This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/bREOai8G8_NHNyW5egygHYlKbVo.roa File: bREOai8G8_NHNyW5egygHYlKbVo.roa (raw, json) Hash identifier: izOgPPSjI/SOnSj8uGxO2DGjcElibyhDV4NBvODzxHc= Subject key identifier: 6D:11:0E:6A:2F:06:F3:F3:47:37:25:B9:7A:0C:A0:1D:89:4A:6D:5A Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738 Certificate serial: 019A9BD76B6012FA372DD4AD118BA910B3ED Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/bREOai8G8_NHNyW5egygHYlKbVo.roa Signing time: Wed 19 Nov 2025 11:19:37 +0000 ROA not before: Wed 19 Nov 2025 11:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212027 IP address blocks: 37.230.138.0/24 maxlen: 24 45.85.60.0/22 maxlen: 24 45.143.196.0/22 maxlen: 24 45.143.196.0/24 maxlen: 24 45.143.197.0/24 maxlen: 24 45.143.198.0/24 maxlen: 24 45.143.199.0/24 maxlen: 24 81.16.176.0/24 maxlen: 24 81.16.177.0/24 maxlen: 24 91.208.92.0/24 maxlen: 24 185.83.152.0/24 maxlen: 24 185.83.153.0/24 maxlen: 24 185.83.154.0/23 maxlen: 23 185.83.154.0/24 maxlen: 24 185.83.155.0/24 maxlen: 24 185.206.148.0/24 maxlen: 24 185.206.149.0/24 maxlen: 24 185.206.150.0/24 maxlen: 24 185.206.151.0/24 maxlen: 24 188.64.33.0/24 maxlen: 24 194.164.96.0/24 maxlen: 24 194.213.3.0/24 maxlen: 24 213.170.135.0/24 maxlen: 24 2a10:e780::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:d7:6b:60:12:fa:37:2d:d4:ad:11:8b:a9:10:b3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738 Validity Not Before: Nov 19 11:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6d110e6a2f06f3f3473725b97a0ca01d894a6d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:fc:7d:8a:fb:d9:b5:ab:78:f5:96:f3:87: f6:bf:45:58:55:4c:de:18:26:4a:29:69:14:6a:88: f8:bc:87:03:b8:07:f1:25:99:fa:af:91:be:2a:29: 8c:f9:3a:4a:05:d3:2b:df:19:3e:e9:ed:f1:b2:fb: ec:b5:c1:e9:b2:cc:d1:e1:94:b7:07:86:24:ff:9c: 3e:a3:4a:b9:72:65:0e:d8:f2:3d:01:8d:74:74:e1: 77:d4:38:aa:29:90:22:93:02:07:92:66:d6:b1:52: be:a4:11:8a:9e:04:63:1a:cb:b1:27:3c:43:dd:90: 21:cf:fc:30:36:1e:8e:44:5f:a7:ab:65:75:78:4d: b4:d9:e1:95:2a:0c:83:2f:56:3e:bc:c7:8f:17:7a: 2c:f8:af:69:5e:ad:0e:e2:18:9b:85:f9:ca:b9:81: 90:bc:88:c8:be:72:5d:d9:08:38:53:76:df:85:0c: be:1e:7a:62:22:3a:c7:b5:86:1f:a0:57:f5:fc:d2: 61:dd:f9:ee:b8:2c:5b:72:6c:9d:50:5b:5a:83:71: a7:e4:a5:c6:d7:08:bd:1f:91:b1:27:0e:bc:6c:05: fe:7c:3c:b0:1c:fc:b6:0f:7c:25:bb:c5:1b:f5:0b: a7:79:19:93:5a:bb:90:47:17:c1:6a:2f:9b:39:9b: 3e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:11:0E:6A:2F:06:F3:F3:47:37:25:B9:7A:0C:A0:1D:89:4A:6D:5A X509v3 Authority Key Identifier: keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/bREOai8G8_NHNyW5egygHYlKbVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.138.0/24 