This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/hK2pPH3ZYk_AItgBUx4QKhNRZjc.roa File: hK2pPH3ZYk_AItgBUx4QKhNRZjc.roa (raw, json) Hash identifier: AeA5HrCOsn36XUB8ugwlHBVS3Vap/ykOrDhcE11vYXU= Subject key identifier: 84:AD:A9:3C:7D:D9:62:4F:C0:22:D8:01:53:1E:10:2A:13:51:66:37 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 019AB51D1C8AC811D4F9F891B64140FA37D6 Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/hK2pPH3ZYk_AItgBUx4QKhNRZjc.roa Signing time: Mon 24 Nov 2025 09:06:15 +0000 ROA not before: Mon 24 Nov 2025 09:06:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8926 IP address blocks: 5.56.64.0/18 maxlen: 24 37.75.16.0/20 maxlen: 24 37.75.64.0/18 maxlen: 24 46.55.0.0/17 maxlen: 24 85.204.176.0/21 maxlen: 24 86.104.196.0/22 maxlen: 24 86.105.56.0/21 maxlen: 24 86.105.80.0/21 maxlen: 21 86.105.172.0/22 maxlen: 22 86.105.208.0/22 maxlen: 24 86.106.144.0/21 maxlen: 21 86.106.208.0/20 maxlen: 24 86.106.224.0/19 maxlen: 24 86.107.64.0/22 maxlen: 22 86.107.160.0/21 maxlen: 24 89.32.56.0/21 maxlen: 21 89.32.136.0/21 maxlen: 21 89.32.172.0/22 maxlen: 22 89.32.252.0/22 maxlen: 22 89.34.64.0/22 maxlen: 22 89.34.68.0/22 maxlen: 22 89.34.192.0/21 maxlen: 21 89.34.204.0/22 maxlen: 22 89.34.232.0/22 maxlen: 22 89.35.8.0/21 maxlen: 24 89.35.40.0/21 maxlen: 21 89.35.84.0/22 maxlen: 22 89.35.200.0/22 maxlen: 22 89.36.156.0/22 maxlen: 22 89.37.44.0/22 maxlen: 22 89.37.104.0/24 maxlen: 24 89.38.32.0/22 maxlen: 22 89.38.64.0/22 maxlen: 22 89.38.76.0/22 maxlen: 22 89.39.76.0/22 maxlen: 22 89.39.84.0/22 maxlen: 22 89.39.96.0/21 maxlen: 24 89.39.112.0/21 maxlen: 24 89.40.228.0/22 maxlen: 22 89.41.64.0/18 maxlen: 24 89.42.64.0/22 maxlen: 22 89.42.72.0/21 maxlen: 21 89.42.104.0/22 maxlen: 22 89.42.128.0/22 maxlen: 22 89.42.180.0/22 maxlen: 22 89.42.224.0/22 maxlen: 22 89.43.128.0/22 maxlen: 22 89.43.168.0/22 maxlen: 22 89.44.152.0/22 maxlen: 22 89.45.40.0/22 maxlen: 22 89.46.164.0/22 maxlen: 22 92.114.128.0/17 maxlen: 24 92.115.0.0/16 maxlen: 24 93.113.64.0/21 maxlen: 24 93.113.80.0/21 maxlen: 21 93.113.92.0/22 maxlen: 22 93.113.244.0/22 maxlen: 22 93.115.136.0/21 maxlen: 21 93.116.0.0/16 maxlen: 24 93.117.48.0/20 maxlen: 24 93.117.68.0/22 maxlen: 22 93.117.72.0/21 maxlen: 21 93.117.128.0/21 maxlen: 24 93.117.140.0/22 maxlen: 22 93.117.144.0/21 maxlen: 21 93.117.156.0/22 maxlen: 22 93.117.160.0/21 maxlen: 21 93.117.168.0/22 maxlen: 22 93.118.176.0/22 maxlen: 22 93.118.188.0/22 