This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/N1UPnpGbNb1WxlcwhmpNf9382tU.roa File: N1UPnpGbNb1WxlcwhmpNf9382tU.roa (raw, json) Hash identifier: sVH0/mCrj6ooEgPulsyqsGGjutjQRuOUkglrIpDvJ/o= Subject key identifier: 37:55:0F:9E:91:9B:35:BD:56:C6:57:30:86:6A:4D:7F:DD:FC:DA:D5 Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019A7CDA6094F648089B8AEC2635462CA2D8 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/N1UPnpGbNb1WxlcwhmpNf9382tU.roa Signing time: Thu 13 Nov 2025 10:54:37 +0000 ROA not before: Thu 13 Nov 2025 10:54:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34471 IP address blocks: 2.59.108.0/22 maxlen: 24 2.59.111.0/24 maxlen: 24 31.25.176.0/21 maxlen: 24 37.122.219.0/24 maxlen: 24 45.92.132.0/22 maxlen: 24 46.28.160.0/21 maxlen: 24 46.28.163.0/24 maxlen: 24 89.40.84.0/22 maxlen: 24 89.44.36.0/22 maxlen: 24 91.242.148.0/22 maxlen: 24 109.235.16.0/21 maxlen: 24 176.56.64.0/19 maxlen: 24 185.4.32.0/22 maxlen: 24 185.5.84.0/22 maxlen: 24 185.10.248.0/22 maxlen: 24 185.70.152.0/22 maxlen: 24 185.83.132.0/22 maxlen: 24 185.85.255.0/24 maxlen: 24 185.102.204.0/22 maxlen: 24 185.103.148.0/22 maxlen: 24 185.110.212.0/22 maxlen: 24 185.153.16.0/22 maxlen: 24 185.176.104.0/22 maxlen: 24 185.205.253.0/24 maxlen: 24 185.205.254.0/24 maxlen: 24 185.223.216.0/22 maxlen: 24 185.228.124.0/22 maxlen: 24 185.239.160.0/22 maxlen: 24 185.243.136.0/22 maxlen: 24 193.108.206.0/23 maxlen: 24 193.108.230.0/23 maxlen: 24 193.246.154.0/23 maxlen: 24 193.246.156.0/23 maxlen: 24 194.156.72.0/22 maxlen: 24 2a02:5dc0::/32 maxlen: 32 2a02:5fc0::/32 maxlen: 48 2a03:440::/32 maxlen: 32 2a05:9b00::/29 maxlen: 29 2a05:a800::/29 maxlen: 29 2a06:3c00::/29 maxlen: 29 2a09:eac0::/29 maxlen: 29 2a0a:1280::/29 maxlen: 29 2a0b:c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:da:60:94:f6:48:08:9b:8a:ec:26:35:46:2c:a2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Nov 13 10:54:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=37550f9e919b35bd56c65730866a4d7fddfcdad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:3d:e5:4b:98:9b:af:f0:f5:aa:00:4b:c5: 2b:90:94:dd:b3:ad:6f:9b:cb:32:1c:3c:62:28:70: 11:2e:39:24:0e:37:85:a8:0f:c5:e6:b0:87:26:bf: 80:7e:48:49:1f:83:ab:58:1e:b3:43:a2:de:f5:ad: 38:35:a1:6a:f6:73:aa:b0:d4:33:6a:e7:ac:f1:2f: d6:d1:05:03:07:fd:c8:4e:82:31:35:1f:5d:91:39: 8f:d3:2e:bd:fd:0b:0b:52:37:6a:37:9c:f5:58:97: be:92:bb:66:99:51:59:dc:1b:67:d8:a3:73:4e:2b: d2:e1:61:32:da:9c:54:10:32:2c:fb:15:4b:bb:bf: 0c:5a:18:73:31:8b:2b:3d:b3:e3:2f:ba:65:0f:ca: df:84:dd:23:55:61:c6:21:61:52:2d:2e:6d:7e:f2: 96:6f:10:98:11:2e:1c:5b:5d:63:3f:ad:46:e9:ec: d8:16:00:ce:a8:40:c6:16:82:dc:56:64:e5:73:14: 28:2d:30:a8:e7:fc:4a:2a:a5:2f:44:53:38:8b:37: 9d:19:a9:25:c3:86:b0:63:4c:ac:72:6b:b1:c2:fc: 02:6a:53:4e:5a:f2:34:a1:7e:2a:8b:0a:f9:92:79: 29:81:0b:a7:3a:b3:1b:58:f3:dd:b0:1d:f1:91:11: ad:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:55:0F:9E:91:9B:35:BD:56:C6:57:30:86:6A:4D:7F:DD:FC:DA:D5 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/N1UPnpGbNb1WxlcwhmpNf9382tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.108.0/22 31.25.176.0/21 37.122.219.0/24 