This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/G8x1vVBRYsXmZPS43ryzlAToalk.roa File: G8x1vVBRYsXmZPS43ryzlAToalk.roa (raw, json) Hash identifier: zv3fUNIgcV4McKQ1WqNZ3h6XRcK9qRBMGJRh2r54rtQ= Subject key identifier: 1B:CC:75:BD:50:51:62:C5:E6:64:F4:B8:DE:BC:B3:94:04:E8:6A:59 Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Certificate serial: 019AEEC3083BDF02CFAF33A0EB89F9CC5A97 Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/G8x1vVBRYsXmZPS43ryzlAToalk.roa Signing time: Fri 05 Dec 2025 13:45:50 +0000 ROA not before: Fri 05 Dec 2025 13:45:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25441 IP address blocks: 62.231.32.0/19 maxlen: 19 78.135.128.0/17 maxlen: 17 78.135.208.0/21 maxlen: 21 78.135.216.0/21 maxlen: 21 78.135.224.0/21 maxlen: 21 78.135.232.0/21 maxlen: 21 78.135.240.0/21 maxlen: 21 78.135.248.0/21 maxlen: 21 83.141.64.0/18 maxlen: 18 85.134.128.0/17 maxlen: 17 85.134.128.0/21 maxlen: 21 85.134.136.0/21 maxlen: 21 85.134.144.0/21 maxlen: 21 85.134.152.0/21 maxlen: 21 85.134.160.0/21 maxlen: 21 85.134.168.0/21 maxlen: 21 85.134.176.0/21 maxlen: 21 85.134.184.0/21 maxlen: 21 85.134.192.0/21 maxlen: 21 85.134.200.0/21 maxlen: 21 85.134.208.0/21 maxlen: 21 85.134.216.0/21 maxlen: 21 85.134.224.0/21 maxlen: 21 85.134.232.0/21 maxlen: 21 85.134.240.0/21 maxlen: 21 85.134.248.0/21 maxlen: 21 87.192.0.0/18 maxlen: 18 87.192.64.0/20 maxlen: 20 87.192.82.0/23 maxlen: 23 87.192.84.0/22 maxlen: 22 87.192.192.0/20 maxlen: 20 87.192.216.0/22 maxlen: 22 87.192.222.0/23 maxlen: 23 87.232.0.0/19 maxlen: 19 87.232.192.0/24 maxlen: 24 87.232.194.0/23 maxlen: 23 87.232.196.0/22 maxlen: 22 87.232.225.0/24 maxlen: 24 87.232.228.0/22 maxlen: 22 89.124.0.0/24 maxlen: 24 89.124.224.0/20 maxlen: 20 89.124.245.0/24 maxlen: 24 89.126.0.0/22 maxlen: 22 89.126.4.0/22 maxlen: 22 89.126.8.0/22 maxlen: 22 89.126.12.0/22 maxlen: 22 89.126.16.0/22 maxlen: 22 89.126.20.0/22 maxlen: 22 89.126.24.0/22 maxlen: 22 89.126.28.0/22 maxlen: 22 89.127.0.0/17 maxlen: 17 89.127.128.0/18 maxlen: 18 89.127.192.0/19 maxlen: 19 89.127.240.0/21 maxlen: 21 89.127.248.0/22 maxlen: 22 89.127.254.0/23 maxlen: 23 185.247.52.0/22 maxlen: 22 2001:4d68::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:c3:08:3b:df:02:cf:af:33:a0:eb:89:f9:cc:5a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Validity Not Before: Dec 5 13:45:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1bcc75bd505162c5e664f4b8debcb39404e86a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:7e:62:b0:26:11:ac:84:44:ae:b3:b6:5f: 1b:ed:16:93:5b:b3:a7:fc:f4:83:18:3d:e7:11:7f: 86:a4:b3:8f:a1:4c:0e:06:72:d2:73:90:b3:6f:4e: c4:14:51:bf:d4:72:75:29:33:3d:10:3a:0e:fa:67: 7c:2f:64:45:40:91:79:c7:2b:e6:f3:f3:1d:08:12: e4:81:eb:d7:89:19:2b:72:2f:c3:93:c4:d7:9d:ef: ba:42:c0:33:2d:32:db:44:88:6c:63:3c:37:9e:c5: 0a:7a:f4:e4:41:92:50:5f:29:31:d7:c1:d0:1a:70: 98:99:eb:eb:fa:84:41:2c:f5:81:97:09:dc:87:6d: 31:43:a0:8b:0f:d5:a9:5b:84:01:8a:b5:26:8f:d1: 7e:b3:3f:61:99:cb:ca:71:59:b6:64:ba:cc:4e:72: 3f:fe:5e:e9:e0:08:e9:f5:45:a6:9e:38:87:cb:9d: e9:61:dc:7a:00:0b:07:61:06:0f:95:4e:09:a2:72: fc:ee:8d:bd:27:be:6b:18:88:ec:84:93:e1:81:85: c8:05:82:cc:34:01:2d:1c:10:0f:27:40:af:f4:b2: a1:10:e3:45:3a:98:d6:de:41:4e:69:6a:36:bb:8c: 