This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1-rR6CiRVhaA5_8A577k-CpFmFlM.roa File: 1-rR6CiRVhaA5_8A577k-CpFmFlM.roa (raw, json) Hash identifier: YIRqN95WUTO3CZXqb8qZEw9HA/5uz9chfFVfIgy5+xU= Subject key identifier: FA:B4:7A:0A:24:55:85:A0:39:FF:C0:39:EF:B9:3E:0A:91:66:16:53 Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 019A6E494FE5CEB91C273070C0701FF07EE2 Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1-rR6CiRVhaA5_8A577k-CpFmFlM.roa Signing time: Mon 10 Nov 2025 15:01:29 +0000 ROA not before: Mon 10 Nov 2025 15:01:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197540 IP address blocks: 2.56.96.0/22 maxlen: 22 5.45.96.0/20 maxlen: 32 5.181.48.0/22 maxlen: 22 5.252.224.0/22 maxlen: 22 37.120.160.0/19 maxlen: 32 37.120.160.0/20 maxlen: 22 37.120.176.0/22 maxlen: 22 37.120.182.0/23 maxlen: 24 37.120.184.0/21 maxlen: 22 37.221.192.0/21 maxlen: 32 45.9.60.0/22 maxlen: 22 45.83.104.0/22 maxlen: 22 45.90.4.0/22 maxlen: 22 45.129.180.0/22 maxlen: 22 45.132.244.0/22 maxlen: 22 45.136.28.0/22 maxlen: 22 45.142.176.0/22 maxlen: 22 45.157.176.0/22 maxlen: 22 46.38.224.0/20 maxlen: 32 46.38.240.0/21 maxlen: 32 46.38.248.0/22 maxlen: 32 46.38.252.0/22 maxlen: 32 46.232.248.0/22 maxlen: 22 81.16.16.0/22 maxlen: 22 85.209.48.0/22 maxlen: 22 85.235.64.0/22 maxlen: 22 89.58.0.0/22 maxlen: 22 89.58.4.0/22 maxlen: 22 89.58.8.0/22 maxlen: 22 89.58.12.0/22 maxlen: 22 89.58.16.0/21 maxlen: 21 89.58.20.0/24 maxlen: 24 89.58.24.0/22 maxlen: 22 89.58.28.0/22 maxlen: 22 89.58.32.0/22 maxlen: 22 89.58.36.0/22 maxlen: 22 89.58.40.0/22 maxlen: 22 89.58.44.0/22 maxlen: 22 89.58.48.0/22 maxlen: 22 89.58.52.0/22 maxlen: 22 89.58.56.0/22 maxlen: 22 89.58.60.0/22 maxlen: 22 91.132.144.0/22 maxlen: 22 91.204.44.0/22 maxlen: 24 92.60.36.0/22 maxlen: 22 93.177.64.0/22 maxlen: 22 152.89.104.0/22 maxlen: 22 159.195.1.0/24 maxlen: 24 159.195.4.0/22 maxlen: 22 159.195.8.0/22 maxlen: 22 159.195.20.0/22 maxlen: 22 159.195.24.0/22 maxlen: 22 159.195.28.0/22 maxlen: 22 159.195.32.0/22 maxlen: 22 159.195.36.0/22 maxlen: 22 159.195.40.0/22 maxlen: 22 159.195.44.0/22 maxlen: 22 159.195.48.0/22 maxlen: 22 159.195.52.0/22 maxlen: 22 159.195.56.0/22 maxlen: 22 159.195.60.0/22 maxlen: 22 159.195.64.0/22 maxlen: 22 159.195.68.0/22 maxlen: 22 159.195.72.0/22 maxlen: 22 159.195.76.0/22 maxlen: 22 159.195.80.0/22 maxlen: 22 159.195.84.0/22 maxlen: 22 185.16.60.0/22 maxlen: 32 185.162.248.0/22 maxlen: 32 185.163.116.0/22 maxlen: 22 185.170.112.0/22 maxlen: 32 185.183.156.0/22 maxlen: 32 185.194.140.0/22 maxlen: 22 185.207.104.0/22 maxlen: 32 185.228.136.0/22 maxlen: 32 185.233.104.0/22 maxlen: 32 185.243.8.0/22 maxlen: 32 185.244.192.0/22 maxlen: 32 188.68.32.0/19 maxlen: 32 192.145.44.0/22 maxlen: 22 193.30.120.0/22 maxlen: 22 193.31.24.0/22 maxlen: 22 194.13.80.0/22 maxlen: 22 194.55.12.0/22 maxlen: 22 194.59.204.0/22 maxlen: 22 195.128.100.0/22 maxlen: 22 213.109.160.0/22 maxlen: 22 