maxlen: 22 93.119.96.0/21 maxlen: 21 93.119.108.0/22 maxlen: 22 93.119.128.0/21 maxlen: 21 93.119.140.0/22 maxlen: 22 93.119.144.0/21 maxlen: 24 93.119.160.0/21 maxlen: 21 93.119.196.0/22 maxlen: 22 93.119.200.0/21 maxlen: 24 93.119.228.0/22 maxlen: 22 93.119.232.0/21 maxlen: 24 94.176.64.0/20 maxlen: 24 109.185.0.0/16 maxlen: 24 178.132.112.0/20 maxlen: 24 178.132.128.0/18 maxlen: 24 185.28.104.0/22 maxlen: 24 188.208.96.0/22 maxlen: 22 188.208.104.0/22 maxlen: 22 188.208.112.0/22 maxlen: 22 188.208.120.0/22 maxlen: 24 188.208.126.0/24 maxlen: 24 188.208.192.0/22 maxlen: 22 188.208.204.0/22 maxlen: 22 188.209.216.0/21 maxlen: 24 188.210.240.0/21 maxlen: 21 188.210.248.0/22 maxlen: 22 188.212.0.0/22 maxlen: 22 188.212.8.0/21 maxlen: 21 188.212.24.0/21 maxlen: 21 188.212.40.0/21 maxlen: 21 188.213.36.0/22 maxlen: 22 188.213.52.0/22 maxlen: 22 188.213.220.0/22 maxlen: 22 188.213.236.0/22 maxlen: 22 188.213.244.0/22 maxlen: 22 188.214.60.0/22 maxlen: 22 188.214.136.0/22 maxlen: 24 188.214.146.0/24 maxlen: 24 188.214.147.0/24 maxlen: 24 188.214.200.0/21 maxlen: 21 188.215.252.0/22 maxlen: 22 188.237.0.0/16 maxlen: 24 212.0.192.0/19 maxlen: 32 2a02:a30::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:1d:1c:8a:c8:11:d4:f9:f8:91:b6:41:40:fa:37:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Nov 24 09:06:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=84ada93c7dd9624fc022d801531e102a13516637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:09:93:d5:9d:6e:3d:fe:2d:7f:88:87:95: 71:07:3b:34:ca:47:dd:bc:09:a6:a1:b2:e0:a0:cb: fe:2a:f8:16:9e:3d:b2:bb:01:09:03:11:57:bc:1c: 26:91:a2:fc:0f:df:b8:d5:0b:48:00:be:04:04:ef: 6d:cb:8f:06:59:a9:c3:99:85:20:40:01:36:af:e9: 47:af:10:44:e1:71:7f:1d:8e:1e:46:af:db:ed:a2: 3b:16:f4:c0:7e:9d:20:c0:0f:69:db:0c:e6:b4:18: 5a:20:79:e1:9f:f9:40:1b:bb:c3:c4:58:6a:23:b5: 59:e7:90:35:38:61:89:24:5d:9b:e6:41:5f:32:9a: da:49:69:6b:83:d3:0a:a1:8e:a3:a3:22:aa:c3:88: 39:04:ab:55:40:15:36:fd:e2:de:1c:d7:5c:42:3a: 8c:55:b7:f6:0c:fb:d0:8b:45:3f:07:2d:d8:09:cd: 92:35:dc:0c:23:c5:a3:cf:c9:72:fc:d7:b4:97:f5: 8a:0c:86:fc:fc:b1:bb:a4:6c:67:21:a7:46:23:85: 7f:a6:a2:95:5d:0b:e8:47:1c:9d:39:b8:00:26:b6: 96:2b:02:13:09:8a:6a:05:55:92:d9:a1:3c:79:4f: f2:28:e0:64:ce:55:9f:d8:93:e4:9f:5e:8f:e0:03: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AD:A9:3C:7D:D9:62:4F:C0:22:D8:01:53:1E:10:2A:13:51:66:37 