45.92.132.0/22 46.28.160.0/21 89.40.84.0/22 89.44.36.0/22 91.242.148.0/22 109.235.16.0/21 176.56.64.0/19 185.4.32.0/22 185.5.84.0/22 185.10.248.0/22 185.70.152.0/22 185.83.132.0/22 185.85.255.0/24 185.102.204.0/22 185.103.148.0/22 185.110.212.0/22 185.153.16.0/22 185.176.104.0/22 185.205.253.0-185.205.254.255 185.223.216.0/22 185.228.124.0/22 185.239.160.0/22 185.243.136.0/22 193.108.206.0/23 193.108.230.0/23 193.246.154.0-193.246.157.255 194.156.72.0/22 IPv6: 2a02:5dc0::/32 2a02:5fc0::/32 2a03:440::/32 2a05:9b00::/29 2a05:a800::/29 2a06:3c00::/29 2a09:eac0::/29 2a0a:1280::/29 2a0b:c40::/29 Signature Algorithm: sha256WithRSAEncryption 28:c6:51:82:43:aa:ff:50:c9:88:bd:96:56:1a:aa:73:ca:b6: 9b:00:64:9b:7c:5d:37:43:ff:a0:8e:95:4b:88:34:e2:52:76: 3d:2f:55:d1:67:6b:0d:b5:b2:31:ac:61:e9:c1:eb:5f:d3:82: 72:6d:30:83:5a:94:b1:cb:a6:11:0a:dd:b5:91:97:ea:78:ca: 81:4b:86:79:3c:ec:a9:58:a1:d7:cf:97:29:64:a8:93:4f:f8: ca:9a:eb:e1:c5:b8:ae:5e:d0:d8:cb:bf:d6:e9:c3:fe:c3:e0: 59:66:46:dd:ba:9f:b8:be:e5:4a:f3:c5:f9:4f:11:97:77:7b: 9f:3b:50:45:31:b1:93:ce:fd:00:2e:47:68:29:93:8e:76:da: 97:34:0b:e5:8a:b8:00:33:f4:38:9a:85:45:e4:c5:93:c6:67: 69:35:7d:32:34:1f:19:8d:d2:77:4e:c4:61:9d:ae:2d:60:fe: aa:9f:b4:84:9b:95:6a:a5:90:5b:1f:e4:14:3b:3a:de:6a:2f: 17:f4:fc:b2:a5:40:e5:25:1b:e0:5b:5b:3a:a5:11:59:86:6b: c5:fc:f9:f0:c9:1d:89:5b:0f:a7:d2:56:d0:30:b3:00:b9:5b: 95:78:27:57:54:b2:41:5e:6d:2b:37:d5:4c:56:7f:82:56:21: ba:23:2a:1b -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgISAZp82mCU9kgIm4rsJjVGLKLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjUxMTEzMTA1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzU1MGY5ZTkxOWIzNWJkNTZjNjU3MzA4NjZhNGQ3ZmRkZmNkYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvA95UuYm6/w9aoAS8UrkJTds61v m8syHDxiKHARLjkkDjeFqA/F5rCHJr+AfkhJH4OrWB6zQ6Le9a04NaFq9nOqsNQz aues8S/W0QUDB/3IToIxNR9dkTmP0y69/QsLUjdqN5z1WJe+krtmmVFZ3Btn2KNz TivS4WEy2pxUEDIs+xVLu78MWhhzMYsrPbPjL7plD8rfhN0jVWHGIWFSLS5tfvKW bxCYES4cW11jP61G6ezYFgDOqEDGFoLcVmTlcxQoLTCo5/xKKqUvRFM4izedGakl w4awY0yscmuxwvwCalNOWvI0oX4qiwr5knkpgQunOrMbWPPdsB3xkRGthwIDAQAB o4IDFjCCAxIwHQYDVR0OBBYEFDdVD56RmzW9VsZXMIZqTX/d/NrVMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvTjFVUG5wR2JOYjFXeGxjd2htcE5mOTM4MnRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBKgYIKwYBBQUHAQcBAf8EggEZMIIBFTCBywQCAAEwgcQD BAICO2wDBAMfGbADBAAletsDBAItXIQDBAMuHKADBAJZKFQDBAJZLCQDBAJb8pQD BANt6xADBAWwOEADBAK5BCADBAK5BVQDBAK5CvgDBAK5RpgDBAK5U4QDBAC5Vf8D BAK5ZswDBAK5Z5QDBAK5btQDBAK5mRADBAK5sGgwDAMEALnN/QMEALnN/gMEArnf 2AMEArnkfAMEArnvoAMEArnziAMEAcFszgMEAcFs5jAMAwQBwfaaAwQBwfacAwQC wpxIMEUEAgACMD8DBQAqAl3AAwUAKgJfwAMFACoDBEADBQMqBZsAAwUDKgWoAAMF AyoGPAADBQMqCerAAwUDKgoSgAMFAyoLDEAwDQYJKoZIhvcNAQELBQADggEBACjG UYJDqv9QyYi9llYaqnPKtpsAZJt8XTdD/6COlUuINOJSdj0vVdFnaw21sjGsYenB 61/TgnJtMINalLHLphEK3bWRl+p4yoFLhnk87KlYodfPlylkqJNP+Mqa6+HFuK5e 0NjLv9bpw/7D4FlmRt26n7i+5UrzxflPEZd3e587UEUxsZPO/QAuR2gpk4522pc0 C+WKuAAz9DiahUXkxZPGZ2k1fTI0HxmN0ndOxGGdri1g/qqftISblWqlkFsf5BQ7 Ot5qLxf0/LKlQOUlG+BbWzqlEVmGa8X8+fDJHYlbD6fSVtAwswC5W5V4J1dUskFe bSs31UxWf4JWIbojKhs= -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:22 2025 by rpki-client