This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/xOrxBL-nmOhfUQK3lDAHMh7x6Zk.roa File: xOrxBL-nmOhfUQK3lDAHMh7x6Zk.roa (raw, json) Hash identifier: 4OPLheoTg5k7mp/nUmmdqHwXsQWi3MUcdPRsarIm3c0= Subject key identifier: C4:EA:F1:04:BF:A7:98:E8:5F:51:02:B7:94:30:07:32:1E:F1:E9:99 Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019A76EE42E7AEFB64C6A4CEB969E498BEB4 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/xOrxBL-nmOhfUQK3lDAHMh7x6Zk.roa Signing time: Wed 12 Nov 2025 07:18:37 +0000 ROA not before: Wed 12 Nov 2025 07:18:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50810 IP address blocks: 5.201.128.0/18 maxlen: 18 5.201.128.0/21 maxlen: 21 5.201.128.0/22 maxlen: 22 5.201.132.0/22 maxlen: 22 5.201.136.0/22 maxlen: 22 5.201.138.0/24 maxlen: 24 5.201.140.0/22 maxlen: 22 5.201.142.0/23 maxlen: 23 5.201.144.0/21 maxlen: 21 5.201.144.0/22 maxlen: 22 5.201.144.0/23 maxlen: 23 5.201.148.0/22 maxlen: 22 5.201.152.0/22 maxlen: 22 5.201.156.0/22 maxlen: 22 5.201.160.0/22 maxlen: 22 5.201.160.0/23 maxlen: 23 5.201.162.0/24 maxlen: 24 5.201.163.0/24 maxlen: 24 5.201.164.0/22 maxlen: 22 5.201.168.0/22 maxlen: 22 5.201.172.0/22 maxlen: 22 5.201.174.0/24 maxlen: 24 5.201.174.240/30 maxlen: 30 5.201.176.0/22 maxlen: 22 5.201.180.0/22 maxlen: 22 5.201.184.0/22 maxlen: 22 5.201.188.0/22 maxlen: 22 37.156.16.0/21 maxlen: 21 37.156.16.0/22 maxlen: 22 37.156.20.0/22 maxlen: 22 37.156.24.0/22 maxlen: 22 37.156.28.0/22 maxlen: 22 37.156.30.0/23 maxlen: 23 37.156.31.0/24 maxlen: 24 45.83.12.0/22 maxlen: 22 45.95.88.0/22 maxlen: 22 45.248.164.0/22 maxlen: 22 46.36.97.0/24 maxlen: 24 46.36.100.0/24 maxlen: 24 46.36.101.0/24 maxlen: 24 46.36.102.0/24 maxlen: 24 46.36.105.0/24 maxlen: 24 46.36.106.0/24 maxlen: 24 80.94.80.0/23 maxlen: 23 89.37.0.0/20 maxlen: 20 89.37.0.0/22 maxlen: 22 89.37.0.0/24 maxlen: 24 89.37.4.0/22 maxlen: 22 89.37.8.0/22 maxlen: 22 89.37.8.0/24 maxlen: 24 89.37.12.0/22 maxlen: 22 89.37.12.0/24 maxlen: 24 89.37.14.0/24 maxlen: 24 89.37.15.0/24 maxlen: 24 89.40.35.0/24 maxlen: 24 89.43.0.0/21 maxlen: 21 89.43.0.0/22 maxlen: 22 89.43.4.0/22 maxlen: 22 89.43.8.0/22 maxlen: 22 89.43.10.0/23 maxlen: 23 89.43.12.0/22 maxlen: 22 89.43.12.0/23 maxlen: 23 91.209.183.0/24 maxlen: 24 91.209.184.0/24 maxlen: 24 91.239.59.0/24 maxlen: 24 92.114.16.0/20 maxlen: 24 92.114.20.0/22 maxlen: 22 92.114.20.0/23 maxlen: 23 92.114.21.0/24 maxlen: 24 92.114.22.0/23 maxlen: 23 92.114.24.0/21 maxlen: 21 92.114.24.0/22 maxlen: 22 92.114.25.0/24 maxlen: 24 92.114.28.0/22 maxlen: 22 94.101.128.0/20 maxlen: 24 94.101.128.0/21 maxlen: 21 94.101.128.0/22 maxlen: 22 94.101.132.0/22 maxlen: 22 94.101.136.0/22 maxlen: 22 94.101.139.0/24 maxlen: 24 94.101.140.0/22 maxlen: 22 94.101.140.0/23 maxlen: 23 94.101.142.0/23 maxlen: 23 94.101.142.0/24 maxlen: 24 103.111.69.0/24 maxlen: 24 103.111.71.0/24 