This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/C6h1uGjhA_seLI92RtenCJdmFIc.roa File: C6h1uGjhA_seLI92RtenCJdmFIc.roa (raw, json) Hash identifier: aHJFYtV1DfzDO3SzG0BdDm20sFW40sbWmO7uuogI4sw= Subject key identifier: 0B:A8:75:B8:68:E1:03:FB:1E:2C:8F:76:46:D7:A7:08:97:66:14:87 Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Certificate serial: 019AEE428AB5F7909F25D1DA72448A372A33 Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/C6h1uGjhA_seLI92RtenCJdmFIc.roa Signing time: Fri 05 Dec 2025 11:25:29 +0000 ROA not before: Fri 05 Dec 2025 11:25:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13285 IP address blocks: 2.96.0.0/13 maxlen: 24 62.24.128.0/17 maxlen: 24 62.241.160.0/19 maxlen: 24 78.144.0.0/13 maxlen: 24 79.77.0.0/16 maxlen: 24 79.78.0.0/15 maxlen: 24 80.40.0.0/13 maxlen: 24 81.1.64.0/18 maxlen: 24 81.86.0.0/16 maxlen: 24 81.178.0.0/15 maxlen: 24 83.67.0.0/16 maxlen: 24 84.43.0.0/17 maxlen: 24 87.242.128.0/17 maxlen: 24 89.168.128.0/17 maxlen: 24 89.240.0.0/14 maxlen: 24 92.16.0.0/12 maxlen: 24 145.255.240.0/21 maxlen: 24 185.24.12.0/22 maxlen: 24 185.173.120.0/22 maxlen: 24 185.175.48.0/22 maxlen: 24 185.175.144.0/22 maxlen: 24 193.218.99.0/24 maxlen: 24 194.106.32.0/19 maxlen: 24 194.247.224.0/19 maxlen: 24 195.112.0.0/18 maxlen: 24 195.137.0.0/17 maxlen: 24 195.149.0.0/18 maxlen: 24 212.1.128.0/19 maxlen: 24 212.67.96.0/19 maxlen: 24 212.74.96.0/19 maxlen: 24 212.139.0.0/16 maxlen: 24 212.159.128.0/18 maxlen: 24 213.78.0.0/16 maxlen: 24 2001:7e0::/32 maxlen: 32 2001:4a00::/27 maxlen: 27 2a00:4340::/32 maxlen: 32 2a0b:db00::/29 maxlen: 29 2a0b:e900::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:42:8a:b5:f7:90:9f:25:d1:da:72:44:8a:37:2a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Validity Not Before: Dec 5 11:25:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0ba875b868e103fb1e2c8f7646d7a70897661487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:70:51:ea:73:a7:36:6a:97:f7:f1:42:59:06: b4:0c:e8:8f:f1:8f:f7:02:45:96:6e:a7:4a:ac:ad: 76:61:c9:a7:b5:92:63:4b:89:f5:ef:80:02:0a:b2: 29:df:d5:04:38:56:48:fb:cd:f5:f3:0e:8f:af:ce: e9:24:c0:ed:ac:d4:aa:f7:c5:e5:d5:36:59:a5:8c: 44:fd:cb:5a:ba:fe:5f:34:c5:55:c9:ec:8b:eb:9c: 0f:f7:88:1b:f7:de:a2:f7:5c:13:1b:81:dd:56:c6: d9:a5:11:66:ff:45:4f:84:e5:ae:d2:22:6b:48:33: 98:f8:7b:c0:67:c3:a0:9d:a8:8f:d1:b5:99:ef:ce: fd:f9:42:1f:f6:a8:32:73:60:6a:9a:ef:ce:51:56: 29:89:cd:20:11:58:2c:5b:fa:f4:98:5a:b1:15:72: ac:55:6f:b6:94:1c:b3:a5:57:c0:b5:b5:46:00:fd: ca:a0:a8:75:59:70:bf:d4:7e:b5:5d:24:f0:04:82: 4f:61:0b:f3:3b:11:0a:fc:88:c0:f8:4f:6c:a9:b3: a6:be:f5:b7:d8:86:d3:a5:9d:31:30:82:13:73:db: e5:b0:95:e1:44:7c:86:59:06:dc:67:88:d1:b4:c4: e0:87:26:96:a7:22:de:5c:e8:c4:7d:39:37:d5:20: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A8:75:B8:68:E1:03:FB:1E:2C:8F:76:46:D7:A7:08:97:66:14:87 X509v3 Authority Key Identifier: keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/C6h1uGjhA_seLI92RtenCJdmFIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.96.0.0/13 62.24.128.0/17 62.241.160.0/19 78.144.0.0/13 79.77.0.0-79.79.255.255 80.40.0.0/13 