This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/Fre95UHRA9D2UbbFfSDUvU94dzE.roa File: Fre95UHRA9D2UbbFfSDUvU94dzE.roa (raw, json) Hash identifier: UNUyqUAtmwazEhY5O1+3n9uz6h7afBYxLngi7rMmVLw= Subject key identifier: 16:B7:BD:E5:41:D1:03:D0:F6:51:B6:C5:7D:20:D4:BD:4F:78:77:31 Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Certificate serial: 019A9BE9BB174AEEB5B4042BCEA5143D8848 Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/Fre95UHRA9D2UbbFfSDUvU94dzE.roa Signing time: Wed 19 Nov 2025 11:39:37 +0000 ROA not before: Wed 19 Nov 2025 11:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31365 IP address blocks: 85.115.206.0/24 maxlen: 24 85.115.207.0/24 maxlen: 24 85.153.1.0/24 maxlen: 24 85.153.2.0/24 maxlen: 24 85.153.3.0/24 maxlen: 24 85.153.4.0/24 maxlen: 24 85.153.5.0/24 maxlen: 24 85.153.6.0/24 maxlen: 24 85.153.7.0/24 maxlen: 24 85.153.8.0/24 maxlen: 24 85.153.9.0/24 maxlen: 24 85.153.10.0/24 maxlen: 24 85.153.33.0/24 maxlen: 24 85.153.43.0/24 maxlen: 24 85.153.47.0/24 maxlen: 24 85.153.56.0/24 maxlen: 24 85.153.58.0/24 maxlen: 24 85.153.65.0/24 maxlen: 24 85.153.74.0/24 maxlen: 24 85.153.75.0/24 maxlen: 24 85.153.76.0/22 maxlen: 22 85.153.80.0/24 maxlen: 24 85.153.93.0/24 maxlen: 24 85.153.112.0/24 maxlen: 24 85.153.115.0/24 maxlen: 24 85.153.116.0/24 maxlen: 24 85.153.117.0/24 maxlen: 24 85.153.118.0/24 maxlen: 24 85.153.120.0/24 maxlen: 24 85.153.121.0/24 maxlen: 24 85.153.122.0/24 maxlen: 24 85.153.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:e9:bb:17:4a:ee:b5:b4:04:2b:ce:a5:14:3d:88:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Validity Not Before: Nov 19 11:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=16b7bde541d103d0f651b6c57d20d4bd4f787731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:de:fa:42:7a:03:97:f6:f5:72:1f:e0:27:a2: ad:c9:b0:eb:19:c1:fb:0a:28:ed:39:39:c1:37:05: 13:d7:ad:9a:ae:28:9b:cd:f9:1e:d0:db:a1:42:02: f0:85:f0:35:0f:46:46:b0:d1:80:d1:48:5c:f1:97: a8:62:33:4c:06:8d:a0:a5:4a:e8:a3:e4:76:7f:5a: a1:9f:67:d9:58:ab:20:b6:bc:4f:57:98:34:91:24: 85:cf:1e:b9:a2:f2:72:62:66:b2:18:65:07:89:5c: 80:89:ae:14:ca:ba:d5:7d:73:4c:7f:35:f1:ce:40: 7d:47:45:a8:39:04:ca:28:1c:64:cd:4b:3f:b4:d5: 6c:4d:bd:0d:16:75:8b:f0:27:52:c2:03:89:df:d9: fb:61:5c:41:9a:70:8b:e2:8d:63:74:c5:88:82:40: b9:ef:39:38:3f:6c:1a:5a:a7:f2:5a:58:19:42:88: b7:9e:a1:91:84:be:b3:e5:e0:44:12:4f:0e:8b:59: ba:c4:56:b5:69:5e:e7:dd:9f:8d:e4:28:29:ab:e8: c1:7d:84:30:c6:65:d5:70:a9:68:73:ee:29:21:0c: ab:a5:e6:96:fc:e2:c7:a1:34:0f:e8:30:c2:1e:05: 9e:d0:03:71:1d:e1:62:55:5a:34:f6:45:b7:8c:7d: b8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B7:BD:E5:41:D1:03:D0:F6:51:B6:C5:7D:20:D4:BD:4F:78:77:31 X509v3 Authority Key Identifier: keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/Fre95UHRA9D2UbbFfSDUvU94dzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.115.206.0/23 85.153.1.0-85.153.10.255 85.153.33.0/24 85.153.43.0/24 85.153.47.0/24 85.153.56.0/24 85.153.58.0/24 85.153.65.0/24 85.153.74.0-85.153.80.255 85.153.93.0/24 85.153.112.0/24 85.153.115.0-85.153.118.255 85.153.120.