This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Vv8sW9h9fuZEBHzAhIxxe1_0PmY.roa File: Vv8sW9h9fuZEBHzAhIxxe1_0PmY.roa (raw, json) Hash identifier: U6xV8R9D7xmcJmK99o/G73F5CUxiCDhdO4EnO8VlEnU= Subject key identifier: 56:FF:2C:5B:D8:7D:7E:E6:44:04:7C:C0:84:8C:71:7B:5F:F4:3E:66 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019AE397D01B6766A7BE6CB051A6127BD180 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Vv8sW9h9fuZEBHzAhIxxe1_0PmY.roa Signing time: Wed 03 Dec 2025 09:42:48 +0000 ROA not before: Wed 03 Dec 2025 09:42:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5483 IP address blocks: 5.38.128.0/17 maxlen: 17 5.187.128.0/17 maxlen: 17 31.46.0.0/16 maxlen: 16 31.46.19.0/24 maxlen: 24 37.76.0.0/17 maxlen: 17 46.107.0.0/16 maxlen: 16 46.107.14.0/24 maxlen: 24 46.107.15.0/24 maxlen: 24 46.107.224.0/24 maxlen: 24 46.139.0.0/16 maxlen: 16 62.201.64.0/18 maxlen: 18 78.92.0.0/16 maxlen: 16 79.121.100.0/22 maxlen: 22 79.122.0.0/17 maxlen: 17 80.249.160.0/20 maxlen: 24 80.249.164.0/24 maxlen: 24 80.249.167.0/24 maxlen: 24 80.249.168.0/24 maxlen: 24 80.249.170.0/24 maxlen: 24 80.249.171.0/24 maxlen: 24 80.249.172.0/24 maxlen: 24 80.249.173.0/24 maxlen: 24 80.249.174.0/24 maxlen: 24 81.182.0.0/15 maxlen: 15 84.0.0.0/14 maxlen: 14 84.1.102.0/24 maxlen: 24 84.1.226.0/24 maxlen: 24 84.1.236.0/24 maxlen: 24 84.2.24.0/24 maxlen: 24 84.2.35.0/24 maxlen: 24 84.2.39.0/24 maxlen: 24 84.2.42.0/23 maxlen: 24 84.2.50.0/24 maxlen: 24 84.2.51.0/24 maxlen: 24 84.2.52.0/24 maxlen: 24 84.2.54.0/24 maxlen: 24 84.2.79.0/24 maxlen: 24 84.2.226.0/23 maxlen: 24 84.2.227.0/24 maxlen: 24 84.2.228.0/24 maxlen: 24 84.2.230.0/24 maxlen: 24 84.2.231.0/24 maxlen: 24 86.59.128.0/17 maxlen: 17 87.101.112.0/20 maxlen: 20 91.120.0.0/16 maxlen: 16 91.120.16.0/22 maxlen: 22 91.120.27.0/24 maxlen: 24 91.120.57.0/24 maxlen: 24 91.120.64.0/18 maxlen: 18 91.120.128.0/18 maxlen: 18 93.89.160.0/20 maxlen: 20 94.27.128.0/17 maxlen: 17 134.255.0.0/17 maxlen: 17 145.236.0.0/16 maxlen: 16 145.236.230.0/24 maxlen: 24 149.200.0.0/17 maxlen: 17 185.55.12.0/22 maxlen: 22 185.65.8.0/22 maxlen: 22 188.6.0.0/16 maxlen: 16 188.36.0.0/16 maxlen: 16 188.36.248.0/24 maxlen: 24 188.156.0.0/15 maxlen: 15 194.38.96.0/19 maxlen: 19 194.38.96.0/24 maxlen: 24 194.38.104.0/24 maxlen: 24 194.88.32.0/19 maxlen: 19 194.149.0.0/19 maxlen: 19 194.149.32.0/19 maxlen: 19 194.149.36.0/24 maxlen: 24 194.176.224.0/19 maxlen: 19 195.56.0.0/16 maxlen: 16 195.56.0.0/24 maxlen: 24 195.70.32.0/19 maxlen: 19 195.228.0.0/16 maxlen: 16 195.228.4.0/24 maxlen: 24 195.228.22.0/24 maxlen: 24 195.228.24.0/24 maxlen: 24 195.228.34.0/24 maxlen: 24 195.228.45.0/24 maxlen: 24 195.228.75.0/24 maxlen: 24 195.228.76.0/24 maxlen: 24 195.228.85.0/24 