maxlen: 24 103.132.228.0/23 maxlen: 23 103.132.228.0/24 maxlen: 24 103.132.229.0/24 maxlen: 24 103.140.128.0/23 maxlen: 23 103.217.124.0/22 maxlen: 22 176.126.223.0/24 maxlen: 24 185.22.30.0/23 maxlen: 23 185.103.84.0/22 maxlen: 22 185.103.84.0/24 maxlen: 24 185.103.85.0/24 maxlen: 24 185.135.228.0/22 maxlen: 22 185.135.230.0/24 maxlen: 24 185.135.231.0/24 maxlen: 24 185.136.100.0/22 maxlen: 22 185.162.40.0/22 maxlen: 22 185.175.76.0/23 maxlen: 23 185.175.78.0/23 maxlen: 23 185.176.32.0/22 maxlen: 22 185.182.220.0/22 maxlen: 22 185.182.220.0/24 maxlen: 24 185.182.221.0/24 maxlen: 24 185.182.222.0/23 maxlen: 23 185.255.98.0/23 maxlen: 23 188.213.64.0/20 maxlen: 21 188.213.64.0/22 maxlen: 22 188.213.64.0/24 maxlen: 24 188.213.68.0/22 maxlen: 22 188.213.71.0/24 maxlen: 24 188.213.72.0/22 maxlen: 22 188.213.72.0/24 maxlen: 24 188.213.73.0/24 maxlen: 24 188.213.74.0/24 maxlen: 24 188.213.75.0/24 maxlen: 24 188.213.76.0/22 maxlen: 22 193.30.30.0/24 maxlen: 24 193.46.214.0/24 maxlen: 24 194.180.238.0/24 maxlen: 24 194.242.22.0/24 maxlen: 24 195.149.127.0/24 maxlen: 24 2a00:5ca0::/29 maxlen: 29 2a00:5ca0::/31 maxlen: 31 2a00:5ca0::/32 maxlen: 32 2a00:5ca2::/31 maxlen: 31 2a00:5ca4::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:ee:42:e7:ae:fb:64:c6:a4:ce:b9:69:e4:98:be:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Nov 12 07:18:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c4eaf104bfa798e85f5102b7943007321ef1e999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:b0:3d:7b:5d:73:81:db:42:7d:af:bc:69: f9:be:a6:20:63:b8:a1:d8:8e:1a:a7:8f:ea:62:6d: b6:a3:ed:10:3e:3c:eb:9a:ef:bb:f4:5a:24:a8:fc: eb:82:2c:61:54:a8:d6:02:55:9a:b7:6a:96:fe:c6: 03:7b:15:db:55:ad:5c:03:db:a0:d1:63:aa:cd:ac: 00:e0:a5:d2:73:be:ba:48:54:bf:5d:6d:90:36:d9: 5a:af:82:ae:88:d6:e2:25:c5:22:39:e6:62:24:73: a4:ec:40:8d:c9:44:cc:62:14:2a:ff:67:95:83:cf: 05:b6:df:1c:71:95:89:1b:24:8f:b1:25:28:34:8f: 36:93:2a:df:3e:0d:96:cf:a5:65:9f:af:20:b5:b8: fb:fa:27:fd:5d:00:7c:31:f7:16:14:2e:b8:d7:28: 5d:a0:38:28:43:c9:34:ca:d0:a5:51:70:61:51:e2: bf:cc:88:68:7f:5b:4c:8a:11:cc:dc:bc:3d:4f:f2: 2a:2a:ae:f0:1a:c6:54:a7:aa:2b:52:a9:80:4a:76: a0:3b:fa:6a:20:3e:64:88:45:f7:94:a8:6c:97:e8: 90:25:59:e4:3b:6a:2a:28:6d:20:ff:0c:1a:3f:c3: a5:10:ab:4c:04:37:09:00:29:c7:a0:a4:a9:9c:63: fc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EA:F1:04:BF:A7:98:E8:5F:51:02:B7:94:30:07:32:1E:F1:E9:99 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/xOrxBL-nmOhfUQK3lDAHMh7x6Zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.201.128.0/18 37.156.16.0/20 45.83.12.0/22 45.95.88.0/22 45.248.164.0/22 46.36.97.0/24 46.36.100.0-46.36.102.255 46.36.105.0-46.36.106.255 80.94.80.0/23 89.37.0.0/20 89.40.35.0/24 89.43.0.0/20 91.209.183.0-91.209.184.255 91.239.59.0/24 92.114.16.0/20 94.101.128.0/20 103.111.69.0/24 103.111.71.0/24 103.132.228.0/23 