81.1.64.0/18 81.86.0.0/16 81.178.0.0/15 83.67.0.0/16 84.43.0.0/17 87.242.128.0/17 89.168.128.0/17 89.240.0.0/14 92.16.0.0/12 145.255.240.0/21 185.24.12.0/22 185.173.120.0/22 185.175.48.0/22 185.175.144.0/22 193.218.99.0/24 194.106.32.0/19 194.247.224.0/19 195.112.0.0/18 195.137.0.0/17 195.149.0.0/18 212.1.128.0/19 212.67.96.0/19 212.74.96.0/19 212.139.0.0/16 212.159.128.0/18 213.78.0.0/16 IPv6: 2001:7e0::/32 2001:4a00::/27 2a00:4340::/32 2a0b:db00::/29 2a0b:e900::/29 Signature Algorithm: sha256WithRSAEncryption 06:9e:7b:82:e5:c6:c5:86:b0:9a:60:94:a4:90:23:85:ad:b1: 05:34:8e:4b:1b:25:51:01:70:b5:e0:75:fb:77:d9:ce:c1:69: c8:e9:75:2f:b6:cc:e6:35:de:1f:6f:8f:ab:2d:c9:10:24:39: ec:16:df:7d:c8:22:b9:e6:d3:a5:22:36:da:3a:e4:59:04:11: 29:32:85:83:b5:12:ea:ab:e0:c8:10:8e:03:23:5c:c3:3f:92: d9:6d:d9:8a:4c:e6:13:92:5d:26:5b:1c:cb:34:92:60:b0:2d: a1:be:9b:e5:18:b9:16:7d:0b:d0:05:e7:0e:ca:74:eb:0d:e1: 78:4b:cc:23:e5:cb:50:0b:41:c2:59:fe:10:cc:ea:4e:d7:e7: 44:ff:72:ec:85:fb:6c:18:02:2e:53:64:5a:af:4e:ae:ce:14: c5:4b:7a:f9:5b:40:35:6b:b2:a5:4a:af:4f:9a:27:0a:ac:fa: d6:a6:77:26:c9:29:13:7b:f1:32:4c:a2:63:43:a6:81:0e:2d: be:88:ed:6c:d7:97:b3:f2:22:44:47:4d:cc:23:f4:9b:df:c7: 05:8b:2e:65:f3:81:84:ae:b4:3b:34:bd:c7:b5:19:c4:41:40: 62:b6:fb:27:a5:80:e9:68:a3:78:3b:e1:41:ba:18:48:47:27: 20:18:9b:da -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZruQoq195CfJdHackSKNyozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh ZGIzZWMwHhcNMjUxMjA1MTEyNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmE4NzViODY4ZTEwM2ZiMWUyYzhmNzY0NmQ3YTcwODk3NjYxNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nBR6nOnNmqX9/FCWQa0DOiP8Y/3 AkWWbqdKrK12YcmntZJjS4n174ACCrIp39UEOFZI+8318w6Pr87pJMDtrNSq98Xl 1TZZpYxE/ctauv5fNMVVyeyL65wP94gb996i91wTG4HdVsbZpRFm/0VPhOWu0iJr SDOY+HvAZ8OgnaiP0bWZ7879+UIf9qgyc2Bqmu/OUVYpic0gEVgsW/r0mFqxFXKs VW+2lByzpVfAtbVGAP3KoKh1WXC/1H61XSTwBIJPYQvzOxEK/IjA+E9sqbOmvvW3 2IbTpZ0xMIITc9vlsJXhRHyGWQbcZ4jRtMTghyaWpyLeXOjEfTk31SBiwwIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFAuodbho4QP7HiyPdkbXpwiXZhSHMB8GA1UdIwQY MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt MGQ4ZjdkZDhjY2U2LzEvQzZoMXVHamhBX3NlTEk5MlJ0ZW5DSmRtRkljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2 LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBBAYIKwYBBQUHAQcBAf8EgfQwgfEwgcMEAgABMIG8AwMD AmADBAc+GIADBAU+8aADAwNOkDAKAwMAT00DAwRPQAMDA1AoAwQGUQFAAwMAUVYD AwFRsgMDAFNDAwQHVCsAAwQHV/KAAwQHWaiAAwMCWfADAwRcEAMEA5H/8AMEArkY DAMEArmteAMEArmvMAMEArmvkAMEAMHaYwMEBcJqIAMEBcL34AMEBsNwAAMEB8OJ AAMEBsOVAAMEBdQBgAMEBdRDYAMEBdRKYAMDANSLAwQG1J+AAwMA1U4wKQQCAAIw IwMFACABB+ADBQUgAUoAAwUAKgBDQAMFAyoL2wADBQMqC+kAMA0GCSqGSIb3DQEB CwUAA4IBAQAGnnuC5cbFhrCaYJSkkCOFrbEFNI5LGyVRAXC14HX7d9nOwWnI6XUv tszmNd4fb4+rLckQJDnsFt99yCK55tOlIjbaOuRZBBEpMoWDtRLqq+DIEI4DI1zD P5LZbdmKTOYTkl0mWxzLNJJgsC2hvpvlGLkWfQvQBecOynTrDeF4S8wj5ctQC0HC Wf4QzOpO1+dE/3LshftsGAIuU2Rar06uzhTFS3r5W0A1a7KlSq9PmicKrPrWpncm ySkTe/EyTKJjQ6aBDi2+iO1s15ez8iJER03MI/Sb38cFiy5l84GErrQ7NL3HtRnE QUBitvsnpYDpaKN4O+FBuhhIRycgGJva -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:21 2025 by rpki-client