maxlen: 24 195.228.86.0/24 maxlen: 24 195.228.87.0/24 maxlen: 24 195.228.112.0/24 maxlen: 24 195.228.135.0/24 maxlen: 24 195.228.152.0/24 maxlen: 24 195.228.155.0/24 maxlen: 24 195.228.156.0/24 maxlen: 24 195.228.224.0/23 maxlen: 23 195.228.240.0/24 maxlen: 24 195.228.244.0/24 maxlen: 24 195.228.245.0/24 maxlen: 24 195.228.247.0/24 maxlen: 24 195.228.248.0/24 maxlen: 24 195.228.249.0/24 maxlen: 24 195.228.250.0/24 maxlen: 24 195.228.251.0/24 maxlen: 24 195.228.253.0/24 maxlen: 24 195.228.254.0/24 maxlen: 24 195.228.255.0/24 maxlen: 24 212.51.64.0/18 maxlen: 18 212.51.79.0/24 maxlen: 24 212.51.91.0/24 maxlen: 24 212.51.110.0/24 maxlen: 24 212.51.125.0/24 maxlen: 24 213.178.96.0/19 maxlen: 19 217.20.128.0/20 maxlen: 20 217.65.96.0/19 maxlen: 19 217.65.96.0/23 maxlen: 23 217.116.32.0/20 maxlen: 20 2001:4c48::/29 maxlen: 29 2001:4c48::/30 maxlen: 30 2001:4c48::/32 maxlen: 32 2001:4c48::/46 maxlen: 48 2001:4c4c::/30 maxlen: 30 2a00:10d0::/32 maxlen: 32 2a00:1110::/29 maxlen: 29 2a02:738::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:97:d0:1b:67:66:a7:be:6c:b0:51:a6:12:7b:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Dec 3 09:42:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=56ff2c5bd87d7ee644047cc0848c717b5ff43e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:4d:5c:07:7e:33:98:66:32:02:2c:a9:3b: bf:5d:db:9f:f3:46:34:47:53:8b:7c:bb:38:7b:4e: 79:71:64:d1:71:27:f5:75:1e:c6:e7:95:e3:e3:eb: 62:16:6d:e0:c2:ad:c8:cd:f1:15:5f:2d:d8:65:40: 95:ca:2f:26:22:0d:6f:80:3e:43:40:5f:5f:64:d8: b3:da:20:00:45:6b:31:3e:0b:76:01:86:ca:3f:d2: 92:ee:8f:9c:c2:d1:d5:a4:5b:74:b7:96:15:77:fa: f8:aa:f1:bc:0c:9d:04:d2:25:3b:0d:a4:fa:5c:9d: f2:81:53:5f:90:87:06:43:f3:2f:6d:84:ac:e7:f9: b1:55:70:c6:ec:24:4c:2e:79:d8:c2:fb:98:05:5b: 72:cf:9f:a1:e1:6a:bd:46:32:07:b3:47:f5:da:37: 7f:83:6a:4c:d6:09:7d:92:b1:8e:23:73:7b:1e:f5: d6:9b:55:32:f5:07:03:99:9f:7c:9e:84:b9:14:ba: d1:18:34:e7:fc:18:c2:6c:23:1d:44:b6:32:9d:70: 5b:03:e7:d0:52:45:56:3d:e1:ed:eb:4c:b3:9e:b1: 57:1f:f4:20:ab:cf:24:00:fe:73:08:0b:c2:8d:08: 72:2e:bc:9c:05:b8:d4:db:19:68:ae:e9:87:d7:17: 7a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FF:2C:5B:D8:7D:7E:E6:44:04:7C:C0:84:8C:71:7B:5F:F4:3E:66 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Vv8sW9h9fuZEBHzAhIxxe1_0PmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.38.128.0/17 5.187.128.0/17 31.46.0.0/16 37.76.0.0/17 46.107.0.0/16 46.139.0.0/16 62.201.64.0/18 78.92.0.0/16 79.121.100.0/22 79.122.0.0/17 80.249.160.0/20 81.182.0.0/15 84.0.0.0/14 86.59.128.0/17 87.101.112.0/20 91.120.0.0/16 93.89.160.0/20 94.27.128.0/17 134.255.0.0/17 145.236.0.0/16 149.200.0.0/17 185.55.12.0/22 185.65.8.0/22 188.6.0.0/16 188.36.0.0/16 188.156.0.0/15 194.38.96.0/19 194.88.32.0/19 