This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/bsjqTGHnHTlXLQDwHt42FrTQ4XI.roa File: bsjqTGHnHTlXLQDwHt42FrTQ4XI.roa (raw, json) Hash identifier: 5TEmTF9QMkO+GoOlxcIQi8LSgW81Et7TXh9cCxjR0Vw= Subject key identifier: 6E:C8:EA:4C:61:E7:1D:39:57:2D:00:F0:1E:DE:36:16:B4:D0:E1:72 Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Certificate serial: 019A76F1EC7C2B865254D1EC184BAE5EF80B Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/bsjqTGHnHTlXLQDwHt42FrTQ4XI.roa Signing time: Wed 12 Nov 2025 07:22:37 +0000 ROA not before: Wed 12 Nov 2025 07:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29256 IP address blocks: 46.57.128.0/21 maxlen: 21 46.57.136.0/21 maxlen: 21 46.57.144.0/20 maxlen: 20 46.57.144.0/21 maxlen: 21 46.57.144.0/22 maxlen: 22 46.57.148.0/22 maxlen: 22 46.57.152.0/21 maxlen: 21 46.57.160.0/20 maxlen: 20 46.57.160.0/21 maxlen: 21 46.57.168.0/21 maxlen: 21 46.57.168.0/22 maxlen: 22 46.57.172.0/22 maxlen: 22 46.57.176.0/20 maxlen: 20 46.57.176.0/21 maxlen: 21 46.57.184.0/21 maxlen: 21 46.57.192.0/20 maxlen: 20 46.57.192.0/21 maxlen: 21 46.57.200.0/21 maxlen: 21 46.57.208.0/20 maxlen: 20 46.57.208.0/21 maxlen: 21 46.57.216.0/21 maxlen: 21 46.57.224.0/20 maxlen: 20 46.57.224.0/21 maxlen: 21 46.57.232.0/21 maxlen: 21 46.57.240.0/20 maxlen: 20 46.57.240.0/21 maxlen: 21 46.57.248.0/21 maxlen: 21 46.213.0.0/21 maxlen: 21 46.213.0.0/22 maxlen: 22 46.213.4.0/22 maxlen: 22 46.213.8.0/21 maxlen: 21 46.213.16.0/21 maxlen: 21 46.213.24.0/21 maxlen: 21 46.213.32.0/21 maxlen: 21 46.213.40.0/21 maxlen: 21 46.213.48.0/21 maxlen: 21 46.213.56.0/21 maxlen: 21 46.213.64.0/21 maxlen: 21 46.213.72.0/21 maxlen: 21 46.213.80.0/21 maxlen: 21 46.213.88.0/21 maxlen: 21 46.213.96.0/21 maxlen: 21 46.213.104.0/21 maxlen: 21 46.213.104.0/22 maxlen: 22 46.213.108.0/22 maxlen: 22 46.213.112.0/21 maxlen: 21 46.213.112.0/22 maxlen: 22 46.213.116.0/22 maxlen: 22 46.213.120.0/21 maxlen: 21 46.213.120.0/22 maxlen: 22 46.213.124.0/22 maxlen: 22 46.213.128.0/21 maxlen: 21 46.213.136.0/21 maxlen: 21 46.213.144.0/21 maxlen: 21 46.213.152.0/21 maxlen: 21 46.213.160.0/21 maxlen: 21 46.213.168.0/21 maxlen: 21 46.213.168.0/22 maxlen: 22 46.213.172.0/22 maxlen: 22 46.213.176.0/21 maxlen: 21 46.213.184.0/21 maxlen: 21 46.213.184.0/22 maxlen: 22 46.213.188.0/22 maxlen: 22 46.213.192.0/21 maxlen: 21 46.213.200.0/21 maxlen: 21 46.213.208.0/21 maxlen: 21 46.213.216.0/21 maxlen: 21 46.213.224.0/21 maxlen: 21 46.213.224.0/22 maxlen: 22 46.213.228.0/22 maxlen: 22 46.213.232.0/21 