This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8hxA79PQV5YDRV2hv9A3L_P20EY.roa File: 8hxA79PQV5YDRV2hv9A3L_P20EY.roa (raw, json) Hash identifier: hcu3M1kE854b0+dB/9uGpl2fdvmAOVxgEABbkuPkk8Q= Subject key identifier: F2:1C:40:EF:D3:D0:57:96:03:45:5D:A1:BF:D0:37:2F:F3:F6:D0:46 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019AF0241CCDEBED127C4F83B5D1BDEB2467 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8hxA79PQV5YDRV2hv9A3L_P20EY.roa Signing time: Fri 05 Dec 2025 20:11:29 +0000 ROA not before: Fri 05 Dec 2025 20:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48031 IP address blocks: 130.49.4.0/24 maxlen: 24 130.49.7.0/24 maxlen: 24 130.49.13.0/24 maxlen: 24 130.49.18.0/24 maxlen: 24 130.49.19.0/24 maxlen: 24 130.49.23.0/24 maxlen: 24 130.49.26.0/24 maxlen: 24 130.49.28.0/24 maxlen: 24 130.49.33.0/24 maxlen: 24 130.49.34.0/24 maxlen: 24 130.49.38.0/24 maxlen: 24 130.49.41.0/24 maxlen: 24 130.49.43.0/24 maxlen: 24 130.49.48.0/24 maxlen: 24 130.49.49.0/24 maxlen: 24 130.49.54.0/24 maxlen: 24 130.49.56.0/24 maxlen: 24 130.49.59.0/24 maxlen: 24 130.49.63.0/24 maxlen: 24 130.49.64.0/24 maxlen: 24 130.49.69.0/24 maxlen: 24 130.49.71.0/24 maxlen: 24 130.49.74.0/24 maxlen: 24 130.49.82.0/24 maxlen: 24 130.49.83.0/24 maxlen: 24 130.49.88.0/24 maxlen: 24 130.49.90.0/24 maxlen: 24 130.49.93.0/24 maxlen: 24 130.49.97.0/24 maxlen: 24 130.49.98.0/24 maxlen: 24 130.49.103.0/24 maxlen: 24 130.49.105.0/24 maxlen: 24 130.49.109.0/24 maxlen: 24 130.49.116.0/24 maxlen: 24 130.49.118.0/24 maxlen: 24 130.49.123.0/24 maxlen: 24 130.49.124.0/24 maxlen: 24 138.249.29.0/24 maxlen: 24 138.249.30.0/24 maxlen: 24 138.249.31.0/24 maxlen: 24 138.249.36.0/24 maxlen: 24 138.249.38.0/24 maxlen: 24 138.249.39.0/24 maxlen: 24 138.249.44.0/24 maxlen: 24 138.249.45.0/24 maxlen: 24 138.249.47.0/24 maxlen: 24 138.249.48.0/24 maxlen: 24 138.249.49.0/24 maxlen: 24 138.249.50.0/24 maxlen: 24 138.249.51.0/24 maxlen: 24 138.249.53.0/24 maxlen: 24 138.249.55.0/24 maxlen: 24 138.249.57.0/24 maxlen: 24 138.249.60.0/24 maxlen: 24 138.249.61.0/24 maxlen: 24 138.249.62.0/24 maxlen: 24 138.249.64.0/24 maxlen: 24 138.249.65.0/24 maxlen: 24 138.249.66.0/24 maxlen: 24 138.249.67.0/24 maxlen: 24 138.249.68.0/24 maxlen: 24 138.249.69.0/24 maxlen: 24 138.249.70.0/24 maxlen: 24 138.249.71.0/24 maxlen: 24 138.249.72.0/24 maxlen: 24 138.249.73.0/24 maxlen: 24 138.249.74.0/24 maxlen: 24 138.249.76.0/24 