This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/x2NZxp0LA5Hn4FBrQLtyHMLL1Ps.roa File: x2NZxp0LA5Hn4FBrQLtyHMLL1Ps.roa (raw, json) Hash identifier: 5PwxgXuzDZkAYcHI2n6WOuKQDQFIo40oj3hRytWCw24= Subject key identifier: C7:63:59:C6:9D:0B:03:91:E7:E0:50:6B:40:BB:72:1C:C2:CB:D4:FB Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019AF00D75E2F6CF121747F4FB4F5800F3C0 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/x2NZxp0LA5Hn4FBrQLtyHMLL1Ps.roa Signing time: Fri 05 Dec 2025 19:46:45 +0000 ROA not before: Fri 05 Dec 2025 19:46:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44285 IP address blocks: 5.1.43.0/24 maxlen: 24 37.32.32.0/21 maxlen: 21 37.32.32.0/22 maxlen: 22 37.32.32.0/24 maxlen: 24 37.32.33.0/24 maxlen: 24 37.32.34.0/24 maxlen: 24 37.32.35.0/24 maxlen: 24 37.32.37.0/24 maxlen: 24 37.32.38.0/24 maxlen: 24 37.32.39.0/24 maxlen: 24 37.75.243.0/24 maxlen: 24 37.75.244.0/22 maxlen: 22 37.75.244.0/24 maxlen: 24 37.75.245.0/24 maxlen: 24 37.75.246.0/24 maxlen: 24 37.75.247.0/24 maxlen: 24 45.9.252.0/22 maxlen: 24 45.9.252.0/24 maxlen: 24 45.9.253.0/24 maxlen: 24 45.9.254.0/24 maxlen: 24 45.87.4.0/23 maxlen: 24 45.140.224.0/22 maxlen: 22 46.28.72.0/21 maxlen: 24 46.28.72.0/24 maxlen: 24 46.28.73.0/24 maxlen: 24 46.28.74.0/24 maxlen: 24 78.110.120.0/22 maxlen: 24 84.47.224.0/21 maxlen: 21 84.47.224.0/22 maxlen: 22 84.47.224.0/24 maxlen: 24 84.47.225.0/24 maxlen: 24 84.47.226.0/24 maxlen: 24 84.47.227.0/24 maxlen: 24 84.47.228.0/22 maxlen: 22 84.47.228.0/24 maxlen: 24 84.47.229.0/24 maxlen: 24 84.47.230.0/23 maxlen: 24 84.47.231.0/24 maxlen: 24 85.198.24.0/22 maxlen: 24 88.135.37.0/24 maxlen: 24 88.135.38.0/24 maxlen: 24 88.135.39.0/24 maxlen: 24 91.236.168.0/23 maxlen: 23 91.236.168.0/24 maxlen: 24 91.236.169.0/24 maxlen: 24 185.18.212.0/22 maxlen: 22 185.18.212.0/24 maxlen: 24 185.18.213.0/24 maxlen: 24 185.18.214.0/24 maxlen: 24 185.18.215.0/24 maxlen: 24 185.51.200.0/24 maxlen: 24 185.51.201.0/24 maxlen: 24 185.51.202.0/24 maxlen: 24 185.51.203.0/24 maxlen: 24 185.121.128.0/22 maxlen: 24 185.121.128.0/24 maxlen: 24 185.121.129.0/24 maxlen: 24 185.121.130.0/24 maxlen: 24 185.121.131.0/24 maxlen: 24 185.128.136.0/24 maxlen: 24 185.128.137.0/24 maxlen: 24 185.128.138.0/24 maxlen: 24 185.128.139.0/24 maxlen: 24 185.141.132.0/24 maxlen: 24 185.141.133.0/24 maxlen: 24 185.141.134.0/24 maxlen: 24 185.141.135.0/24 maxlen: 