This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/8uWXhwFxYp_u8zkxadBDn4W-i6g.roa File: 8uWXhwFxYp_u8zkxadBDn4W-i6g.roa (raw, json) Hash identifier: g7VoLB6OU52nksuPUL0ook7upi6vg7vrgbqgtKCymuc= Subject key identifier: F2:E5:97:87:01:71:62:9F:EE:F3:39:31:69:D0:43:9F:85:BE:8B:A8 Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Certificate serial: 019AB64794C0D9FF846A8CC6C19DE1A5788A Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/8uWXhwFxYp_u8zkxadBDn4W-i6g.roa Signing time: Mon 24 Nov 2025 14:32:15 +0000 ROA not before: Mon 24 Nov 2025 14:32:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1103 IP address blocks: 145.0.0.0/16 maxlen: 24 145.2.0.0/15 maxlen: 24 145.9.0.0/16 maxlen: 24 145.19.0.0/16 maxlen: 24 145.19.0.0/24 maxlen: 24 145.20.0.0/16 maxlen: 24 145.23.0.0/16 maxlen: 24 145.23.0.0/19 maxlen: 24 145.24.0.0/16 maxlen: 24 145.28.0.0/15 maxlen: 24 145.33.0.0/16 maxlen: 24 145.37.0.0/16 maxlen: 24 145.38.0.0/15 maxlen: 24 145.41.0.0/16 maxlen: 24 145.44.0.0/16 maxlen: 24 145.48.0.0/15 maxlen: 24 145.51.0.0/16 maxlen: 24 145.52.0.0/16 maxlen: 24 145.67.0.0/16 maxlen: 24 145.74.0.0/15 maxlen: 24 145.76.0.0/16 maxlen: 24 145.81.0.0/16 maxlen: 24 145.85.0.0/16 maxlen: 24 145.85.0.0/24 maxlen: 24 145.88.0.0/15 maxlen: 24 145.90.0.0/16 maxlen: 24 145.90.10.0/23 maxlen: 24 145.91.0.0/16 maxlen: 24 145.91.0.0/24 maxlen: 24 145.92.0.0/15 maxlen: 24 145.95.0.0/16 maxlen: 24 145.96.0.0/16 maxlen: 24 145.97.0.0/20 maxlen: 24 145.97.16.0/22 maxlen: 24 145.97.20.0/22 maxlen: 24 145.97.24.0/21 maxlen: 24 145.97.48.0/20 maxlen: 24 145.97.64.0/18 maxlen: 24 145.97.128.0/18 maxlen: 24 145.97.128.0/24 maxlen: 24 145.97.192.0/18 maxlen: 24 145.98.0.0/16 maxlen: 24 145.98.16.0/24 maxlen: 24 145.100.0.0/15 maxlen: 24 145.102.0.0/16 maxlen: 24 145.103.0.0/16 maxlen: 24 145.107.0.0/16 maxlen: 24 145.108.0.0/16 maxlen: 24 145.109.128.0/17 maxlen: 24 145.116.0.0/20 maxlen: 24 145.116.16.0/21 maxlen: 24 145.116.24.0/21 maxlen: 24 145.116.64.0/18 maxlen: 24 145.116.128.0/18 maxlen: 24 145.116.192.0/20 maxlen: 24 145.116.224.0/19 maxlen: 24 145.117.0.0/16 maxlen: 24 145.118.0.0/16 maxlen: 24 145.120.0.0/14 maxlen: 24 145.124.0.0/15 maxlen: 24 145.126.0.0/16 maxlen: 24 145.127.0.0/17 maxlen: 24 145.136.0.0/15 maxlen: 24 145.137.128.0/18 maxlen: 24 145.138.0.0/16 maxlen: 24 145.140.0.0/14 maxlen: 24 145.144.0.0/12 maxlen: 24 145.146.0.0/16 