maxlen: 24 138.249.78.0/24 maxlen: 24 138.249.79.0/24 maxlen: 24 138.249.80.0/24 maxlen: 24 138.249.81.0/24 maxlen: 24 138.249.82.0/24 maxlen: 24 138.249.83.0/24 maxlen: 24 138.249.85.0/24 maxlen: 24 138.249.87.0/24 maxlen: 24 138.249.89.0/24 maxlen: 24 138.249.92.0/24 maxlen: 24 138.249.93.0/24 maxlen: 24 138.249.94.0/24 maxlen: 24 138.249.95.0/24 maxlen: 24 138.249.96.0/24 maxlen: 24 138.249.97.0/24 maxlen: 24 138.249.99.0/24 maxlen: 24 138.249.100.0/24 maxlen: 24 138.249.101.0/24 maxlen: 24 155.212.33.0/24 maxlen: 24 155.212.40.0/24 maxlen: 24 155.212.42.0/24 maxlen: 24 155.212.47.0/24 maxlen: 24 155.212.48.0/24 maxlen: 24 155.212.52.0/24 maxlen: 24 155.212.54.0/24 maxlen: 24 155.212.57.0/24 maxlen: 24 155.212.61.0/24 maxlen: 24 155.212.62.0/24 maxlen: 24 155.212.68.0/24 maxlen: 24 155.212.69.0/24 maxlen: 24 155.212.73.0/24 maxlen: 24 155.212.76.0/24 maxlen: 24 155.212.78.0/24 maxlen: 24 155.212.83.0/24 maxlen: 24 155.212.84.0/24 maxlen: 24 155.212.88.0/24 maxlen: 24 155.212.90.0/24 maxlen: 24 155.212.93.0/24 maxlen: 24 155.212.97.0/24 maxlen: 24 155.212.98.0/24 maxlen: 24 155.212.103.0/24 maxlen: 24 155.212.105.0/24 maxlen: 24 155.212.112.0/24 maxlen: 24 155.212.116.0/24 maxlen: 24 155.212.118.0/24 maxlen: 24 155.212.123.0/24 maxlen: 24 155.212.124.0/24 maxlen: 24 170.168.205.0/24 maxlen: 24 170.168.213.0/24 maxlen: 24 170.168.214.0/24 maxlen: 24 170.168.222.0/24 maxlen: 24 170.168.229.0/24 maxlen: 24 170.168.231.0/24 maxlen: 24 170.168.239.0/24 maxlen: 24 170.168.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:24:1c:cd:eb:ed:12:7c:4f:83:b5:d1:bd:eb:24:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 5 20:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f21c40efd3d0579603455da1bfd0372ff3f6d046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:3d:42:3f:58:8e:7b:cb:f5:58:78:a1:be: 23:b5:87:a7:5a:b5:fa:65:9c:58:33:8c:5c:a8:ab: bb:dc:46:1c:c9:1b:ec:84:29:22:99:bb:a0:08:3e: 38:27:fe:bb:d0:7d:cc:a4:f3:7a:ef:fa:c7:86:0f: f5:78:4d:0f:d2:83:05:30:1f:f0:bf:af:3f:db:b9: 52:24:08:ea:21:50:2c:fc:f0:a0:a8:7f:35:e3:66: bb:58:38:e3:39:fb:2e:f6:b8:af:96:c9:46:b4:68: 61:cc:70:cd:a4:74:6c:b5:cd:a1:2a:f6:61:35:a1: 54:82:12:bf:01:74:61:01:bc:9d:28:c3:4a:f2:20: a9:07:92:fe:1a:41:66:3a:59:8d:39:40:75:d4:cc: 68:e2:24:8e:dd:f1:66:ab:ba:0c:be:44:c8:69:b9: 3d:67:92:07:f7:80:0b:e4:78:bc:84:43:7a:07:83: b7:58:31:c9:8f:fb:6d:d4:79:da:6a:06:4d:33:9a: 