This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/_R08A0A1WwUNA7_t0dJQU5vTwhM.roa File: _R08A0A1WwUNA7_t0dJQU5vTwhM.roa (raw, json) Hash identifier: tOIoPRCwu1fy+lbA5AYiw8ODs2HJ1/e7whaN21t00Wk= Subject key identifier: FD:1D:3C:03:40:35:5B:05:0D:03:BF:ED:D1:D2:50:53:9B:D3:C2:13 Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e Certificate serial: 019A71C7E7714726F8FBD61C539B7A5BC119 Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/_R08A0A1WwUNA7_t0dJQU5vTwhM.roa Signing time: Tue 11 Nov 2025 07:18:37 +0000 ROA not before: Tue 11 Nov 2025 07:18:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2116 IP address blocks: 31.185.24.0/21 maxlen: 21 37.191.128.0/17 maxlen: 17 62.63.0.0/18 maxlen: 18 62.101.192.0/18 maxlen: 18 64.28.0.0/19 maxlen: 19 77.40.128.0/17 maxlen: 17 77.88.64.0/18 maxlen: 18 77.234.48.0/21 maxlen: 21 78.24.144.0/21 maxlen: 21 79.135.0.0/19 maxlen: 19 80.64.192.0/20 maxlen: 20 80.241.80.0/20 maxlen: 20 81.0.128.0/18 maxlen: 18 81.175.0.0/20 maxlen: 20 81.175.20.0/22 maxlen: 22 81.175.24.0/21 maxlen: 21 81.175.32.0/19 maxlen: 19 81.191.0.0/16 maxlen: 16 82.196.192.0/19 maxlen: 19 84.20.96.0/19 maxlen: 19 85.112.128.0/19 maxlen: 19 85.196.64.0/18 maxlen: 18 85.221.0.0/17 maxlen: 17 85.252.0.0/16 maxlen: 16 86.62.128.0/18 maxlen: 18 87.118.0.0/18 maxlen: 18 88.84.160.0/19 maxlen: 19 89.191.0.0/19 maxlen: 19 91.135.32.0/20 maxlen: 20 91.202.80.0/22 maxlen: 22 109.199.192.0/19 maxlen: 19 178.74.0.0/18 maxlen: 18 185.8.16.0/22 maxlen: 22 185.35.80.0/22 maxlen: 22 185.67.116.0/22 maxlen: 22 185.67.116.0/24 maxlen: 24 185.129.156.0/22 maxlen: 22 193.69.0.0/16 maxlen: 16 193.71.0.0/16 maxlen: 16 193.75.0.0/17 maxlen: 17 193.90.0.0/16 maxlen: 16 193.91.128.0/17 maxlen: 17 194.19.0.0/17 maxlen: 17 194.29.200.0/22 maxlen: 22 194.54.96.0/19 maxlen: 19 195.0.128.0/17 maxlen: 17 195.1.0.0/16 maxlen: 16 195.18.128.0/17 maxlen: 17 195.139.0.0/16 maxlen: 16 195.159.0.0/16 maxlen: 16 195.204.0.0/16 maxlen: 16 212.62.224.0/19 maxlen: 19 212.71.64.0/19 maxlen: 19 213.52.0.0/17 maxlen: 17 213.151.128.0/19 maxlen: 19 213.158.224.0/19 maxlen: 19 213.160.224.0/20 maxlen: 20 213.160.240.0/21 maxlen: 21 213.172.192.0/19 maxlen: 19 213.239.64.0/18 maxlen: 18 217.8.128.0/19 maxlen: 19 217.14.0.0/20 maxlen: 20 217.77.32.0/20 maxlen: 20 217.118.32.0/19 maxlen: 19 217.144.224.0/19 maxlen: 19 2001:840::/29 maxlen: 29 2001:8c0::/29 maxlen: 29 2001:8c0:a906::/48 maxlen: 48 2001:4dd8::/29 maxlen: 29 2a00:c440::/29 maxlen: 29 2a01:520::/29 maxlen: 29 2a02:270::/29 maxlen: 29 2a03:c000::/29 maxlen: 29 2a04:6340::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:c7:e7:71:47:26:f8:fb:d6:1c:53:9b:7a:5b:c1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e