This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/gCV_mNUvlbSqfh3tPIBTp3BvKkw.roa File: gCV_mNUvlbSqfh3tPIBTp3BvKkw.roa (raw, json) Hash identifier: zVtlbSj16lTrnOVx6GM9u2ecIQWNTuwNYnRaanJM7XY= Subject key identifier: 80:25:7F:98:D5:2F:95:B4:AA:7E:1D:ED:3C:80:53:A7:70:6F:2A:4C Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Certificate serial: 019AC06945B36AEA141C250436F4940FEB4A Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/gCV_mNUvlbSqfh3tPIBTp3BvKkw.roa Signing time: Wed 26 Nov 2025 13:45:15 +0000 ROA not before: Wed 26 Nov 2025 13:45:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8849 IP address blocks: 5.42.206.0/24 maxlen: 24 5.44.249.0/24 maxlen: 24 31.222.226.0/24 maxlen: 24 62.122.187.0/24 maxlen: 24 88.210.36.0/23 maxlen: 24 89.36.162.0/24 maxlen: 24 89.36.163.0/24 maxlen: 24 89.40.226.0/24 maxlen: 24 91.192.81.0/24 maxlen: 24 95.81.85.0/24 maxlen: 24 95.81.86.0/24 maxlen: 24 95.81.107.0/24 maxlen: 24 95.81.110.0/24 maxlen: 24 95.174.68.0/24 maxlen: 24 95.174.69.0/24 maxlen: 24 95.174.70.0/24 maxlen: 24 95.174.71.0/24 maxlen: 24 103.97.91.0/24 maxlen: 24 103.111.112.0/22 maxlen: 24 103.253.36.0/24 maxlen: 24 109.122.200.0/23 maxlen: 24 109.122.207.0/24 maxlen: 24 146.19.196.0/24 maxlen: 24 158.255.76.0/24 maxlen: 24 176.97.192.0/24 maxlen: 24 185.140.210.0/24 maxlen: 24 185.140.211.0/24 maxlen: 24 185.147.53.0/24 maxlen: 24 185.224.249.0/24 maxlen: 24 185.230.245.0/24 maxlen: 24 185.234.144.0/23 maxlen: 23 192.77.248.0/24 maxlen: 24 193.35.224.0/24 maxlen: 24 213.111.130.0/24 maxlen: 24 213.111.131.0/24 maxlen: 24 213.111.142.0/24 maxlen: 24 2a06:f901:4000::/36 maxlen: 36 2a06:f901:8000::/36 maxlen: 36 2a06:f901:c000::/36 maxlen: 36 2a06:f902:4000::/36 maxlen: 36 2a06:f902:8000::/36 maxlen: 36 2a06:f903:4000::/36 maxlen: 36 2a06:f903:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:69:45:b3:6a:ea:14:1c:25:04:36:f4:94:0f:eb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Validity Not Before: Nov 26 13:45:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=80257f98d52f95b4aa7e1ded3c8053a7706f2a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:3a:0e:2c:3e:a0:d3:01:aa:4d:7d:fa:fe: 56:49:01:de:02:71:a1:5c:1e:5e:f8:a4:79:51:04: bc:02:b1:f9:13:e7:55:a6:9d:e7:e1:96:fa:b3:84: b0:82:da:7f:e3:69:4a:f0:b3:98:25:f3:bc:a1:b8: 56:f7:64:74:84:e6:a6:65:b8:3a:4d:4c:69:4d:d2: 1e:c5:55:6c:5d:fe:40:40:a1:94:be:dc:ae:1a:94: 30:53:a9:53:68:7d:f5:ad:21:a5:2e:2b:e2:e9:36: 33:0e:97:24:86:87:ae:42:d8:56:ff:af:9f:6b:32: 63:6f:fa:57:24:f9:0b:e6:19:10:cc:99:df:fa:9a: fb:dc:a5:13:09:c4:64:eb:7e:60:db:de:9e:ab:00: d4:bb:7a:77:6c:a6:68:7a:d7:d2:d3:3f:fa:e2:8e: 09:cd:ce:8f:76:9b:e8:d6:65:19:23:bf:3c:0e:8b: b6:0f:69:cf:ad:67:60:6d:57:3b:9d:be:65:18:3a: 6f:df:05:6f:18:26:0f:f8:89:5e:8b:d2:dc:fa:7a: d9:38:cc:13:8c:e6:9e:1c:7a:1d:98:8d:3e:ba:ee: 03:b4:30:aa:23:cd:1c:6f:20:f0:42:67:a8:18:f4: 30:e1:ab:c5:0f:ea:83:3b:a7:b4:85:72:3a:de:e4: 14:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:25:7F:98:D5:2F:95:B4:AA:7E:1D:ED:3C:80:53:A7:70:6F:2A:4C X509v3 Authority Key Identifier: keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/gCV_mNUvlbSqfh3tPIBTp3BvKkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.206.0/24 5.44.249.0/24 31.222.226.0/24 62.122.187.0/24 88.210.36.0/23 89.36.162.0/23 89.40.226.0/24 