maxlen: 21 46.213.240.0/21 maxlen: 21 46.213.248.0/21 maxlen: 21 94.252.128.0/22 maxlen: 22 94.252.132.0/22 maxlen: 22 94.252.136.0/21 maxlen: 21 94.252.144.0/20 maxlen: 20 94.252.144.0/21 maxlen: 21 94.252.152.0/21 maxlen: 21 94.252.160.0/20 maxlen: 20 94.252.176.0/22 maxlen: 22 94.252.180.0/24 maxlen: 24 94.252.181.0/24 maxlen: 24 94.252.182.0/24 maxlen: 24 94.252.183.0/24 maxlen: 24 94.252.184.0/24 maxlen: 24 94.252.185.0/24 maxlen: 24 94.252.186.0/24 maxlen: 24 94.252.187.0/24 maxlen: 24 94.252.188.0/24 maxlen: 24 94.252.189.0/24 maxlen: 24 94.252.190.0/24 maxlen: 24 94.252.191.0/24 maxlen: 24 94.252.192.0/21 maxlen: 21 94.252.200.0/21 maxlen: 21 94.252.208.0/21 maxlen: 21 94.252.216.0/21 maxlen: 21 94.252.224.0/20 maxlen: 20 94.252.240.0/21 maxlen: 21 94.252.248.0/22 maxlen: 22 94.252.252.0/22 maxlen: 22 178.52.0.0/20 maxlen: 20 178.52.0.0/21 maxlen: 21 178.52.0.0/22 maxlen: 22 178.52.4.0/22 maxlen: 22 178.52.8.0/21 maxlen: 21 178.52.8.0/22 maxlen: 22 178.52.12.0/22 maxlen: 22 178.52.16.0/20 maxlen: 20 178.52.16.0/21 maxlen: 21 178.52.24.0/21 maxlen: 21 178.52.32.0/20 maxlen: 20 178.52.32.0/21 maxlen: 21 178.52.40.0/21 maxlen: 21 178.52.48.0/20 maxlen: 20 178.52.48.0/21 maxlen: 21 178.52.56.0/21 maxlen: 21 178.52.64.0/20 maxlen: 20 178.52.64.0/21 maxlen: 21 178.52.72.0/21 maxlen: 21 178.52.80.0/20 maxlen: 20 178.52.80.0/21 maxlen: 21 178.52.88.0/21 maxlen: 21 178.52.96.0/20 maxlen: 20 178.52.96.0/21 maxlen: 21 178.52.104.0/21 maxlen: 21 178.52.104.0/22 maxlen: 22 178.52.108.0/22 maxlen: 22 178.52.112.0/20 maxlen: 20 178.52.112.0/21 maxlen: 21 178.52.120.0/21 maxlen: 21 178.52.128.0/20 maxlen: 20 178.52.128.0/21 maxlen: 21 178.52.136.0/21 maxlen: 21 178.52.144.0/20 maxlen: 20 178.52.144.0/21 maxlen: 21 178.52.152.0/21 maxlen: 21 178.52.160.0/20 maxlen: 20 178.52.160.0/21 maxlen: 21 178.52.168.0/21 maxlen: 21 178.52.176.0/20 maxlen: 20 178.52.176.0/21 maxlen: 21 178.52.176.0/22 maxlen: 22 178.52.180.0/22 maxlen: 22 178.52.184.0/21 maxlen: 21 178.52.192.0/20 maxlen: 20 178.52.192.0/21 maxlen: 21 178.52.200.0/21 maxlen: 21 178.52.208.0/20 maxlen: 20 178.52.208.0/21 maxlen: 21 178.52.216.0/21 maxlen: 21 178.52.224.0/20 maxlen: 20 178.52.224.0/21 maxlen: 21 178.52.232.0/21 maxlen: 21 178.52.240.0/20 maxlen: 20 178.52.240.0/21 maxlen: 21 178.52.248.0/21 maxlen: 21 178.52.248.0/22 maxlen: 22 178.52.252.0/22 maxlen: 22 185.136.144.0/22 maxlen: 22 188.139.128.0/20 maxlen: 20 188.139.128.0/21 maxlen: 21 188.139.136.0/21 maxlen: 21 188.139.144.0/20 maxlen: 20 188.139.144.0/21 