This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/DikZcVQXQSFDOynsfX_sTyHMKBA.roa File: DikZcVQXQSFDOynsfX_sTyHMKBA.roa (raw, json) Hash identifier: AwRolSp7x+aH8sUfMqGwV4s9pfQGgtvsHaMInWlZZdE= Subject key identifier: 0E:29:19:71:54:17:41:21:43:3B:29:EC:7D:7F:EC:4F:21:CC:28:10 Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019AC042D17FB96EF363040F52961A23F987 Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/DikZcVQXQSFDOynsfX_sTyHMKBA.roa Signing time: Wed 26 Nov 2025 13:03:15 +0000 ROA not before: Wed 26 Nov 2025 13:03:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5089 IP address blocks: 62.30.0.0/15 maxlen: 15 62.30.0.0/16 maxlen: 16 62.31.0.0/16 maxlen: 16 62.252.0.0/14 maxlen: 18 62.252.0.0/17 maxlen: 17 62.252.0.0/18 maxlen: 18 62.252.64.0/18 maxlen: 18 62.252.128.0/17 maxlen: 17 62.252.128.0/18 maxlen: 18 62.252.192.0/18 maxlen: 18 62.253.0.0/17 maxlen: 17 62.253.128.0/17 maxlen: 17 62.254.0.0/17 maxlen: 17 62.254.0.0/18 maxlen: 18 62.254.64.0/18 maxlen: 18 62.254.128.0/17 maxlen: 17 62.254.128.0/18 maxlen: 18 62.254.192.0/18 maxlen: 18 62.255.0.0/17 maxlen: 17 62.255.0.0/18 maxlen: 18 62.255.64.0/18 maxlen: 18 62.255.128.0/17 maxlen: 17 62.255.128.0/18 maxlen: 18 62.255.192.0/18 maxlen: 18 77.96.0.0/13 maxlen: 13 77.96.0.0/16 maxlen: 16 77.96.0.0/17 maxlen: 17 77.96.128.0/17 maxlen: 17 77.97.0.0/16 maxlen: 16 77.98.0.0/15 maxlen: 15 77.98.0.0/16 maxlen: 16 77.99.0.0/16 maxlen: 16 77.100.0.0/15 maxlen: 15 77.100.0.0/16 maxlen: 16 77.101.0.0/16 maxlen: 16 77.102.0.0/15 maxlen: 15 77.102.0.0/16 maxlen: 16 77.103.0.0/16 maxlen: 16 80.0.0.0/13 maxlen: 17 80.192.0.0/14 maxlen: 14 80.192.0.0/15 maxlen: 15 80.194.0.0/15 maxlen: 15 80.235.128.0/17 maxlen: 17 80.235.128.0/18 maxlen: 18 80.235.192.0/18 maxlen: 18 81.96.0.0/12 maxlen: 12 81.96.0.0/14 maxlen: 14 81.96.0.0/15 maxlen: 15 81.98.0.0/15 maxlen: 15 81.100.0.0/14 maxlen: 14 81.100.0.0/15 maxlen: 15 81.102.0.0/15 maxlen: 15 81.104.0.0/14 maxlen: 14 81.104.0.0/15 maxlen: 15 81.106.0.0/15 maxlen: 15 81.108.0.0/14 maxlen: 14 81.108.0.0/15 maxlen: 15 81.110.0.0/15 maxlen: 15 82.0.0.0/12 maxlen: 12 82.0.0.0/13 maxlen: 13 82.0.0.0/14 maxlen: 14 82.4.0.0/14 maxlen: 14 82.8.0.0/13 maxlen: 13 82.8.0.0/14 maxlen: 14 82.8.211.0/24 maxlen: 24 82.12.0.0/14 maxlen: 14 82.16.0.0/14 maxlen: 14 82.16.0.0/15 maxlen: 15 82.18.0.0/15 maxlen: 15 82.20.0.0/16 maxlen: 16 82.20.0.0/17 maxlen: 17 82.20.128.0/17 maxlen: 17 82.28.0.0/16 maxlen: 16 82.28.0.0/17 maxlen: 17 82.28.128.0/17 