This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/W-3Ri8AWWqFrWKutCVRwXCG1LqI.roa File: W-3Ri8AWWqFrWKutCVRwXCG1LqI.roa (raw, json) Hash identifier: Nh1PgA8Gs535g7b3yZbGMUCwzbOT918z/QhuTNM74dw= Subject key identifier: 5B:ED:D1:8B:C0:16:5A:A1:6B:58:AB:AD:09:54:70:5C:21:B5:2E:A2 Certificate issuer: /CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7 Certificate serial: 019A77B897F829C92FFF4D7024B5540C8D93 Authority key identifier: 19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/W-3Ri8AWWqFrWKutCVRwXCG1LqI.roa Signing time: Wed 12 Nov 2025 10:59:37 +0000 ROA not before: Wed 12 Nov 2025 10:59:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47292 IP address blocks: 31.31.80.0/21 maxlen: 21 77.66.0.0/21 maxlen: 21 77.66.8.0/22 maxlen: 22 77.66.16.0/20 maxlen: 20 77.66.32.0/21 maxlen: 21 77.66.40.0/22 maxlen: 22 77.66.48.0/23 maxlen: 23 77.66.54.0/23 maxlen: 23 77.66.56.0/21 maxlen: 21 77.66.64.0/22 maxlen: 22 77.66.72.0/23 maxlen: 23 77.66.76.0/22 maxlen: 22 77.66.80.0/21 maxlen: 21 77.66.88.0/22 maxlen: 22 77.66.96.0/23 maxlen: 23 77.66.104.0/22 maxlen: 22 77.66.120.0/23 maxlen: 23 77.66.124.0/23 maxlen: 23 81.7.128.0/21 maxlen: 21 81.7.136.0/22 maxlen: 22 81.7.140.0/23 maxlen: 23 81.7.144.0/23 maxlen: 23 81.7.148.0/22 maxlen: 22 81.7.152.0/22 maxlen: 22 81.7.152.0/24 maxlen: 24 81.7.158.0/23 maxlen: 23 81.7.160.0/21 maxlen: 21 81.7.168.0/22 maxlen: 22 81.7.174.0/23 maxlen: 23 81.7.176.0/20 maxlen: 20 81.19.224.0/20 maxlen: 20 81.19.240.0/21 maxlen: 21 81.19.248.0/22 maxlen: 22 83.221.128.0/22 maxlen: 22 83.221.142.0/23 maxlen: 23 83.221.150.0/23 maxlen: 23 83.221.154.0/23 maxlen: 23 83.221.156.0/23 maxlen: 23 86.48.32.0/21 maxlen: 21 86.48.40.0/23 maxlen: 23 86.48.48.0/22 maxlen: 22 86.48.66.0/23 maxlen: 23 86.48.72.0/21 maxlen: 21 86.48.80.0/20 maxlen: 20 86.48.96.0/20 maxlen: 20 86.48.112.0/23 maxlen: 23 86.58.128.0/23 maxlen: 23 86.58.132.0/22 maxlen: 22 86.58.136.0/21 maxlen: 21 86.58.144.0/22 maxlen: 22 86.58.148.0/23 maxlen: 23 86.58.156.0/22 maxlen: 22 86.58.160.0/21 maxlen: 21 86.58.168.0/22 maxlen: 22 86.58.174.0/23 maxlen: 23 86.58.176.0/21 maxlen: 21 86.58.184.0/22 maxlen: 22 86.58.192.0/22 maxlen: 22 86.58.198.0/23 maxlen: 23 86.58.204.0/22 maxlen: 22 86.58.224.0/22 maxlen: 22 86.58.240.0/22 maxlen: 22 86.58.244.0/23 maxlen: 23 86.58.248.0/21 