This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/lQ5sD4sASnM8FucWRrfJ9N_JO3U.roa File: lQ5sD4sASnM8FucWRrfJ9N_JO3U.roa (raw, json) Hash identifier: QILaZH2AQC3yUfJPEC77NKji+krwGACsw0GKn5Sbj3I= Subject key identifier: 95:0E:6C:0F:8B:00:4A:73:3C:16:E7:16:46:B7:C9:F4:DF:C9:3B:75 Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019AB993B1FC8D0BE1F2EAA9849E21BD153D Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/lQ5sD4sASnM8FucWRrfJ9N_JO3U.roa Signing time: Tue 25 Nov 2025 05:54:15 +0000 ROA not before: Tue 25 Nov 2025 05:54:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205647 IP address blocks: 37.148.0.0/19 maxlen: 24 37.148.32.0/20 maxlen: 24 37.148.48.0/23 maxlen: 24 37.148.50.0/23 maxlen: 24 37.148.52.0/22 maxlen: 24 37.148.56.0/21 maxlen: 24 37.148.64.0/21 maxlen: 24 37.148.72.0/21 maxlen: 24 37.148.80.0/22 maxlen: 24 37.148.84.0/22 maxlen: 24 37.148.84.0/23 maxlen: 24 37.148.86.0/23 maxlen: 24 37.148.88.0/22 maxlen: 24 37.148.88.0/24 maxlen: 24 37.148.89.0/24 maxlen: 24 37.148.90.0/24 maxlen: 24 37.148.91.0/24 maxlen: 24 37.148.92.0/23 maxlen: 24 37.148.92.0/24 maxlen: 24 37.148.120.0/21 maxlen: 24 37.202.128.0/21 maxlen: 21 37.202.136.0/21 maxlen: 21 37.202.144.0/21 maxlen: 21 37.202.144.0/22 maxlen: 22 37.202.148.0/23 maxlen: 23 37.202.150.0/23 maxlen: 23 37.202.152.0/21 maxlen: 21 37.202.160.0/21 maxlen: 21 37.202.168.0/21 maxlen: 21 37.202.176.0/22 maxlen: 22 37.202.180.0/22 maxlen: 22 37.202.184.0/21 maxlen: 24 37.202.184.0/22 maxlen: 24 37.202.188.0/22 maxlen: 24 85.15.48.0/24 maxlen: 24 85.15.49.0/24 maxlen: 24 94.182.0.0/18 maxlen: 18 94.182.8.0/23 maxlen: 23 94.182.12.0/23 maxlen: 23 94.182.14.0/24 maxlen: 24 94.182.17.0/24 maxlen: 24 94.182.30.0/23 maxlen: 23 94.182.30.0/24 maxlen: 24 94.182.41.0/24 maxlen: 24 94.182.48.0/24 maxlen: 24 94.182.56.0/22 maxlen: 24 94.182.60.0/22 maxlen: 24 94.182.64.0/18 maxlen: 18 94.182.64.0/20 maxlen: 20 94.182.72.0/21 maxlen: 21 94.182.80.0/20 maxlen: 20 94.182.82.0/24 maxlen: 24 94.182.94.0/24 maxlen: 24 94.182.96.0/20 maxlen: 20 94.182.97.192/28 maxlen: 28 94.182.112.0/20 maxlen: 20 94.182.114.0/23 maxlen: 23 94.182.115.0/24 maxlen: 24 94.182.116.0/22 maxlen: 22 94.182.120.0/21 maxlen: 21 94.182.128.0/18 maxlen: 18 94.182.128.0/20 maxlen: 20 94.182.144.0/20 maxlen: 20 94.182.160.0/20 maxlen: 20 94.182.176.0/20 maxlen: 20 94.182.192.0/18 maxlen: 18 94.182.196.0/24 maxlen: 24 94.182.199.0/24 maxlen: 24 94.182.204.0/22 maxlen: 22 94.182.204.0/24 maxlen: 24 94.182.205.0/24 maxlen: 24 94.182.206.0/24 maxlen: 24 94.182.207.0/24 maxlen: 24 94.182.208.0/24 maxlen: 24 94.182.212.0/23 maxlen: 23 94.182.217.0/24 maxlen: 24 94.182.222.0/23 maxlen: 23 94.182.226.0/24 maxlen: 24 94.182.228.0/22 maxlen: 22 94.182.232.0/23 maxlen: 24 94.182.234.0/23 maxlen: 23 94.182.238.0/24 maxlen: 24 94.182.240.0/23 maxlen: 24 94.182.244.0/22 maxlen: 24 94.182.244.0/23 maxlen: 23 94.182.248.0/22 maxlen: 24 94.182.248.0/23 maxlen: 23 94.182.252.0/24 maxlen: 24 94.182.254.0/24 maxlen: 24 94.183.0.0/18 maxlen: 18 94.183.