This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/F-1X5qcJhqPuw6x7ViKXkyUx09o.roa File: F-1X5qcJhqPuw6x7ViKXkyUx09o.roa (raw, json) Hash identifier: Apzx4hv2MRExsVH/hZbIIh19heCrhbc9nS0ODaliL2k= Subject key identifier: 17:ED:57:E6:A7:09:86:A3:EE:C3:AC:7B:56:22:97:93:25:31:D3:DA Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019A86F667A75F7ECDD4D825EC5CB7FD8EA4 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/F-1X5qcJhqPuw6x7ViKXkyUx09o.roa Signing time: Sat 15 Nov 2025 10:01:26 +0000 ROA not before: Sat 15 Nov 2025 10:01:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21341 IP address blocks: 62.220.96.0/21 maxlen: 24 62.220.104.0/22 maxlen: 24 62.220.120.0/22 maxlen: 22 62.220.124.0/23 maxlen: 23 81.12.8.0/22 maxlen: 22 81.12.12.0/22 maxlen: 22 81.12.16.0/21 maxlen: 21 81.12.48.0/22 maxlen: 24 81.12.58.0/24 maxlen: 24 81.12.59.0/24 maxlen: 24 87.107.0.0/21 maxlen: 24 87.107.14.0/23 maxlen: 24 87.107.24.0/22 maxlen: 22 87.107.34.0/23 maxlen: 23 87.107.40.0/24 maxlen: 24 87.107.41.0/24 maxlen: 24 87.107.42.0/23 maxlen: 23 87.107.50.0/23 maxlen: 24 87.107.51.0/24 maxlen: 24 87.107.52.0/23 maxlen: 23 87.107.68.0/22 maxlen: 24 87.107.88.0/22 maxlen: 22 87.107.96.0/22 maxlen: 24 87.107.106.0/23 maxlen: 24 87.107.112.0/22 maxlen: 24 87.107.116.0/23 maxlen: 23 87.107.120.0/21 maxlen: 24 87.107.128.0/22 maxlen: 22 87.107.132.0/22 maxlen: 23 87.107.132.0/23 maxlen: 24 87.107.160.0/22 maxlen: 24 87.107.168.0/22 maxlen: 24 87.107.173.0/24 maxlen: 24 87.107.188.0/23 maxlen: 24 87.107.192.0/19 maxlen: 24 87.107.206.0/24 maxlen: 24 87.107.226.0/23 maxlen: 24 87.107.226.0/24 maxlen: 24 87.107.232.0/24 maxlen: 24 185.60.136.0/24 maxlen: 24 185.60.137.0/24 maxlen: 24 185.60.138.0/24 maxlen: 24 185.60.139.0/24 maxlen: 24 2a00:1198::/32 maxlen: 48 2a00:1198::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:86:f6:67:a7:5f:7e:cd:d4:d8:25:ec:5c:b7:fd:8e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Nov 15 10:01:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=17ed57e6a70986a3eec3ac7b562297932531d3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c8:15:d7:2b:31:e9:53:62:9f:a8:e6:ab:97: 64:61:73:a7:06:48:98:4b:40:be:2e:f6:d1:0a:5f: 8a:a0:38:c5:d9:f6:bb:07:fe:5a:60:e4:d8:74:49: f4:b1:83:4d:da:35:07:fc:00:81:c1:10:68:40:42: b8:75:cc:64:67:c9:9f:6e:cd:37:d5:4f:2f:81:95: e2:79:f5:f3:33:97:10:2b:8d:2e:70:43:0d:1f:c0: 8e:99:58:eb:fe:a6:ff:fa:bb:6e:c2:04:ac:5a:cd: a1:41:f0:4a:fe:9c:01:97:c9:bc:6a:26:55:34:6e: 98:1e:1f:2c:6b:cb:6d:18:23:07:67:68:d6:3c:0a: 10:33:28:60:2d:1f:70:5a:c5:85:b2:ca:82:94:af: ca:64:9b:5a:10:ca:9b:d5:22:2e:f2:39:c5:79:0b: 77:aa:37:03:d2:fd:b2:73:5e:47:36:ee:2f:2a:ad: b0:72:d2:33:6d:ce:dc:46:9e:48:58:60:7f:d3:b8: a4:63:67:01:fd:42:64:48:57:7f:52:66:0f:c5:b5: fa:8b:73:7f:35:e1:d9:05:e0:97:d5:8e:53:1f:f5: f5:58:80:ab:4b:77:c9:50:db:d9:0d:8f:eb:70:aa: 87:c9:63:25:ee:8d:69:71:7c:0e:73:44:30:6b:1c: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:ED:57:E6:A7:09:86:A3:EE:C3:AC:7B:56:22:97:93:25:31:D3:DA