34:b1:47:d2:d5:39:fb:44:87:44:1a:d4:04:92:11: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CC:75:BD:50:51:62:C5:E6:64:F4:B8:DE:BC:B3:94:04:E8:6A:59 X509v3 Authority Key Identifier: keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/G8x1vVBRYsXmZPS43ryzlAToalk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.231.32.0/19 78.135.128.0/17 83.141.64.0/18 85.134.128.0/17 87.192.0.0-87.192.79.255 87.192.82.0-87.192.87.255 87.192.192.0/20 87.192.216.0/22 87.192.222.0/23 87.232.0.0/19 87.232.192.0/24 87.232.194.0-87.232.199.255 87.232.225.0/24 87.232.228.0/22 89.124.0.0/24 89.124.224.0/20 89.124.245.0/24 89.126.0.0/19 89.127.0.0-89.127.223.255 89.127.240.0-89.127.251.255 89.127.254.0/23 185.247.52.0/22 IPv6: 2001:4d68::/32 Signature Algorithm: sha256WithRSAEncryption 28:9d:cd:46:19:9d:2b:64:f2:78:b0:6f:95:93:85:43:a6:ed: 53:e4:00:cb:ab:20:36:48:ef:ca:c7:7b:19:cc:a6:d1:a0:c4: f6:4b:53:9f:dc:27:05:61:64:dd:08:7f:99:a2:b4:ac:17:f3: 5a:30:e5:50:97:76:60:72:41:e3:ea:2e:8f:20:a2:77:ef:6e: c3:d7:ab:c4:6f:7a:00:98:60:ba:7d:15:21:29:98:6d:6c:c7: 19:bf:f5:d4:6c:e8:9b:66:71:4b:90:38:1c:74:e1:50:df:8b: 93:28:ae:17:d2:35:bf:66:0b:bb:60:c4:db:43:e8:e5:24:b6: 12:67:e9:b9:d5:d5:c8:b8:0c:bc:26:99:a5:69:a0:8a:86:03: 86:d7:ae:ee:e9:4b:10:eb:b9:66:ad:18:8e:b5:6c:74:58:82: 2a:20:bf:1e:c9:8f:9e:c6:4b:2f:bb:1b:d5:b9:47:4b:94:4a: 82:09:1d:25:e6:28:20:8c:f5:6c:a5:b8:1a:c7:08:02:74:76: 6a:39:a4:0b:33:e5:c0:e0:eb:8b:cb:1d:82:c7:97:4b:20:c3: fb:0d:24:cc:f9:89:17:23:54:7c:7a:e6:dc:d5:fd:fd:b3:ca: 2b:8a:dc:08:e8:6a:ea:09:03:ee:34:9e:49:5b:9c:28:40:98: 12:0b:17:23 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZruwwg73wLPrzOg64n5zFqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2 YmU2NDIwHhcNMjUxMjA1MTM0NTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmNjNzViZDUwNTE2MmM1ZTY2NGY0YjhkZWJjYjM5NDA0ZTg2YTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmV+YrAmEayERK6ztl8b7RaTW7On /PSDGD3nEX+GpLOPoUwOBnLSc5Czb07EFFG/1HJ1KTM9EDoO+md8L2RFQJF5xyvm 8/MdCBLkgevXiRkrci/Dk8TXne+6QsAzLTLbRIhsYzw3nsUKevTkQZJQXykx18HQ GnCYmevr+oRBLPWBlwnch20xQ6CLD9WpW4QBirUmj9F+sz9hmcvKcVm2ZLrMTnI/ /l7p4Ajp9UWmnjiHy53pYdx6AAsHYQYPlU4JonL87o29J75rGIjshJPhgYXIBYLM NAEtHBAPJ0Cv9LKhEONFOpjW3kFOaWo2u4w0sUfS1Tn7RIdEGtQEkhFFPwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFBvMdb1QUWLF5mT0uN68s5QE6GpZMB8GA1UdIwQY MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt NTc4OWRlNDI0YTQyLzEvRzh4MXZWQlJZc1htWlBTNDNyeXpsQVRvYWxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHWBggrBgEFBQcBBwEB/wSBxjCBwzCBsQQCAAEwgaoDBAU+ 5yADBAdOh4ADBAZTjUADBAdVhoAwCwMDBlfAAwQEV8BAMAwDBAFXwFIDBANXwFAD BARXwMADBAJXwNgDBAFXwN4DBAVX6AADBABX6MAwDAMEAVfowgMEA1fowAMEAFfo 4QMEAlfo5AMEAFl8AAMEBFl84AMEAFl89QMEBVl+ADALAwMAWX8DBAVZf8AwDAME BFl/8AMEAll/+AMEAVl//gMEArn3NDANBAIAAjAHAwUAIAFNaDANBgkqhkiG9w0B AQsFAAOCAQEAKJ3NRhmdK2TyeLBvlZOFQ6btU+QAy6sgNkjvysd7Gcym0aDE9ktT n9wnBWFk3Qh/maK0rBfzWjDlUJd2YHJB4+oujyCid+9uw9erxG96AJhgun0VISmY bWzHGb/11Gzom2ZxS5A4HHThUN+LkyiuF9I1v2YLu2DE20Po5SS2EmfpudXVyLgM vCaZpWmgioYDhteu7ulLEOu5Zq0YjrVsdFiCKiC/HsmPnsZLL7sb1blHS5RKggkd JeYoIIz1bKW4GscIAnR2ajmkCzPlwODri8sdgseXSyDD+w0kzPmJFyNUfHrm3NX9 /bPKK4rcCOhq6gkD7jSeSVucKECYEgsXIw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:41 2025 by rpki-client