24 185.182.248.0/22 maxlen: 22 185.182.248.0/23 maxlen: 23 185.182.250.0/23 maxlen: 23 185.182.250.0/24 maxlen: 24 185.182.251.0/24 maxlen: 24 185.233.131.0/24 maxlen: 24 188.209.152.0/23 maxlen: 23 195.110.38.0/23 maxlen: 23 195.110.38.0/24 maxlen: 24 195.110.39.0/24 maxlen: 24 217.172.120.0/21 maxlen: 24 217.172.124.0/23 maxlen: 23 217.172.126.0/23 maxlen: 23 217.172.127.0/24 maxlen: 24 2a02:828::/29 maxlen: 29 2a02:828::/32 maxlen: 32 2a02:828::/48 maxlen: 48 2a02:828::/64 maxlen: 64 2a02:828:1::/48 maxlen: 48 2a02:829::/32 maxlen: 32 2a02:82a::/32 maxlen: 32 2a02:82b::/32 maxlen: 32 2a02:82c::/32 maxlen: 32 2a02:82d::/32 maxlen: 32 2a02:82e::/32 maxlen: 32 2a02:82f::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:0d:75:e2:f6:cf:12:17:47:f4:fb:4f:58:00:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Dec 5 19:46:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c76359c69d0b0391e7e0506b40bb721cc2cbd4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c9:33:e2:53:17:dd:bb:96:b5:38:f8:db:e1: 92:5d:82:0d:e3:b8:8a:ab:7f:f0:66:1b:c6:65:19: 1a:40:72:03:bc:6f:1b:45:f3:84:ba:c4:99:0e:93: c9:c1:09:53:22:40:f9:cc:6e:72:6c:87:e8:5b:b1: 89:99:b2:56:02:f3:8e:db:9d:95:28:8f:f5:c9:fb: 99:dc:59:46:03:9d:e4:8f:23:47:ff:e3:fd:c4:a2: 20:3f:7c:17:b3:af:3a:13:81:b3:74:c5:68:67:7a: 9a:99:a8:60:0e:d1:98:c1:e2:c9:a0:c7:23:6b:68: 51:98:3f:ce:25:40:54:29:cc:c5:7c:52:96:e1:d3: f7:26:4c:e9:e8:d8:8b:7a:ce:e2:25:e0:41:eb:ab: ec:0e:7f:d6:63:a6:6a:9e:f9:f0:e5:da:14:a9:f7: 18:bf:f4:14:02:27:9b:27:aa:bc:be:af:88:de:2a: dd:6c:63:8f:23:89:94:bc:76:a3:ce:1b:e6:1d:9d: 06:77:cf:5d:85:6b:49:1c:2a:a2:09:d6:2f:c4:a8: cd:32:e2:23:4f:40:80:ec:00:ba:12:93:b5:26:a8: ef:60:0f:80:39:28:d2:3e:26:98:aa:ca:52:d6:e4: 89:40:29:49:58:a0:26:21:90:84:bf:c4:48:0c:95: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:63:59:C6:9D:0B:03:91:E7:E0:50:6B:40:BB:72:1C:C2:CB:D4:FB X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/x2NZxp0LA5Hn4FBrQLtyHMLL1Ps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.43.0/24 37.32.32.0/21 37.75.243.0-37.75.247.255 45.9.252.0/22 45.87.4.0/23 45.140.224.0/22 46.28.72.0/21 78.110.120.0/22 84.47.224.0/21 85.198.24.0/22 88.135.37.0-88.135.39.255 91.236.168.0/23 185.18.212.0/22 185.51.200.0/22 185.121.128.0/22 185.128.136.0/22 185.141.132.0/22 185.182.248.0/22 185.233.131.0/24 188.209.152.0/23 195.110.38.0/23 217.172.120.0/21 IPv6: 2a02:828::/29 