This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/ppaVoCVyYt16HDG7WfOtkr7EeHs.roa File: ppaVoCVyYt16HDG7WfOtkr7EeHs.roa (raw, json) Hash identifier: Qez8a/FWG6eNLOTogKVCXP47/rGL1fBAom4YDZ6wxts= Subject key identifier: A6:96:95:A0:25:72:62:DD:7A:1C:31:BB:59:F3:AD:92:BE:C4:78:7B Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413 Certificate serial: 019ADE36DB5FCEF1A5BC4878843B11135D6F Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/ppaVoCVyYt16HDG7WfOtkr7EeHs.roa Signing time: Tue 02 Dec 2025 08:38:48 +0000 ROA not before: Tue 02 Dec 2025 08:38:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49453 IP address blocks: 37.123.208.0/24 maxlen: 24 37.123.210.0/24 maxlen: 24 45.133.250.0/24 maxlen: 24 109.202.96.0/24 maxlen: 24 109.202.97.0/24 maxlen: 24 109.202.98.0/24 maxlen: 24 109.202.99.0/24 maxlen: 24 109.202.100.0/24 maxlen: 24 109.202.101.0/24 maxlen: 24 109.202.102.0/24 maxlen: 24 109.202.103.0/24 maxlen: 24 109.202.104.0/24 maxlen: 24 109.202.106.0/24 maxlen: 24 109.202.107.0/24 maxlen: 24 109.202.108.0/24 maxlen: 24 109.202.109.0/24 maxlen: 24 109.202.111.0/24 maxlen: 24 109.232.224.0/24 maxlen: 24 109.232.225.0/24 maxlen: 24 109.232.226.0/24 maxlen: 24 109.232.227.0/24 maxlen: 24 109.232.228.0/24 maxlen: 24 109.232.229.0/24 maxlen: 24 109.232.230.0/24 maxlen: 24 109.232.231.0/24 maxlen: 24 134.19.176.0/24 maxlen: 24 134.19.177.0/24 maxlen: 24 134.19.178.0/24 maxlen: 24 134.19.179.0/24 maxlen: 24 134.19.180.0/24 maxlen: 24 134.19.181.0/24 maxlen: 24 134.19.182.0/24 maxlen: 24 134.19.183.0/24 maxlen: 24 134.19.184.0/24 maxlen: 24 134.19.185.0/24 maxlen: 24 134.19.186.0/24 maxlen: 24 134.19.187.0/24 maxlen: 24 134.19.188.0/24 maxlen: 24 134.19.189.0/24 maxlen: 24 134.19.190.0/23 maxlen: 23 185.23.213.0/24 maxlen: 24 185.23.214.0/24 maxlen: 24 185.23.215.0/24 maxlen: 24 188.95.48.0/24 maxlen: 24 188.95.49.0/24 maxlen: 24 188.95.50.0/24 maxlen: 24 188.95.51.0/24 maxlen: 24 188.95.52.0/24 maxlen: 24 188.95.53.0/24 maxlen: 24 213.152.160.0/24 maxlen: 24 213.152.161.0/24 maxlen: 24 213.152.162.0/24 maxlen: 24 213.152.163.0/24 maxlen: 24 213.152.164.0/24 maxlen: 24 213.152.165.0/24 maxlen: 24 213.152.166.0/24 maxlen: 24 213.152.167.0/24 maxlen: 24 213.152.168.0/24 maxlen: 24 213.152.169.0/24 maxlen: 24 213.152.170.0/24 maxlen: 24 213.152.171.0/24 maxlen: 24 213.152.172.0/24 maxlen: 24 213.152.173.0/24 maxlen: 24 213.152.174.0/24 maxlen: 24 213.152.176.0/24 maxlen: 24 213.152.177.0/24 maxlen: 24 213.152.178.0/24 maxlen: 24 213.152.179.0/24 maxlen: 24 213.152.180.0/24 maxlen: 24 213.152.181.0/24 maxlen: 24 213.152.182.0/24 maxlen: 24 213.152.183.0/24 maxlen: 24 213.152.184.0/24 maxlen: 24 213.152.185.0/24 maxlen: 