X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/hK2pPH3ZYk_AItgBUx4QKhNRZjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.64.0/18 37.75.16.0/20 37.75.64.0/18 46.55.0.0/17 85.204.176.0/21 86.104.196.0/22 86.105.56.0/21 86.105.80.0/21 86.105.172.0/22 86.105.208.0/22 86.106.144.0/21 86.106.208.0-86.106.255.255 86.107.64.0/22 86.107.160.0/21 89.32.56.0/21 89.32.136.0/21 89.32.172.0/22 89.32.252.0/22 89.34.64.0/21 89.34.192.0/21 89.34.204.0/22 89.34.232.0/22 89.35.8.0/21 89.35.40.0/21 89.35.84.0/22 89.35.200.0/22 89.36.156.0/22 89.37.44.0/22 89.37.104.0/24 89.38.32.0/22 89.38.64.0/22 89.38.76.0/22 89.39.76.0/22 89.39.84.0/22 89.39.96.0/21 89.39.112.0/21 89.40.228.0/22 89.41.64.0/18 89.42.64.0/22 89.42.72.0/21 89.42.104.0/22 89.42.128.0/22 89.42.180.0/22 89.42.224.0/22 89.43.128.0/22 89.43.168.0/22 89.44.152.0/22 89.45.40.0/22 89.46.164.0/22 92.114.128.0-92.115.255.255 93.113.64.0/21 93.113.80.0/21 93.113.92.0/22 93.113.244.0/22 93.115.136.0/21 93.116.0.0/16 93.117.48.0/20 93.117.68.0-93.117.79.255 93.117.128.0/21 93.117.140.0-93.117.151.255 93.117.156.0-93.117.171.255 93.118.176.0/22 93.118.188.0/22 93.119.96.0/21 93.119.108.0/22 93.119.128.0/21 93.119.140.0-93.119.151.255 93.119.160.0/21 93.119.196.0-93.119.207.255 93.119.228.0-93.119.239.255 94.176.64.0/20 109.185.0.0/16 178.132.112.0-178.132.191.255 185.28.104.0/22 188.208.96.0/22 188.208.104.0/22 188.208.112.0/22 188.208.120.0/22 188.208.126.0/24 188.208.192.0/22 188.208.204.0/22 188.209.216.0/21 188.210.240.0-188.210.251.255 188.212.0.0/22 188.212.8.0/21 188.212.24.0/21 188.212.40.0/21 188.213.36.0/22 188.213.52.0/22 188.213.220.0/22 188.213.236.0/22 188.213.244.0/22 188.214.60.0/22 188.214.136.0/22 188.214.146.0/23 188.214.200.0/21 188.215.252.0/22 188.237.0.0/16 212.0.192.0/19 IPv6: 2a02:a30::/29 Signature Algorithm: sha256WithRSAEncryption 34:58:7f:73:30:24:7d:9c:89:ae:54:c5:67:b8:41:7a:97:0a: 4d:f7:7e:a3:4b:22:ad:72:92:33:b5:ba:99:6e:7c:12:8d:d0: da:ac:e0:67:2d:b3:71:7a:5e:05:c3:95:79:31:64:43:85:ae: 4f:23:b5:fe:b6:3b:a6:61:98:6f:3b:42:fe:fd:c5:51:fd:4d: 22:c5:0c:8c:8e:81:62:4d:02:f4:63:2a:17:9a:42:92:23:02: 17:fd:ef:e0:2f:99:d6:b1:ad:1c:17:c6:6b:14:e4:59:d2:b6: 0d:31:97:41:23:33:e0:ba:bd:17:87:ac:ff:d2:52:0b:34:c9: 2c:2f:a3:a1:84:09:64:19:1c:8c:3f:c1:ed:21:c0:f8:ac:f4: d8:05:6e:ca:15:2d:9d:56:04:49:5a:2a:cf:d8:c7:92:e1:d3: 1c:be:b2:9e:cb:a8:40:97:98:6f:44:89:6d:b6:83:69:b5:14: 1f:f1:21:e7:e9:4c:e4:46:e9:a5:1f:02:01:2a:98:69:36:24: 