maxlen: 21 89.186.168.0/23 maxlen: 23 89.186.172.0/22 maxlen: 22 89.186.176.0/20 maxlen: 20 89.188.80.0/21 maxlen: 21 89.188.88.0/23 maxlen: 23 89.188.92.0/23 maxlen: 23 91.102.88.0/21 maxlen: 21 91.193.136.0/22 maxlen: 22 91.215.160.0/22 maxlen: 22 93.180.80.0/23 maxlen: 23 93.180.84.0/22 maxlen: 22 94.126.176.0/23 maxlen: 23 94.126.182.0/23 maxlen: 23 109.238.48.0/21 maxlen: 21 185.45.48.0/22 maxlen: 22 195.190.153.0/24 maxlen: 24 195.211.176.0/22 maxlen: 22 212.97.128.0/22 maxlen: 22 217.30.36.0/22 maxlen: 22 217.116.224.0/20 maxlen: 20 217.116.240.0/23 maxlen: 23 217.116.254.0/23 maxlen: 23 217.145.48.0/21 maxlen: 21 217.145.56.0/23 maxlen: 23 2001:1448::/32 maxlen: 32 2a00:49c0::/32 maxlen: 32 2a01:6200::/32 maxlen: 32 2a01:7920::/29 maxlen: 29 2a02:9d0::/32 maxlen: 32 2a03:a480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.mft rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:b8:97:f8:29:c9:2f:ff:4d:70:24:b5:54:0c:8d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e06155fc1e37652b2b79c9a536d2e6144d04f7 Validity Not Before: Nov 12 10:59:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5bedd18bc0165aa16b58abad0954705c21b52ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:a8:00:b1:77:ab:45:32:22:0c:4a:70:f2: ca:3c:3a:d4:4d:56:1e:f8:90:f1:06:f8:66:b0:bb: 8b:df:6e:cc:42:cd:80:85:a4:4c:97:21:4f:40:92: c0:37:58:f0:24:52:4b:af:fa:8b:a1:36:18:fa:a1: 56:67:b1:d2:fd:f6:71:a7:fd:35:3d:fb:9e:3f:82: 8a:b6:6b:a3:98:67:15:7a:94:26:89:1b:89:6b:c4: fa:1b:60:d5:46:24:7b:8d:0a:5a:ff:65:9b:5a:5f: 77:5f:06:e9:57:49:06:1b:c9:4e:eb:bf:f8:b2:5b: ac:f1:ed:16:d4:c0:47:1c:90:e8:71:78:74:a0:4c: 4e:15:bd:2b:00:00:b8:ce:28:0c:a0:b2:95:b1:0e: d9:3b:47:75:a1:aa:94:1b:c8:b6:e9:e4:66:ef:00: 2d:ed:4d:d1:19:7b:04:da:72:ba:0b:49:4b:9e:b2: aa:71:65:2c:e9:ef:18:d9:98:a9:2b:fe:12:02:69: db:b8:e5:17:05:9a:d3:5c:42:c1:2b:fe:be:14:97: cd:bb:27:a7:71:ed:7f:99:19:df:74:23:5e:d6:94: 4f:8e:00:9f:18:56:0d:25:f4:9a:eb:6e:f2:e5:8b: ea:9b:b1:bf:18:2d:4d:d2:86:5e:5b:a4:c2:eb:61: 6e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:ED:D1:8B:C0:16:5A:A1:6B:58:AB:AD:09:54:70:5C:21:B5:2E:A2 X509v3 Authority Key Identifier: keyid:19:E0:61:55:FC:1E:37:65:2B:2B:79:C9:A5:36:D2:E6:14:4D:04:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeBhVfweN2UrK3nJpTbS5hRNBPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/W-3Ri8AWWqFrWKutCVRwXCG1LqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bb85d7-7cde-4e1c-b9df-79eeb6321eb7/1/GeBhVfweN2UrK3nJpTbS5hRNBPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.80.0/21 77.66.0.0-77.66.11.255 77.66.16.0-77.66.43.255 77.66.48.0/23 77.66.54.0-77.66.67.255 77.66.72.0/23 77.66.76.0-77.66.91.255 77.66.96.0/23 77.66.104.0/22 77.66.120.0/23 77.66.124.0/23 81.7.128.0-81.7.141.255 81.7.144.0/23 81.7.148.0-81.7.155.255 81.7.158.0-81.7.171.255 81.7.174.0-81.7.191.255 81.19.224.0-81.19.251.255 83.221.128.0/22 83.221.142.0/23 83.221.150.0/23 83.221.154.0-83.221.157.255 86.48.32.0-86.48.41.255 86.48.48.0/22 86.48.66.0/23 86.48.72.0-86.48.113.255 86.58.128.0/23 86.58.132.0-86.58.149.255 86.58.156.0-86.58.171.255 86.58.174.0-86.58.187.255 86.58.192.0/22 86.58.198.0/23 86.58.204.0/22 86.58.224.0/22 86.58.240.0-86.58.245.255 86.58.248.0/21 89.186.168.0/23 89.186.172.0-89.186.191.255 89.188.80.0-89.188.89.255 89.188.92.0/23 91.102.88.0/21 91.193.136.0/22 91.215.160.0/22 93.180.80.0/23 93.180.84.0/22 94.126.176.0/23 94.126.182.0/23 109.238.48.0/21 185.45.48.0/22 195.190.153.0/24 195.211.176.0/22 212.97.128.0/22 217.30.36.0/22 217.116.224.0-217.116.241.255 217.116.254.0/23 217.145.48.0-217.145.57.255 IPv6: 2001:1448::/32 2a00:49c0::/32 2a01:6200::/32 2a01:7920::/29 2a02:9d0::/32 2a03:a480::/32 Signature Algorithm: sha256WithRSAEncryption 9b:e4:6a:fb:1f:91:d1:1e:de:e3:01:b2:f3:22:1f:78:4a:df: 9b:e4:fa:33:30:c4:d9:b4:b8:b6:6c:e0:4a:ed:27:c4:bf:35: 08:e9:0f:ad:7a:29:e7:fb:05:3d:56:35:0d:fe:fd:20:14:02: f2:38:03:e7:1d:b2:1d:65:bf:46:e3:08:94:f9:63:c8:8f:02: 7f:5a:78:f2:33:00:2a:18:6d:6d:e7:8d:ea:04:3d:df:38:95: bf:de:66:af:16:86:c4:ba:bd:0c:c8:f5:15:26:d3:9e:0a:c7: f2:b6:c1:d4:90:7e:8b:03:cd:9d:09:89:ce:ab:54:76:53:a0: 42:33:e2:ac:09:44:25:f2:27:28:d9:9e:ef:9b:da:7b:da:ae: ce:b0:50:59:ce:d2:45:43:7e:97:05:fa:ea:0c:cf:fc:77:fb: 89:59:42:b6:5d:92:0a:67:26:62:58:cf:68:f7:17:3c:07:94: f1:65:39:69:19:a3:be:f4:83:bd:cf:0b:9b:42:08:7b:22:7b: fb:a8:9c:34:a8:11:66:40:67:76:3f:fd:0f:f8:04:d2:e5:cf: ba:8f:1d:4d:77:14:0a:5f:b7:cf:5d:42:f5:8c:39:a1:16:c5: 95:55:fb:b4:6a:36:63:63:d2:1a:84:39:14:6f:43:00:5b:96: 6d:ce:e9:69 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgISAZp3uJf4Kckv/01wJLVUDI2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZTA2MTU1ZmMxZTM3NjUyYjJiNzljOWE1MzZkMmU2MTQ0 