194.149.0.0/18 194.176.224.0/19 195.56.0.0/16 195.70.32.0/19 195.228.0.0/16 212.51.64.0/18 213.178.96.0/19 217.20.128.0/20 217.65.96.0/19 217.116.32.0/20 IPv6: 2001:4c48::/29 2a00:10d0::/32 2a00:1110::/29 2a02:738::/32 Signature Algorithm: sha256WithRSAEncryption 83:34:7c:55:1f:d8:fe:dc:ae:82:d8:e2:ea:0f:35:3f:be:f0: 14:7b:ae:e8:97:b8:d4:ab:9e:b5:0e:0e:ac:5b:f2:f8:59:07: 5b:01:91:7b:41:22:b6:50:50:2e:94:e4:1b:13:7d:c6:1d:2e: 17:3e:93:af:35:48:8f:cc:6d:1b:80:7f:d6:b0:e9:70:93:aa: ac:fc:55:fb:5b:a8:e0:63:e9:86:17:ae:ad:f8:f9:b1:5f:6c: ac:9d:04:16:ee:4f:6b:87:bb:db:16:0b:43:29:fc:14:77:3e: 5f:b9:67:d3:59:98:c4:51:99:2a:d7:f0:13:aa:95:c5:63:69: 8d:05:35:67:29:ca:08:ff:7d:5e:6c:92:53:ec:74:cb:f5:76: 27:b6:49:40:ef:ac:a6:a4:77:bd:20:85:aa:0e:8a:2e:ce:9a: 5d:29:e2:49:8f:91:20:50:28:bf:e7:94:8b:04:25:bf:a5:4f: cd:8a:69:ee:91:a7:92:79:ea:61:f2:78:d9:a4:4a:3f:ba:84: bf:38:ed:4d:9e:ee:18:48:1a:68:24:ba:d3:19:98:d6:5b:82: ac:0b:ca:ba:4d:e3:12:da:99:ce:51:68:00:f2:81:23:03:3b: 62:e3:1a:29:9e:d4:90:ee:e8:82:1c:89:e9:7e:ce:7b:8e:52: 73:9f:e2:27 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgISAZrjl9AbZ2anvmywUaYSe9GAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjUxMjAzMDk0MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmZmMmM1YmQ4N2Q3ZWU2NDQwNDdjYzA4NDhjNzE3YjVmZjQzZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42dNXAd+M5hmMgIsqTu/Xduf80Y0 R1OLfLs4e055cWTRcSf1dR7G55Xj4+tiFm3gwq3IzfEVXy3YZUCVyi8mIg1vgD5D QF9fZNiz2iAARWsxPgt2AYbKP9KS7o+cwtHVpFt0t5YVd/r4qvG8DJ0E0iU7DaT6 XJ3ygVNfkIcGQ/MvbYSs5/mxVXDG7CRMLnnYwvuYBVtyz5+h4Wq9RjIHs0f12jd/ g2pM1gl9krGOI3N7HvXWm1Uy9QcDmZ98noS5FLrRGDTn/BjCbCMdRLYynXBbA+fQ UkVWPeHt60yznrFXH/Qgq88kAP5zCAvCjQhyLrycBbjU2xlorumH1xd6AwIDAQAB o4IDBjCCAwIwHQYDVR0OBBYEFFb/LFvYfX7mRAR8wISMcXtf9D5mMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvVnY4c1c5aDlmdVpFQkh6QWhJeHhlMV8wUG1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBGgYIKwYBBQUHAQcBAf8EggEJMIIBBTCB3gQCAAEwgdcD BAcFJoADBAcFu4ADAwAfLgMEByVMAAMDAC5rAwMALosDBAY+yUADAwBOXAMEAk95 ZAMEB096AAMEBFD5oAMDAVG2AwMCVAADBAdWO4ADBARXZXADAwBbeAMEBF1ZoAME B14bgAMEB4b/AAMDAJHsAwQHlcgAAwQCuTcMAwQCuUEIAwMAvAYDAwC8JAMDAbyc AwQFwiZgAwQFwlggAwQGwpUAAwQFwrDgAwMAwzgDBAXDRiADAwDD5AMEBtQzQAME BdWyYAMEBNkUgAMEBdlBYAMEBNl0IDAiBAIAAjAcAwUDIAFMSAMFACoAENADBQMq ABEQAwUAKgIHODANBgkqhkiG9w0BAQsFAAOCAQEAgzR8VR/Y/tyugtji6g81P77w FHuu6Je41KuetQ4OrFvy+FkHWwGRe0EitlBQLpTkGxN9xh0uFz6TrzVIj8xtG4B/ 1rDpcJOqrPxV+1uo4GPphheurfj5sV9srJ0EFu5Pa4e72xYLQyn8FHc+X7ln01mY xFGZKtfwE6qVxWNpjQU1ZynKCP99XmySU+x0y/V2J7ZJQO+spqR3vSCFqg6KLs6a XSniSY+RIFAov+eUiwQlv6VPzYpp7pGnknnqYfJ42aRKP7qEvzjtTZ7uGEgaaCS6 0xmY1luCrAvKuk3jEtqZzlFoAPKBIwM7YuMaKZ7UkO7oghyJ6X7Oe45Sc5/iJw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:25 2025 by rpki-client