This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/QeHpbtcVegm_fxifqKVsyOrrnCI.roa File: QeHpbtcVegm_fxifqKVsyOrrnCI.roa (raw, json) Hash identifier: kUP9nfM2R6M+pjapUE5Nq3EsDSCVioJ2tIXCwSXgaIE= Subject key identifier: 41:E1:E9:6E:D7:15:7A:09:BF:7F:18:9F:A8:A5:6C:C8:EA:EB:9C:22 Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e Certificate serial: 019A93B0EF7E0DEF9215D187ACA0CB12FE05 Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/QeHpbtcVegm_fxifqKVsyOrrnCI.roa Signing time: Mon 17 Nov 2025 21:20:37 +0000 ROA not before: Mon 17 Nov 2025 21:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12552 IP address blocks: 62.102.144.0/22 maxlen: 22 62.109.32.0/19 maxlen: 19 62.209.160.0/19 maxlen: 19 65.99.128.0/18 maxlen: 18 80.252.160.0/19 maxlen: 19 82.96.0.0/18 maxlen: 18 82.96.28.0/22 maxlen: 22 82.96.43.0/24 maxlen: 24 82.99.0.0/18 maxlen: 18 83.140.0.0/16 maxlen: 16 83.140.30.0/24 maxlen: 24 83.140.95.0/24 maxlen: 24 83.140.96.0/23 maxlen: 23 83.140.99.0/24 maxlen: 24 83.140.108.0/22 maxlen: 22 83.140.113.0/24 maxlen: 24 83.140.156.0/23 maxlen: 23 83.140.171.0/24 maxlen: 24 83.140.221.0/24 maxlen: 24 83.140.231.0/24 maxlen: 24 83.140.249.0/24 maxlen: 24 83.145.0.0/18 maxlen: 18 85.112.160.0/19 maxlen: 19 85.112.184.0/22 maxlen: 22 93.158.64.0/18 maxlen: 18 93.158.68.0/22 maxlen: 22 93.158.76.0/24 maxlen: 24 93.158.78.0/24 maxlen: 24 93.158.88.0/22 maxlen: 22 93.158.92.0/23 maxlen: 23 93.158.95.0/24 maxlen: 24 93.158.98.0/23 maxlen: 23 93.158.100.0/24 maxlen: 24 93.158.102.0/23 maxlen: 23 93.158.107.0/24 maxlen: 24 93.158.108.0/23 maxlen: 23 93.189.240.0/21 maxlen: 21 94.136.64.0/19 maxlen: 19 94.246.64.0/18 maxlen: 18 146.185.8.0/21 maxlen: 21 178.248.24.0/22 maxlen: 22 185.165.80.0/22 maxlen: 22 185.165.172.0/22 maxlen: 22 185.165.172.0/24 maxlen: 24 185.178.140.0/22 maxlen: 22 185.178.143.0/24 maxlen: 24 185.181.216.0/22 maxlen: 22 185.182.84.0/22 maxlen: 22 185.183.144.0/22 maxlen: 22 185.183.152.0/22 maxlen: 22 185.190.144.0/22 maxlen: 22 185.199.168.0/22 maxlen: 22 185.205.224.0/22 maxlen: 22 185.205.226.0/24 maxlen: 24 185.211.136.0/22 maxlen: 22 195.140.200.0/22 maxlen: 22 212.16.160.0/19 maxlen: 19 212.37.0.0/19 maxlen: 19 212.112.160.0/19 maxlen: 19 213.80.0.0/18 maxlen: 18 213.80.64.0/19 maxlen: 19 213.132.96.0/19 maxlen: 19 213.212.0.0/18 maxlen: 18 217.75.96.0/19 maxlen: 19 217.140.112.0/20 maxlen: 20 2001:16d8::/32 maxlen: 32 2a01:2b0::/29 maxlen: 29 2a01:6d0::/32 