1a:8a:cc:29:0e:2f:d3:56:56:ca:6c:26:02:15:32:66:f8:12: ca:a7:66:c9:e6:3c:9d:bf:d7:1d:81:03:26:85:31:4f:0c:ed: 0a:f3:2a:eb:e1:57:5f:86:00:0f:c9:50:2f:14:a6:31:1e:0a: 37:55:27:d0 -----BEGIN CERTIFICATE----- MIIHrTCCBpWgAwIBAgISAZq1HRyKyBHU+fiRtkFA+jfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjUxMTI0MDkwNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGFkYTkzYzdkZDk2MjRmYzAyMmQ4MDE1MzFlMTAyYTEzNTE2NjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuagJk9Wdbj3+LX+Ih5VxBzs0ykfd vAmmobLgoMv+KvgWnj2yuwEJAxFXvBwmkaL8D9+41QtIAL4EBO9ty48GWanDmYUg QAE2r+lHrxBE4XF/HY4eRq/b7aI7FvTAfp0gwA9p2wzmtBhaIHnhn/lAG7vDxFhq I7VZ55A1OGGJJF2b5kFfMpraSWlrg9MKoY6joyKqw4g5BKtVQBU2/eLeHNdcQjqM Vbf2DPvQi0U/By3YCc2SNdwMI8Wjz8ly/Ne0l/WKDIb8/LG7pGxnIadGI4V/pqKV XQvoRxydObgAJraWKwITCYpqBVWS2aE8eU/yKOBkzlWf2JPkn16P4AMIdQIDAQAB o4IEuTCCBLUwHQYDVR0OBBYEFIStqTx92WJPwCLYAVMeECoTUWY3MB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvaEsycFBIM1pZa19BSXRnQlV4NFFLaE5SWmpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICzQYIKwYBBQUHAQcBAf8EggK8MIICuDCCAqUEAgABMIIC nQMEBgU4QAMEBCVLEAMEBiVLQAMEBy43AAMEA1XMsAMEAlZoxAMEA1ZpOAMEA1Zp UAMEAlZprAMEAlZp0AMEA1ZqkDALAwQEVmrQAwMAVmoDBAJWa0ADBANWa6ADBANZ IDgDBANZIIgDBAJZIKwDBAJZIPwDBANZIkADBANZIsADBAJZIswDBAJZIugDBANZ IwgDBANZIygDBAJZI1QDBAJZI8gDBAJZJJwDBAJZJSwDBABZJWgDBAJZJiADBAJZ JkADBAJZJkwDBAJZJ0wDBAJZJ1QDBANZJ2ADBANZJ3ADBAJZKOQDBAZZKUADBAJZ KkADBANZKkgDBAJZKmgDBAJZKoADBAJZKrQDBAJZKuADBAJZK4ADBAJZK6gDBAJZ LJgDBAJZLSgDBAJZLqQwCwMEB1xygAMDAlxwAwQDXXFAAwQDXXFQAwQCXXFcAwQC XXH0AwQDXXOIAwMAXXQDBARddTAwDAMEAl11RAMEBF11QAMEA111gDAMAwQCXXWM AwQDXXWQMAwDBAJddZwDBAJddagDBAJddrADBAJddrwDBANdd2ADBAJdd2wDBANd d4AwDAMEAl13jAMEA113kAMEA113oDAMAwQCXXfEAwQEXXfAMAwDBAJdd+QDBARd d+ADBAResEADAwBtuTAMAwQEsoRwAwQGsoSAAwQCuRxoAwQCvNBgAwQCvNBoAwQC vNBwAwQCvNB4AwQAvNB+AwQCvNDAAwQCvNDMAwQDvNHYMAwDBAS80vADBAK80vgD BAK81AADBAO81AgDBAO81BgDBAO81CgDBAK81SQDBAK81TQDBAK81dwDBAK81ewD BAK81fQDBAK81jwDBAK81ogDBAG81pIDBAO81sgDBAK81/wDAwC87QMEBdQAwDAN BAIAAjAHAwUDKgIKMDANBgkqhkiG9w0BAQsFAAOCAQEANFh/czAkfZyJrlTFZ7hB epcKTfd+o0sirXKSM7W6mW58Eo3Q2qzgZy2zcXpeBcOVeTFkQ4WuTyO1/rY7pmGY bztC/v3FUf1NIsUMjI6BYk0C9GMqF5pCkiMCF/3v4C+Z1rGtHBfGaxTkWdK2DTGX QSMz4Lq9F4es/9JSCzTJLC+joYQJZBkcjD/B7SHA+Kz02AVuyhUtnVYESVoqz9jH kuHTHL6ynsuoQJeYb0SJbbaDabUUH/Eh5+lM5EbppR8CASqYaTYkGorMKQ4v01ZW ymwmAhUyZvgSyqdmyeY8nb/XHYEDJoUxTwztCvMq6+FXX4YAD8lQLxSmMR4KN1Un 0A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:13 2025 by rpki-client