91.192.81.0/24 95.81.85.0-95.81.86.255 95.81.107.0/24 95.81.110.0/24 95.174.68.0/22 103.97.91.0/24 103.111.112.0/22 103.253.36.0/24 109.122.200.0/23 109.122.207.0/24 146.19.196.0/24 158.255.76.0/24 176.97.192.0/24 185.140.210.0/23 185.147.53.0/24 185.224.249.0/24 185.230.245.0/24 185.234.144.0/23 192.77.248.0/24 193.35.224.0/24 213.111.130.0/23 213.111.142.0/24 IPv6: 2a06:f901:4000::/36 2a06:f901:8000::/36 2a06:f901:c000::/36 2a06:f902:4000::/36 2a06:f902:8000::/36 2a06:f903:4000::/36 2a06:f903:8000::/36 Signature Algorithm: sha256WithRSAEncryption ca:94:d2:1c:05:b9:ea:09:d9:6d:49:ee:9c:7d:82:45:6f:2b: 53:a7:39:e5:42:4d:6e:4f:f6:cc:3d:c7:65:d6:53:9a:43:58: a2:27:3c:df:13:a8:30:b9:45:d2:89:42:c9:21:4f:ff:b4:3f: 16:b1:3d:e7:50:b5:c0:dc:e3:aa:8f:ef:11:be:14:a1:3d:21: 99:26:12:35:54:6b:e2:d3:e9:98:cf:89:98:18:db:3d:4a:fe: 3a:87:ed:67:91:b5:3a:9b:29:0c:c4:6d:7c:3f:26:16:28:8e: 1e:5f:e1:41:38:83:1b:9d:21:99:aa:20:69:6b:f3:26:f9:8d: 29:e0:43:6d:44:53:6d:5b:45:99:84:b0:20:8a:9e:2f:57:77: d7:5c:30:e9:85:17:78:83:5f:8a:ef:58:78:c0:5c:83:35:ed: 0f:b6:8f:d9:38:16:4d:b9:35:01:ee:dc:12:f5:83:1b:01:08: 70:20:f9:b4:48:8a:3a:7c:c4:83:9d:16:5f:db:4a:48:9c:3c: 3c:e2:c0:ad:cc:78:20:c2:07:57:58:23:30:e3:74:8d:de:65: ea:13:4c:d2:74:7d:21:c2:dc:62:c1:a3:f0:16:ba:64:8f:36: bc:45:4b:b9:b1:27:76:8d:0d:fa:af:02:51:d6:e6:77:d9:1f: dc:e7:94:2a -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgISAZrAaUWzauoUHCUENvSUD+tKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZWJmYmZkNmY5MzdjNWFlMzllM2UzOGU4YWI4Mzg0MTA3 NDIxYTYwHhcNMjUxMTI2MTM0NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDI1N2Y5OGQ1MmY5NWI0YWE3ZTFkZWQzYzgwNTNhNzcwNmYyYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOg6Diw+oNMBqk19+v5WSQHeAnGh XB5e+KR5UQS8ArH5E+dVpp3n4Zb6s4Swgtp/42lK8LOYJfO8obhW92R0hOamZbg6 TUxpTdIexVVsXf5AQKGUvtyuGpQwU6lTaH31rSGlLivi6TYzDpckhoeuQthW/6+f azJjb/pXJPkL5hkQzJnf+pr73KUTCcRk635g296eqwDUu3p3bKZoetfS0z/64o4J zc6Pdpvo1mUZI788Dou2D2nPrWdgbVc7nb5lGDpv3wVvGCYP+Ilei9Lc+nrZOMwT jOaeHHodmI0+uu4DtDCqI80cbyDwQmeoGPQw4avFD+qDO6e0hXI63uQU3QIDAQAB o4IDATCCAv0wHQYDVR0OBBYEFIAlf5jVL5W0qn4d7TyAU6dwbypMMB8GA1UdIwQY MBaAFA/r+/1vk3xa454+OOirg4QQdCGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGIt N2Q3MDM3NGQ3NmQyLzEvZ0NWX21OVXZsYlNxZmgzdFBJQlRwM0J2S2t3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82N2Q4MzQtMjYxMi00NzM5LTlmNGItN2Q3MDM3NGQ3NmQy LzEvRC12N19XLVRmRnJqbmo0NDZLdURoQkIwSWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBFQYIKwYBBQUHAQcBAf8EggEEMIIBADCBvQQCAAEwgbYD BAAFKs4DBAAFLPkDBAAf3uIDBAA+ersDBAFY0iQDBAFZJKIDBABZKOIDBABbwFEw DAMEAF9RVQMEAF9RVgMEAF9RawMEAF9RbgMEAl+uRAMEAGdhWwMEAmdvcAMEAGf9 JAMEAW16yAMEAG16zwMEAJITxAMEAJ7/TAMEALBhwAMEAbmM0gMEALmTNQMEALng +QMEALnm9QMEAbnqkAMEAMBN+AMEAMEj4AMEAdVvggMEANVvjjA+BAIAAjA4AwYE Kgb5AUADBgQqBvkBgAMGBCoG+QHAAwYEKgb5AkADBgQqBvkCgAMGBCoG+QNAAwYE Kgb5A4AwDQYJKoZIhvcNAQELBQADggEBAMqU0hwFueoJ2W1J7px9gkVvK1OnOeVC TW5P9sw9x2XWU5pDWKInPN8TqDC5RdKJQskhT/+0PxaxPedQtcDc46qP7xG+FKE9 IZkmEjVUa+LT6ZjPiZgY2z1K/jqH7WeRtTqbKQzEbXw/JhYojh5f4UE4gxudIZmq IGlr8yb5jSngQ21EU21bRZmEsCCKni9Xd9dcMOmFF3iDX4rvWHjAXIM17Q+2j9k4 Fk25NQHu3BL1gxsBCHAg+bRIijp8xIOdFl/bSkicPDziwK3MeCDCB1dYIzDjdI3e ZeoTTNJ0fSHC3GLBo/AWumSPNrxFS7mxJ3aNDfqvAlHW5nfZH9znlCo= -----END CERTIFICATE-----Generated at Sat Dec 6 08:17:28 2025 by rpki-client