This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/hmeOhKdxPoOTLgB2n6SumwG0was.roa File: hmeOhKdxPoOTLgB2n6SumwG0was.roa (raw, json) Hash identifier: WhpB45ZYJJSPi0bD6d9wUmlGDMoSOPOrM002heb1040= Subject key identifier: 86:67:8E:84:A7:71:3E:83:93:2E:00:76:9F:A4:AE:9B:01:B4:C1:AB Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 019AC9350C319C77A117040B8BAAF387AFAD Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/hmeOhKdxPoOTLgB2n6SumwG0was.roa Signing time: Fri 28 Nov 2025 06:44:48 +0000 ROA not before: Fri 28 Nov 2025 06:44:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 54994 IP address blocks: 91.194.204.0/24 maxlen: 24 91.194.205.0/24 maxlen: 24 91.202.200.0/24 maxlen: 24 93.188.132.0/24 maxlen: 24 93.188.135.0/24 maxlen: 24 148.253.34.0/24 maxlen: 24 148.253.36.0/24 maxlen: 24 148.253.41.0/24 maxlen: 24 148.253.42.0/24 maxlen: 24 148.253.44.0/24 maxlen: 24 148.253.47.0/24 maxlen: 24 148.253.50.0/24 maxlen: 24 148.253.60.0/24 maxlen: 24 148.253.61.0/24 maxlen: 24 148.253.62.0/24 maxlen: 24 148.253.63.0/24 maxlen: 24 148.253.228.0/24 maxlen: 24 148.253.229.0/24 maxlen: 24 148.253.231.0/24 maxlen: 24 148.253.232.0/24 maxlen: 24 148.253.233.0/24 maxlen: 24 148.253.234.0/24 maxlen: 24 148.253.235.0/24 maxlen: 24 148.253.237.0/24 maxlen: 24 148.253.239.0/24 maxlen: 24 148.253.241.0/24 maxlen: 24 148.253.244.0/24 maxlen: 24 148.253.245.0/24 maxlen: 24 148.253.246.0/24 maxlen: 24 148.253.248.0/24 maxlen: 24 151.249.92.0/24 maxlen: 24 151.249.93.0/24 maxlen: 24 151.249.94.0/24 maxlen: 24 163.171.64.0/24 maxlen: 24 163.171.67.0/24 maxlen: 24 163.171.70.0/24 maxlen: 24 163.171.71.0/24 maxlen: 24 163.171.77.0/24 maxlen: 24 163.171.84.0/24 maxlen: 24 163.171.85.0/24 maxlen: 24 163.171.87.0/24 maxlen: 24 163.171.93.0/24 maxlen: 24 163.171.94.0/24 maxlen: 24 163.171.96.0/24 maxlen: 24 163.171.97.0/24 maxlen: 24 163.171.98.0/24 maxlen: 24 163.171.101.0/24 maxlen: 24 163.171.102.0/24 maxlen: 24 163.171.103.0/24 maxlen: 24 163.171.104.0/24 maxlen: 24 163.171.110.0/24 maxlen: 24 163.171.119.0/24 maxlen: 24 163.171.126.0/24 maxlen: 24 163.171.143.0/24 maxlen: 24 163.171.149.0/24 maxlen: 24 163.171.153.0/24 maxlen: 24 163.171.166.0/24 maxlen: 24 163.171.176.0/24 maxlen: 24 163.171.177.0/24 maxlen: 24 163.171.182.0/24 maxlen: 24 163.171.188.0/24 maxlen: 24 163.171.198.0/24 maxlen: 24 163.171.207.0/24 maxlen: 24 163.171.215.0/24 maxlen: 24 163.171.216.0/24 maxlen: 24 163.171.217.0/24 maxlen: 24 163.171.218.0/24 maxlen: 24 163.171.222.0/24 maxlen: 24 163.171.224.0/24 maxlen: 24 163.171.225.0/24 maxlen: 24 163.171.227.0/24 maxlen: 24 163.171.230.0/24 maxlen: 24 163.171.231.0/24 maxlen: 24 163.171.234.0/24 maxlen: 24 163.171.235.0/24 maxlen: 24 163.171.237.0/24 