This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/8VdcsA_3vthxkHxEE3soQq3GWlI.roa File: 8VdcsA_3vthxkHxEE3soQq3GWlI.roa (raw, json) Hash identifier: HdKeApcjuEVfcpxPnJmOBirClzl00oaS7vYtCcsBZUE= Subject key identifier: F1:57:5C:B0:0F:F7:BE:D8:71:90:7C:44:13:7B:28:42:AD:C6:5A:52 Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019ACC78033A0F6BC7093520E992A6B48A97 Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/8VdcsA_3vthxkHxEE3soQq3GWlI.roa Signing time: Fri 28 Nov 2025 21:56:48 +0000 ROA not before: Fri 28 Nov 2025 21:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59711 IP address blocks: 5.149.248.0/23 maxlen: 23 5.149.254.0/23 maxlen: 23 77.83.196.0/24 maxlen: 24 77.83.197.0/24 maxlen: 24 77.83.198.0/24 maxlen: 24 79.141.164.0/23 maxlen: 23 79.141.174.0/23 maxlen: 23 85.158.108.0/24 maxlen: 24 85.158.109.0/24 maxlen: 24 85.158.110.0/24 maxlen: 24 89.44.80.0/24 maxlen: 24 89.150.40.0/24 maxlen: 24 89.150.45.0/24 maxlen: 24 89.150.48.0/24 maxlen: 24 89.150.57.0/24 maxlen: 24 91.193.18.0/24 maxlen: 24 91.220.8.0/24 maxlen: 24 94.126.224.0/24 maxlen: 24 94.126.225.0/24 maxlen: 24 185.40.86.0/24 maxlen: 24 185.80.52.0/23 maxlen: 23 185.80.54.0/23 maxlen: 23 185.81.114.0/23 maxlen: 23 185.81.114.0/24 maxlen: 24 185.81.115.0/24 maxlen: 24 185.104.192.0/24 maxlen: 24 185.104.193.0/24 maxlen: 24 185.104.194.0/24 maxlen: 24 185.117.88.0/23 maxlen: 23 185.117.90.0/23 maxlen: 23 185.123.102.0/24 maxlen: 24 185.174.133.0/24 maxlen: 24 185.174.135.0/24 maxlen: 24 185.221.222.0/24 maxlen: 24 185.221.223.0/24 maxlen: 24 185.223.57.0/24 maxlen: 24 185.235.137.0/24 maxlen: 24 185.235.138.0/24 maxlen: 24 185.253.116.0/24 maxlen: 24 185.253.117.0/24 maxlen: 24 185.253.118.0/24 maxlen: 24 193.42.36.0/24 maxlen: 24 193.42.39.0/24 maxlen: 24 193.111.208.0/24 maxlen: 24 195.95.155.0/24 maxlen: 24 2a01:8640::/48 maxlen: 48 2a01:8640:2::/48 maxlen: 48 2a01:8640:6::/48 maxlen: 48 2a01:8640:9::/48 maxlen: 48 2a01:8640:a::/48 maxlen: 48 2a01:8640:f::/48 maxlen: 48 2a01:8640:11::/48 maxlen: 48 2a01:8640:12::/48 maxlen: 48 2a01:8640:13::/48 maxlen: 48 2a01:8640:14::/48 maxlen: 48 2a01:8640:15::/48 maxlen: 48 2a01:8640:17::/48 maxlen: 48 2a01:8640:18::/48 maxlen: 48 2a01:8640:1a::/48 maxlen: 48 2a01:8640:1b::/48 maxlen: 48 2a01:8640:1c::/48 maxlen: 48 