8:ae:ad:61:de:b5:65:74:e2:3d:18:61:4e:e9:bb: 4f:f4:8c:fa:3a:c5:1c:e6:d7:9b:de:cb:0b:fb:c5:4e:be:c6: c6:76:c1:73:2f:7a:49:c0:9e:72:e7:8d:ca:37:31:37:d9:22: 77:62:97:63:7b:36:49:2b:b4:27:4c:a4:b8:1d:96:2e:76:b3: e1:44:7c:20:85:e8:8e:98:f5:66:39:41:45:d7:2c:9d:41:72: 64:ac:c3:f6:84:80:af:cb:f9:38:84:45:34:85:8b:4c:82:f3: 04:43:d1:0a:82:64:e5:1e:9f:1a:f0:7c:47:59:0d:a0:a7:75: 68:ac:55:cc:bf:20:2b:f7:80:21:f5:7f:e8:a6:2c:91:31:47: 2a:ca:45:3d:fd:9e:a2:5c:c3:0c:a3:fa:9f:70:ae:6e:f3:a8: 35:ea:4d:47:de:c7:80:6e:bb:2e:bc:22:1e:a3:41:f1:38:f6: 6b:c3:11:96:65:37:e1:f0:aa:7a:6a:4f:2a:2b:6b:3c:9b:fb: 22:9f:e2:4a -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgISAZqnabvS5WX46561l4WqKAy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjUxMTIxMTcxNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWU0ZGIwMDBlOTRjZTc5MjVlMDI1N2UxNWI4YmYwMzgyYWExODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcJ89JIjraBTCqXN5bMIYBWajUQb nypAonxUKjRUmTtnx3kNWvxHb/Haqc4Z0hmElBo3foN2aEeMec6mwd44CvcvNokl 4lFRUMMYkhcw13bzwwpk4ma2biF6SukKQa7ajpTDm/a9XurDetFRTMXYAXwCqCMI 20bSprti+009Bz1BJA2VEmRrMxPJS7fq78nq7U/EwcUYQKLkotDIQoQf097VIIP9 9uKI7hm92wWQX+z5qLr1iewOrhsQEdbUPH2I+vR68L8XuKx+nxgNaLmkdUrdHlgJ 3kXAO7ul4bAxRG5gzGFUscXpn75b6GwMp2sg86+kzE7070cGe0hDkZg4+QIDAQAB o4IDyTCCA8UwHQYDVR0OBBYEFMrk2wAOlM55JeAlfhW4vwOCqhh/MB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEveXVUYkFBNlV6bmtsNENWLUZiaV9BNEtxR0g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB3QYIKwYBBQUHAQcBAf8EggHMMIIByDAkBAIAATAeAwQA LUN0AwQGW/JAAwQCsq+wAwQAwnKQAwQAw4psMIIBngQCAAIwggGWAwUDKgdVQAMF AyoHwEADBQMqCQcAAwUDKgkVwAMFAyoJOsADBQMqCURAAwUDKglMQAMFAyoJY8AD BQMqCXZAAwUDKgl7QAMFAyoJfwADBQMqCaSAAwUDKgm9wAMFAyoJykADBQMqCeQA AwUDKgn2wAMFAyoJ+UADBQMqCf3AAwUDKgo3AAMFAyoKN4ADBQMqCmAAAwUDKgrv AAMFAyoLAoADBQMqC10AAwUDKgwDgAMFACoMNgADBQMqDDeAAwUDKgxXwAMFAyoM rgADBQMqDRoAAwUDKg3awAMFAyoN+wADBQMqDg+AAwUDKg4ggAMFAyoOJQADBQMq DjOAAwUDKg41QAMFAyoOPEADBQMqDniAAwUDKg6wAAMFAyoOw8ADBQMqDscAAwUD Kg7IAAMFAyoO0YADBQMqDtiAAwUDKg7lQAMFAyoO6MADBQMqDulAAwUDKg71QAMF AyoPB0ADBQMqDxtAAwUDKg85AAMFAyoPSEADBQMqD2IAAwUDKg+CwAMFAyoPk4AD BQMqD7IAAwUDKg/aADANBgkqhkiG9w0BAQsFAAOCAQEAVMjLf6zdIBwDpyuL9kkT xC2v6zx/vp5/xAv6KcS/qIlc7RP0V28WnDYj1G86MWVpG21EuDGTd96w6K6tYd61 ZXTiPRhhTum7T/SM+jrFHObXm97LC/vFTr7GxnbBcy96ScCecueNyjcxN9kid2KX Y3s2SSu0J0ykuB2WLnaz4UR8IIXojpj1ZjlBRdcsnUFyZKzD9oSAr8v5OIRFNIWL TILzBEPRCoJk5R6fGvB8R1kNoKd1aKxVzL8gK/eAIfV/6KYskTFHKspFPf2eolzD DKP6n3CubvOoNepNR97HgG67LrwiHqNB8Tj2a8MRlmU34fCqempPKitrPJv7Ip/i Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:07:01 2025 by rpki-client