X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/F-1X5qcJhqPuw6x7ViKXkyUx09o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.96.0-62.220.107.255 62.220.120.0-62.220.125.255 81.12.8.0-81.12.23.255 81.12.48.0/22 81.12.58.0/23 87.107.0.0/21 87.107.14.0/23 87.107.24.0/22 87.107.34.0/23 87.107.40.0/22 87.107.50.0-87.107.53.255 87.107.68.0/22 87.107.88.0/22 87.107.96.0/22 87.107.106.0/23 87.107.112.0-87.107.117.255 87.107.120.0-87.107.135.255 87.107.160.0/22 87.107.168.0/22 87.107.173.0/24 87.107.188.0/23 87.107.192.0/19 87.107.226.0/23 87.107.232.0/24 185.60.136.0/22 IPv6: 2a00:1198::/32 Signature Algorithm: sha256WithRSAEncryption 68:9d:c0:0d:8b:a8:b9:cc:25:f7:d6:90:78:23:82:a4:89:d5: ce:4e:2d:6b:09:77:8f:94:41:f7:e8:7f:2a:83:53:87:18:ed: 56:50:99:1b:7c:fb:48:50:cd:5a:22:2d:61:19:74:36:73:fa: 9e:97:d9:7e:f0:2e:d7:c8:69:ec:b1:15:08:38:b9:6b:f9:a1: d1:70:7f:3d:cb:b8:91:66:4e:fb:2a:50:0a:cd:25:5f:fd:c6: 02:e4:8c:93:50:47:dd:17:b9:88:1c:f5:4d:e5:a6:ea:f4:70: b6:5d:31:d3:15:71:e6:43:18:de:d5:7a:3d:58:38:3b:7c:7d: c0:77:2f:eb:d4:f0:e2:0c:0d:40:4d:3b:e5:74:ce:46:f2:6f: bf:94:db:75:80:dd:1e:a0:e9:98:0c:cb:c9:de:ef:a3:e9:c2: 44:f6:43:f7:c4:59:87:98:ab:74:35:70:17:03:8e:f4:14:a2: 88:28:55:a5:25:8a:e9:33:86:d6:e9:de:5e:57:1b:f3:32:98: af:4a:f4:65:d8:1c:f6:c2:9d:32:64:19:d6:fe:f6:f2:19:d3: 7e:ea:d0:a5:e2:c2:a7:dc:e7:ad:bf:8e:1d:60:fc:ee:b6:87: 98:c6:ee:58:84:8a:ec:35:00:10:b9:5d:f0:ed:8e:24:75:07: fd:99:e4:a7 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZqG9menX37N1Ngl7Fy3/Y6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjUxMTE1MTAwMTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2VkNTdlNmE3MDk4NmEzZWVjM2FjN2I1NjIyOTc5MzI1MzFkM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMgV1ysx6VNin6jmq5dkYXOnBkiY S0C+LvbRCl+KoDjF2fa7B/5aYOTYdEn0sYNN2jUH/ACBwRBoQEK4dcxkZ8mfbs03 1U8vgZXiefXzM5cQK40ucEMNH8COmVjr/qb/+rtuwgSsWs2hQfBK/pwBl8m8aiZV NG6YHh8sa8ttGCMHZ2jWPAoQMyhgLR9wWsWFssqClK/KZJtaEMqb1SIu8jnFeQt3 qjcD0v2yc15HNu4vKq2wctIzbc7cRp5IWGB/07ikY2cB/UJkSFd/UmYPxbX6i3N/ NeHZBeCX1Y5TH/X1WICrS3fJUNvZDY/rcKqHyWMl7o1pcXwOc0QwaxxsEwIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFBftV+anCYaj7sOse1Yil5MlMdPaMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvRi0xWDVxY0pocVB1dzZ4N1ZpS1hreVV4MDlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHyBggrBgEFBQcBBwEB/wSB4jCB3zCBzQQCAAEwgcYwDAME BT7cYAMEAj7caDAMAwQDPtx4AwQBPtx8MAwDBANRDAgDBANRDBADBAJRDDADBAFR DDoDBANXawADBAFXaw4DBAJXaxgDBAFXayIDBAJXaygwDAMEAVdrMgMEAVdrNAME AldrRAMEAldrWAMEAldrYAMEAVdrajAMAwQEV2twAwQBV2t0MAwDBANXa3gDBANX a4ADBAJXa6ADBAJXa6gDBABXa60DBAFXa7wDBAVXa8ADBAFXa+IDBABXa+gDBAK5 PIgwDQQCAAIwBwMFACoAEZgwDQYJKoZIhvcNAQELBQADggEBAGidwA2LqLnMJffW kHgjgqSJ1c5OLWsJd4+UQffofyqDU4cY7VZQmRt8+0hQzVoiLWEZdDZz+p6X2X7w LtfIaeyxFQg4uWv5odFwfz3LuJFmTvsqUArNJV/9xgLkjJNQR90XuYgc9U3lpur0 cLZdMdMVceZDGN7Vej1YODt8fcB3L+vU8OIMDUBNO+V0zkbyb7+U23WA3R6g6ZgM y8ne76PpwkT2Q/fEWYeYq3Q1cBcDjvQUoogoVaUliukzhtbp3l5XG/MymK9K9GXY HPbCnTJkGdb+9vIZ037q0KXiwqfc562/jh1g/O62h5jG7liEiuw1ABC5XfDtjiR1 B/2Z5Kc= -----END CERTIFICATE-----Generated at Sat Dec 6 22:31:03 2025 by rpki-client