Validity Not Before: Nov 11 07:18:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd1d3c0340355b050d03bfedd1d250539bd3c213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:4e:76:51:d5:d5:1f:de:83:21:3d:1c:0d: 5d:3e:04:dd:82:3e:33:1d:9a:ab:9b:15:c9:29:91: 57:d6:68:4b:27:40:f2:41:16:9b:a6:c5:9a:34:ba: 1c:d1:c7:1e:c8:3a:9e:21:9f:3b:a4:0a:6e:6b:40: 49:e3:47:35:a5:4f:67:25:21:92:7d:70:fb:d4:b6: f1:6f:56:d8:ac:b8:aa:b4:ec:0d:d4:d1:84:c7:62: 72:7f:a6:f6:bd:b9:61:17:47:95:4a:6b:84:b3:a9: c9:e2:11:a5:e9:1e:38:a3:76:59:b3:d7:d6:a3:03: f7:f0:25:83:e1:59:32:7d:dd:21:b2:7f:c6:de:82: 0f:2c:c9:aa:41:eb:f8:c8:a1:b4:50:f5:82:34:1f: 41:48:30:90:96:22:bb:38:38:70:54:50:35:45:77: e9:31:35:84:54:84:6f:37:0f:5f:3e:2b:d5:c6:5a: 4f:30:d0:d9:ea:56:04:1b:1c:be:2f:e2:b1:b0:d4: 5e:f7:89:81:71:12:13:ec:0b:5d:5a:05:3f:0d:51: 7c:06:8a:28:0d:52:87:ae:5d:fb:0d:70:3e:78:b5: 8c:b2:1b:4c:b0:a0:f9:3b:6f:d8:a7:d0:70:f7:52: a9:0e:7b:0d:45:9c:e9:75:a5:b0:e1:90:de:d6:9d: d1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1D:3C:03:40:35:5B:05:0D:03:BF:ED:D1:D2:50:53:9B:D3:C2:13 X509v3 Authority Key Identifier: keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/_R08A0A1WwUNA7_t0dJQU5vTwhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.24.0/21 37.191.128.0/17 62.63.0.0/18 62.101.192.0/18 64.28.0.0/19 77.40.128.0/17 77.88.64.0/18 77.234.48.0/21 78.24.144.0/21 79.135.0.0/19 80.64.192.0/20 80.241.80.0/20 81.0.128.0/18 81.175.0.0/20 81.175.20.0-81.175.63.255 81.191.0.0/16 82.196.192.0/19 84.20.96.0/19 85.112.128.0/19 85.196.64.0/18 85.221.0.0/17 85.252.0.0/16 86.62.128.0/18 87.118.0.0/18 88.84.160.0/19 89.191.0.0/19 91.135.32.0/20 91.202.80.0/22 109.199.192.0/19 178.74.0.0/18 185.8.16.0/22 185.35.80.0/22 185.67.116.0/22 185.129.156.0/22 193.69.0.0/16 193.71.0.0/16 193.75.0.0/17 193.90.0.0/16 193.91.128.0/17 194.19.0.0/17 194.29.200.0/22 194.54.96.0/19 195.0.128.0-195.1.255.255 195.18.128.0/17 195.139.0.0/16 195.159.0.0/16 195.204.0.0/16 212.62.224.0/19 212.71.64.0/19 213.52.0.0/17 213.151.128.0/19 213.158.224.0/19 213.160.224.0-213.160.247.255 213.172.192.0/19 213.239.64.0/18 217.8.128.0/19 217.14.0.0/20 217.77.32.0/20 217.118.32.0/19 217.144.224.0/19 IPv6: 2001:840::/29 2001:8c0::/29 2001:4dd8::/29 2a00:c440::/29 2a01:520::/29 2a02:270::/29 2a03:c000::/29 2a04:6340::/29 Signature Algorithm: sha256WithRSAEncryption 35:74:61:c8:6d:50:1d:d2:74:31:d7:3b:37:0c:f0:3c:74:5b: 0b:d0:13:ed:fa:21:af:55:8c:79:73:66:38:1d:e7:e9:ee:c7: 22:c9:14:32:a8:7a:86:72:e0:f0:03:b0:a5:42:6d:51:bb:27: 8a:c4:09:4d:96:ec:1c:1f:da:17:57:3d:1e:53:a5:12:3b:5f: 77:dc:53:d3:65:49:3b:18:17:0c:47:41:c4:fd:b1:b1:e8:dc: b1:d1:da:7b:88:33:64:85:a1:fb:6c:1b:d0:11:a4:88:1f:a5: 0c:54:61:85:70:79:a5:7c:a6:3e:85:a1:c1:94:43:70:67:f9: ef:a4:68:74:30:5a:3a:ab:20:d2:a8:34:f2:63:cd:9a:74:6e: b8:f4:60:55:5a:d5:5b:76:4d:0b:1b:17:8a:5d:c3:25:b5:f8: 17:9a:4e:24:80:c6:c9:f0:8d:b0:70:7a:2a:27:e3:a4:17:e5: 62:30:84:53:bf:a4:2c:6e:8b:e4:16:5d:64:f2:ad:26:03:aa: 9d:46:e8:01:03:8a:27:89:31:e5:9e:95:89:c8:61:0b:42:b7: d0:9f:8b:02:b3:cc:fe:1e:2d:2e:63:b9:04:c6:46:5a:cc:cc: e1:16:7c:88:58:a7:e3:97:30:79:83:d3:67:f4:64:c9:9e:b8: 9f:10:7c:11 -----BEGIN CERTIFICATE----- MIIGuDCCBaCgAwIBAgISAZpxx+dxRyb4+9YcU5t6W8EZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzRhY2VkY2I4NmNkZGZlZDdmNmRlOGNhZGZjYTAwNDY5 YmJjOGUwHhcNMjUxMTExMDcxODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDFkM2MwMzQwMzU1YjA1MGQwM2JmZWRkMWQyNTA1MzliZDNjMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMZOdlHV1R/egyE9HA1dPgTdgj4z HZqrmxXJKZFX1mhLJ0DyQRabpsWaNLoc0cceyDqeIZ87pApua0BJ40c1pU9nJSGS fXD71Lbxb1bYrLiqtOwN1NGEx2Jyf6b2vblhF0eVSmuEs6nJ4hGl6R44o3ZZs9fW owP38CWD4Vkyfd0hsn/G3oIPLMmqQev4yKG0UPWCNB9BSDCQliK7ODhwVFA1RXfp MTWEVIRvNw9fPivVxlpPMNDZ6lYEGxy+L+KxsNRe94mBcRIT7AtdWgU/DVF8Booo DVKHrl37DXA+eLWMshtMsKD5O2/Yp9Bw91KpDnsNRZzpdaWw4ZDe1p3R8wIDAQAB o4IDxDCCA8AwHQYDVR0OBBYEFP0dPANANVsFDQO/7dHSUFOb08ITMB8GA1UdIwQY MBaAFH3ErO3Lhs3f7X9t6MrfygBGm7yOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1Nzkt Mzk0ODAyODVhOTQ4LzEvX1IwOEEwQTFXd1VOQTdfdDBkSlFVNXZUd2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1NzktMzk0ODAyODVhOTQ4 LzEvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIB2AYIKwYBBQUHAQcBAf8EggHHMIIBwzCCAX8EAgABMIIB dwMEAx+5GAMEByW/gAMEBj4/AAMEBj5lwAMEBUAcAAMEB00ogAMEBk1YQAMEA03q MAMEA04YkAMEBU+HAAMEBFBAwAMEBFDxUAMEBlEAgAMEBFGvADAMAwQCUa8UAwQG Ua8AAwMAUb8DBAVSxMADBAVUFGADBAVVcIADBAZVxEADBAdV3QADAwBV/AMEBlY+ gAMEBld2AAMEBVhUoAMEBVm/AAMEBFuHIAMEAlvKUAMEBW3HwAMEBrJKAAMEArkI EAMEArkjUAMEArlDdAMEArmBnAMDAMFFAwMAwUcDBAfBSwADAwDBWgMEB8FbgAME B8ITAAMEAsIdyAMEBcI2YDALAwQHwwCAAwMBwwADBAfDEoADAwDDiwMDAMOfAwMA w8wDBAXUPuADBAXUR0ADBAfVNAADBAXVl4ADBAXVnuAwDAMEBdWg4AMEA9Wg8AME BdWswAMEBtXvQAMEBdkIgAMEBNkOAAMEBNlNIAMEBdl2IAMEBdmQ4DA+BAIAAjA4 AwUDIAEIQAMFAyABCMADBQMgAU3YAwUDKgDEQAMFAyoBBSADBQMqAgJwAwUDKgPA AAMFAyoEY0AwDQYJKoZIhvcNAQELBQADggEBADV0YchtUB3SdDHXOzcM8Dx0WwvQ E+36Ia9VjHlzZjgd5+nuxyLJFDKoeoZy4PADsKVCbVG7J4rECU2W7Bwf2hdXPR5T pRI7X3fcU9NlSTsYFwxHQcT9sbHo3LHR2nuIM2SFoftsG9ARpIgfpQxUYYVweaV8 pj6FocGUQ3Bn+e+kaHQwWjqrINKoNPJjzZp0brj0YFVa1Vt2TQsbF4pdwyW1+Bea TiSAxsnwjbBweion46QX5WIwhFO/pCxui+QWXWTyrSYDqp1G6AEDiieJMeWelYnI YQtCt9CfiwKzzP4eLS5juQTGRlrMzOEWfIhYp+OXMHmD02f0ZMmeuJ8QfBE= -----END CERTIFICATE-----Generated at Sat Dec 6 17:04:54 2025 by rpki-client