Signature Algorithm: sha256WithRSAEncryption 81:fa:b8:f7:5f:c5:2a:df:4c:f3:92:26:ef:e0:5f:0e:6d:68: de:76:d5:82:f5:06:ac:bd:6c:08:d9:88:e2:7d:a4:d0:e6:f4: ff:21:da:a4:44:04:56:09:0f:f0:7c:51:b1:48:ab:7e:97:8c: e5:55:98:09:68:c1:ec:4d:f8:ed:9e:ee:4f:79:98:fa:7b:d9: 7c:ed:b8:93:29:25:fb:b3:ef:5e:a5:0a:10:19:3c:7c:50:eb: 32:b9:89:0b:f6:8b:6b:91:35:fd:5e:c6:b7:16:56:7a:31:f3: b1:28:d9:e5:00:47:be:80:3e:a0:18:42:af:89:c2:e5:c2:8e: 6e:5d:4d:1a:9a:af:5d:55:3f:cd:75:3b:41:9b:c0:02:17:5a: 56:23:fe:ed:7f:1a:7a:c4:f7:37:58:c4:81:c3:c7:15:fd:05: e8:cf:c7:7b:24:39:2f:80:53:2d:a8:9a:bb:5f:70:00:39:25: 86:cc:fd:0e:7b:10:0c:36:42:00:6a:6a:55:6f:63:3d:26:5c: 74:db:cf:3e:6b:9c:91:a2:5c:c2:58:0f:79:c0:30:52:b3:2d: 49:ae:47:03:ee:9d:9a:bc:dc:34:48:e0:75:7c:bd:d9:25:b3: 21:64:b9:1c:c8:84:e4:fe:8d:66:4a:ef:77:35:fc:f9:ca:72: c7:63:29:eb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZrwDXXi9s8SF0f0+09YAPPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUxMjA1MTk0NjQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzYzNTljNjlkMGIwMzkxZTdlMDUwNmI0MGJiNzIxY2MyY2JkNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjskz4lMX3buWtTj42+GSXYIN47iK q3/wZhvGZRkaQHIDvG8bRfOEusSZDpPJwQlTIkD5zG5ybIfoW7GJmbJWAvOO252V KI/1yfuZ3FlGA53kjyNH/+P9xKIgP3wXs686E4GzdMVoZ3qamahgDtGYweLJoMcj a2hRmD/OJUBUKczFfFKW4dP3Jkzp6NiLes7iJeBB66vsDn/WY6Zqnvnw5doUqfcY v/QUAiebJ6q8vq+I3irdbGOPI4mUvHajzhvmHZ0Gd89dhWtJHCqiCdYvxKjNMuIj T0CA7AC6EpO1JqjvYA+AOSjSPiaYqspS1uSJQClJWKAmIZCEv8RIDJWtFwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFMdjWcadCwOR5+BQa0C7chzCy9T7MB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEveDJOWnhwMExBNUhuNEZCclFMdHlITUxMMVBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBmwQCAAEwgZQDBAAF ASsDBAMlICAwDAMEACVL8wMEAyVL8AMEAi0J/AMEAS1XBAMEAi2M4AMEAy4cSAME Ak5ueAMEA1Qv4AMEAlXGGDAMAwQAWIclAwQDWIcgAwQBW+yoAwQCuRLUAwQCuTPI AwQCuXmAAwQCuYCIAwQCuY2EAwQCubb4AwQAuemDAwQBvNGYAwQBw24mAwQD2ax4 MA0EAgACMAcDBQMqAggoMA0GCSqGSIb3DQEBCwUAA4IBAQCB+rj3X8Uq30zzkibv 4F8ObWjedtWC9QasvWwI2YjifaTQ5vT/IdqkRARWCQ/wfFGxSKt+l4zlVZgJaMHs Tfjtnu5PeZj6e9l87biTKSX7s+9epQoQGTx8UOsyuYkL9otrkTX9Xsa3FlZ6MfOx KNnlAEe+gD6gGEKvicLlwo5uXU0amq9dVT/NdTtBm8ACF1pWI/7tfxp6xPc3WMSB w8cV/QXoz8d7JDkvgFMtqJq7X3AAOSWGzP0OexAMNkIAampVb2M9Jlx0288+a5yR olzCWA95wDBSsy1JrkcD7p2avNw0SOB1fL3ZJbMhZLkcyITk/o1mSu93Nfz5ynLH Yynr -----END CERTIFICATE-----Generated at Sun Dec 7 01:07:13 2025 by rpki-client