2a01:8640:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:78:03:3a:0f:6b:c7:09:35:20:e9:92:a6:b4:8a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Nov 28 21:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f1575cb00ff7bed871907c44137b2842adc65a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:34:46:93:cf:63:a4:71:d4:05:95:83:cd: dc:92:6f:78:70:9d:7e:0d:54:a4:28:38:af:23:a6: 60:82:0c:ef:85:54:29:87:af:4a:01:2d:96:24:b9: e3:11:fe:fb:27:7d:4d:71:67:ec:5f:f4:32:36:97: 1d:38:ec:e3:0a:80:95:62:cf:de:78:ab:54:31:0b: 6b:aa:e0:25:19:2f:86:95:e9:0e:28:aa:b9:9e:84: c0:7e:43:b9:f9:a6:78:00:c2:10:1d:0f:20:d7:ca: 12:c5:cb:6d:82:ab:53:78:82:43:9b:57:97:75:6e: f9:18:10:d8:cf:bc:07:bd:71:c6:19:81:0e:3e:7b: d3:9f:64:bc:5c:05:92:96:c0:9d:3f:48:82:fc:11: f2:31:34:8d:44:dd:a9:b6:b2:cf:d2:68:26:80:72: b5:44:49:64:1c:c8:67:18:f1:0d:ea:c1:e2:26:96: 32:50:91:38:0c:56:f5:19:0b:18:99:8e:92:6b:7b: 95:1a:97:61:af:6b:7f:76:2e:06:76:6e:15:88:9b: 6c:cd:1f:3a:e0:23:44:ca:bd:cd:66:90:af:ee:f8: 6c:43:cd:dd:d4:38:18:eb:04:22:f3:f4:d7:63:10: e2:d3:22:54:f7:30:ff:cb:49:26:54:b2:42:9a:3f: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:57:5C:B0:0F:F7:BE:D8:71:90:7C:44:13:7B:28:42:AD:C6:5A:52 X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/8VdcsA_3vthxkHxEE3soQq3GWlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.248.0/23 5.149.254.0/23 77.83.196.0-77.83.198.255 79.141.164.0/23 79.141.174.0/23 85.158.108.0-85.158.110.255 89.44.80.0/24 89.150.40.0/24 89.150.45.0/24 89.150.48.0/24 89.150.57.0/24 91.193.18.0/24 91.220.8.0/24 94.126.224.0/23 185.40.86.0/24 185.80.52.0/22 185.81.114.0/23 185.104.192.0-185.104.194.255 185.117.88.0/22 185.123.102.0/24 185.174.133.0/24 185.174.135.0/24 185.221.222.0/23 185.223.57.0/24 185.235.137.0-185.235.138.255 185.253.116.0-185.253.118.255 193.42.36.0/24 193.42.39.0/24 193.111.208.0/24 195.95.155.0/24 IPv6: 2a01:8640::/48 2a01:8640:2::/48 2a01:8640:6::/48 2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff 2a01:8640:f::/48 2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff 2a01:8640:17::-2a01:8640:18:ffff:ffff:ffff:ffff:ffff 2a01:8640:1a::-2a01:8640:1d:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 21:3b:0e:96:25:1a:5a:3f:e6:64:a1:bd:ea:87:3e:c8:b7:dc: 4b:6a:39:4e:15:a0:b1:76:dc:91:91:11:2c:b1:73:a6:75:14: b4:25:0e:9e:91:93:ab:c6:e4:73:c9:36:5e:6d:be:9e:ca:3a: 86:02:d4:32:d9:87:27:52:1d:bb:7b:21:4a:9d:b9:a3:f9:05: 