This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/zSb8_4z_t4ghRM_Xlv4jNaBnlZo.roa File: zSb8_4z_t4ghRM_Xlv4jNaBnlZo.roa (raw, json) Hash identifier: lIQeqP7XnTmZINxSIi5omnfSVVcthpIv6JLsOviMBeE= Subject key identifier: CD:26:FC:FF:8C:FF:B7:88:21:44:CF:D7:96:FE:23:35:A0:67:95:9A Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65 Certificate serial: 019A807C8D0A81FD1C0B4DEB53475D58BF95 Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/zSb8_4z_t4ghRM_Xlv4jNaBnlZo.roa Signing time: Fri 14 Nov 2025 03:50:37 +0000 ROA not before: Fri 14 Nov 2025 03:50:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29182 IP address blocks: 37.46.128.0/23 maxlen: 23 37.46.130.0/23 maxlen: 23 37.46.132.0/23 maxlen: 23 37.46.134.0/23 maxlen: 23 45.141.208.0/22 maxlen: 22 45.150.8.0/22 maxlen: 22 62.109.0.0/20 maxlen: 20 62.109.0.0/21 maxlen: 21 62.109.8.0/21 maxlen: 21 62.109.16.0/21 maxlen: 21 62.109.24.0/22 maxlen: 22 62.109.28.0/22 maxlen: 22 77.246.156.0/22 maxlen: 22 77.246.156.0/23 maxlen: 23 77.246.158.0/23 maxlen: 23 80.87.192.0/23 maxlen: 23 80.87.194.0/23 maxlen: 23 80.87.196.0/23 maxlen: 23 80.87.198.0/23 maxlen: 23 80.87.200.0/23 maxlen: 23 80.87.202.0/24 maxlen: 24 80.87.203.0/24 maxlen: 24 82.146.32.0/21 maxlen: 21 82.146.32.0/23 maxlen: 23 82.146.34.0/23 maxlen: 23 82.146.36.0/23 maxlen: 23 82.146.38.0/23 maxlen: 23 82.146.40.0/21 maxlen: 21 82.146.48.0/23 maxlen: 23 82.146.50.0/23 maxlen: 23 82.146.52.0/23 maxlen: 23 82.146.54.0/23 maxlen: 23 82.146.56.0/21 maxlen: 21 82.202.160.0/23 maxlen: 23 82.202.162.0/23 maxlen: 23 82.202.165.0/24 maxlen: 24 82.202.166.0/23 maxlen: 23 82.202.168.0/23 maxlen: 23 82.202.170.0/23 maxlen: 23 82.202.172.0/23 maxlen: 23 82.202.174.0/23 maxlen: 23 83.220.168.0/23 maxlen: 23 83.220.170.0/23 maxlen: 23 83.220.172.0/23 maxlen: 23 83.220.174.0/23 maxlen: 23 85.198.72.0/23 maxlen: 23 85.198.74.0/23 maxlen: 23 85.198.116.0/23 maxlen: 23 85.198.118.0/23 maxlen: 23 89.169.40.0/23 maxlen: 23 89.169.42.0/23 maxlen: 23 91.240.84.0/23 maxlen: 23 91.240.86.0/23 maxlen: 23 92.63.96.0/21 maxlen: 21 92.63.104.0/22 maxlen: 22 92.63.108.0/22 maxlen: 22 92.63.108.0/24 maxlen: 24 92.63.109.0/24 maxlen: 24 92.63.110.0/23 maxlen: 23 176.12.64.0/21 maxlen: 21 185.43.4.0/23 maxlen: 23 185.43.6.0/23 maxlen: 23 185.63.188.0/22 maxlen: 22 185.146.156.0/23 maxlen: 23 185.146.158.0/23 maxlen: 23 185.246.64.0/23 maxlen: 23 185.246.66.0/23 maxlen: 23 185.253.32.0/23 