maxlen: 32 2a0a:6380::/29 maxlen: 29 2a0a:a040::/29 maxlen: 29 2a0a:a040::/32 maxlen: 32 2a0a:a041::/32 maxlen: 32 2a0a:d381::/32 maxlen: 32 2a0a:d381:100::/40 maxlen: 40 2a0a:d381:200::/40 maxlen: 40 2a0a:d381:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:93:b0:ef:7e:0d:ef:92:15:d1:87:ac:a0:cb:12:fe:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e Validity Not Before: Nov 17 21:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=41e1e96ed7157a09bf7f189fa8a56cc8eaeb9c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:76:41:6f:47:a8:fe:63:a3:43:62:2a:50: 8c:81:78:5d:a8:3d:e6:b8:9e:ba:17:63:f4:76:13: 0c:3c:3e:e5:90:5e:fb:ca:ac:5d:9c:bf:e5:98:05: 28:e5:a7:4c:59:15:a9:d3:e4:bb:b9:b9:ab:78:ed: bf:65:8a:61:1d:e3:37:7b:cc:d8:21:f2:3e:50:4a: 80:80:f0:ed:c3:4a:e7:bc:e9:e1:c2:37:28:3d:c4: e4:20:07:06:bc:7e:55:14:85:69:a6:95:17:6c:50: 17:f7:ee:e6:8f:b6:cb:59:e1:20:1f:ff:ad:8b:0d: 1e:86:7b:e9:a4:56:ef:5c:ca:b0:19:ed:bc:6b:32: 99:32:1d:06:af:df:7a:b9:35:79:62:7e:7d:38:e6: 09:af:7d:86:e2:77:b5:ae:9e:2f:83:69:48:28:68: 3e:ea:0e:22:8e:95:41:f2:27:58:d6:96:0f:e2:ad: 3a:bf:c1:8d:37:26:8a:73:0d:f2:df:c3:4d:1c:43: 4a:d5:49:de:0c:a0:19:4b:76:8b:af:05:32:4d:f2: f8:cf:52:1e:12:41:22:96:1e:b1:98:73:89:f0:5a: c2:21:4f:11:c1:14:4c:db:96:0f:18:b4:e9:80:dc: 62:f3:62:ee:5d:1b:66:c3:66:67:95:4c:4b:20:78: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E1:E9:6E:D7:15:7A:09:BF:7F:18:9F:A8:A5:6C:C8:EA:EB:9C:22 X509v3 Authority Key Identifier: keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/QeHpbtcVegm_fxifqKVsyOrrnCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.102.144.0/22 62.109.32.0/19 62.209.160.0/19 65.99.128.0/18 80.252.160.0/19 82.96.0.0/18 82.99.0.0/18 83.140.0.0/16 83.145.0.0/18 85.112.160.0/19 93.158.64.0/18 93.189.240.0/21 94.136.64.0/19 94.246.64.0/18 146.185.8.0/21 178.248.24.0/22 185.165.80.0/22 185.165.172.0/22 185.178.140.0/22 185.181.216.0/22 185.182.84.0/22 185.183.144.0/22 185.183.152.0/22 185.190.144.0/22 185.199.168.0/22 185.205.224.0/22 185.211.136.0/22 195.140.200.0/22 212.16.160.0/19 212.37.0.0/19 212.112.160.0/19 213.80.0.0-213.80.95.255 213.132.96.0/19 213.212.0.0/18 217.75.96.0/19 217.140.112.0/20 IPv6: 2001:16d8::/32 2a01:2b0::/29 2a01:6d0::/32 2a0a:6380::/29 2a0a:a040::/29 2a0a:d381::/32 Signature Algorithm: sha256WithRSAEncryption 42:df:16:a3:aa:97:3f:00:88:92:a9:f5:3a:76:28:24:3a:42: db:44:00:d1:49:43:96:06:58:2c:16:bf:46:c0:a0:53:55:60: c4:cb:82:f3:c9:a2:4f:15:f6:68:86:b1:33:10:1e:a9:c2:f8: 78:65:bc:4a:80:c7:67:6e:18:2b:a5:e0:24:fb:a0:b7:d0:38: d8:b2:23:62:f4:cc:7f:e4:43:5c:80:7e:f2:50:32:2d:4d:6a: ad:cf:a7:63:28:93:b7:c9:75:09:90:2c:79:9d:25:4c:38:eb: bc:17:fa:34:52:49:91:0e:24:73:9f:f1:57:c5:c5:86:f7:29: 2e:42:a5:ce:95:fc:87:eb:45:f6:b6:35:1b:88:79:05:ee:82: 5e:5b:92:87:01:a1:11:c4:b5:04:aa:a7:84:76:29:8b:93:6a: 8e:db:38:0f:11:cd:e2:5d:fa:f1:ca:ca:14:ab:b7:2a:ce:e2: 12:57:6e:ed:76:20:84:59:ce:90:2e:36:f3:69:87:59:f6:5e: 6d:0e:b6:ea:cb:4c:4e:14:b9:d5:54:fc:e0:47:74:b4:98:c4: 69:ae:f7:da:da:16:1a:7e:d0:12:ee:b7:6d:c9:88:c7:b9:56: 1c:95:71:e4:ad:5f:25:28:60:45:ee:13:92:ab:d7:12:ba:e0: 7f:79:0d:2a -----BEGIN CERTIFICATE----- MIIGDzCCBPegAwIBAgISAZqTsO9+De+SFdGHrKDLEv4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3 M2QwMmUwHhcNMjUxMTE3MjEyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWUxZTk2ZWQ3MTU3YTA5YmY3ZjE4OWZhOGE1NmNjOGVhZWI5YzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM92QW9HqP5jo0NiKlCMgXhdqD3m uJ66F2P0dhMMPD7lkF77yqxdnL/lmAUo5adMWRWp0+S7ubmreO2/ZYphHeM3e8zY IfI+UEqAgPDtw0rnvOnhwjcoPcTkIAcGvH5VFIVpppUXbFAX9+7mj7bLWeEgH/+t iw0ehnvppFbvXMqwGe28azKZMh0Gr996uTV5Yn59OOYJr32G4ne1rp4vg2lIKGg+ 6g4ijpVB8idY1pYP4q06v8GNNyaKcw3y38NNHENK1UneDKAZS3aLrwUyTfL4z1Ie EkEilh6xmHOJ8FrCIU8RwRRM25YPGLTpgNxi82LuXRtmw2ZnlUxLIHhQaQIDAQAB o4IDGzCCAxcwHQYDVR0OBBYEFEHh6W7XFXoJv38Yn6ilbMjq65wiMB8GA1UdIwQY MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt M2I4YjBkMWE1OWE5LzEvUWVIcGJ0Y1ZlZ21fZnhpZnFLVnN5T3JybkNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5 LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCB5QQCAAEwgd4D BAI+ZpADBAU+bSADBAU+0aADBAZBY4ADBAVQ/KADBAZSYAADBAZSYwADAwBTjAME BlORAAMEBVVwoAMEBl2eQAMEA1298AMEBV6IQAMEBl72QAMEA5K5CAMEArL4GAME ArmlUAMEArmlrAMEArmyjAMEArm12AMEArm2VAMEArm3kAMEArm3mAMEArm+kAME ArnHqAMEArnN4AMEArnTiAMEAsOMyAMEBdQQoAMEBdQlAAMEBdRwoDALAwME1VAD BAXVUEADBAXVhGADBAbV1AADBAXZS2ADBATZjHAwMAQCAAIwKgMFACABFtgDBQMq AQKwAwUAKgEG0AMFAyoKY4ADBQMqCqBAAwUAKgrTgTANBgkqhkiG9w0BAQsFAAOC AQEAQt8Wo6qXPwCIkqn1OnYoJDpC20QA0UlDlgZYLBa/RsCgU1VgxMuC88miTxX2 aIaxMxAeqcL4eGW8SoDHZ24YK6XgJPugt9A42LIjYvTMf+RDXIB+8lAyLU1qrc+n YyiTt8l1CZAseZ0lTDjrvBf6NFJJkQ4kc5/xV8XFhvcpLkKlzpX8h+tF9rY1G4h5 Be6CXluShwGhEcS1BKqnhHYpi5Nqjts4DxHN4l368crKFKu3Ks7iEldu7XYghFnO kC4282mHWfZebQ626stMThS51VT84Ed0tJjEaa732toWGn7QEu63bcmIx7lWHJVx 5K1fJShgRe4TkqvXErrgf3kNKg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:38 2025 by rpki-client