maxlen: 17 82.30.0.0/15 maxlen: 15 82.30.0.0/16 maxlen: 16 82.31.0.0/16 maxlen: 16 82.32.0.0/15 maxlen: 15 82.32.0.0/16 maxlen: 16 82.33.0.0/16 maxlen: 16 82.34.0.0/15 maxlen: 15 82.34.0.0/16 maxlen: 16 82.35.0.0/16 maxlen: 16 82.36.0.0/15 maxlen: 15 82.36.0.0/16 maxlen: 16 82.37.0.0/16 maxlen: 16 82.42.0.0/15 maxlen: 15 82.42.0.0/16 maxlen: 16 82.43.0.0/16 maxlen: 16 82.44.0.0/15 maxlen: 15 82.44.0.0/16 maxlen: 16 82.45.0.0/16 maxlen: 16 86.0.0.0/11 maxlen: 11 86.0.0.0/13 maxlen: 13 86.0.0.0/14 maxlen: 14 86.0.0.0/15 maxlen: 15 86.0.0.0/16 maxlen: 16 86.1.0.0/16 maxlen: 16 86.2.0.0/15 maxlen: 15 86.4.0.0/16 maxlen: 16 86.5.0.0/16 maxlen: 16 86.5.0.0/17 maxlen: 17 86.5.128.0/17 maxlen: 17 86.6.0.0/16 maxlen: 16 86.6.0.0/17 maxlen: 17 86.6.128.0/17 maxlen: 17 86.7.0.0/16 maxlen: 16 86.8.0.0/13 maxlen: 13 86.8.0.0/16 maxlen: 16 86.8.0.0/17 maxlen: 17 86.8.128.0/17 maxlen: 17 86.9.0.0/16 maxlen: 16 86.10.0.0/16 maxlen: 16 86.10.0.0/17 maxlen: 17 86.10.128.0/17 maxlen: 17 86.11.0.0/16 maxlen: 16 86.12.0.0/16 maxlen: 16 86.12.0.0/17 maxlen: 17 86.12.128.0/17 maxlen: 17 86.13.0.0/16 maxlen: 16 86.14.0.0/15 maxlen: 15 86.16.0.0/13 maxlen: 13 86.16.0.0/14 maxlen: 14 86.20.0.0/16 maxlen: 16 86.21.0.0/16 maxlen: 16 86.21.0.0/17 maxlen: 17 86.21.128.0/17 maxlen: 17 86.22.0.0/15 maxlen: 15 86.24.0.0/13 maxlen: 13 92.232.0.0/15 maxlen: 15 92.232.0.0/16 maxlen: 16 92.233.0.0/16 maxlen: 16 92.234.0.0/16 maxlen: 16 92.234.0.0/17 maxlen: 17 92.234.128.0/17 maxlen: 17 92.236.0.0/14 maxlen: 14 92.236.0.0/15 maxlen: 15 92.238.0.0/15 maxlen: 15 94.173.0.0/16 maxlen: 16 94.173.0.0/17 maxlen: 17 94.173.128.0/17 maxlen: 17 94.174.0.0/15 maxlen: 15 94.174.0.0/16 maxlen: 16 94.175.0.0/16 maxlen: 16 193.38.64.0/18 maxlen: 18 193.38.64.0/19 maxlen: 19 193.38.96.0/19 maxlen: 19 193.39.32.0/19 maxlen: 19 193.39.48.0/20 maxlen: 20 193.39.64.0/24 maxlen: 24 193.193.96.0/19 maxlen: 19 193.193.112.0/20 maxlen: 20 194.117.128.0/19 maxlen: 19 194.117.128.0/20 maxlen: 20 194.117.144.0/20 maxlen: 20 194.117.146.0/24 maxlen: 24 194.168.0.0/16 maxlen: 16 194.168.0.0/17 maxlen: 17 194.168.128.0/17 maxlen: 17 195.188.0.0/16 maxlen: 16 195.188.0.0/17 maxlen: 17 195.188.128.0/17 maxlen: 17 212.24.64.0/19 maxlen: 19 212.24.64.0/20 maxlen: 20 212.24.80.0/20 maxlen: 20 212.250.0.0/16 maxlen: 16 212.250.0.0/17 maxlen: 17 212.250.128.0/17 maxlen: 17 213.48.0.0/16 maxlen: 16 213.48.0.0/17 maxlen: 17 213.48.0.0/18 maxlen: 18 213.48.64.0/18 maxlen: 18 213.48.128.0/17 maxlen: 17 