This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/wEOyaII8ofTcxpdp7U0hKgvJ_rA.roa File: wEOyaII8ofTcxpdp7U0hKgvJ_rA.roa (raw, json) Hash identifier: BzCbGCRxMuWWL0WJXC3qLwx7jLDACyNbgAFEvlAin18= Subject key identifier: C0:43:B2:68:82:3C:A1:F4:DC:C6:97:69:ED:4D:21:2A:0B:C9:FE:B0 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 019AE3883EED608C91AA222A87204452FC19 Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/wEOyaII8ofTcxpdp7U0hKgvJ_rA.roa Signing time: Wed 03 Dec 2025 09:25:48 +0000 ROA not before: Wed 03 Dec 2025 09:25:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35470 IP address blocks: 31.3.100.0/24 maxlen: 24 79.170.89.0/24 maxlen: 24 79.170.92.0/24 maxlen: 24 81.4.84.0/22 maxlen: 24 83.96.200.0/22 maxlen: 24 83.96.204.0/22 maxlen: 24 83.96.212.0/22 maxlen: 24 83.96.216.0/22 maxlen: 24 83.96.220.0/22 maxlen: 24 83.96.236.0/22 maxlen: 24 83.96.240.0/22 maxlen: 24 83.96.241.0/24 maxlen: 24 83.96.244.0/22 maxlen: 24 83.96.245.0/24 maxlen: 24 83.96.252.0/22 maxlen: 24 85.10.176.0/22 maxlen: 24 85.10.184.0/22 maxlen: 22 85.10.184.0/24 maxlen: 24 85.10.185.0/24 maxlen: 24 85.10.186.0/24 maxlen: 24 85.10.187.0/24 maxlen: 24 85.10.188.0/22 maxlen: 22 85.222.224.0/22 maxlen: 24 89.31.98.0/23 maxlen: 24 89.31.101.0/24 maxlen: 24 93.191.134.0/24 maxlen: 24 93.191.135.0/24 maxlen: 24 141.138.207.0/24 maxlen: 24 185.3.208.0/22 maxlen: 24 185.110.172.0/22 maxlen: 24 185.110.200.0/22 maxlen: 24 185.110.202.0/23 maxlen: 24 193.138.205.0/24 maxlen: 24 193.138.206.0/23 maxlen: 24 194.60.207.0/24 maxlen: 24 213.187.240.0/21 maxlen: 24 2a02:348:10::/44 maxlen: 48 2a02:348:20::/44 maxlen: 48 2a02:348:a8::/45 maxlen: 48 2a02:348:c0::/44 maxlen: 48 2a02:348:500::/40 maxlen: 48 2a02:348:5e6::/48 maxlen: 48 2a02:348:600::/39 maxlen: 48 2a02:348:1200::/40 maxlen: 48 2a02:348:1700::/40 maxlen: 48 2a02:348:1800::/40 maxlen: 48 2a02:348:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:88:3e:ed:60:8c:91:aa:22:2a:87:20:44:52:fc:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Dec 3 09:25:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c043b268823ca1f4dcc69769ed4d212a0bc9feb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:ed:c9:6d:22:fa:c1:57:d4:87:b7:bc:71: 01:49:2d:eb:c7:a7:d3:02:41:7d:e7:82:87:96:66: cd:13:4e:4e:e7:11:c4:4c:f2:b0:04:a0:fa:df:28: ee:24:45:39:7c:ac:e7:28:95:06:cc:fb:83:3a:63: e0:f6:55:03:62:bd:59:72:13:0c:19:b3:75:72:0d: d4:58:ce:bf:20:8b:0b:7f:4e:31:dc:2a:62:f8:26: cd:2c:ee:25:36:86:10:fd:46:e2:b5:65:7a:f7:df: 59:f4:f0:53:20:b7:d6:ca:f1:c6:b2:47:7e:bd:65: d4:e4:e1:77:21:44:81:1e:a8:b1:9f:73:ad:28:8e: 62:29:fc:2a:07:54:b0:d5:a1:4e:80:b5:1d:be:7e: e6:e9:a7:f3:e8:96:39:84:fd:7a:b4:c9:3d:92:2e: 59:f8:e3:b8:3f:8a:87:62:bb:f0:ac:d3:61:66:d9: 3c:d9:90:80:88:98:f0:21:85:a9:95:16:ca:98:b7: 83:78:cc:8f:cb:64:c0:2b:e6:b6:39:be:33:2a:6c: 27:a0:2d:6e:f1:02:2b:f4:34:36:44:79:04:f5:e0: db:1e:6c:f9:36:db:2a:09:08:32:8d:49:e0:ff:f0: 52:2e:ba:10:b4:52:63:8f:14:19:e7:cf:f2:f5:7a: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:43:B2:68:82:3C:A1:F4:DC:C6:97:69:ED:4D:21:2A:0B:C9:FE:B0 X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/wEOyaII8ofTcxpdp7U0hKgvJ_rA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.100.0/24 