This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/QABfuc4nvtHeT0vqG6JAEeAf21M.roa File: QABfuc4nvtHeT0vqG6JAEeAf21M.roa (raw, json) Hash identifier: NHXYHLNca2RMaeMxdrJ0tAQ2KOU4PCzHu6iJg4kIFME= Subject key identifier: 40:00:5F:B9:CE:27:BE:D1:DE:4F:4B:EA:1B:A2:40:11:E0:1F:DB:53 Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Certificate serial: 019A8F2E74629EDBEFC10839DA7DDE2DBA03 Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/QABfuc4nvtHeT0vqG6JAEeAf21M.roa Signing time: Mon 17 Nov 2025 00:19:37 +0000 ROA not before: Mon 17 Nov 2025 00:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49765 IP address blocks: 5.226.56.0/21 maxlen: 21 5.226.56.0/24 maxlen: 24 5.226.57.0/24 maxlen: 24 5.226.58.0/23 maxlen: 23 5.226.60.0/24 maxlen: 24 5.226.61.0/24 maxlen: 24 5.226.62.0/24 maxlen: 24 5.226.63.0/24 maxlen: 24 91.102.56.0/21 maxlen: 21 91.102.56.0/24 maxlen: 24 91.102.57.0/24 maxlen: 24 91.102.58.0/23 maxlen: 23 91.102.60.0/22 maxlen: 22 91.102.60.0/24 maxlen: 24 91.102.61.0/24 maxlen: 24 91.102.62.0/23 maxlen: 23 94.136.224.0/19 maxlen: 19 94.136.224.0/23 maxlen: 23 94.136.226.0/24 maxlen: 24 94.136.227.0/24 maxlen: 24 94.136.228.0/24 maxlen: 24 94.136.229.0/24 maxlen: 24 94.136.230.0/24 maxlen: 24 94.136.232.0/24 maxlen: 24 94.136.233.0/24 maxlen: 24 94.136.234.0/24 maxlen: 24 94.136.235.0/24 maxlen: 24 94.136.236.0/23 maxlen: 23 94.136.238.0/23 maxlen: 23 94.136.244.0/24 maxlen: 24 94.136.245.0/24 maxlen: 24 94.136.246.0/24 maxlen: 24 94.136.247.0/24 maxlen: 24 94.136.248.0/24 maxlen: 24 94.136.249.0/24 maxlen: 24 94.136.250.0/24 maxlen: 24 94.136.251.0/24 maxlen: 24 94.136.252.0/24 maxlen: 24 94.136.253.0/24 maxlen: 24 94.136.254.0/24 maxlen: 24 109.72.16.0/20 maxlen: 20 109.72.16.0/24 maxlen: 24 109.72.17.0/24 maxlen: 24 109.72.18.0/24 maxlen: 24 109.72.19.0/24 maxlen: 24 109.72.20.0/24 maxlen: 24 109.72.21.0/24 maxlen: 24 109.72.22.0/24 maxlen: 24 109.72.23.0/24 maxlen: 24 109.72.24.0/24 maxlen: 24 109.72.25.0/24 maxlen: 24 109.72.26.0/24 maxlen: 24 109.72.27.0/24 maxlen: 24 109.72.28.0/24 maxlen: 24 109.72.30.0/24 maxlen: 24 109.72.31.0/24 maxlen: 24 137.221.0.0/20 maxlen: 20 137.221.0.0/23 maxlen: 23 137.221.2.0/24 maxlen: 24 137.221.3.0/24 maxlen: 24 137.221.4.0/24 maxlen: 24 137.221.5.0/24 maxlen: 24 137.221.6.0/24 maxlen: 24 137.221.7.0/24 maxlen: 24 137.221.8.0/24 maxlen: 24 137.221.9.0/24 maxlen: 24 137.221.10.0/23 maxlen: 23 137.221.12.0/24 maxlen: 24 137.221.13.0/24 maxlen: 24 137.221.14.0/24 maxlen: 24 137.221.15.0/24 maxlen: 24 137.221.16.0/21 maxlen: 21 137.221.16.0/24 maxlen: 24 137.221.17.0/24 maxlen: 24 137.221.18.0/24 maxlen: 24 137.221.19.0/24 maxlen: 24 137.221.20.0/24 maxlen: 24 137.221.21.0/24 maxlen: 24 137.221.22.0/24 maxlen: 24 137.221.23.0/24 maxlen: 24 185.48.108.0/22 maxlen: 22 185.48.108.0/24 maxlen: 24 185.48.109.0/24 maxlen: 24 185.48.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8f:2e:74:62:9e:db:ef:c1:08:39:da:7d:de:2d:ba:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7 Validity Not Before: Nov 17 00:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=40005fb9ce27bed1de4f4bea1ba24011e01fdb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:67:ec:fd:cf:29:c1:e3:18:9b:8a:3b:e1:ce: c6:7c:29:cf:1b:14:73:56:62:dc:fb:d5:22:80:fa: 7e:29:94:4c:14:7d:f8:fb:4d:ce:b4:3b:7e:5a:89: 09:c3:04:9d:64:2a:4e:d2:37:8d:76:ab:da:73:b1: 87:3e:aa:39:89:a3:26:9c:3e:4f:3d:d2:85:82:c4: c4:c8:20:dd:98:a6:ee:90:e3:9c:4b:55:8a:1f:f6: 72:84:17:fc:f1:af:e3:22:aa:3d:5b:a4:08:23:20: d2:a6:ac:dc:10:17:82:20:30:ee:b5:ea:85:77:26: d3:7f:21:9f:3c:58:bb:e8:75:d0:f8:49:bc:8b:9f: b8:f3:a1:8e:ba:80:86:5a:58:c3:d3:aa:ad:8b:f0: 25:bc:c7:32:a0:b9:fa:f7:eb:bb:de:05:9d:aa:90: 3a:e5:6f:74:f6:89:64:88:fb:a7:f0:17:fc:eb:a3: 26:6e:2f:2f:4d:e8:a8:8e:5d:e3:7d:0e:b8:df:17: f1:3c:55:70:78:de:60:9d:83:e7:a7:1f:f3:a6:e0: 18:4e:b3:45:74:0b:f6:7a:06:65:e3:3b:50:3d:58: f1:2e:3b:63:49:c6:42:c4:7d:2b:30:6f:61:5c:c3: 96:80:7f:fd:92:b6:aa:9c:6e:49:77:39:39:ba:34: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:00:5F:B9:CE:27:BE:D1:DE:4F:4B:EA:1B:A2:40:11:E0:1F:DB:53 X509v3 Authority Key Identifier: keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/QABfuc4nvtHeT0vqG6JAEeAf21M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.56.0/21 91.102.56.0/21 94.136.224.0/19 109.72.16.0/20 137.221.0.0-137.221.23.255 185.48.108.0/22 Signature Algorithm: sha256WithRSAEncryption 82:50:c9:17:b0:0e:af:f7:55:ad:aa:40:34:10:80:fe:6f:95: be:40:e0:1a:98:33:1a:a2:22:08:00:df:67:27:90:7d:bd:50: 4d:76:4a:11:67:5a:f7:a2:d2:8a:de:ec:66:41:f1:f7:f2:95: ad:ee:9c:ba:4f:16:ad:6c:fc:9c:1d:7b:50:d5:c3:d5:7e:de: e8:2c:bf:63:f5:72:dd:b8:c8:6a:a7:7e:62:93:8c:04:1a:f7: 83:97:d9:86:3c:6e:b6:62:44:e6:d2:1c:d7:d5:c9:2d:11:f1: 7c:08:8d:ac:c9:1a:e8:ab:4b:45:32:02:5e:a5:5a:5b:93:04: 69:8e:cf:8b:bd:aa:33:19:34:c4:ba:fd:a4:6b:7d:1a:12:79: ec:1e:8a:71:47:6c:62:5d:b7:96:63:44:8c:d8:e2:63:92:9b: c1:83:53:65:7a:f2:e8:06:0f:a2:a8:0b:64:55:a8:f9:24:0c: 8b:6e:7e:ee:e2:3d:6f:46:8e:89:37:9b:60:56:4a:40:3f:81: e0:93:3c:4a:bd:df:76:4d:77:e0:a6:4e:8b:2d:29:ae:82:c6: 5a:0a:55:ca:66:ab:6d:98:e7:fa:aa:88:4b:b7:32:a4:c9:e5: 2f:c2:36:0c:5a:af:70:72:49:d0:df:98:55:85:64:1c:43:ef: 0d:6d:ee:c9 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZqPLnRintvvwQg52n3eLboDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjc2YWM5ZjdhODRhZDc5MGFkNTdjODgwYmM5Zjg2MmFk NGM5ZTcwHhcNMjUxMTE3MDAxOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDAwNWZiOWNlMjdiZWQxZGU0ZjRiZWExYmEyNDAxMWUwMWZkYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2fs/c8pweMYm4o74c7GfCnPGxRz VmLc+9UigPp+KZRMFH34+03OtDt+WokJwwSdZCpO0jeNdqvac7GHPqo5iaMmnD5P PdKFgsTEyCDdmKbukOOcS1WKH/ZyhBf88a/jIqo9W6QIIyDSpqzcEBeCIDDuteqF dybTfyGfPFi76HXQ+Em8i5+486GOuoCGWljD06qti/AlvMcyoLn69+u73gWdqpA6 5W909olkiPun8Bf866Mmbi8vTeiojl3jfQ643xfxPFVweN5gnYPnpx/zpuAYTrNF dAv2egZl4ztQPVjxLjtjScZCxH0rMG9hXMOWgH/9kraqnG5Jdzk5ujQcrwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFEAAX7nOJ77R3k9L6huiQBHgH9tTMB8GA1UdIwQY MBaAFJO3asn3qErXkK1XyIC8n4Yq1MnnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzkt OTk4Mjc4ZjRmYmIyLzEvUUFCZnVjNG52dEhlVDB2cUc2SkFFZUFmMjFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kMzNjZTAtNjlhMC00YmEzLWIzYzktOTk4Mjc4ZjRmYmIy LzEvazdkcXlmZW9TdGVRclZmSWdMeWZoaXJVeWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArAwQDBeI4AwQD W2Y4AwQFXojgAwQEbUgQMAsDAwCJ3QMEA4ndEAMEArkwbDANBgkqhkiG9w0BAQsF AAOCAQEAglDJF7AOr/dVrapANBCA/m+VvkDgGpgzGqIiCADfZyeQfb1QTXZKEWda 96LSit7sZkHx9/KVre6cuk8WrWz8nB17UNXD1X7e6Cy/Y/Vy3bjIaqd+YpOMBBr3 g5fZhjxutmJE5tIc19XJLRHxfAiNrMka6KtLRTICXqVaW5MEaY7Pi72qMxk0xLr9 pGt9GhJ57B6KcUdsYl23lmNEjNjiY5KbwYNTZXry6AYPoqgLZFWo+SQMi25+7uI9 b0aOiTebYFZKQD+B4JM8Sr3fdk134KZOiy0proLGWgpVymarbZjn+qqIS7cypMnl L8I2DFqvcHJJ0N+YVYVkHEPvDW3uyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:41:59 2025 by rpki-client