103.140.128.0/23 103.217.124.0/22 176.126.223.0/24 185.22.30.0/23 185.103.84.0/22 185.135.228.0/22 185.136.100.0/22 185.162.40.0/22 185.175.76.0/22 185.176.32.0/22 185.182.220.0/22 185.255.98.0/23 188.213.64.0/20 193.30.30.0/24 193.46.214.0/24 194.180.238.0/24 194.242.22.0/24 195.149.127.0/24 IPv6: 2a00:5ca0::/29 Signature Algorithm: sha256WithRSAEncryption 43:5f:1e:76:1e:53:41:9c:44:27:80:f1:ac:29:98:1c:52:ad: 6f:a9:52:3b:96:46:56:ea:75:f6:78:e4:57:1f:c6:b9:28:c9: ba:aa:3a:3c:8d:ba:2b:7f:ec:fe:a6:33:6e:f0:4f:61:1d:30: 06:8a:dd:47:a2:74:ad:a2:48:37:26:5a:51:f9:db:f2:89:6d: 21:1d:a5:5d:01:ad:fb:0f:84:05:05:c0:c5:87:ad:bd:7c:23: ae:58:7a:de:df:aa:b7:50:d3:d4:94:9b:49:71:bd:de:2a:02: bb:b3:c9:cf:2e:3b:9e:03:82:36:fa:2a:32:91:fb:4d:c5:aa: 3f:45:ac:8a:ac:86:37:d7:47:db:b1:2a:9a:ba:29:f4:68:a7: f0:54:d6:9b:43:f0:ef:a3:c8:2a:e9:86:74:55:96:09:96:7b: ef:f2:a8:6d:fb:37:2d:f9:2a:c4:9d:30:a2:4b:cb:9a:4b:05: de:23:1c:ca:95:5f:66:af:1d:ba:c7:40:f7:9d:f7:e1:9b:99: 0a:e2:59:b5:cf:ab:97:4f:63:d7:02:c8:35:54:a9:ce:de:aa: 6b:ca:62:d6:81:56:14:73:12:3d:28:31:0d:34:3a:a2:7a:98: c8:02:26:af:95:c8:e2:f2:1f:f3:ba:04:9b:1f:8e:a2:ed:96: 94:34:50:09 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISAZp27kLnrvtkxqTOuWnkmL60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjUxMTEyMDcxODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGVhZjEwNGJmYTc5OGU4NWY1MTAyYjc5NDMwMDczMjFlZjFlOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqruwPXtdc4HbQn2vvGn5vqYgY7ih 2I4ap4/qYm22o+0QPjzrmu+79FokqPzrgixhVKjWAlWat2qW/sYDexXbVa1cA9ug 0WOqzawA4KXSc766SFS/XW2QNtlar4KuiNbiJcUiOeZiJHOk7ECNyUTMYhQq/2eV g88Ftt8ccZWJGySPsSUoNI82kyrfPg2Wz6Vln68gtbj7+if9XQB8MfcWFC641yhd oDgoQ8k0ytClUXBhUeK/zIhof1tMihHM3Lw9T/IqKq7wGsZUp6orUqmASnagO/pq ID5kiEX3lKhsl+iQJVnkO2oqKG0g/wwaP8OlEKtMBDcJACnHoKSpnGP8JwIDAQAB o4IDEDCCAwwwHQYDVR0OBBYEFMTq8QS/p5joX1ECt5QwBzIe8emZMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEveE9yeEJMLW5tT2hmVVFLM2xEQUhNaDd4NlprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBJAYIKwYBBQUHAQcBAf8EggETMIIBDzCB/QQCAAEwgfYD BAYFyYADBAQlnBADBAItUwwDBAItX1gDBAIt+KQDBAAuJGEwDAMEAi4kZAMEAC4k ZjAMAwQALiRpAwQALiRqAwQBUF5QAwQEWSUAAwQAWSgjAwQEWSsAMAwDBABb0bcD BABb0bgDBABb7zsDBARcchADBAReZYADBABnb0UDBABnb0cDBAFnhOQDBAFnjIAD BAJn2XwDBACwft8DBAG5Fh4DBAK5Z1QDBAK5h+QDBAK5iGQDBAK5oigDBAK5r0wD BAK5sCADBAK5ttwDBAG5/2IDBAS81UADBADBHh4DBADBLtYDBADCtO4DBADC8hYD BADDlX8wDQQCAAIwBwMFAyoAXKAwDQYJKoZIhvcNAQELBQADggEBAENfHnYeU0Gc RCeA8awpmBxSrW+pUjuWRlbqdfZ45FcfxrkoybqqOjyNuit/7P6mM27wT2EdMAaK 3UeidK2iSDcmWlH52/KJbSEdpV0BrfsPhAUFwMWHrb18I65Yet7fqrdQ09SUm0lx vd4qAruzyc8uO54Dgjb6KjKR+03Fqj9FrIqshjfXR9uxKpq6KfRop/BU1ptD8O+j yCrphnRVlgmWe+/yqG37Ny35KsSdMKJLy5pLBd4jHMqVX2avHbrHQPed9+GbmQri WbXPq5dPY9cCyDVUqc7eqmvKYtaBVhRzEj0oMQ00OqJ6mMgCJq+VyOLyH/O6BJsf jqLtlpQ0UAk= -----END CERTIFICATE-----Generated at Sat Dec 6 16:36:01 2025 by rpki-client