maxlen: 23 185.253.34.0/23 maxlen: 23 195.140.144.0/23 maxlen: 23 195.140.146.0/23 maxlen: 23 212.109.192.0/22 maxlen: 22 212.109.196.0/23 maxlen: 23 212.109.198.0/23 maxlen: 23 212.109.216.0/23 maxlen: 23 212.109.218.0/23 maxlen: 23 212.109.220.0/23 maxlen: 23 212.109.222.0/24 maxlen: 24 212.109.223.0/24 maxlen: 24 213.159.208.0/23 maxlen: 23 213.159.210.0/23 maxlen: 23 213.159.212.0/23 maxlen: 23 213.159.214.0/23 maxlen: 23 2a09:f900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:80:7c:8d:0a:81:fd:1c:0b:4d:eb:53:47:5d:58:bf:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65 Validity Not Before: Nov 14 03:50:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cd26fcff8cffb7882144cfd796fe2335a067959a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:26:72:7d:a5:85:ea:70:67:4a:50:c0:f1: 96:c3:7b:db:77:26:9d:f3:71:d9:94:3b:3f:ae:8d: 64:cf:0f:dd:db:33:1b:cb:b8:88:0e:34:7d:74:71: df:a2:2c:39:dd:7d:e5:42:b2:6d:47:88:9e:8d:44: 02:84:b9:35:99:05:c6:42:85:9e:4f:b3:3e:e5:c5: 5c:87:54:d4:9e:35:f7:f6:e0:1c:2d:6d:c3:fa:fc: c5:91:3a:81:03:50:e2:5e:86:b0:bc:c2:32:56:29: 46:3d:d8:a5:f9:90:93:2e:8c:fb:4f:59:0e:e8:7b: 74:f9:aa:60:42:b1:8b:46:11:50:fc:cd:6e:1b:29: 39:ed:e0:ca:9f:80:40:8e:ac:56:10:24:05:3b:62: 85:35:e4:f1:c4:0c:50:42:c3:21:df:47:29:f1:d8: 3b:b8:b8:13:e6:35:78:44:f2:1d:f7:5e:d9:ad:ee: 36:e5:dc:9a:ed:96:f3:99:0e:0f:04:f4:83:ee:10: c8:d5:ca:29:88:7e:8b:39:50:95:36:7f:bf:39:f9: b7:23:d0:52:e4:63:6d:63:f1:4c:0a:a2:d2:66:65: 03:c5:ea:38:e2:c8:ca:0b:8d:1d:b6:fb:6a:6b:62: 0c:c8:52:36:77:18:95:dd:11:91:05:28:b8:72:95: e7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:26:FC:FF:8C:FF:B7:88:21:44:CF:D7:96:FE:23:35:A0:67:95:9A X509v3 Authority Key Identifier: keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/zSb8_4z_t4ghRM_Xlv4jNaBnlZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.128.0/21 45.141.208.0/22 45.150.8.0/22 62.109.0.0/19 77.246.156.0/22 80.87.192.0-80.87.203.255 82.146.32.0/19 82.202.160.0/22 82.202.165.0-82.202.175.255 83.220.168.0/21 85.198.72.0/22 85.198.116.0/22 89.169.40.0/22 91.240.84.0/22 92.63.96.0/20 176.12.64.0/21 185.43.4.0/22 185.63.188.0/22 185.146.156.0/22 185.246.64.0/22 185.253.32.0/22 195.140.144.0/22 212.109.192.0/21 212.109.216.0/21 213.159.208.0/21 IPv6: 2a09:f900::/48 Signature Algorithm: sha256WithRSAEncryption 29:f5:c5:9d:28:65:af:fe:da:e7:e1:8c:51:a1:e0:61:17:d0: 6d:63:6a:33:0e:4f:4d:2f:49:70:1b:ba:c7:cf:6d:40:35:b4: 