This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/1c-Ivw_uC8OGygLNfXe83dC-dl0.roa File: 1c-Ivw_uC8OGygLNfXe83dC-dl0.roa (raw, json) Hash identifier: /mbQrnfmAY+F7CwS0AzIHpNKdF9mhRVrAcobyaNKhyM= Subject key identifier: D5:CF:88:BF:0F:EE:0B:C3:86:CA:02:CD:7D:77:BC:DD:D0:BE:76:5D Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 019B25E0D31D19BA4538FD49A19519E51744 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/1c-Ivw_uC8OGygLNfXe83dC-dl0.roa Signing time: Tue 16 Dec 2025 06:37:29 +0000 ROA not before: Tue 16 Dec 2025 06:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20485 IP address blocks: 62.33.0.0/16 maxlen: 16 62.33.111.0/24 maxlen: 24 80.76.240.0/20 maxlen: 24 80.82.160.0/19 maxlen: 19 80.237.0.0/17 maxlen: 17 83.234.0.0/16 maxlen: 16 89.237.32.0/22 maxlen: 24 89.237.37.0/24 maxlen: 24 89.237.41.0/24 maxlen: 24 89.237.43.0/24 maxlen: 24 89.237.44.0/24 maxlen: 24 89.237.45.0/24 maxlen: 24 89.237.46.0/24 maxlen: 24 89.237.55.0/24 maxlen: 24 145.255.136.0/21 maxlen: 21 151.237.240.0/21 maxlen: 24 176.104.160.0/21 maxlen: 32 185.13.160.0/22 maxlen: 22 185.50.216.0/22 maxlen: 24 188.43.0.0/16 maxlen: 16 195.246.122.0/23 maxlen: 24 213.137.230.0/23 maxlen: 23 213.137.232.0/23 maxlen: 24 213.137.236.0/22 maxlen: 24 213.137.240.0/21 maxlen: 24 213.137.248.0/21 maxlen: 24 213.141.240.0/22 maxlen: 22 213.141.247.0/24 maxlen: 24 217.148.208.0/20 maxlen: 24 217.150.32.0/19 maxlen: 19 2a00:1e48::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:e0:d3:1d:19:ba:45:38:fd:49:a1:95:19:e5:17:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Dec 16 06:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d5cf88bf0fee0bc386ca02cd7d77bcddd0be765d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:31:48:72:6d:aa:c7:92:7b:de:96:f9:29: 20:71:30:6d:50:a8:18:21:a7:98:34:6a:0c:d5:f1: f3:c8:e2:48:72:8b:88:1d:c9:d2:da:e5:45:f5:06: 00:21:42:be:14:a7:ca:b5:cd:80:a8:68:2a:cc:87: 48:74:60:bb:ff:b9:9e:22:38:5f:ea:2c:8b:4b:b7: eb:49:94:2f:1e:98:7b:3f:28:07:05:0c:a4:f1:31: c3:0a:5d:68:db:95:e5:20:90:3f:c4:e1:07:b6:db: f9:5c:93:ae:e5:f9:5f:ee:6e:66:7d:4b:65:d9:73: 7f:e5:4f:2c:07:1f:5f:7f:8b:41:af:dc:97:1d:1c: b8:4a:8a:ea:05:b1:a1:f1:04:02:34:d5:76:24:63: b5:6a:20:30:9b:7d:59:28:4f:af:aa:b7:c2:7a:22: 26:6d:ed:f0:8e:e6:b8:10:50:26:8c:ef:75:a9:0c: 2e:a9:7d:a8:fa:31:2d:f7:a1:f2:d9:ff:32:03:56: 55:af:13:b7:38:59:e8:91:8f:06:b1:87:45:a0:12: 3d:91:10:16:2e:ad:6c:b0:32:b3:dc:a0:0c:84:c0: b0:57:7b:60:90:01:95:f8:56:2e:e8:fa:b5:ef:27: 3d:94:4c:66:d4:dd:8b:44:56:b9:d8:85:80:a3:fe: e8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CF:88:BF:0F:EE:0B:C3:86:CA:02:CD:7D:77:BC:DD:D0:BE:76:5D X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/1c-Ivw_uC8OGygLNfXe83dC-dl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.33.0.0/16 80.76.240.0/20 80.82.160.0/19 