This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/icM0VycNV4mt0pTY2afMrLkCQiI.roa File: icM0VycNV4mt0pTY2afMrLkCQiI.roa (raw, json) Hash identifier: xbGX02cLUgEU+Jz8UpLSB42bp7e4VbRHxCBGvzWAyic= Subject key identifier: 89:C3:34:57:27:0D:57:89:AD:D2:94:D8:D9:A7:CC:AC:B9:02:42:22 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019ADF8A891AA632B29968415581C432EEF8 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/icM0VycNV4mt0pTY2afMrLkCQiI.roa Signing time: Tue 02 Dec 2025 14:49:49 +0000 ROA not before: Tue 02 Dec 2025 14:49:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198193 IP address blocks: 31.214.155.0/24 maxlen: 24 37.252.98.0/24 maxlen: 24 37.252.100.0/24 maxlen: 24 37.252.101.0/24 maxlen: 24 46.253.139.0/24 maxlen: 24 89.32.64.0/24 maxlen: 24 89.32.65.0/24 maxlen: 24 89.32.66.0/24 maxlen: 24 89.32.67.0/24 maxlen: 24 158.255.239.0/24 maxlen: 24 162.33.200.0/22 maxlen: 22 162.33.204.0/22 maxlen: 22 162.33.204.0/24 maxlen: 24 162.33.205.0/24 maxlen: 24 162.33.206.0/24 maxlen: 24 162.33.207.0/24 maxlen: 24 185.66.172.0/24 maxlen: 24 185.66.174.0/24 maxlen: 24 185.86.208.0/23 maxlen: 23 185.88.202.0/23 maxlen: 23 185.206.121.0/24 maxlen: 24 185.212.114.0/24 maxlen: 24 185.225.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:8a:89:1a:a6:32:b2:99:68:41:55:81:c4:32:ee:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Dec 2 14:49:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89c33457270d5789add294d8d9a7ccacb9024222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:6c:b4:4c:41:7b:43:52:ad:8f:c4:ad:5f: 53:91:e2:17:9c:0b:f8:d8:83:53:e5:65:8c:b2:68: ec:a0:e0:64:3d:9d:2c:87:be:a1:31:fb:f4:80:1b: cb:3c:b0:01:f2:72:3a:92:89:a3:66:ad:15:44:28: 85:ee:58:f0:9b:d5:a0:c1:46:a7:63:eb:de:e5:4d: a0:4c:50:dd:0a:56:0d:53:38:4e:de:21:34:72:af: 79:9e:dd:3b:18:79:3c:e5:a4:95:9b:01:1d:e7:8b: 60:19:14:fd:0b:d1:a7:c9:53:83:f5:3f:42:85:60: ab:5a:8c:1e:62:3e:ba:ef:01:fa:8c:d5:82:6e:45: 43:ea:1f:a7:a1:3d:d3:bb:fb:03:64:10:f0:09:87: ef:e2:37:a5:17:35:f0:6c:0d:3b:b9:fb:b5:72:9d: 0e:1d:fa:40:72:0d:f5:e3:a1:20:2a:6c:ea:e8:53: bd:a9:fe:d1:6a:00:07:35:0c:f7:9b:2f:e7:a5:ef: 49:8d:65:b9:dc:c7:9d:96:1a:f5:61:09:f3:49:c5: 9c:ae:01:9b:c3:9a:b6:80:93:46:fe:6c:f7:1e:a3: 68:6c:96:6e:3a:c5:5a:b1:db:d7:8c:4b:ad:cd:c3: 32:66:08:bb:39:59:a6:29:19:ab:38:00:f6:13:8d: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C3:34:57:27:0D:57:89:AD:D2:94:D8:D9:A7:CC:AC:B9:02:42:22 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/icM0VycNV4mt0pTY2afMrLkCQiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.155.0/24 