24 213.152.186.0/24 maxlen: 24 213.152.187.0/24 maxlen: 24 213.152.188.0/22 maxlen: 22 213.152.188.0/24 maxlen: 24 213.152.189.0/24 maxlen: 24 213.152.190.0/24 maxlen: 24 2a00:1678:127::/48 maxlen: 48 2a00:1678:a2b::/48 maxlen: 48 2a00:1678:1122::/48 maxlen: 48 2a00:1678:1337::/48 maxlen: 48 2a00:1678:2470::/48 maxlen: 48 2a00:1678:3cc0::/48 maxlen: 48 2a00:1678:5524::/48 maxlen: 48 2a00:1678:5afe::/48 maxlen: 48 2a00:1678:b00b::/48 maxlen: 48 2a00:1678:baba::/48 maxlen: 48 2a00:1678:da7a::/48 maxlen: 48 2a00:1678:dea1::/48 maxlen: 48 2a00:1678:efa5::/48 maxlen: 48 2a00:1678:f113::/48 maxlen: 48 2a00:1678:fa11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:36:db:5f:ce:f1:a5:bc:48:78:84:3b:11:13:5d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413 Validity Not Before: Dec 2 08:38:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a69695a0257262dd7a1c31bb59f3ad92bec4787b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7c:95:35:66:22:20:63:82:1f:4c:c1:da:4b: b6:f6:4f:b0:b9:14:3e:c5:87:0e:0d:84:7a:00:af: 1b:be:b2:9d:57:8e:17:93:ef:6a:48:f8:ad:c2:4e: e4:70:13:51:45:32:da:0d:f2:7a:7d:79:24:d3:de: 58:c6:66:b8:a9:c9:e2:c5:e2:28:48:5f:8d:ed:30: 20:10:84:5c:87:69:56:ac:01:bc:0d:2f:e2:fc:fa: 83:ac:36:a7:c4:90:a5:2a:d8:92:9a:9d:c7:30:a6: 1b:59:5e:a1:c9:6d:44:0d:1d:70:95:1d:5c:26:79: 4e:48:2a:af:26:18:5f:de:cb:2b:4d:39:ad:28:dc: b4:64:0f:03:89:56:8a:97:42:23:58:91:b7:76:9a: fe:2a:25:fc:be:fc:f1:d6:c7:6d:ca:00:72:b6:4b: e8:ca:a9:1c:30:ee:65:54:d3:13:3d:81:4d:89:af: a6:ea:53:ee:cc:74:76:7f:17:61:9e:fb:af:3d:f2: 4d:02:5b:c9:ea:14:7a:fa:3b:ca:a9:29:bb:3b:80: 13:8a:46:31:7f:ca:af:44:88:05:76:24:db:22:cc: 62:6d:d7:5a:e8:03:46:01:d4:05:eb:54:3c:ea:9a: 4c:a4:ea:f6:3c:8c:5f:09:07:9d:ad:40:eb:f4:40: c9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:96:95:A0:25:72:62:DD:7A:1C:31:BB:59:F3:AD:92:BE:C4:78:7B X509v3 Authority Key Identifier: keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/ppaVoCVyYt16HDG7WfOtkr7EeHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.123.208.0/24 37.123.210.0/24 45.133.250.0/24 109.202.96.0-109.202.104.255 109.202.106.0-109.202.109.255 109.202.111.0/24 109.232.224.0/21 134.19.176.0/20 185.23.213.0-185.23.215.255 188.95.48.0-188.95.53.255 213.152.160.0-213.152.174.255 213.152.176.0/20 IPv6: 2a00:1678:127::/48 2a00:1678:a2b::/48 2a00:1678:1122::/48 2a00:1678:1337::/48 2a00:1678:2470::/48 2a00:1678:3cc0::/48 2a00:1678:5524::/48 2a00:1678:5afe::/48 2a00:1678:b00b::/48 2a00:1678:baba::/48 2a00:1678:da7a::/48 2a00:1678:dea1::/48 2a00:1678:efa5::/48 2a00:1678:f113::/48 2a00:1678:fa11::/48 Signature Algorithm: sha256WithRSAEncryption 02:9b:66:73:84:b2:a2:35:85:3d:37:3d:f8:7d:14:38:80:be: 