69:9b:f3:db:bf:37:67:90:7e:5c:4a:a7:e7:d8:9e: 19:c2:1d:97:6b:2a:27:84:ea:07:11:90:c7:26:bd: bf:1f:93:81:29:e5:9e:2d:ee:58:de:12:62:81:d5: 65:78:f3:c7:9a:43:70:bc:bf:b2:77:25:fc:65:5e: 4c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1C:40:EF:D3:D0:57:96:03:45:5D:A1:BF:D0:37:2F:F3:F6:D0:46 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8hxA79PQV5YDRV2hv9A3L_P20EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.49.4.0/24 130.49.7.0/24 130.49.13.0/24 130.49.18.0/23 130.49.23.0/24 130.49.26.0/24 130.49.28.0/24 130.49.33.0-130.49.34.255 130.49.38.0/24 130.49.41.0/24 130.49.43.0/24 130.49.48.0/23 130.49.54.0/24 130.49.56.0/24 130.49.59.0/24 130.49.63.0-130.49.64.255 130.49.69.0/24 130.49.71.0/24 130.49.74.0/24 130.49.82.0/23 130.49.88.0/24 130.49.90.0/24 130.49.93.0/24 130.49.97.0-130.49.98.255 130.49.103.0/24 130.49.105.0/24 130.49.109.0/24 130.49.116.0/24 130.49.118.0/24 130.49.123.0-130.49.124.255 138.249.29.0-138.249.31.255 138.249.36.0/24 138.249.38.0/23 138.249.44.0/23 138.249.47.0-138.249.51.255 138.249.53.0/24 138.249.55.0/24 138.249.57.0/24 138.249.60.0-138.249.62.255 138.249.64.0-138.249.74.255 138.249.76.0/24 138.249.78.0-138.249.83.255 138.249.85.0/24 138.249.87.0/24 138.249.89.0/24 138.249.92.0-138.249.97.255 138.249.99.0-138.249.101.255 155.212.33.0/24 155.212.40.0/24 155.212.42.0/24 155.212.47.0-155.212.48.255 155.212.52.0/24 155.212.54.0/24 155.212.57.0/24 155.212.61.0-155.212.62.255 155.212.68.0/23 155.212.73.0/24 155.212.76.0/24 155.212.78.0/24 155.212.83.0-155.212.84.255 155.212.88.0/24 155.212.90.0/24 155.212.93.0/24 155.212.97.0-155.212.98.255 155.212.103.0/24 155.212.105.0/24 155.212.112.0/24 155.212.116.0/24 155.212.118.0/24 155.212.123.0-155.212.124.255 170.168.205.0/24 170.168.213.0-170.168.214.255 170.168.222.0/24 170.168.229.0/24 170.168.231.0/24 170.168.239.0/24 170.168.249.0/24 Signature Algorithm: sha256WithRSAEncryption 33:9d:e5:0b:af:48:79:6e:c6:4e:f0:e6:a2:d0:78:9f:46:62: 82:a0:9f:dc:02:bd:4a:25:2c:c5:79:e4:04:91:db:a5:03:5f: 23:0e:62:71:f5:ff:7e:10:30:01:09:29:84:4d:d8:db:56:4f: 79:98:13:9b:c4:a7:4e:57:69:1b:d3:ce:06:22:2c:32:a7:55: b1:02:c7:3e:0c:f1:c9:8a:2d:2b:0e:31:2e:e4:f4:56:f4:49: 8c:68:87:3e:15:56:8d:4c:4d:97:18:f3:dc:39:ae:2f:9a:5e: a7:13:0e:82:39:1a:eb:25:bb:a4:8f:61:88:ef:b7:5a:e5:b0: 87:e5:bd:fa:3b:fa:8a:dd:2d:c7:c2:c9:2e:94:e0:2f:16:35: 22:dc:39:91:96:de:10:18:8f:95:e9:2c:84:8d:cf:76:cb:d6: c6:fb:32:50:6d:49:4f:f9:ef:b0:02:4a:a4:10:6f:53:a9:0f: f2:4b:ea:70:b3:32:70:0f:a7:c1:fd:a7:92:e5:08:08:f8:5b: 13:b6:22:41:5c:8a:9d:fa:9d:be:2c:6b:31:0d:1e:d2:53:fc: 05:b8:3d:26:76:b1:4a:9f:d4:38:8c:fc:0d:5f:b4:4d:20:88: 78:fb:1e:3a:47:66:53:33:8f:58:f5:53:18:23:2d:ff:95:64: ae:68:ff:95 -----BEGIN CERTIFICATE----- MIIHVzCCBj+gAwIBAgISAZrwJBzN6+0SfE+DtdG96yRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjA1MjAxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjFjNDBlZmQzZDA1Nzk2MDM0NTVkYTFiZmQwMzcyZmYzZjZkMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrM9Qj9YjnvL9Vh4ob4jtYenWrX6 ZZxYM4xcqKu73EYcyRvshCkimbugCD44J/670H3MpPN67/rHhg/1eE0P0oMFMB/w v68/27lSJAjqIVAs/PCgqH8142a7WDjjOfsu9rivlslGtGhhzHDNpHRstc2hKvZh NaFUghK/AXRhAbydKMNK8iCpB5L+GkFmOlmNOUB11Mxo4iSO3fFmq7oMvkTIabk9 Z5IH94AL5Hi8hEN6B4O3WDHJj/tt1HnaagZNM5ppm/PbvzdnkH5cSqfn2J4Zwh2X ayonhOoHEZDHJr2/H5OBKeWeLe5Y3hJigdVlePPHmkNwvL+ydyX8ZV5MoQIDAQAB o4IEYzCCBF8wHQYDVR0OBBYEFPIcQO/T0FeWA0Vdob/QNy/z9tBGMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvOGh4QTc5UFFWNVlEUlYyaHY5QTNMX1AyMEVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICdwYIKwYBBQUHAQcBAf8EggJmMIICYjCCAl4EAgABMIIC VgMEAIIxBAMEAIIxBwMEAIIxDQMEAYIxEgMEAIIxFwMEAIIxGgMEAIIxHDAMAwQA gjEhAwQAgjEiAwQAgjEmAwQAgjEpAwQAgjErAwQBgjEwAwQAgjE2AwQAgjE4AwQA gjE7MAwDBACCMT8DBACCMUADBACCMUUDBACCMUcDBACCMUoDBAGCMVIDBACCMVgD BACCMVoDBACCMV0wDAMEAIIxYQMEAIIxYgMEAIIxZwMEAIIxaQMEAIIxbQMEAIIx dAMEAIIxdjAMAwQAgjF7AwQAgjF8MAwDBACK+R0DBAWK+QADBACK+SQDBAGK+SYD BAGK+SwwDAMEAIr5LwMEAor5MAMEAIr5NQMEAIr5NwMEAIr5OTAMAwQCivk8AwQA ivk+MAwDBAaK+UADBACK+UoDBACK+UwwDAMEAYr5TgMEAor5UAMEAIr5VQMEAIr5 VwMEAIr5WTAMAwQCivlcAwQBivlgMAwDBACK+WMDBAGK+WQDBACb1CEDBACb1CgD BACb1CowDAMEAJvULwMEAJvUMAMEAJvUNAMEAJvUNgMEAJvUOTAMAwQAm9Q9AwQA m9Q+AwQBm9REAwQAm9RJAwQAm9RMAwQAm9ROMAwDBACb1FMDBACb1FQDBACb1FgD BACb1FoDBACb1F0wDAMEAJvUYQMEAJvUYgMEAJvUZwMEAJvUaQMEAJvUcAMEAJvU dAMEAJvUdjAMAwQAm9R7AwQAm9R8AwQAqqjNMAwDBACqqNUDBACqqNYDBACqqN4D BACqqOUDBACqqOcDBACqqO8DBACqqPkwDQYJKoZIhvcNAQELBQADggEBADOd5Quv SHluxk7w5qLQeJ9GYoKgn9wCvUolLMV55ASR26UDXyMOYnH1/34QMAEJKYRN2NtW T3mYE5vEp05XaRvTzgYiLDKnVbECxz4M8cmKLSsOMS7k9Fb0SYxohz4VVo1MTZcY 89w5ri+aXqcTDoI5Guslu6SPYYjvt1rlsIflvfo7+ordLcfCyS6U4C8WNSLcOZGW 3hAYj5XpLISNz3bL1sb7MlBtSU/577ACSqQQb1OpD/JL6nCzMnAPp8H9p5LlCAj4 WxO2IkFcip36nb4sazENHtJT/AW4PSZ2sUqf1DiM/A1ftE0giHj7HjpHZlMzj1j1 UxgjLf+VZK5o/5U= -----END CERTIFICATE-----Generated at Sat Dec 6 08:57:58 2025 by rpki-client