37.252.98.0/24 37.252.100.0/23 46.253.139.0/24 89.32.64.0/22 158.255.239.0/24 162.33.200.0/21 185.66.172.0/24 185.66.174.0/24 185.86.208.0/23 185.88.202.0/23 185.206.121.0/24 185.212.114.0/24 185.225.8.0/24 Signature Algorithm: sha256WithRSAEncryption 06:3a:b4:8f:1d:fd:b9:2e:be:c0:33:2c:1d:b2:98:ac:1c:76: 56:3c:c4:6a:10:3c:a8:e9:e0:f7:80:1c:8c:5e:93:f3:6c:f4: 58:b7:2a:da:1a:5c:55:fb:ca:fe:c4:64:9c:44:bf:ac:53:18: 61:cf:2e:34:a7:a1:03:ab:f1:31:14:8b:c3:37:75:4e:82:6e: e4:f6:dd:0b:96:bf:85:9f:3d:94:a7:a1:d6:57:c8:0e:5c:81: 18:e1:b3:42:c2:d9:c8:44:0f:7d:31:20:9f:07:b3:56:6a:9b: 39:77:56:36:cc:ba:e5:3e:4b:4c:f9:94:7b:f9:63:e4:cd:8b: 5e:79:74:0a:85:45:5e:64:d7:8b:76:18:da:31:44:29:49:ef: d5:13:d5:db:16:fb:0f:62:bf:34:20:1e:ec:12:cc:81:9a:fa: 04:3a:8c:c0:e3:4c:95:d8:9b:c8:36:0e:b0:c0:d6:db:6f:be: e7:9c:bc:1d:11:e9:bb:80:db:1c:37:37:94:ed:c6:cb:45:42: ac:e0:0c:4b:c0:6a:e6:4e:e2:34:c1:c7:5b:63:a3:ff:e8:94: be:d4:b9:26:cc:fe:59:1b:4e:1f:70:0d:13:85:43:a8:49:e7: 8f:cf:c2:54:95:15:9c:a6:3d:79:c0:40:85:28:7e:21:ff:71: af:a3:95:1b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZrfiokapjKymWhBVYHEMu74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUxMjAyMTQ0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWMzMzQ1NzI3MGQ1Nzg5YWRkMjk0ZDhkOWE3Y2NhY2I5MDI0MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhlstExBe0NSrY/ErV9TkeIXnAv4 2INT5WWMsmjsoOBkPZ0sh76hMfv0gBvLPLAB8nI6komjZq0VRCiF7ljwm9WgwUan Y+ve5U2gTFDdClYNUzhO3iE0cq95nt07GHk85aSVmwEd54tgGRT9C9GnyVOD9T9C hWCrWoweYj667wH6jNWCbkVD6h+noT3Tu/sDZBDwCYfv4jelFzXwbA07ufu1cp0O HfpAcg3146EgKmzq6FO9qf7RagAHNQz3my/npe9JjWW53Medlhr1YQnzScWcrgGb w5q2gJNG/mz3HqNobJZuOsVasdvXjEutzcMyZgi7OVmmKRmrOAD2E41aCwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFInDNFcnDVeJrdKU2NmnzKy5AkIiMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvaWNNMFZ5Y05WNG10MHBUWTJhZk1yTGtDUWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAH9abAwQA JfxiAwQBJfxkAwQALv2LAwQCWSBAAwQAnv/vAwQDoiHIAwQAuUKsAwQAuUKuAwQB uVbQAwQBuVjKAwQAuc55AwQAudRyAwQAueEIMA0GCSqGSIb3DQEBCwUAA4IBAQAG OrSPHf25Lr7AMywdspisHHZWPMRqEDyo6eD3gByMXpPzbPRYtyraGlxV+8r+xGSc RL+sUxhhzy40p6EDq/ExFIvDN3VOgm7k9t0Llr+Fnz2Up6HWV8gOXIEY4bNCwtnI RA99MSCfB7NWaps5d1Y2zLrlPktM+ZR7+WPkzYteeXQKhUVeZNeLdhjaMUQpSe/V E9XbFvsPYr80IB7sEsyBmvoEOozA40yV2JvINg6wwNbbb77nnLwdEem7gNscNzeU 7cbLRUKs4AxLwGrmTuI0wcdbY6P/6JS+1LkmzP5ZG04fcA0ThUOoSeePz8JUlRWc pj15wECFKH4h/3Gvo5Ub -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:46 2025 by rpki-client