This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jZX2aXCDRCRJuw6L_Nu1ehDAWx8.roa File: jZX2aXCDRCRJuw6L_Nu1ehDAWx8.roa (raw, json) Hash identifier: +OWBBMyQi89jXqO11c1LITk1tf2RqOQYDik2gpnQheA= Subject key identifier: 8D:95:F6:69:70:83:44:24:49:BB:0E:8B:FC:DB:B5:7A:10:C0:5B:1F Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019ABBEC4818E8EF76637AE803E71E9210FA Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jZX2aXCDRCRJuw6L_Nu1ehDAWx8.roa Signing time: Tue 25 Nov 2025 16:50:15 +0000 ROA not before: Tue 25 Nov 2025 16:50:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58272 IP address blocks: 37.18.0.0/24 maxlen: 24 37.18.23.0/24 maxlen: 24 37.18.25.0/24 maxlen: 24 37.18.60.0/24 maxlen: 24 37.18.63.0/24 maxlen: 24 37.18.78.0/24 maxlen: 24 37.18.82.0/24 maxlen: 24 37.18.103.0/24 maxlen: 24 37.18.106.0/24 maxlen: 24 37.18.125.0/24 maxlen: 24 37.18.126.0/24 maxlen: 24 37.230.130.0/24 maxlen: 24 37.230.132.0/24 maxlen: 24 37.230.134.0/24 maxlen: 24 37.230.135.0/24 maxlen: 24 37.230.140.0/24 maxlen: 24 37.230.145.0/24 maxlen: 24 37.230.151.0/24 maxlen: 24 37.230.163.0/24 maxlen: 24 37.230.176.0/24 maxlen: 24 37.230.177.0/24 maxlen: 24 37.230.178.0/24 maxlen: 24 37.230.182.0/24 maxlen: 24 37.230.183.0/24 maxlen: 24 37.230.187.0/24 maxlen: 24 37.230.200.0/24 maxlen: 24 37.230.208.0/24 maxlen: 24 37.230.226.0/24 maxlen: 24 37.230.227.0/24 maxlen: 24 37.230.230.0/24 maxlen: 24 37.230.231.0/24 maxlen: 24 37.230.238.0/24 maxlen: 24 37.230.254.0/24 maxlen: 24 37.230.255.0/24 maxlen: 24 46.243.138.0/24 maxlen: 24 46.243.139.0/24 maxlen: 24 46.243.140.0/24 maxlen: 24 46.243.148.0/24 maxlen: 24 46.243.149.0/24 maxlen: 24 46.243.163.0/24 maxlen: 24 46.243.214.0/24 maxlen: 24 46.243.215.0/24 maxlen: 24 46.243.220.0/24 maxlen: 24 46.243.221.0/24 maxlen: 24 46.243.222.0/24 maxlen: 24 46.243.223.0/24 maxlen: 24 46.243.224.0/24 maxlen: 24 46.243.225.0/24 maxlen: 24 46.243.236.0/24 maxlen: 24 46.243.237.0/24 maxlen: 24 46.243.238.0/24 maxlen: 24 46.243.239.0/24 maxlen: 24 46.243.240.0/24 maxlen: 24 46.243.241.0/24 maxlen: 24 46.243.242.0/24 maxlen: 24 46.243.243.0/24 maxlen: 24 46.243.246.0/23 maxlen: 23 46.243.246.0/24 maxlen: 24 46.243.247.0/24 maxlen: 24 46.243.248.0/24 maxlen: 24 46.243.249.0/24 maxlen: 24 46.243.250.0/24 maxlen: 24 46.243.251.0/24 maxlen: 24 128.0.71.0/24 maxlen: 24 141.101.132.0/24 maxlen: 24 141.101.133.0/24 maxlen: 24 141.101.134.0/24 maxlen: 24 141.101.135.0/24 maxlen: 24 141.101.136.0/24 maxlen: 24 141.101.138.0/23 maxlen: 23 141.101.143.0/24 maxlen: 24 141.101.144.0/24 maxlen: 24 141.101.145.0/24 maxlen: 24 141.101.146.0/24 maxlen: 24 