79.170.89.0/24 79.170.92.0/24 81.4.84.0/22 83.96.200.0/21 83.96.212.0-83.96.223.255 83.96.236.0-83.96.247.255 83.96.252.0/22 85.10.176.0/22 85.10.184.0/21 85.222.224.0/22 89.31.98.0/23 89.31.101.0/24 93.191.134.0/23 141.138.207.0/24 185.3.208.0/22 185.110.172.0/22 185.110.200.0/22 193.138.205.0-193.138.207.255 194.60.207.0/24 213.187.240.0/21 IPv6: 2a02:348:10::-2a02:348:2f:ffff:ffff:ffff:ffff:ffff 2a02:348:a8::/45 2a02:348:c0::/44 2a02:348:500::-2a02:348:7ff:ffff:ffff:ffff:ffff:ffff 2a02:348:1200::/40 2a02:348:1700::-2a02:348:18ff:ffff:ffff:ffff:ffff:ffff 2a02:348:f000::/36 Signature Algorithm: sha256WithRSAEncryption 1b:fa:10:25:ee:bd:6d:69:52:62:cf:6a:4f:b3:d3:e5:31:a8: b6:e0:f9:c5:aa:04:f7:bf:31:32:b1:fb:25:64:76:11:90:7c: 39:11:cb:8c:fc:5e:02:a1:d8:6d:e5:e7:5d:c9:27:b9:17:50: 56:95:e1:62:e3:4b:ea:c1:2d:83:a0:19:8a:b7:27:a2:e3:ee: 7e:e4:80:33:38:ab:d3:3a:be:0e:da:d9:e2:28:c1:86:d2:ce: 9b:99:3c:dd:df:08:4b:4c:bc:c9:20:1a:93:e2:b5:2f:14:0c: 55:45:54:3f:99:85:7b:8e:fe:9e:a6:9d:33:8f:27:d2:91:6d: 1b:69:00:53:29:92:1f:8b:9a:38:25:30:78:7b:88:75:bd:3e: 8b:6d:27:04:f5:8b:a0:c3:34:f5:b9:cd:24:38:6f:ac:9c:0b: 9d:7c:6a:54:b6:7a:19:db:c1:82:89:38:ef:f3:78:34:74:d6: e2:2b:13:a1:e6:6c:47:49:2c:e2:31:22:2c:e7:29:4c:93:3f: 28:42:2f:92:98:9a:5a:37:64:13:e2:ed:e3:8b:93:16:df:48: 2c:5f:76:b6:b9:21:48:96:98:cb:80:2a:33:85:cf:b4:6f:3e: 58:f4:ce:c0:a3:05:7e:1a:13:7a:73:71:58:9c:78:78:aa:fb: a9:b3:ee:2c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAZrjiD7tYIyRqiIqhyBEUvwZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjUxMjAzMDkyNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDQzYjI2ODgyM2NhMWY0ZGNjNjk3NjllZDRkMjEyYTBiYzlmZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJvtyW0i+sFX1Ie3vHEBSS3rx6fT AkF954KHlmbNE05O5xHETPKwBKD63yjuJEU5fKznKJUGzPuDOmPg9lUDYr1ZchMM GbN1cg3UWM6/IIsLf04x3Cpi+CbNLO4lNoYQ/UbitWV6999Z9PBTILfWyvHGskd+ vWXU5OF3IUSBHqixn3OtKI5iKfwqB1Sw1aFOgLUdvn7m6afz6JY5hP16tMk9ki5Z +OO4P4qHYrvwrNNhZtk82ZCAiJjwIYWplRbKmLeDeMyPy2TAK+a2Ob4zKmwnoC1u 8QIr9DQ2RHkE9eDbHmz5NtsqCQgyjUng//BSLroQtFJjjxQZ58/y9XrE6wIDAQAB o4IDAzCCAv8wHQYDVR0OBBYEFMBDsmiCPKH03MaXae1NISoLyf6wMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvd0VPeWFJSThvZlRjeHBkcDdVMGhLZ3ZKX3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBFwYIKwYBBQUHAQcBAf8EggEGMIIBAjCBnQQCAAEwgZYD BAAfA2QDBABPqlkDBABPqlwDBAJRBFQDBANTYMgwDAMEAlNg1AMEBVNgwDAMAwQC U2DsAwQDU2DwAwQCU2D8AwQCVQqwAwQDVQq4AwQCVd7gAwQBWR9iAwQAWR9lAwQB Xb+GAwQAjYrPAwQCuQPQAwQCuW6sAwQCuW7IMAwDBADBis0DBATBisADBADCPM8D BAPVu/AwYAQCAAIwWjASAwcEKgIDSAAQAwcEKgIDSAAgAwcDKgIDSACoAwcEKgID SADAMBADBgAqAgNIBQMGAyoCA0gAAwYAKgIDSBIwEAMGACoCA0gXAwYAKgIDSBgD BgQqAgNI8DANBgkqhkiG9w0BAQsFAAOCAQEAG/oQJe69bWlSYs9qT7PT5TGotuD5 xaoE978xMrH7JWR2EZB8ORHLjPxeAqHYbeXnXcknuRdQVpXhYuNL6sEtg6AZircn ouPufuSAMzir0zq+DtrZ4ijBhtLOm5k83d8IS0y8ySAak+K1LxQMVUVUP5mFe47+ nqadM48n0pFtG2kAUymSH4uaOCUweHuIdb0+i20nBPWLoMM09bnNJDhvrJwLnXxq VLZ6GdvBgok47/N4NHTW4isToeZsR0ks4jEiLOcpTJM/KEIvkpiaWjdkE+Lt44uT Ft9ILF92trkhSJaYy4AqM4XPtG8+WPTOwKMFfhoTenNxWJx4eKr7qbPuLA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:05 2025 by rpki-client