maxlen: 24 163.171.244.0/24 maxlen: 24 163.171.249.0/24 maxlen: 24 163.171.252.0/24 maxlen: 24 185.27.230.0/24 maxlen: 24 194.107.19.0/24 maxlen: 24 2a01:53c0:ff19::/48 maxlen: 48 2a01:53c0:ffc6::/48 maxlen: 48 2a01:53c0:ffe7::/48 maxlen: 48 2a01:53c0:fff2::/48 maxlen: 48 2a01:53c0:fff4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:35:0c:31:9c:77:a1:17:04:0b:8b:aa:f3:87:af:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Nov 28 06:44:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=86678e84a7713e83932e00769fa4ae9b01b4c1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:2e:05:02:92:dc:77:e6:be:29:f5:50:83: 47:42:68:a7:20:98:c2:8f:06:cb:5b:e8:a6:9c:6e: 05:fd:bc:f3:a0:17:c1:a1:ce:2e:81:a4:3a:94:18: 7a:a7:02:50:11:a7:31:09:8d:90:28:d7:10:cf:ab: ae:9f:66:e4:f5:1a:3f:19:4f:cf:d2:3e:80:05:34: b1:9a:00:28:0f:2d:94:0c:f3:02:a2:21:66:c1:81: 8f:14:d2:35:b6:7d:5c:d6:52:c1:9d:be:ea:dc:01: 63:dc:d6:fa:9e:95:56:8e:0c:18:7d:24:87:bd:b9: 2e:30:fd:18:c3:e0:b0:87:09:a3:44:6d:96:77:fa: f3:ef:ff:b0:86:eb:aa:c0:97:d7:f1:a9:c4:52:75: c0:8e:2c:07:c2:fe:57:74:15:ac:9b:6f:32:88:2a: bc:b3:0d:3c:76:3e:d6:b2:30:61:2f:d9:bf:5b:c6: da:d8:9b:15:10:75:55:01:ac:33:84:7d:ad:77:e4: 52:9d:79:d1:c2:6a:1e:48:9c:23:ac:97:06:f9:c5: dd:6f:d2:3f:5f:44:40:c8:a7:88:73:f3:b0:45:54: 82:0f:3a:04:08:7f:da:45:bb:f1:2f:72:35:ca:e9: 9f:00:00:cf:2f:54:d4:4d:ce:fb:f1:41:7e:5a:6c: f2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:67:8E:84:A7:71:3E:83:93:2E:00:76:9F:A4:AE:9B:01:B4:C1:AB X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/hmeOhKdxPoOTLgB2n6SumwG0was.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.204.0/23 91.202.200.0/24 93.188.132.0/24 93.188.135.0/24 148.253.34.0/24 148.253.36.0/24 148.253.41.0-148.253.42.255 148.253.44.0/24 148.253.47.0/24 148.253.50.0/24 148.253.60.0/22 148.253.228.0/23 148.253.231.0-148.253.235.255 148.253.237.0/24 148.253.239.0/24 148.253.241.0/24 148.253.244.0-148.253.246.255 148.253.248.0/24 151.249.92.0-151.249.94.255 163.171.64.0/24 163.171.67.0/24 163.171.70.0/23 163.171.77.0/24 163.171.84.0/23 163.171.87.0/24 163.171.93.0-163.171.94.255 163.171.96.0-163.171.98.255 163.171.101.0-163.171.104.255 163.171.110.0/24 163.171.119.0/24 163.171.126.0/24 163.171.143.0/24 163.171.149.0/24 163.171.153.0/24 163.171.166.0/24 163.171.176.0/23 163.171.182.0/24 163.171.188.0/24 163.171.198.0/24 163.171.207.0/24 163.171.215.0-163.171.218.255 163.171.222.0/24 163.171.224.0/23 163.171.227.0/24 163.171.230.0/23 163.171.234.0/23 163.171.237.0/24 163.171.244.0/24 163.171.249.0/24 163.171.252.0/24 185.27.230.0/24 194.107.19.0/24 IPv6: 2a01:53c0:ff19::/48 2a01:53c0:ffc6::/48 2a01:53c0:ffe7::/48 2a01:53c0:fff2::/48 2a01:53c0:fff4::/48 Signature Algorithm: sha256WithRSAEncryption 