141.101.147.0/24 maxlen: 24 141.101.148.0/24 maxlen: 24 141.101.149.0/24 maxlen: 24 141.101.150.0/24 maxlen: 24 141.101.153.0/24 maxlen: 24 141.101.154.0/24 maxlen: 24 141.101.155.0/24 maxlen: 24 141.101.156.0/24 maxlen: 24 141.101.157.0/24 maxlen: 24 141.101.158.0/24 maxlen: 24 141.101.159.0/24 maxlen: 24 141.101.160.0/24 maxlen: 24 141.101.161.0/24 maxlen: 24 141.101.162.0/24 maxlen: 24 141.101.163.0/24 maxlen: 24 141.101.164.0/24 maxlen: 24 141.101.165.0/24 maxlen: 24 141.101.166.0/24 maxlen: 24 141.101.167.0/24 maxlen: 24 141.101.168.0/24 maxlen: 24 141.101.169.0/24 maxlen: 24 141.101.170.0/24 maxlen: 24 141.101.171.0/24 maxlen: 24 141.101.172.0/24 maxlen: 24 141.101.173.0/24 maxlen: 24 141.101.174.0/24 maxlen: 24 141.101.179.0/24 maxlen: 24 141.101.189.0/24 maxlen: 24 141.101.190.0/24 maxlen: 24 141.101.191.0/24 maxlen: 24 141.101.198.0/24 maxlen: 24 141.101.209.0/24 maxlen: 24 141.101.216.0/24 maxlen: 24 141.101.230.0/24 maxlen: 24 141.101.233.0/24 maxlen: 24 141.101.235.0/24 maxlen: 24 141.101.237.0/24 maxlen: 24 141.101.238.0/24 maxlen: 24 141.101.242.0/24 maxlen: 24 141.101.245.0/24 maxlen: 24 141.101.252.0/24 maxlen: 24 141.101.253.0/24 maxlen: 24 141.101.254.0/24 maxlen: 24 141.101.255.0/24 maxlen: 24 178.170.136.0/24 maxlen: 24 178.170.137.0/24 maxlen: 24 178.170.138.0/24 maxlen: 24 178.170.139.0/24 maxlen: 24 178.170.140.0/24 maxlen: 24 178.170.141.0/24 maxlen: 24 178.170.142.0/24 maxlen: 24 178.170.144.0/24 maxlen: 24 178.170.145.0/24 maxlen: 24 178.170.146.0/24 maxlen: 24 178.170.172.0/24 maxlen: 24 178.170.187.0/24 maxlen: 24 178.170.188.0/24 maxlen: 24 185.4.148.0/24 maxlen: 24 185.4.149.0/24 maxlen: 24 185.4.150.0/24 maxlen: 24 185.4.151.0/24 maxlen: 24 188.72.80.0/24 maxlen: 24 188.72.81.0/24 maxlen: 24 188.72.82.0/24 maxlen: 24 188.72.83.0/24 maxlen: 24 188.72.84.0/24 maxlen: 24 188.72.85.0/24 maxlen: 24 188.72.86.0/24 maxlen: 24 188.72.87.0/24 maxlen: 24 188.72.89.0/24 maxlen: 24 188.72.95.0/24 maxlen: 24 188.72.97.0/24 maxlen: 24 188.72.98.0/24 maxlen: 24 188.72.101.0/24 maxlen: 24 188.72.102.0/24 maxlen: 24 188.72.114.0/24 maxlen: 24 188.72.115.0/24 maxlen: 24 188.72.116.0/24 maxlen: 24 188.72.119.0/24 maxlen: 24 188.72.124.0/24 maxlen: 24 188.72.125.0/24 maxlen: 24 217.150.88.0/24 maxlen: 24 217.150.89.0/24 maxlen: 24 217.150.90.0/24 maxlen: 24 217.150.91.0/24 maxlen: 24 217.150.92.0/24 maxlen: 24 217.150.93.0/24 maxlen: 24 217.150.94.0/24 maxlen: 24 217.150.