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:4e:cc:9d:81:4e:15:2f:26:0e:49:d3:90:b5:0f:88:04:b8: d4:5c:77:97:6b:51:59:49:a9:ff:6d:0d:10:d6:4e:d2:b8:cf: e9:9c:c7:64:08:97:2b:bf:e0:20:7a:30:14:c7:d4:a3:43:b3: 62:8b:8c:2d:3c:74:04:4a:98:bc:ab:98:a5:67:09:14:c6:ac: 06:ee:95:56:b5:1f:29:15:c5:9c:81:84:1a:30:32:01:b2:32: 13:70:4e:7b:07:86:17:7c:6b:b7:a3:f8:23:1b:07:e9:6b:5d: aa:b9:f6:f9:14:18:d5:ed:e9:c4:7b:50:4c:11:10:ad:e8:3d: d6:f0:fe:90:ae:50:44:a2:ed:0b:53:d3:8f:19:25:04:c8:81: 1f:a9:1c:ad:1f:d1:d7:e7:73:6a:2a:b6:49:ab:c2:f3:27:a8: be:9b:7d:95:bc:9b:e8:ef:b8:e0:01:0e:8c:96:98:f1:01:fc: 41:ff:c8:0f:58:45:87:c6:46:a2:44:c6:b2:2e:cb:7a:18:a2: 33:42:c4:ab:3a:e9:80:1d:e2:88:fa:e5:00:eb:aa:8a:06:88: fc:d7:d4:10:8f:2d:2d:65:99:6f:8a:34:98:bf:9c:99:eb:14: 04:b8:44:63:7c:4d:14:d2:9b:b9:e7:7b:3f:6d:61:60:92:62: 46:81:54:86 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZqb6bsXSu61tAQrzqUUPYhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYTE4NWQwZWIwY2E3ODExYzU4NjQyNWRlMGU5NjBlMWNm ZWI2MWIwHhcNMjUxMTE5MTEzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmI3YmRlNTQxZDEwM2QwZjY1MWI2YzU3ZDIwZDRiZDRmNzg3NzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+N76QnoDl/b1ch/gJ6KtybDrGcH7 CijtOTnBNwUT162ariibzfke0NuhQgLwhfA1D0ZGsNGA0Uhc8ZeoYjNMBo2gpUro o+R2f1qhn2fZWKsgtrxPV5g0kSSFzx65ovJyYmayGGUHiVyAia4UyrrVfXNMfzXx zkB9R0WoOQTKKBxkzUs/tNVsTb0NFnWL8CdSwgOJ39n7YVxBmnCL4o1jdMWIgkC5 7zk4P2waWqfyWlgZQoi3nqGRhL6z5eBEEk8Oi1m6xFa1aV7n3Z+N5Cgpq+jBfYQw xmXVcKloc+4pIQyrpeaW/OLHoTQP6DDCHgWe0ANxHeFiVVo09kW3jH24WQIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFBa3veVB0QPQ9lG2xX0g1L1PeHcxMB8GA1UdIwQY MBaAFDGhhdDrDKeBHFhkJd4Olg4c/rYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUt MWRjYzg2YzExZTc0LzEvRnJlOTVVSFJBOUQyVWJiRmZTRFV2VTk0ZHpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUtMWRjYzg2YzExZTc0 LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQBVXPOMAwD BABVmQEDBABVmQoDBABVmSEDBABVmSsDBABVmS8DBABVmTgDBABVmToDBABVmUEw DAMEAVWZSgMEAFWZUAMEAFWZXQMEAFWZcDAMAwQAVZlzAwQAVZl2AwQCVZl4MA0G CSqGSIb3DQEBCwUAA4IBAQCfTsydgU4VLyYOSdOQtQ+IBLjUXHeXa1FZSan/bQ0Q 1k7SuM/pnMdkCJcrv+AgejAUx9SjQ7Nii4wtPHQESpi8q5ilZwkUxqwG7pVWtR8p FcWcgYQaMDIBsjITcE57B4YXfGu3o/gjGwfpa12qufb5FBjV7enEe1BMERCt6D3W 8P6QrlBEou0LU9OPGSUEyIEfqRytH9HX53NqKrZJq8LzJ6i+m32VvJvo77jgAQ6M lpjxAfxB/8gPWEWHxkaiRMayLst6GKIzQsSrOumAHeKI+uUA66qKBoj819QQjy0t ZZlvijSYv5yZ6xQEuERjfE0U0pu553s/bWFgkmJGgVSG -----END CERTIFICATE-----Generated at Sun Dec 7 00:11:02 2025 by rpki-client