16:46:d7:37:bb:bd:8b:2a:53:b8:5a:de:d4:78:5f:28:2f:9e: 4c:40:6e:6a:43:11:cc:16:fa:56:40:76:84:2c:6f:30:3b:10: f4:94:78:89:0e:59:0e:30:36:e7:76:5b:1b:c4:b1:32:c9:73: f0:05:5c:fe:72:5b:cd:4d:87:a7:46:ef:c2:84:25:0d:80:d1: 9f:77:96:f2:d4:2d:61:fb:a9:ea:5e:33:a9:b0:a7:87:7e:52: 1e:e3:8a:01:b1:97:a5:2f:d9:52:4f:87:31:28:b6:a3:6d:10: bc:2e:bb:b4:3a:1c:d7:a3:08:2d:ce:97:06:63:4a:c9:e6:ac: ab:67:7e:78:2b:39:9d:be:85:1a:61:02:8f:81:ad:0d:84:41: f9:15:dd:22:d4:61:aa:c3:ef:3a:6c:86:c5:1f:9c:ef:f8:fd: 91:f5:48:68:35:77:4b:4b:c8:c9:d8:8f:4e:80:73:22:f2:d0: dd:39:c2:77:61:14:ae:67:5f:c6:c2:b1:13:3d:29:89:79:16: 75:8d:11:96:2c:fb:54:a5:d5:bb:e5:a0:cc:4b:44:66:66:79: 6c:d9:05:e5 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZqAfI0Kgf0cC03rU0ddWL+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDFhNWEyYTE4MzM5NjI5Y2MxMzAzZTZkZWM4YmI2MDVk ZGNhNjUwHhcNMjUxMTE0MDM1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDI2ZmNmZjhjZmZiNzg4MjE0NGNmZDc5NmZlMjMzNWEwNjc5NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteUmcn2lhepwZ0pQwPGWw3vbdyad 83HZlDs/ro1kzw/d2zMby7iIDjR9dHHfoiw53X3lQrJtR4iejUQChLk1mQXGQoWe T7M+5cVch1TUnjX39uAcLW3D+vzFkTqBA1DiXoawvMIyVilGPdil+ZCTLoz7T1kO 6Ht0+apgQrGLRhFQ/M1uGyk57eDKn4BAjqxWECQFO2KFNeTxxAxQQsMh30cp8dg7 uLgT5jV4RPId917Zre425dya7ZbzmQ4PBPSD7hDI1copiH6LOVCVNn+/Ofm3I9BS 5GNtY/FMCqLSZmUDxeo44sjKC40dtvtqa2IMyFI2dxiV3RGRBSi4cpXn3QIDAQAB o4ICvzCCArswHQYDVR0OBBYEFM0m/P+M/7eIIUTP15b+IzWgZ5WaMB8GA1UdIwQY MBaAFApBpaKhgzlinMEwPm3si7YF3cplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjIt ODBmN2ZkNmVhOWM5LzEvelNiOF80el90NGdoUk1fWGx2NGpOYUJubFpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjItODBmN2ZkNmVhOWM5 LzEvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTCBrQQCAAEwgaYDBAMl LoADBAItjdADBAItlggDBAU+bQADBAJN9pwwDAMEBlBXwAMEAlBXyAMEBVKSIAME AlLKoDAMAwQAUsqlAwQEUsqgAwQDU9yoAwQCVcZIAwQCVcZ0AwQCWakoAwQCW/BU AwQEXD9gAwQDsAxAAwQCuSsEAwQCuT+8AwQCuZKcAwQCufZAAwQCuf0gAwQCw4yQ AwQD1G3AAwQD1G3YAwQD1Z/QMA8EAgACMAkDBwAqCfkAAAAwDQYJKoZIhvcNAQEL BQADggEBACn1xZ0oZa/+2ufhjFGh4GEX0G1jajMOT00vSXAbusfPbUA1tBZG1ze7 vYsqU7ha3tR4XygvnkxAbmpDEcwW+lZAdoQsbzA7EPSUeIkOWQ4wNud2WxvEsTLJ c/AFXP5yW81Nh6dG78KEJQ2A0Z93lvLULWH7qepeM6mwp4d+Uh7jigGxl6Uv2VJP hzEotqNtELwuu7Q6HNejCC3OlwZjSsnmrKtnfngrOZ2+hRphAo+BrQ2EQfkV3SLU YarD7zpshsUfnO/4/ZH1SGg1d0tLyMnYj06AcyLy0N05wndhFK5nX8bCsRM9KYl5 FnWNEZYs+1Sl1bvloMxLRGZmeWzZBeU= -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:02 2025 by rpki-client