213.48.128.0/18 maxlen: 18 213.48.192.0/18 maxlen: 18 213.81.0.0/17 maxlen: 17 213.81.0.0/18 maxlen: 18 213.81.64.0/18 maxlen: 18 213.104.0.0/14 maxlen: 14 213.104.0.0/16 maxlen: 16 213.104.0.0/17 maxlen: 17 213.104.128.0/17 maxlen: 17 213.105.0.0/16 maxlen: 16 213.105.0.0/17 maxlen: 17 213.105.128.0/17 maxlen: 17 213.106.0.0/16 maxlen: 16 213.106.0.0/17 maxlen: 17 213.106.128.0/17 maxlen: 17 213.107.0.0/16 maxlen: 16 213.107.0.0/17 maxlen: 17 213.107.128.0/17 maxlen: 17 213.148.32.0/19 maxlen: 19 213.148.32.0/20 maxlen: 20 213.148.48.0/20 maxlen: 20 217.137.0.0/16 maxlen: 16 217.137.0.0/17 maxlen: 17 217.137.128.0/17 maxlen: 17 2a02:8801::/32 maxlen: 32 2a02:8880::/25 maxlen: 25 2a02:88fe::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:42:d1:7f:b9:6e:f3:63:04:0f:52:96:1a:23:f9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Nov 26 13:03:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0e29197154174121433b29ec7d7fec4f21cc2810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:a1:06:1b:b7:b7:01:09:f4:1b:e9:c9:f1: 27:0b:ff:b4:20:25:ae:bc:4f:ea:c5:10:3f:76:77: 23:e0:36:0e:44:37:16:e2:23:64:11:55:22:31:ee: c9:cc:6a:74:f9:14:44:63:d6:d4:80:38:f3:73:37: fe:4a:ec:b9:83:eb:28:ba:d1:50:f8:a2:e3:37:cd: 33:39:c0:c5:17:9b:76:d1:0a:b2:45:c6:90:e8:de: 10:dc:b4:52:03:3d:0f:0b:fb:e8:31:fd:6b:70:75: a8:9a:ee:71:c9:8d:a0:de:ec:6a:26:a3:2a:1c:fc: 30:25:3c:b5:98:ec:8a:17:48:77:94:40:fa:a2:8a: 15:0c:f8:7f:88:c1:3b:07:51:70:f4:80:0a:83:8e: ce:62:38:fe:49:77:e8:f6:8d:69:63:f7:73:c2:d9: 2e:52:1b:6d:9d:09:d2:0d:c0:42:88:26:fa:5f:b2: 04:3b:55:f7:dc:5e:14:06:72:c7:aa:8a:97:c6:bb: 1e:09:33:6a:10:9b:33:14:b9:b9:e8:e3:1b:d9:e7: 9f:78:65:17:a8:85:86:5c:82:c5:64:5b:d4:05:88: 1a:89:e3:bc:c9:b5:02:28:bc:11:9f:42:18:9c:e7: ca:82:dd:90:0f:08:2f:07:25:c8:ae:b5:46:68:68: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:29:19:71:54:17:41:21:43:3B:29:EC:7D:7F:EC:4F:21:CC:28:10 X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/DikZcVQXQSFDOynsfX_sTyHMKBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.30.0.0/15 62.252.0.0/14 77.96.0.0/13 80.0.0.0/13 80.192.0.0/14 80.235.128.0/17 81.96.0.0/12 82.0.0.0-82.20.255.255 82.28.0.0/16 82.30.0.0-82.37.255.255 82.42.0.0-82.45.255.255 86.0.0.0/11 92.232.0.0-92.234.255.255 92.236.0.0/14 94.173.0.0-94.175.255.255 193.38.64.0/18 193.39.32.0-193.39.64.255 193.193.96.0/19 194.117.128.0/19 194.168.0.0/16 195.188.0.0/16 212.24.64.0/19 212.250.0.0/16 213.48.0.0/16 213.81.0.0/17 213.104.0.0/14 213.148.32.0/19 