2a03:4000::/32 maxlen: 48 2a03:4000:63:1000::/52 maxlen: 52 2a03:4001::/32 maxlen: 48 2a0a:4cc0::/40 maxlen: 40 2a0a:4cc0::/43 maxlen: 43 2a0a:4cc0:40::/43 maxlen: 43 2a0a:4cc0:40:2000::/56 maxlen: 56 2a0a:4cc0:80::/43 maxlen: 43 2a0a:4cc0:c0::/43 maxlen: 43 2a0a:4cc0:c1:6000::/52 maxlen: 52 2a0a:4cc0:c1:b000::/52 maxlen: 52 2a0a:4cc0:c1:d000::/52 maxlen: 52 2a0a:4cc0:c1:e000::/52 maxlen: 52 2a0a:4cc0:c1:f000::/52 maxlen: 52 2a0a:4cc0:c2:1000::/52 maxlen: 52 2a0a:4cc0:c2:2000::/52 maxlen: 52 2a0a:4cc0:c2:3000::/52 maxlen: 52 2a0a:4cc0:c2:4000::/52 maxlen: 52 2a0a:4cc0:c2:5000::/52 maxlen: 52 2a0a:4cc0:fe::/48 maxlen: 48 2a0a:4cc0:ff::/48 maxlen: 48 2a0a:4cc0:ff:1000::/52 maxlen: 52 2a0a:4cc0:100::/48 maxlen: 48 2a0a:4cc0:104::/48 maxlen: 48 2a0a:4cc0:104::/52 maxlen: 52 2a0a:4cc0:104:1000::/52 maxlen: 52 2a0a:4cc0:2000:4000::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:49:4f:e5:ce:b9:1c:27:30:70:c0:70:1f:f0:7e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Nov 10 15:01:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fab47a0a245585a039ffc039efb93e0a91661653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:49:b5:e4:52:d9:87:5b:24:1c:eb:a6:10: 03:c7:c7:3e:81:73:a7:a7:b0:a0:38:8c:32:90:6e: 3c:fa:3c:ad:48:30:44:a5:ad:fa:ec:1e:0d:34:36: 65:df:a7:0a:6a:8b:86:c0:e7:f9:37:f8:c1:4c:ae: f6:cf:7a:52:ea:3f:b2:db:08:98:be:af:19:a5:f2: ea:2d:87:20:72:94:f9:4f:f4:a3:b7:94:bb:19:d5: 3b:c4:1a:43:db:53:91:c2:dd:48:4f:56:90:7d:6a: 4c:6f:78:63:ae:c9:7c:b5:32:92:4d:2a:e5:81:74: f0:d6:bc:48:29:70:f3:fe:3f:55:84:33:0d:4a:99: b1:fe:f3:b8:95:bb:95:1c:57:e6:6a:16:f3:5a:77: 02:8e:2a:6e:4a:13:35:62:58:bd:de:7f:5b:59:54: 39:27:98:7c:3b:43:41:86:b7:6b:a5:03:5a:f0:7a: 2c:49:19:09:b8:af:5f:e7:b7:19:96:19:43:db:75: f0:99:14:2b:76:b4:59:2f:c1:c0:0e:55:f0:ad:74: ff:05:f4:19:71:d6:97:da:e4:53:34:70:09:be:44: f8:12:59:ea:cd:61:2c:ff:0a:36:e9:84:b9:11:32: cb:6f:f2:b8:40:58:9f:95:60:e0:a8:a7:4e:a4:24: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B4:7A:0A:24:55:85:A0:39:FF:C0:39:EF:B9:3E:0A:91:66:16:53 X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/1-rR6CiRVhaA5_8A577k-CpFmFlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.96.0/22 5.45.96.0/20 5.181.48.0/22 5.252.224.0/22 37.120.160.0/19 37.221.192.0/21 45.9.60.0/22 45.83.104.0/22 45.90.4.0/22 45.129.180.0/22 45.132.244.0/22 45.136.28.0/22 45.142.176.0/22 45.157.176.0/22 46.38.224.0/19 46.232.248.0/22 81.16.16.0/22 85.209.48.0/22 85.235.64.0/22 89.58.0.0/18 91.132.144.0/22 91.204.44.0/22 92.60.36.0/22 93.177.64.0/22 152.89.104.0/22 159.195.1.0/24 159.195.4.0-159.195.11.255 159.195.20.0-159.195.87.255 185.16.60.0/22 185.162.248.0/22 185.163.116.0/22 185.170.112.0/22 185.183.156.0/22 185.194.140.0/22 185.207.104.0/22 185.228.136.0/22 185.233.104.0/22 185.243.8.0/22 185.244.192.0/22 188.68.32.0/19 192.145.44.0/22 193.30.120.0/22 193.31.24.0/22 194.13.80.0/22 194.55.12.0/22 194.59.204.0/22 195.128.100.0/22 213.109.160.0/22 