maxlen: 24 145.160.0.0/12 maxlen: 24 192.87.0.0/16 maxlen: 24 194.171.0.0/16 maxlen: 24 195.169.0.0/16 maxlen: 24 2001:610::/29 maxlen: 29 2001:610::/32 maxlen: 48 2001:610:130::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:47:94:c0:d9:ff:84:6a:8c:c6:c1:9d:e1:a5:78:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Validity Not Before: Nov 24 14:32:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f2e597870171629feef3393169d0439f85be8ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cd:01:ae:ea:42:06:60:e1:f3:4d:bf:46:33: 9f:27:e8:39:c0:38:89:08:71:db:70:01:33:28:73: 3b:68:f4:22:02:b5:9a:97:1d:91:0d:d3:41:f1:1a: e1:c7:75:0b:75:b9:88:b3:99:97:18:01:13:72:1b: 9b:e4:c4:d8:a9:23:6e:86:14:83:b4:39:70:00:45: d6:9b:fb:b7:1f:43:cd:23:3b:8b:d3:8f:d5:3e:03: 56:a0:3a:f4:9d:61:a4:85:21:f6:1c:ae:f0:b7:c3: d3:81:45:0f:ea:b1:88:bc:9e:80:05:e4:7c:7f:ea: e3:22:dc:6a:e8:c1:ed:bb:5b:76:c4:34:84:b3:1c: a7:c5:57:fe:93:b1:d3:ee:4e:c7:52:c8:bf:3b:de: f9:51:42:5e:a1:53:57:1d:7d:d3:79:e0:02:42:68: d7:21:13:90:40:b0:1b:91:c3:61:a2:47:05:08:8d: 4d:93:ed:ec:06:e5:12:98:1c:3f:ab:62:9b:fc:ce: 3c:ed:81:c8:27:1e:21:cc:13:63:5c:44:5c:1d:09: 4e:66:3a:b9:ed:d4:cf:84:a0:08:a4:e3:ce:24:76: 04:cd:35:fc:ed:99:7a:0e:c8:6b:31:5d:5f:f4:90: 92:10:e0:3d:17:2e:5b:3b:c1:76:94:51:f4:77:53: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E5:97:87:01:71:62:9F:EE:F3:39:31:69:D0:43:9F:85:BE:8B:A8 X509v3 Authority Key Identifier: keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/8uWXhwFxYp_u8zkxadBDn4W-i6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.0.0.0/16 145.2.0.0/15 145.9.0.0/16 145.19.0.0-145.20.255.255 145.23.0.0-145.24.255.255 145.28.0.0/15 145.33.0.0/16 145.37.0.0-145.39.255.255 145.41.0.0/16 145.44.0.0/16 145.48.0.0/15 145.51.0.0-145.52.255.255 145.67.0.0/16 145.74.0.0-145.76.255.255 145.81.0.0/16 145.85.0.0/16 145.88.0.0-145.93.255.255 145.95.0.0-145.97.31.255 145.97.48.0-145.98.255.255 145.100.0.0/14 145.107.0.0-145.108.255.255 145.109.128.0/17 145.116.0.0/19 145.116.64.0-145.116.207.255 145.116.224.0-145.118.255.255 145.120.0.0-145.127.127.255 145.136.0.0-145.138.255.255 145.140.0.0-145.175.255.255 192.87.0.0/16 194.171.0.0/16 195.169.0.0/16 IPv6: 2001:610::/29 Signature Algorithm: sha256WithRSAEncryption 10:e6:d9:44:b2:55:46:9a:e9:32:28:83:6e:d8:d1:85:83:ae: 77:7c:67:8b:19:50:05:1e:18:89:0a:4e:b5:be:d1:4e:02:53: f2:0d:d0:ff:cb:f1:3c:ca:cb:a6:94:76:1d:8c:4f:76:36:7b: 