217.137.0.0/16 IPv6: 2a02:8801::/32 2a02:8880::/25 Signature Algorithm: sha256WithRSAEncryption 3c:a7:c3:6c:bb:10:6f:f3:32:3b:71:d7:5b:65:3a:24:4e:dd: ed:46:b9:74:27:93:de:cf:6b:46:11:40:dd:ce:5c:8a:7e:1b: 6f:2a:64:79:00:d4:c8:21:ed:47:61:55:97:41:07:ec:f6:95: 74:a9:9e:28:a1:31:6a:c6:7c:f7:d3:04:ca:97:1d:e4:08:88: f8:7f:ec:c6:2d:0b:89:3b:54:ac:be:49:2b:82:8a:d1:09:08: 3d:23:9d:58:b5:ce:73:49:ca:5f:4e:92:c3:82:17:38:67:32: e9:17:08:16:c1:95:98:e6:6c:34:3b:26:59:79:7e:74:b5:49: b1:fb:ba:cf:77:14:4f:20:59:9b:19:ca:1e:9a:ce:3b:db:15: cd:8d:48:c8:af:c3:ae:ca:17:c7:26:38:70:31:c9:22:b7:14: 8a:d3:c0:78:29:95:23:80:96:f2:2f:8e:b1:f6:c6:45:c6:0c: 5f:af:d9:0e:82:56:6e:5d:3a:d6:d0:68:45:83:40:60:35:b3: bf:41:e5:cb:4f:36:4d:ea:af:2e:3d:70:86:db:96:f9:86:96: 7d:84:23:b9:10:b7:11:53:83:a3:e3:db:97:d1:27:99:6a:2c: c3:f3:b1:4a:04:f3:36:cb:56:87:85:85:1c:01:e8:8b:9a:b7: c4:0c:c4:fb -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgISAZrAQtF/uW7zYwQPUpYaI/mHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjUxMTI2MTMwMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTI5MTk3MTU0MTc0MTIxNDMzYjI5ZWM3ZDdmZWM0ZjIxY2MyODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulqhBhu3twEJ9BvpyfEnC/+0ICWu vE/qxRA/dncj4DYORDcW4iNkEVUiMe7JzGp0+RREY9bUgDjzczf+Suy5g+soutFQ +KLjN80zOcDFF5t20QqyRcaQ6N4Q3LRSAz0PC/voMf1rcHWomu5xyY2g3uxqJqMq HPwwJTy1mOyKF0h3lED6oooVDPh/iME7B1Fw9IAKg47OYjj+SXfo9o1pY/dzwtku UhttnQnSDcBCiCb6X7IEO1X33F4UBnLHqoqXxrseCTNqEJszFLm56OMb2eefeGUX qIWGXILFZFvUBYgaieO8ybUCKLwRn0IYnOfKgt2QDwgvByXIrrVGaGhC6wIDAQAB o4IC3DCCAtgwHQYDVR0OBBYEFA4pGXFUF0EhQzsp7H1/7E8hzCgQMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvRGlrWmNWUVhRU0ZET3luc2ZYX3NUeUhNS0JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCBxQQCAAEwgb4DAwE+ HgMDAj78AwMDTWADAwNQAAMDAlDAAwQHUOuAAwMEUWAwCQMCAVIDAwBSFAMDAFIc MAoDAwFSHgMDAVIkMAoDAwFSKgMDAVIsAwMFVgAwCgMDA1zoAwMAXOoDAwJc7DAK AwMAXq0DAwReoAMEBsEmQDAMAwQFwScgAwQAwSdAAwQFwcFgAwQFwnWAAwMAwqgD AwDDvAMEBdQYQAMDANT6AwMA1TADBAfVUQADAwLVaAMEBdWUIAMDANmJMBQEAgAC MA4DBQAqAogBAwUHKgKIgDANBgkqhkiG9w0BAQsFAAOCAQEAPKfDbLsQb/MyO3HX W2U6JE7d7Ua5dCeT3s9rRhFA3c5cin4bbypkeQDUyCHtR2FVl0EH7PaVdKmeKKEx asZ899MEypcd5AiI+H/sxi0LiTtUrL5JK4KK0QkIPSOdWLXOc0nKX06Sw4IXOGcy 6RcIFsGVmOZsNDsmWXl+dLVJsfu6z3cUTyBZmxnKHprOO9sVzY1IyK/DrsoXxyY4 cDHJIrcUitPAeCmVI4CW8i+OsfbGRcYMX6/ZDoJWbl061tBoRYNAYDWzv0Hly082 TeqvLj1whtuW+YaWfYQjuRC3EVODo+Pbl9EnmWosw/OxSgTzNstWh4WFHAHoi5q3 xAzE+w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:54:21 2025 by rpki-client