26:16:b4:65:7d:06:1a:81:a1:08:00:96:2f:2e:09:2f:6e:88: 23:2b:bb:91:82:66:4f:2f:36:e3:cf:07:7c:82:ff:b7:72:2f: ea:7d:58:ae:42:f1:da:80:bf:26:b8:f5:24:a1:6d:ce:0e:54: 29:f5:c0:7d:3f:ca:31:a3:7b:03:3f:67:84:c3:cc:05:79:94: f6:7b:ed:34:ca:e3:ca:64:3e:ea:fc:93:99:04:0a:c1:50:69: 15:8d:9a:58:0f:4c:96:ff:a4:35:e9:57:c3:ff:95:52:31:6b: bc:d6:15:ec:e5:57:8f:d9:97:48:1e:f3:b1:cd:4d:f2:d4:56: 52:49:4a:e0:aa:32:59:4f:57:32:26:02:10:fc:05:80:6c:5c: 16:5d:07:1d:7b:7d:dc:62:77:51:f0:38:3f:68:4f:f2:d3:0d: 49:db:2e:ed:e4:6f:7c:ae:71:76:a6:41:f6:8a:a0:2b:39:dc: ef:65:01:de:67:dd:4b:82:6a:89:b8:d8:2a:2f:60:2a:e6:9f: a0:a2:18:2a:1a:3e:b2:27:66:36:c6:f2:d5:d1:dd:96:fd:d3: 2f:10:3b:8a:40:ae:f5:78:e7:f1:53:63:4c:2f:96:20:db:e5: 8e:0e:57:8d -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgISAZreNttfzvGlvEh4hDsRE11vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjZiMDNjNzE3MTg0YzM2ODA4MTdlNTVlMjQ1NWY4NWQ3 M2E0MTMwHhcNMjUxMjAyMDgzODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjk2OTVhMDI1NzI2MmRkN2ExYzMxYmI1OWYzYWQ5MmJlYzQ3ODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XyVNWYiIGOCH0zB2ku29k+wuRQ+ xYcODYR6AK8bvrKdV44Xk+9qSPitwk7kcBNRRTLaDfJ6fXkk095Yxma4qcnixeIo SF+N7TAgEIRch2lWrAG8DS/i/PqDrDanxJClKtiSmp3HMKYbWV6hyW1EDR1wlR1c JnlOSCqvJhhf3ssrTTmtKNy0ZA8DiVaKl0IjWJG3dpr+KiX8vvzx1sdtygBytkvo yqkcMO5lVNMTPYFNia+m6lPuzHR2fxdhnvuvPfJNAlvJ6hR6+jvKqSm7O4ATikYx f8qvRIgFdiTbIsxibdda6ANGAdQF61Q86ppMpOr2PIxfCQedrUDr9EDJOwIDAQAB o4IDCjCCAwYwHQYDVR0OBBYEFKaWlaAlcmLdehwxu1nzrZK+xHh7MB8GA1UdIwQY MBaAFAUmsDxxcYTDaAgX5V4kVfhdc6QTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMt M2JmMDRhMmE5M2Q4LzEvcHBhVm9DVnlZdDE2SERHN1dmT3RrcjdFZUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9hMzM4M2EtMDRlYi00M2Y4LWE5NTMtM2JmMDRhMmE5M2Q4 LzEvQlNhd1BIRnhoTU5vQ0JmbFhpUlYtRjF6cEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBHgYIKwYBBQUHAQcBAf8EggENMIIBCTB2BAIAATBwAwQA JXvQAwQAJXvSAwQALYX6MAwDBAVtymADBABtymgwDAMEAW3KagMEAW3KbAMEAG3K bwMEA23o4AMEBIYTsDAMAwQAuRfVAwQDuRfQMAwDBAS8XzADBAG8XzQwDAMEBdWY oAMEANWYrgMEBNWYsDCBjgQCAAIwgYcDBwAqABZ4AScDBwAqABZ4CisDBwAqABZ4 ESIDBwAqABZ4EzcDBwAqABZ4JHADBwAqABZ4PMADBwAqABZ4VSQDBwAqABZ4Wv4D BwAqABZ4sAsDBwAqABZ4uroDBwAqABZ42noDBwAqABZ43qEDBwAqABZ476UDBwAq ABZ48RMDBwAqABZ4+hEwDQYJKoZIhvcNAQELBQADggEBAAKbZnOEsqI1hT03Pfh9 FDiAviYWtGV9BhqBoQgAli8uCS9uiCMru5GCZk8vNuPPB3yC/7dyL+p9WK5C8dqA vya49SShbc4OVCn1wH0/yjGjewM/Z4TDzAV5lPZ77TTK48pkPur8k5kECsFQaRWN mlgPTJb/pDXpV8P/lVIxa7zWFezlV4/Zl0ge87HNTfLUVlJJSuCqMllPVzImAhD8 BYBsXBZdBx17fdxid1HwOD9oT/LTDUnbLu3kb3yucXamQfaKoCs53O9lAd5n3UuC aom42CovYCrmn6CiGCoaPrInZjbG8tXR3Zb90y8QO4pArvV45/FTY0wvliDb5Y4O V40= -----END CERTIFICATE-----Generated at Sat Dec 6 20:51:32 2025 by rpki-client