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:ec:48:18:e8:ef:76:63:7a:e8:03:e7:1e:92:10:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Nov 25 16:50:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d95f6697083442449bb0e8bfcdbb57a10c05b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9f:7f:11:aa:c4:58:ad:a9:1d:8b:3b:cd:b4: 20:1a:f2:c5:b5:57:80:4f:ae:da:e8:22:3c:5d:bc: 85:42:5a:9c:13:dd:99:05:5a:9b:0e:fe:db:5b:5b: d7:22:cd:6a:6a:37:d8:d6:05:d2:20:d3:46:ca:63: 67:02:d5:d6:99:2a:be:c3:ba:8b:4f:5c:fc:d4:c5: d9:2e:76:ad:95:57:d0:41:c9:8e:d7:f9:10:c2:9e: 94:88:28:27:49:14:bb:ea:9a:3f:c8:1d:e1:69:71: 61:f2:de:3d:ac:38:42:cc:f4:94:b0:77:5f:d6:95: ec:4e:ea:1e:d0:30:3a:c4:08:20:e8:9a:8a:19:01: 57:27:41:dd:1d:df:56:c7:19:40:b2:52:b2:f5:33: 54:c3:57:00:0b:6b:44:b7:ef:c8:f9:1c:62:29:bc: f3:bb:72:fe:d5:86:2e:7b:06:d7:25:57:ca:d7:bd: 04:d3:e4:ad:92:3f:91:5a:31:79:0d:92:5f:31:cc: dc:26:89:99:71:93:00:69:ff:8b:64:82:1d:89:be: 4e:c0:72:bc:21:c6:b4:ee:ec:00:b7:39:be:10:35: 3e:29:87:81:aa:71:9f:11:61:fb:ea:45:51:0c:4c: 7c:da:b8:bc:88:7b:58:2d:a2:f0:00:fb:07:1c:e2: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:95:F6:69:70:83:44:24:49:BB:0E:8B:FC:DB:B5:7A:10:C0:5B:1F X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/jZX2aXCDRCRJuw6L_Nu1ehDAWx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.0.0/24 37.18.23.0/24 37.18.25.0/24 37.18.60.0/24 37.18.63.0/24 37.18.78.0/24 37.18.82.0/24 37.18.103.0/24 37.18.106.0/24 37.18.125.0-37.18.126.255 37.230.130.0/24 37.230.132.0/24 37.230.134.0/23 37.230.140.0/24 37.230.145.0/24 37.230.151.0/24 37.230.163.0/24 37.230.176.0-37.230.178.255 37.230.182.0/23 37.230.187.0/24 37.230.200.0/24 37.230.208.0/24 37.230.226.0/23 37.230.230.0/23 37.230.238.0/24 37.230.254.0/23 46.243.138.0-46.243.140.255 46.243.148.0/23 46.243.163.0/24 46.243.214.0/23 46.243.220.0-46.243.225.255 46.243.236.0-46.243.243.255 46.243.246.0-46.243.251.255 128.0.71.0/24 141.101.132.0-141.101.136.255 141.101.138.0/23 141.101.143.0-141.101.150.255 141.101.153.0-141.101.174.255 141.101.179.0/24 141.101.189.0-141.101.191.255 141.101.198.0/24 141.101.209.0/24 141.101.216.0/24 141.101.230.0/24 141.101.233.0/24 141.101.235.0/24 141.101.237.0-141.101.238.255 141.101.242.0/24 141.101.245.0/24 141.101.252.0/22 178.170.136.0-178.170.142.255 178.170.144.0-178.170.146.255 178.170.172.0/24 178.170.187.0-178.170.188.255 185.4.148.0/22 188.72.80.0/21 188.72.89.0/24 188.72.95.0/24 188.72.97.0-188.72.98.255 188.72.101.0-188.72.102.255 188.72.114.0-188.72.116.255 188.72.119.0/24 188.72.124.0/23 217.150.88.0/21 Signature Algorithm: sha256WithRSAEncryption b4:e5:32:5b:6d:4c:3e:b4:40:91:4a:c9:87:25:50:7f:e2:17: 47:69:b9:6c:db:4c:f7:10:0e:ed:ef:7c:39:8f:32:1c:28:79: 38:68:57:1b:7b:cf:bf:47:4f:ee:5a:15:ed:d8:f7:ab:e4:86: 80:51:7a:7a:82:9b:37:3f:79:95:40:d3:51:1b:80:70:7a:67: aa:d4:5d:33:9b:c3:71:e9:05:42:1d:ba:fd:f4:77:87:a0:e3: 97:bd:24:00:b2:97:d7:f7:1d:93:d0:ed:50:97:27:39:37:1b: 8e:62:90:d6:02:32:6e:86:3e:c9:36:c4:d9:fc:38:6a:3d:ca: 88:64:68:a4:a4:6e:8e:cd:21:d9:f4:7a:ab:f1:cb:32:78:0e: ee:82:79:67:a4:70:96:fe:bb:7c:6f:2c:5c:24:75:ef:63:11: 75:85:1b:dc:38:7f:45:7f:03:fd:53:7e:2c:1a:a6:56:9e:f9: 11:27:b1:ad:f9:f7:c3:90:78:d5:c5:50:32:c4:5b:26:96:83: 6a:02:98:ae:be:50:73:8d:d1:27:6f:44:02:e7:b8:57:19:6b: c5:1c:46:bf:4d:c0:20:44:dd:08:38:88:20:3b:0b:78:3e:35: bf:c2:74:fc:b8:d9:fb:9d:1f:a8:79:75:df:a2:73:51:70:40: 06:ad:24:2a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgISAZq77EgY6O92Y3roA+cekhD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjUxMTI1MTY1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDk1ZjY2OTcwODM0NDI0NDliYjBlOGJmY2RiYjU3YTEwYzA1YjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J9/EarEWK2pHYs7zbQgGvLFtVeA T67a6CI8XbyFQlqcE92ZBVqbDv7bW1vXIs1qajfY1gXSINNGymNnAtXWmSq+w7qL T1z81MXZLnatlVfQQcmO1/kQwp6UiCgnSRS76po/yB3haXFh8t49rDhCzPSUsHdf 1pXsTuoe0DA6xAgg6JqKGQFXJ0HdHd9WxxlAslKy9TNUw1cAC2tEt+/I+RxiKbzz u3L+1YYuewbXJVfK170E0+Stkj+RWjF5DZJfMczcJomZcZMAaf+LZIIdib5OwHK8 Ica07uwAtzm+EDU+KYeBqnGfEWH76kVRDEx82ri8iHtYLaLwAPsHHOLC+QIDAQAB o4IEFTCCBBEwHQYDVR0OBBYEFI2V9mlwg0QkSbsOi/zbtXoQwFsfMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvalpYMmFYQ0RSQ1JKdXc2TF9OdTFlaERBV3g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICKQYIKwYBBQUHAQcBAf8EggIYMIICFDCCAhAEAgABMIIC CAMEACUSAAMEACUSFwMEACUSGQMEACUSPAMEACUSPwMEACUSTgMEACUSUgMEACUS ZwMEACUSajAMAwQAJRJ9AwQAJRJ+AwQAJeaCAwQAJeaEAwQBJeaGAwQAJeaMAwQA JeaRAwQAJeaXAwQAJeajMAwDBAQl5rADBAAl5rIDBAEl5rYDBAAl5rsDBAAl5sgD BAAl5tADBAEl5uIDBAEl5uYDBAAl5u4DBAEl5v4wDAMEAS7zigMEAC7zjAMEAS7z lAMEAC7zowMEAS7z1jAMAwQCLvPcAwQBLvPgMAwDBAIu8+wDBAIu8/AwDAMEAS7z 9gMEAi7z+AMEAIAARzAMAwQCjWWEAwQAjWWIAwQBjWWKMAwDBACNZY8DBACNZZYw DAMEAI1lmQMEAI1lrgMEAI1lszAMAwQAjWW9AwQGjWWAAwQAjWXGAwQAjWXRAwQA jWXYAwQAjWXmAwQAjWXpAwQAjWXrMAwDBACNZe0DBACNZe4DBACNZfIDBACNZfUD BAKNZfwwDAMEA7KqiAMEALKqjjAMAwQEsqqQAwQAsqqSAwQAsqqsMAwDBACyqrsD BACyqrwDBAK5BJQDBAO8SFADBAC8SFkDBAC8SF8wDAMEALxIYQMEALxIYjAMAwQA vEhlAwQAvEhmMAwDBAG8SHIDBAC8SHQDBAC8SHcDBAG8SHwDBAPZllgwDQYJKoZI hvcNAQELBQADggEBALTlMlttTD60QJFKyYclUH/iF0dpuWzbTPcQDu3vfDmPMhwo eThoVxt7z79HT+5aFe3Y96vkhoBRenqCmzc/eZVA01EbgHB6Z6rUXTObw3HpBUId uv30d4eg45e9JACyl9f3HZPQ7VCXJzk3G45ikNYCMm6GPsk2xNn8OGo9yohkaKSk bo7NIdn0eqvxyzJ4Du6CeWekcJb+u3xvLFwkde9jEXWFG9w4f0V/A/1Tfiwaplae +REnsa3598OQeNXFUDLEWyaWg2oCmK6+UHON0SdvRALnuFcZa8UcRr9NwCBE3Qg4 iCA7C3g+Nb/CdPy42fudH6h5dd+ic1FwQAatJCo= -----END CERTIFICATE-----Generated at Sat Dec 6 13:12:08 2025 by rpki-client