80.237.0.0/17 83.234.0.0/16 89.237.32.0/22 89.237.37.0/24 89.237.41.0/24 89.237.43.0-89.237.46.255 89.237.55.0/24 145.255.136.0/21 151.237.240.0/21 176.104.160.0/21 185.13.160.0/22 185.50.216.0/22 188.43.0.0/16 195.246.122.0/23 213.137.230.0-213.137.233.255 213.137.236.0-213.137.255.255 213.141.240.0/22 213.141.247.0/24 217.148.208.0/20 217.150.32.0/19 IPv6: 2a00:1e48::/32 Signature Algorithm: sha256WithRSAEncryption 73:16:0a:74:4a:c7:6c:45:8a:dc:04:49:bd:96:fb:66:86:b4: 30:d5:92:04:d6:ce:69:24:bd:63:4c:9e:00:9e:95:b6:8c:05: 3b:b1:8f:b1:8e:62:25:31:5f:90:54:4a:fd:8f:57:e9:23:f4: b0:3d:4a:8f:c8:c0:36:1b:01:68:a9:7e:1c:b7:af:fe:60:13: 6e:38:a1:09:58:f9:ab:b8:61:64:f1:80:5c:04:c3:73:a9:a8: 28:31:85:47:80:20:65:73:bc:33:eb:2e:59:8c:68:e5:a3:9f: 53:50:00:1f:8c:70:2f:69:53:9b:7e:6c:81:1e:02:12:db:11: 6b:e4:d9:7a:8a:48:84:0c:8b:24:11:16:e2:c2:38:9a:1f:16: db:c1:95:ce:32:7f:6a:64:e7:58:44:4f:1f:98:07:9e:3f:01: 3b:48:35:9c:51:82:1f:fd:99:2f:ad:d7:f8:56:26:98:13:ad: 4b:97:3d:f7:7f:75:6b:39:47:53:d9:62:82:dd:7e:57:43:42: bb:fa:22:f1:78:f1:28:f2:bf:f6:df:34:a6:7e:ac:08:77:a4: a3:5b:c9:d5:74:06:74:23:cc:e6:5a:77:88:59:fc:89:83:df: a6:4b:8f:a1:08:89:3e:77:a3:0c:a3:d3:13:fa:45:05:43:5a: 84:23:d5:84 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZsl4NMdGbpFOP1JoZUZ5RdEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjUxMjE2MDYzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWNmODhiZjBmZWUwYmMzODZjYTAyY2Q3ZDc3YmNkZGQwYmU3NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtIxSHJtqseSe96W+SkgcTBtUKgY IaeYNGoM1fHzyOJIcouIHcnS2uVF9QYAIUK+FKfKtc2AqGgqzIdIdGC7/7meIjhf 6iyLS7frSZQvHph7PygHBQyk8THDCl1o25XlIJA/xOEHttv5XJOu5flf7m5mfUtl 2XN/5U8sBx9ff4tBr9yXHRy4SorqBbGh8QQCNNV2JGO1aiAwm31ZKE+vqrfCeiIm be3wjua4EFAmjO91qQwuqX2o+jEt96Hy2f8yA1ZVrxO3OFnokY8GsYdFoBI9kRAW Lq1ssDKz3KAMhMCwV3tgkAGV+FYu6Pq17yc9lExm1N2LRFa52IWAo/7obQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNXPiL8P7gvDhsoCzX13vN3QvnZdMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvMWMtSXZ3X3VDOE9HeWdMTmZYZTgzZEMtZGwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHKBggrBgEFBQcBBwEB/wSBujCBtzCBpQQCAAEwgZ4DAwA+ IQMEBFBM8AMEBVBSoAMEB1DtAAMDAFPqAwQCWe0gAwQAWe0lAwQAWe0pMAwDBABZ 7SsDBABZ7S4DBABZ7TcDBAOR/4gDBAOX7fADBAOwaKADBAK5DaADBAK5MtgDAwC8 KwMEAcP2ejAMAwQB1YnmAwQB1YnoMAsDBALViewDAwHViAMEAtWN8AMEANWN9wME BNmU0AMEBdmWIDANBAIAAjAHAwUAKgAeSDANBgkqhkiG9w0BAQsFAAOCAQEAcxYK dErHbEWK3ARJvZb7Zoa0MNWSBNbOaSS9Y0yeAJ6VtowFO7GPsY5iJTFfkFRK/Y9X 6SP0sD1Kj8jANhsBaKl+HLev/mATbjihCVj5q7hhZPGAXATDc6moKDGFR4AgZXO8 M+suWYxo5aOfU1AAH4xwL2lTm35sgR4CEtsRa+TZeopIhAyLJBEW4sI4mh8W28GV zjJ/amTnWERPH5gHnj8BO0g1nFGCH/2ZL63X+FYmmBOtS5c99391azlHU9ligt1+ V0NCu/oi8XjxKPK/9t80pn6sCHeko1vJ1XQGdCPM5lp3iFn8iYPfpkuPoQiJPnej DKPTE/pFBUNahCPVhA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:57:01 2025 by rpki-client