IPv6: 2a03:4000::/31 2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff 2a0a:4cc0:104::/48 2a0a:4cc0:2000:4000::/56 Signature Algorithm: sha256WithRSAEncryption 11:3f:9a:ed:fc:e3:b6:5e:af:1b:11:3b:d5:cc:0d:36:f4:2f: 06:85:d4:1c:d0:da:c9:96:18:3e:25:59:e3:08:03:d9:f5:7c: b5:36:19:87:11:e0:ce:70:12:a8:b3:2f:e0:3f:a9:fd:44:57: 92:06:df:c4:7d:e4:ab:78:4f:5b:f7:bf:ce:a2:3f:b4:d6:d8: f2:53:b2:33:8e:10:bf:e3:a2:6a:af:ce:27:99:2c:1d:e3:7f: 91:7b:46:8c:75:b8:22:5c:06:b6:3c:50:6a:4d:7e:e7:25:b0: b6:e2:b2:9f:fa:9e:45:ba:9a:b0:37:3c:75:60:08:40:59:b5: 16:14:15:4a:2b:ba:09:a7:18:e3:df:a9:91:46:47:09:bd:88: 51:b8:5c:70:c3:53:09:eb:19:eb:2c:51:89:20:22:20:5c:7b: 51:b3:f9:47:1f:77:33:a9:9e:0f:8e:35:43:5f:ed:41:08:9f: 37:ee:3c:53:b9:7c:36:c9:89:26:92:49:3c:a7:da:22:46:b3: f9:cd:a8:1f:cb:3f:f6:ef:63:87:7f:c1:bf:35:81:b0:f7:3d: d2:ff:37:d2:d2:92:eb:dd:8b:04:c2:67:b5:26:99:89:0b:13: cc:3b:5c:56:80:c6:84:98:37:37:3c:46:75:49:93:2c:05:38: a1:ff:1e:ad -----BEGIN CERTIFICATE----- MIIGZjCCBU6gAwIBAgISAZpuSU/lzrkcJzBwwHAf8H7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjUxMTEwMTUwMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWI0N2EwYTI0NTU4NWEwMzlmZmMwMzllZmI5M2UwYTkxNjYxNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OpJteRS2YdbJBzrphADx8c+gXOn p7CgOIwykG48+jytSDBEpa367B4NNDZl36cKaouGwOf5N/jBTK72z3pS6j+y2wiY vq8ZpfLqLYcgcpT5T/Sjt5S7GdU7xBpD21ORwt1IT1aQfWpMb3hjrsl8tTKSTSrl gXTw1rxIKXDz/j9VhDMNSpmx/vO4lbuVHFfmahbzWncCjipuShM1Yli93n9bWVQ5 J5h8O0NBhrdrpQNa8HosSRkJuK9f57cZlhlD23XwmRQrdrRZL8HADlXwrXT/BfQZ cdaX2uRTNHAJvkT4ElnqzWEs/wo26YS5ETLLb/K4QFiflWDgqKdOpCRnDQIDAQAB o4IDcjCCA24wHQYDVR0OBBYEFPq0egokVYWgOf/AOe+5PgqRZhZTMB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEvMS1yUjZDaVJWaGFBNV84QTU3N2stQ3BGbUZsTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTkvOTFkYThiLTA1MDItNDhkZi04NTMyLTVmYmY5YTI5YjZl MS8xLzlpN3JoNUNGeVVHVUtYM1o1TTBrbk5KUlpSVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCAYUGCCsGAQUFBwEHAQH/BIIBdDCCAXAwggE4BAIAATCC ATADBAICOGADBAQFLWADBAIFtTADBAIF/OADBAUleKADBAMl3cADBAItCTwDBAIt U2gDBAItWgQDBAItgbQDBAIthPQDBAItiBwDBAItjrADBAItnbADBAUuJuADBAIu 6PgDBAJREBADBAJV0TADBAJV60ADBAZZOgADBAJbhJADBAJbzCwDBAJcPCQDBAJd sUADBAKYWWgDBACfwwEwDAMEAp/DBAMEAp/DCDAMAwQCn8MUAwQDn8NQAwQCuRA8 AwQCuaL4AwQCuaN0AwQCuapwAwQCubecAwQCucKMAwQCuc9oAwQCueSIAwQCuelo AwQCufMIAwQCufTAAwQFvEQgAwQCwJEsAwQCwR54AwQCwR8YAwQCwg1QAwQCwjcM AwQCwjvMAwQCw4BkAwQC1W2gMDIEAgACMCwDBQEqA0AAMBADBQYqCkzAAwcAKgpM wAEAAwcAKgpMwAEEAwgAKgpMwCAAQDANBgkqhkiG9w0BAQsFAAOCAQEAET+a7fzj tl6vGxE71cwNNvQvBoXUHNDayZYYPiVZ4wgD2fV8tTYZhxHgznASqLMv4D+p/URX kgbfxH3kq3hPW/e/zqI/tNbY8lOyM44Qv+Oiaq/OJ5ksHeN/kXtGjHW4IlwGtjxQ ak1+5yWwtuKyn/qeRbqasDc8dWAIQFm1FhQVSiu6CacY49+pkUZHCb2IUbhccMNT CesZ6yxRiSAiIFx7UbP5Rx93M6meD441Q1/tQQifN+48U7l8NsmJJpJJPKfaIkaz +c2oH8s/9u9jh3/BvzWBsPc90v830tKS692LBMJntSaZiQsTzDtcVoDGhJg3NzxG dUmTLAU4of8erQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:14 2025 by rpki-client