24:bb:d0:f6:96:ec:4e:f4:8d:f6:64:ce:e9:25:bf:ba:a4:c9: f2:da:f5:f1:a1:85:90:3d:5b:8e:f2:18:bb:c5:8a:41:12:57: 68:a6:84:07:52:b4:47:0e:ad:23:70:23:a5:86:ed:bb:78:57: 96:51:e4:20:0a:81:98:32:a1:5f:75:65:58:91:48:53:2b:4b: b8:14:47:9b:07:b4:d3:ce:f3:f9:e1:b8:b9:8e:12:b7:b4:45: 1f:30:8e:98:e8:85:44:f5:c4:4d:ba:93:ed:74:eb:a0:c0:f1: 37:d9:0f:2f:94:6a:69:c2:a2:6b:63:e3:60:f6:95:8c:d0:82: 31:fe:9a:50:79:55:69:3b:e9:d7:9f:21:32:26:d6:6a:0b:da: 0d:ee:5f:aa:ce:e9:f6:d6:5c:92:3e:1d:ff:ee:86:d7:83:2b: e2:96:f3:f6:5e:7a:a8:26:01:26:e4:76:64:31:f5:13:c2:3c: 59:a4:78:43:31:b0:19:6f:8c:82:ef:71:4a:41:f8:3a:f4:7f: bb:11:f2:b9 -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgISAZq2R5TA2f+EaozGwZ3hpXiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm NDUyM2UwHhcNMjUxMTI0MTQzMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmU1OTc4NzAxNzE2MjlmZWVmMzM5MzE2OWQwNDM5Zjg1YmU4YmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss0BrupCBmDh802/RjOfJ+g5wDiJ CHHbcAEzKHM7aPQiArWalx2RDdNB8Rrhx3ULdbmIs5mXGAETchub5MTYqSNuhhSD tDlwAEXWm/u3H0PNIzuL04/VPgNWoDr0nWGkhSH2HK7wt8PTgUUP6rGIvJ6ABeR8 f+rjItxq6MHtu1t2xDSEsxynxVf+k7HT7k7HUsi/O975UUJeoVNXHX3TeeACQmjX IROQQLAbkcNhokcFCI1Nk+3sBuUSmBw/q2Kb/M487YHIJx4hzBNjXERcHQlOZjq5 7dTPhKAIpOPOJHYEzTX87Zl6DshrMV1f9JCSEOA9Fy5bO8F2lFH0d1PpswIDAQAB o4IDITCCAx0wHQYDVR0OBBYEFPLll4cBcWKf7vM5MWnQQ5+FvouoMB8GA1UdIwQY MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt NTQ4NjFmMjMyNDlkLzEvOHVXWGh3RnhZcF91OHpreGFkQkRuNFctaTZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDCCAQ0EAgABMIIB BQMDAJEAAwMBkQIDAwCRCTAKAwMAkRMDAwCRFDAKAwMAkRcDAwCRGAMDAZEcAwMA kSEwCgMDAJElAwMDkSADAwCRKQMDAJEsAwMBkTAwCgMDAJEzAwMAkTQDAwCRQzAK AwMBkUoDAwCRTAMDAJFRAwMAkVUwCgMDA5FYAwMBkVwwCwMDAJFfAwQFkWEAMAsD BASRYTADAwCRYgMDApFkMAoDAwCRawMDAJFsAwQHkW2AAwQFkXQAMAwDBAaRdEAD BASRdMAwCwMEBZF04AMDAJF2MAsDAwOReAMEB5F/ADAKAwMDkYgDAwCRijAKAwMC kYwDAwSRoAMDAMBXAwMAwqsDAwDDqTANBAIAAjAHAwUDIAEGEDANBgkqhkiG9w0B AQsFAAOCAQEAEObZRLJVRprpMiiDbtjRhYOud3xnixlQBR4YiQpOtb7RTgJT8g3Q /8vxPMrLppR2HYxPdjZ7JLvQ9pbsTvSN9mTO6SW/uqTJ8tr18aGFkD1bjvIYu8WK QRJXaKaEB1K0Rw6tI3AjpYbtu3hXllHkIAqBmDKhX3VlWJFIUytLuBRHmwe0087z +eG4uY4St7RFHzCOmOiFRPXETbqT7XTroMDxN9kPL5RqacKia2PjYPaVjNCCMf6a UHlVaTvp158hMibWagvaDe5fqs7p9tZckj4d/+6G14Mr4pbz9l56qCYBJuR2ZDH1 E8I8WaR4QzGwGW+Mgu9xSkH4OvR/uxHyuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:18:20 2025 by rpki-client