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:93:b1:fc:8d:0b:e1:f2:ea:a9:84:9e:21:bd:15:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Nov 25 05:54:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=950e6c0f8b004a733c16e71646b7c9f4dfc93b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:67:c4:25:be:76:d4:78:79:df:24:cf:da: 13:5d:c9:f0:1c:3c:65:eb:3d:16:e3:8a:72:c9:e9: 48:3f:c5:2f:f9:76:93:f8:bd:df:82:09:39:e6:6c: 5d:46:1a:14:ca:a8:24:c8:58:b3:dc:37:cd:be:92: b6:18:15:08:f8:17:2a:92:eb:c2:38:47:4d:ae:e4: e9:ec:38:ce:bd:38:77:f9:fd:48:6f:c4:f0:6f:7c: 5a:a4:dc:19:33:68:d6:bd:23:0c:13:a4:d6:98:d8: 44:34:d8:c9:48:20:78:e6:c4:25:09:81:23:44:c0: 24:42:db:7f:43:2f:a3:53:86:d8:1d:d7:18:68:9d: b6:c5:38:8a:16:26:91:39:f1:c7:53:46:93:cf:ae: 8b:b2:43:0e:e6:e5:79:35:92:0e:9b:93:f8:fa:bb: c6:73:8a:4b:ba:89:45:cb:35:3e:11:a0:79:77:e4: ad:83:d2:07:a9:0f:38:ff:30:a7:3a:99:eb:c6:94: 5f:48:9a:03:3b:0c:ed:68:bb:2f:96:07:6c:80:12: 0b:f7:47:ae:2f:6d:bf:8f:1c:9f:92:93:ac:10:c9: 73:9f:a1:18:e7:c5:14:70:2b:a0:16:aa:95:d6:a8: 73:2a:48:09:b3:4a:cc:40:37:d1:fc:6b:b6:2a:4d: 2c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0E:6C:0F:8B:00:4A:73:3C:16:E7:16:46:B7:C9:F4:DF:C9:3B:75 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/lQ5sD4sASnM8FucWRrfJ9N_JO3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.148.0.0-37.148.93.255 37.148.120.0/21 37.202.128.0/18 85.15.48.0/23 94.182.0.0-94.183.127.255 Signature Algorithm: sha256WithRSAEncryption b0:3d:bb:1f:3e:6d:63:fa:f9:66:c4:09:5f:01:77:e2:fb:32: c7:8b:f2:74:e2:d4:d9:c4:73:d3:59:b0:ff:65:88:bc:e9:0c: 2f:9c:a2:bb:c1:51:59:88:13:b8:b3:52:6c:a0:ba:6e:c4:f9: 0a:41:23:c2:43:cd:e9:99:53:b5:b2:33:aa:9b:35:77:be:1f: a9:a8:32:79:97:6b:e2:d7:ae:9f:91:92:b5:87:b7:76:a6:14: 55:17:e8:24:d5:d4:eb:8f:81:07:97:26:b5:0e:b5:cb:e5:80: a6:59:e3:f5:79:b1:e9:f7:df:42:e0:d7:2d:c6:b7:74:57:50: b7:da:cc:4b:f2:b1:6f:f2:4a:64:8e:a2:77:96:41:b5:ba:23: 31:96:12:4e:f3:17:20:80:4e:80:b7:1d:78:70:d6:82:68:9a: a8:8e:e8:2a:20:8a:d2:52:4d:ad:38:79:61:3d:c2:c1:f7:5d: b5:8e:70:73:00:ec:da:9e:09:b5:c5:51:9a:84:89:d7:37:c0: 8e:df:60:d8:1b:2d:a1:8a:6e:68:69:20:d6:00:cc:cb:a3:43: db:7f:5d:f4:40:0e:0b:17:73:4d:55:60:5f:12:7e:e9:5b:8e: 75:95:2b:a9:07:58:69:3f:86:da:97:61:3f:e5:cd:31:e7:01: e6:f4:31:d5 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZq5k7H8jQvh8uqphJ4hvRU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjUxMTI1MDU1NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTBlNmMwZjhiMDA0YTczM2MxNmU3MTY0NmI3YzlmNGRmYzkzYjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzihnxCW+dtR4ed8kz9oTXcnwHDxl 6z0W44pyyelIP8Uv+XaT+L3fggk55mxdRhoUyqgkyFiz3DfNvpK2GBUI+BcqkuvC OEdNruTp7DjOvTh3+f1Ib8Twb3xapNwZM2jWvSMME6TWmNhENNjJSCB45sQlCYEj RMAkQtt/Qy+jU4bYHdcYaJ22xTiKFiaROfHHU0aTz66LskMO5uV5NZIOm5P4+rvG c4pLuolFyzU+EaB5d+Stg9IHqQ84/zCnOpnrxpRfSJoDOwztaLsvlgdsgBIL90eu L22/jxyfkpOsEMlzn6EY58UUcCugFqqV1qhzKkgJs0rMQDfR/Gu2Kk0sHwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFJUObA+LAEpzPBbnFka3yfTfyTt1MB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvbFE1c0Q0c0FTbk04RnVjV1JyZko5Tl9KTzNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAsDAwIllAME ASWUXAMEAyWUeAMEBiXKgAMEAVUPMDALAwMBXrYDBAdetwAwDQYJKoZIhvcNAQEL BQADggEBALA9ux8+bWP6+WbECV8Bd+L7MseL8nTi1NnEc9NZsP9liLzpDC+corvB UVmIE7izUmygum7E+QpBI8JDzemZU7WyM6qbNXe+H6moMnmXa+LXrp+RkrWHt3am FFUX6CTV1OuPgQeXJrUOtcvlgKZZ4/V5sen330Lg1y3Gt3RXULfazEvysW/ySmSO oneWQbW6IzGWEk7zFyCAToC3HXhw1oJomqiO6CogitJSTa04eWE9wsH3XbWOcHMA 7NqeCbXFUZqEidc3wI7fYNgbLaGKbmhpINYAzMujQ9t/XfRADgsXc01VYF8Sfulb jnWVK6kHWGk/htqXYT/lzTHnAeb0MdU= -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:43 2025 by rpki-client