45.85.60.0/22 45.143.196.0/22 81.16.176.0/23 91.208.92.0/24 185.83.152.0/22 185.206.148.0/22 188.64.33.0/24 194.164.96.0/24 194.213.3.0/24 213.170.135.0/24 IPv6: 2a10:e780::/40 Signature Algorithm: sha256WithRSAEncryption 98:66:1c:3c:b1:86:c4:41:01:63:01:a7:47:c3:7e:2d:b3:dc: d7:a0:35:56:f6:cf:d1:6a:df:a5:88:e5:2e:56:fa:61:c7:b5: 43:19:3d:aa:6d:70:27:df:8d:54:6a:70:48:35:6b:53:1a:41: 48:26:dc:1f:0b:51:1e:d4:20:0c:16:66:37:f2:3a:f3:a2:df: 31:d8:fd:a8:10:7f:e2:7b:83:21:af:5b:cf:f7:50:6b:42:0d: eb:39:9d:dd:94:17:65:36:12:ef:86:77:4d:70:ec:19:9a:b6: c1:85:5c:4f:84:fa:8b:10:d0:83:03:ba:70:22:4d:8d:63:bd: e5:59:73:2f:cd:20:2d:11:a9:62:87:b0:90:f7:69:38:97:29: 2b:97:fc:77:35:f4:58:25:aa:45:8a:d7:49:74:8a:66:ee:60: fd:d5:7a:04:f1:0b:9d:59:e5:f5:11:cb:70:e9:93:25:a0:96: 82:8b:c1:ac:86:18:8f:89:ee:de:64:cd:78:50:94:02:18:b8: 5f:e0:25:03:4b:a1:a8:91:47:00:8a:ff:52:fe:21:03:8c:1a: a4:db:d6:c6:24:42:56:ec:cc:2d:96:61:6e:9c:0d:d1:15:50: 4e:9b:b2:a6:c3:31:dd:f2:cf:96:29:e2:46:da:5f:ee:80:ca: ad:27:6c:87 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZqb12tgEvo3LdStEYupELPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi ZTA3MzgwHhcNMjUxMTE5MTExOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDExMGU2YTJmMDZmM2YzNDczNzI1Yjk3YTBjYTAxZDg5NGE2ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz778fYr72bWrePWW84f2v0VYVUze GCZKKWkUaoj4vIcDuAfxJZn6r5G+KimM+TpKBdMr3xk+6e3xsvvstcHpsszR4ZS3 B4Yk/5w+o0q5cmUO2PI9AY10dOF31DiqKZAikwIHkmbWsVK+pBGKngRjGsuxJzxD 3ZAhz/wwNh6ORF+nq2V1eE202eGVKgyDL1Y+vMePF3os+K9pXq0O4hibhfnKuYGQ vIjIvnJd2Qg4U3bfhQy+HnpiIjrHtYYfoFf1/NJh3fnuuCxbcmydUFtag3Gn5KXG 1wi9H5GxJw68bAX+fDywHPy2D3wlu8Ub9QuneRmTWruQRxfBai+bOZs+zQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFG0RDmovBvPzRzcluXoMoB2JSm1aMB8GA1UdIwQY MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt ZGY4MmZhODk3MzI2LzEvYlJFT2FpOEc4X05ITnlXNWVneWdIWWxLYlZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2 LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBIBAIAATBCAwQAJeaKAwQC LVU8AwQCLY/EAwQBURCwAwQAW9BcAwQCuVOYAwQCuc6UAwQAvEAhAwQAwqRgAwQA wtUDAwQA1aqHMA4EAgACMAgDBgAqEOeAADANBgkqhkiG9w0BAQsFAAOCAQEAmGYc PLGGxEEBYwGnR8N+LbPc16A1VvbP0WrfpYjlLlb6Yce1Qxk9qm1wJ9+NVGpwSDVr UxpBSCbcHwtRHtQgDBZmN/I686LfMdj9qBB/4nuDIa9bz/dQa0IN6zmd3ZQXZTYS 74Z3TXDsGZq2wYVcT4T6ixDQgwO6cCJNjWO95VlzL80gLRGpYoewkPdpOJcpK5f8 dzX0WCWqRYrXSXSKZu5g/dV6BPELnVnl9RHLcOmTJaCWgovBrIYYj4nu3mTNeFCU Ahi4X+AlA0uhqJFHAIr/Uv4hA4wapNvWxiRCVuzMLZZhbpwN0RVQTpuypsMx3fLP liniRtpf7oDKrSdshw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:51:30 2025 by rpki-client