maxlen: 21 188.139.152.0/21 maxlen: 21 188.139.160.0/20 maxlen: 20 188.139.160.0/21 maxlen: 21 188.139.168.0/21 maxlen: 21 188.139.176.0/20 maxlen: 20 188.139.176.0/21 maxlen: 21 188.139.184.0/21 maxlen: 21 188.139.192.0/20 maxlen: 20 188.139.192.0/21 maxlen: 21 188.139.200.0/21 maxlen: 21 188.139.208.0/20 maxlen: 20 188.139.208.0/21 maxlen: 21 188.139.216.0/21 maxlen: 21 188.139.224.0/20 maxlen: 20 188.139.224.0/21 maxlen: 21 188.139.232.0/21 maxlen: 21 188.139.240.0/20 maxlen: 20 188.139.240.0/21 maxlen: 21 188.139.248.0/21 maxlen: 21 2a00:b800::/32 maxlen: 32 2a00:b800:3000::/55 maxlen: 55 2a00:b800:3000:200::/55 maxlen: 55 2a00:b800:3000:400::/55 maxlen: 55 2a00:b800:3000:600::/55 maxlen: 55 2a00:b800:3200::/55 maxlen: 55 2a00:b800:3200:200::/55 maxlen: 55 2a00:b800:3200:400::/55 maxlen: 55 2a00:b800:3200:600::/55 maxlen: 55 2a00:b800:3400::/55 maxlen: 55 2a00:b800:3400:200::/55 maxlen: 55 2a00:b800:3400:400::/55 maxlen: 55 2a00:b800:3400:600::/55 maxlen: 55 2a00:b800:3600::/55 maxlen: 55 2a00:b800:3600:200::/55 maxlen: 55 2a00:b800:3600:400::/55 maxlen: 55 2a00:b800:3600:600::/55 maxlen: 55 2a00:b800:3a00::/55 maxlen: 55 2a00:b800:3a00:200::/55 maxlen: 55 2a00:b800:3a00:400::/55 maxlen: 55 2a00:b800:3a00:600::/55 maxlen: 55 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:f1:ec:7c:2b:86:52:54:d1:ec:18:4b:ae:5e:f8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Validity Not Before: Nov 12 07:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6ec8ea4c61e71d39572d00f01ede3616b4d0e172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:11:aa:63:9d:f4:9b:cf:72:4a:71:ad:3b: a1:eb:ff:a4:d8:1e:9e:d3:52:83:55:f3:76:74:f1: be:2a:16:eb:96:9b:de:f8:e5:16:4e:97:bf:3f:b7: d6:c3:92:9b:fe:13:d5:39:87:7c:00:b6:8c:1a:2e: c3:59:06:3e:1b:18:8b:06:a8:8c:fb:2a:82:e6:dc: 76:04:1e:eb:81:09:06:cf:67:4a:82:a9:7f:3c:85: bc:9e:46:f9:cf:a7:b2:1f:92:5c:8d:11:cf:b5:35: 25:50:02:6e:8c:00:cf:6d:0a:d5:9c:49:b7:17:85: 36:0c:d9:5d:1a:c9:94:36:48:4d:d6:6a:fa:82:1d: 38:30:37:56:af:ab:97:64:0c:7b:7f:b9:50:37:85: 32:f6:7b:3f:d2:c2:67:92:7c:44:0c:eb:6f:2b:ba: 88:97:c2:6c:68:26:52:af:8a:b3:40:70:e1:71:19: e7:ba:ce:bd:90:fd:38:8f:35:f8:82:ab:38:7d:4f: 69:e5:d5:20:c2:75:0a:16:41:cc:ac:4f:cf:26:ba: 41:8b:53:3d:59:e3:56:1b:22:b6:40:02:31:07:85: 92:e9:9a:3a:e4:47:4d:fa:d8:40:66:ed:e0:8e:4a: 4d:ff:2e:3a:43:04:e4:16:0b:40:4a:d4:85:07:99: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C8:EA:4C:61:E7:1D:39:57:2D:00:F0:1E:DE:36:16:B4:D0:E1:72 X509v3 Authority Key Identifier: keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/bsjqTGHnHTlXLQDwHt42FrTQ4XI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.57.128.0/17 46.213.0.0/16 94.252.128.0/17 178.52.0.0/16 185.136.144.0/22 188.139.128.0/17 IPv6: 2a00:b800::/32 Signature Algorithm: sha256WithRSAEncryption 96:f1:c3:0f:b5:e5:bc:e3:63:a5:8e:38:09:8b:72:ac:98:4c: 45:b4:67:a9:fd:cc:ca:d5:f5:61:80:dc:3a:2b:46:d7:fe:9b: 31:74:c6:18:84:f7:8e:ee:a5:05:ef:71:29:b2:14:8a:b0:f7: b2:2a:f9:54:b8:90:85:54:4a:71:b6:3b:ed:30:bd:05:00:32: 05:2f:c0:68:96:71:2e:d6:d8:26:cb:ac:08:02:f8:8d:7d:da: 4f:8b:f2:79:26:8d:84:1b:a3:53:c4:dc:92:ea:b2:f8:90:46: 45:a2:c2:c6:c8:f7:13:75:1a:fa:1c:8d:b7:84:a7:0f:95:95: d0:d4:4d:7b:39:8c:43:a4:e9:c2:97:62:20:12:92:2e:a4:da: f4:bd:fc:53:5b:3c:3e:c5:9c:01:17:81:67:51:76:8f:82:d7: d4:ad:63:28:2c:c7:06:38:f9:83:22:89:2f:87:c6:f5:70:1d: ab:11:7f:e9:e7:a3:d9:f2:9b:8d:62:89:24:f0:7e:95:af:23: 51:17:c7:20:f1:3c:25:a2:bb:74:ec:ee:52:50:6e:23:23:4d: e4:3f:a5:0b:65:07:66:5b:b7:ba:2b:b6:9d:30:f5:50:de:ac: 3e:8f:48:2c:9e:52:2d:92:fe:9d:da:7b:6c:b7:29:a5:74:5c: e3:64:89:64 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZp28ex8K4ZSVNHsGEuuXvgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0 N2YwY2YwHhcNMjUxMTEyMDcyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWM4ZWE0YzYxZTcxZDM5NTcyZDAwZjAxZWRlMzYxNmI0ZDBlMTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpkRqmOd9JvPckpxrTuh6/+k2B6e 01KDVfN2dPG+Khbrlpve+OUWTpe/P7fWw5Kb/hPVOYd8ALaMGi7DWQY+GxiLBqiM +yqC5tx2BB7rgQkGz2dKgql/PIW8nkb5z6eyH5JcjRHPtTUlUAJujADPbQrVnEm3 F4U2DNldGsmUNkhN1mr6gh04MDdWr6uXZAx7f7lQN4Uy9ns/0sJnknxEDOtvK7qI l8JsaCZSr4qzQHDhcRnnus69kP04jzX4gqs4fU9p5dUgwnUKFkHMrE/PJrpBi1M9 WeNWGyK2QAIxB4WS6Zo65EdN+thAZu3gjkpN/y46QwTkFgtAStSFB5kNowIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFG7I6kxh5x05Vy0A8B7eNha00OFyMB8GA1UdIwQY MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt OGEwM2E3YzFmZTliLzEvYnNqcVRHSG5IVGxYTFFEd0h0NDJGclRRNFhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiAwQHLjmAAwMA LtUDBAde/IADAwCyNAMEArmIkAMEB7yLgDANBAIAAjAHAwUAKgC4ADANBgkqhkiG 9w0BAQsFAAOCAQEAlvHDD7XlvONjpY44CYtyrJhMRbRnqf3MytX1YYDcOitG1/6b MXTGGIT3ju6lBe9xKbIUirD3sir5VLiQhVRKcbY77TC9BQAyBS/AaJZxLtbYJsus CAL4jX3aT4vyeSaNhBujU8Tckuqy+JBGRaLCxsj3E3Ua+hyNt4SnD5WV0NRNezmM Q6TpwpdiIBKSLqTa9L38U1s8PsWcAReBZ1F2j4LX1K1jKCzHBjj5gyKJL4fG9XAd qxF/6eej2fKbjWKJJPB+la8jURfHIPE8JaK7dOzuUlBuIyNN5D+lC2UHZlu3uiu2 nTD1UN6sPo9ILJ5SLZL+ndp7bLcppXRc42SJZA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:09 2025 by rpki-client