62:b8:fa:62:db:c3:3d:38:fb:6f:a4:2b:bb:6c:93:8b:05:92: 51:ad:2b:82:dc:d7:d2:c9:e3:6d:38:9c:45:af:4c:c8:a7:2e: 4f:eb:fe:70:c9:49:af:7b:33:6d:a8:bb:1f:27:95:17:e4:59: 6e:43:81:f0:ad:17:cc:b5:ac:2e:ba:93:73:e7:b5:9f:ca:2c: c9:81:0d:0b:a9:e1:aa:68:37:12:9a:d4:6e:e3:d8:d6:9b:61: 3c:9e:a6:b5:9b:1f:6a:58:11:68:56:30:67:f6:52:5d:31:87: 04:a8:62:fd:a9:35:f6:42:a3:ad:e0:a2:d1:de:e6:8d:bc:e6: f4:d0:58:83:e7:d9:5c:9d:4c:ba:7b:47:8a:ac:27:b7:2d:09: a2:d7:a0:62:6e:d3:c3:cd:8e:23:95:66:a3:26:55:3b:3b:e1: 8a:f0:eb:43:d0:5a:7a:50:51:6c:7b:b8:c2:7b:71:43:b7:44: 54:72:a5:c2 -----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgISAZrMeAM6D2vHCTUg6ZKmtIqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjUxMTI4MjE1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTU3NWNiMDBmZjdiZWQ4NzE5MDdjNDQxMzdiMjg0MmFkYzY1YTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWI0RpPPY6Rx1AWVg83ckm94cJ1+ DVSkKDivI6ZgggzvhVQph69KAS2WJLnjEf77J31NcWfsX/QyNpcdOOzjCoCVYs/e eKtUMQtrquAlGS+GlekOKKq5noTAfkO5+aZ4AMIQHQ8g18oSxcttgqtTeIJDm1eX dW75GBDYz7wHvXHGGYEOPnvTn2S8XAWSlsCdP0iC/BHyMTSNRN2ptrLP0mgmgHK1 RElkHMhnGPEN6sHiJpYyUJE4DFb1GQsYmY6Sa3uVGpdhr2t/di4Gdm4ViJtszR86 4CNEyr3NZpCv7vhsQ83d1DgY6wQi8/TXYxDi0yJU9zD/y0kmVLJCmj9MqQIDAQAB o4IDYzCCA18wHQYDVR0OBBYEFPFXXLAP977YcZB8RBN7KEKtxlpSMB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvOFZkY3NBXzN2dGh4a0h4RUUzc29RcTNHV2xJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBdwYIKwYBBQUHAQcBAf8EggFmMIIBYjCB4wQCAAEwgdwD BAEFlfgDBAEFlf4wDAMEAk1TxAMEAE1TxgMEAU+NpAMEAU+NrjAMAwQCVZ5sAwQA VZ5uAwQAWSxQAwQAWZYoAwQAWZYtAwQAWZYwAwQAWZY5AwQAW8ESAwQAW9wIAwQB Xn7gAwQAuShWAwQCuVA0AwQBuVFyMAwDBAa5aMADBAC5aMIDBAK5dVgDBAC5e2YD BAC5roUDBAC5rocDBAG53d4DBAC53zkwDAMEALnriQMEALnrijAMAwQCuf10AwQA uf12AwQAwSokAwQAwSonAwQAwW/QAwQAw1+bMHoEAgACMHQDBwAqAYZAAAADBwAq AYZAAAIDBwAqAYZAAAYwEgMHACoBhkAACQMHACoBhkAACgMHACoBhkAADzASAwcA KgGGQAARAwcBKgGGQAAUMBIDBwAqAYZAABcDBwAqAYZAABgwEgMHASoBhkAAGgMH ASoBhkAAHDANBgkqhkiG9w0BAQsFAAOCAQEAITsOliUaWj/mZKG96oc+yLfcS2o5 ThWgsXbckZERLLFzpnUUtCUOnpGTq8bkc8k2Xm2+nso6hgLUMtmHJ1Idu3shSp25 o/kFYrj6YtvDPTj7b6Qru2yTiwWSUa0rgtzX0snjbTicRa9MyKcuT+v+cMlJr3sz bai7HyeVF+RZbkOB8K0XzLWsLrqTc+e1n8osyYENC6nhqmg3EprUbuPY1pthPJ6m tZsfalgRaFYwZ/ZSXTGHBKhi/ak19kKjreCi0d7mjbzm9NBYg+fZXJ1MuntHiqwn ty0JotegYm7Tw82OI5VmoyZVOzvhivDrQ9BaelBRbHu4wntxQ7dEVHKlwg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:34 2025 by rpki-client