2c:26:7a:24:a3:05:be:1c:1a:b0:3b:0f:7f:b4:ad:6b:d3:59: b2:fa:c2:53:5d:ce:b3:16:ef:c1:18:09:85:fa:32:64:b9:a6: 6c:29:53:9c:f2:8c:13:8f:b6:e9:57:49:d6:59:46:e4:65:0c: f9:d7:f9:cd:32:a8:58:18:47:fb:58:27:20:85:62:27:a6:e0: a6:f2:64:aa:2c:5f:33:0b:7b:8e:dd:00:3b:2e:dc:d5:5c:d1: 79:5d:ac:19:5c:79:92:8f:fa:8c:6e:6c:32:e7:54:4c:fb:48: e3:c7:80:32:e9:2a:d1:92:63:4e:05:2d:33:06:f5:e6:c8:3b: 90:d2:8f:66:82:6f:cb:f2:51:82:b4:38:0d:e8:76:4d:34:1c: 92:a7:75:1b:5b:87:3d:e0:af:f6:ca:a7:66:2a:ad:8a:83:9a: af:e4:3a:d6:e6:7c:82:02:48:f6:25:45:97:9f:f1:4d:bc:b0: 84:f3:de:92:31:86:73:d3:f5:13:71:d0:5d:c8:af:41:ab:25: 38:e8:8e:93:80:1f:b7:cf:23:3f:23:0d:b5:06:25:3d:c4:48: 47:a9:b2:b6:9e:60:0c:5e:6a:e6:6c:28:1d:8b:e3:37:35:86: 78:74:c6:fa:7b:8f:d8:e1:d5:4e:26:57:f8:4e:51:7d:61:24: b7:06:6d:0f -----BEGIN CERTIFICATE----- MIIGrjCCBZagAwIBAgISAZrJNQwxnHehFwQLi6rzh6+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjUxMTI4MDY0NDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjY3OGU4NGE3NzEzZTgzOTMyZTAwNzY5ZmE0YWU5YjAxYjRjMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpQuBQKS3Hfmvin1UINHQminIJjC jwbLW+imnG4F/bzzoBfBoc4ugaQ6lBh6pwJQEacxCY2QKNcQz6uun2bk9Ro/GU/P 0j6ABTSxmgAoDy2UDPMCoiFmwYGPFNI1tn1c1lLBnb7q3AFj3Nb6npVWjgwYfSSH vbkuMP0Yw+CwhwmjRG2Wd/rz7/+whuuqwJfX8anEUnXAjiwHwv5XdBWsm28yiCq8 sw08dj7WsjBhL9m/W8ba2JsVEHVVAawzhH2td+RSnXnRwmoeSJwjrJcG+cXdb9I/ X0RAyKeIc/OwRVSCDzoECH/aRbvxL3I1yumfAADPL1TUTc778UF+Wmzy5wIDAQAB o4IDujCCA7YwHQYDVR0OBBYEFIZnjoSncT6Dky4Adp+krpsBtMGrMB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvaG1lT2hLZHhQb09UTGdCMm42U3Vtd0cwd2FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBzgYIKwYBBQUHAQcBAf8EggG9MIIBuTCCAYAEAgABMIIB eAMEAVvCzAMEAFvKyAMEAF28hAMEAF28hwMEAJT9IgMEAJT9JDAMAwQAlP0pAwQA lP0qAwQAlP0sAwQAlP0vAwQAlP0yAwQClP08AwQBlP3kMAwDBACU/ecDBAKU/egD BACU/e0DBACU/e8DBACU/fEwDAMEApT99AMEAJT99gMEAJT9+DAMAwQCl/lcAwQA l/leAwQAo6tAAwQAo6tDAwQBo6tGAwQAo6tNAwQBo6tUAwQAo6tXMAwDBACjq10D BACjq14wDAMEBaOrYAMEAKOrYjAMAwQAo6tlAwQAo6toAwQAo6tuAwQAo6t3AwQA o6t+AwQAo6uPAwQAo6uVAwQAo6uZAwQAo6umAwQBo6uwAwQAo6u2AwQAo6u8AwQA o6vGAwQAo6vPMAwDBACjq9cDBACjq9oDBACjq94DBAGjq+ADBACjq+MDBAGjq+YD BAGjq+oDBACjq+0DBACjq/QDBACjq/kDBACjq/wDBAC5G+YDBADCaxMwMwQCAAIw LQMHACoBU8D/GQMHACoBU8D/xgMHACoBU8D/5wMHACoBU8D/8gMHACoBU8D/9DAN BgkqhkiG9w0BAQsFAAOCAQEALCZ6JKMFvhwasDsPf7Sta9NZsvrCU13OsxbvwRgJ hfoyZLmmbClTnPKME4+26VdJ1llG5GUM+df5zTKoWBhH+1gnIIViJ6bgpvJkqixf Mwt7jt0AOy7c1VzReV2sGVx5ko/6jG5sMudUTPtI48eAMukq0ZJjTgUtMwb15sg7 kNKPZoJvy/JRgrQ4Deh2TTQckqd1G1uHPeCv9sqnZiqtioOar+Q61uZ8ggJI9iVF l5/xTbywhPPekjGGc9P1E3HQXcivQaslOOiOk4Aft88jPyMNtQYlPcRIR6mytp5g DF5q5mwoHYvjNzWGeHTG+nuP2OHVTiZX+E5RfWEktwZtDw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:41 2025 by rpki-client