ZDA0ZjcwHhcNMjUxMTEyMTA1OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmVkZDE4YmMwMTY1YWExNmI1OGFiYWQwOTU0NzA1YzIxYjUyZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyioALF3q0UyIgxKcPLKPDrUTVYe +JDxBvhmsLuL327MQs2AhaRMlyFPQJLAN1jwJFJLr/qLoTYY+qFWZ7HS/fZxp/01 PfueP4KKtmujmGcVepQmiRuJa8T6G2DVRiR7jQpa/2WbWl93XwbpV0kGG8lO67/4 slus8e0W1MBHHJDocXh0oExOFb0rAAC4zigMoLKVsQ7ZO0d1oaqUG8i26eRm7wAt 7U3RGXsE2nK6C0lLnrKqcWUs6e8Y2ZipK/4SAmnbuOUXBZrTXELBK/6+FJfNuyen ce1/mRnfdCNe1pRPjgCfGFYNJfSa627y5Yvqm7G/GC1N0oZeW6TC62FucwIDAQAB o4IEKDCCBCQwHQYDVR0OBBYEFFvt0YvAFlqha1irrQlUcFwhtS6iMB8GA1UdIwQY MBaAFBngYVX8HjdlKyt5yaU20uYUTQT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2VCaFZmd2VOMlVySzNuSnBUYlM1aFJOQlBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iYjg1ZDctN2NkZS00ZTFjLWI5ZGYt NzllZWI2MzIxZWI3LzEvVy0zUmk4QVdXcUZyV0t1dENWUndYQ0cxTHFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iYjg1ZDctN2NkZS00ZTFjLWI5ZGYtNzllZWI2MzIxZWI3 LzEvR2VCaFZmd2VOMlVySzNuSnBUYlM1aFJOQlBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICPAYIKwYBBQUHAQcBAf8EggIrMIICJzCCAfEEAgABMIIB 6QMEAx8fUDALAwMBTUIDBAJNQggwDAMEBE1CEAMEAk1CKAMEAU1CMDAMAwQBTUI2 AwQCTUJAAwQBTUJIMAwDBAJNQkwDBAJNQlgDBAFNQmADBAJNQmgDBAFNQngDBAFN QnwwDAMEB1EHgAMEAVEHjAMEAVEHkDAMAwQCUQeUAwQCUQeYMAwDBAFRB54DBAJR B6gwDAMEAVEHrgMEBlEHgDAMAwQFURPgAwQCURP4AwQCU92AAwQBU92OAwQBU92W MAwDBAFT3ZoDBAFT3ZwwDAMEBVYwIAMEAVYwKAMEAlYwMAMEAVYwQjAMAwQDVjBI AwQBVjBwAwQBVjqAMAwDBAJWOoQDBAFWOpQwDAMEAlY6nAMEAlY6qDAMAwQBVjqu AwQCVjq4AwQCVjrAAwQBVjrGAwQCVjrMAwQCVjrgMAwDBARWOvADBAFWOvQDBANW OvgDBAFZuqgwDAMEAlm6rAMEBlm6gDAMAwQEWbxQAwQBWbxYAwQBWbxcAwQDW2ZY AwQCW8GIAwQCW9egAwQBXbRQAwQCXbRUAwQBXn6wAwQBXn62AwQDbe4wAwQCuS0w AwQAw76ZAwQCw9OwAwQC1GGAAwQC2R4kMAwDBAXZdOADBAHZdPADBAHZdP4wDAME BNmRMAMEAdmRODAwBAIAAjAqAwUAIAEUSAMFACoAScADBQAqAWIAAwUDKgF5IAMF ACoCCdADBQAqA6SAMA0GCSqGSIb3DQEBCwUAA4IBAQCb5Gr7H5HRHt7jAbLzIh94 St+b5PozMMTZtLi2bOBK7SfEvzUI6Q+teinn+wU9VjUN/v0gFALyOAPnHbIdZb9G 4wiU+WPIjwJ/WnjyMwAqGG1t543qBD3fOJW/3mavFobEur0MyPUVJtOeCsfytsHU kH6LA82dCYnOq1R2U6BCM+KsCUQl8ico2Z7vm9p72q7OsFBZztJFQ36XBfrqDM/8 d/uJWUK2XZIKZyZiWM9o9xc8B5TxZTlpGaO+9IO9zwubQgh7Inv7qJw0qBFmQGd2 P/0P+ATS5c+6jx1NdxQKX7fPXUL1jDmhFsWVVfu0ajZjY9IahDkUb0MAW5Ztzulp -----END CERTIFICATE-----Generated at Sat Dec 6 13:13:25 2025 by rpki-client