This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/q3I5uk601CP6yEVw9P03xUPnugY.roa File: q3I5uk601CP6yEVw9P03xUPnugY.roa (raw, json) Hash identifier: ZDpLV11aWOXOyH1x/80gaRdd+gvEXhTdOywUgcsSS20= Subject key identifier: AB:72:39:BA:4E:B4:D4:23:FA:C8:45:70:F4:FD:37:C5:43:E7:BA:06 Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9 Certificate serial: 019AC46B93F5EC0AF0E4CE78235BBEB905F4 Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/q3I5uk601CP6yEVw9P03xUPnugY.roa Signing time: Thu 27 Nov 2025 08:26:15 +0000 ROA not before: Thu 27 Nov 2025 08:26:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21245 IP address blocks: 31.3.0.0/24 maxlen: 24 31.3.1.0/24 maxlen: 24 31.3.2.0/24 maxlen: 24 31.3.3.0/24 maxlen: 24 31.3.4.0/24 maxlen: 24 31.3.5.0/24 maxlen: 24 31.3.6.0/24 maxlen: 24 31.3.7.0/24 maxlen: 24 80.91.216.0/24 maxlen: 24 91.208.32.0/24 maxlen: 24 103.199.232.0/24 maxlen: 24 103.199.233.0/24 maxlen: 24 103.199.234.0/24 maxlen: 24 103.199.235.0/24 maxlen: 24 146.19.176.0/24 maxlen: 24 185.21.180.0/24 maxlen: 24 185.21.181.0/24 maxlen: 24 185.21.182.0/24 maxlen: 24 185.21.183.0/24 maxlen: 24 185.22.160.0/24 maxlen: 24 185.22.161.0/24 maxlen: 24 185.22.162.0/24 maxlen: 24 185.22.163.0/24 maxlen: 24 185.87.172.0/24 maxlen: 24 185.87.173.0/24 maxlen: 24 185.87.174.0/24 maxlen: 24 185.87.175.0/24 maxlen: 24 185.155.102.0/24 maxlen: 24 185.201.196.0/24 maxlen: 24 185.201.197.0/24 maxlen: 24 185.201.198.0/24 maxlen: 24 185.201.199.0/24 maxlen: 24 185.230.16.0/24 maxlen: 24 185.230.17.0/24 maxlen: 24 185.230.19.0/24 maxlen: 24 185.235.10.0/24 maxlen: 24 185.241.63.0/24 maxlen: 24 2a03:3f00::/48 maxlen: 48 2a03:3f00:1::/48 maxlen: 48 2a03:3f00:2::/48 maxlen: 48 2a03:3f00:3::/48 maxlen: 48 2a03:3f00:4::/48 maxlen: 48 2a03:3f00:5::/48 maxlen: 48 2a03:3f00:6::/48 maxlen: 48 2a03:3f00:7::/48 maxlen: 48 2a03:3f00:10::/48 maxlen: 48 2a03:3f00:17::/48 maxlen: 48 2a03:3f00:19::/48 maxlen: 48 2a03:3f00:31::/48 maxlen: 48 2a03:3f00:d8::/48 maxlen: 48 2a03:3f00:160::/48 maxlen: 48 2a03:3f00:161::/48 maxlen: 48 2a03:3f00:162::/48 maxlen: 48 2a03:3f00:163::/48 maxlen: 48 2a03:3f00:172::/48 maxlen: 48 2a03:3f00:174::/48 maxlen: 48 2a03:3f00:175::/48 maxlen: 48 2a03:3f00:180::/48 maxlen: 48 2a03:3f00:181::/48 maxlen: 48 2a03:3f00:182::/48 maxlen: 48 2a03:3f00:183::/48 maxlen: 48 2a03:3f00:3e7::/48 maxlen: 48 2a03:3f00:3e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:6b:93:f5:ec:0a:f0:e4:ce:78:23:5b:be:b9:05:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9 Validity Not Before: Nov 27 08:26:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab7239ba4eb4d423fac84570f4fd37c543e7ba06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:bd:bb:9d:e1:cd:2a:da:a2:6f:03:72:e8: f0:0b:c1:7a:44:ff:5c:88:76:24:21:d4:0a:be:4d: ba:df:06:78:77:9c:3d:09:4c:b9:dc:39:fe:9f:b2: d1:a9:eb:29:9a:40:9f:6a:91:c9:f0:f0:f4:b6:1a: a2:c1:a2:c0:ba:d9:3f:3c:78:a5:f7:65:5a:80:56: 21:97:8a:66:31:f1:cf:dd:8d:40:36:7a:5d:30:96: 2b:83:be:a4:dc:2e:3f:90:dc:67:57:f6:7f:11:7a: cc:29:b0:51:95:1a:eb:34:58:0e:c7:4a:2d:68:f1: d7:e8:9f:1b:92:82:c2:12:07:eb:73:ff:5a:95:14: 28:04:2a:0d:e7:fb:27:bd:d6:37:e0:23:59:91:d6: 3f:c0:da:0b:1d:e4:48:4d:34:7c:8b:69:42:8a:05: 85:10:fe:72:32:ff:22:85:04:c5:f2:e6:29:70:e3: b8:78:68:0b:fb:13:27:ba:22:c7:57:24:b1:a4:d5: 6a:d8:6b:d0:a4:64:18:e0:5a:72:8d:15:02:fe:64: fd:c1:20:7a:3a:8d:5d:dc:19:7f:3d:af:c2:ba:68: 14:6c:43:6b:b2:43:3c:7e:ee:b4:9e:8d:ac:33:f0: 21:eb:53:18:5c:95:e5:fc:f0:a5:36:a1:af:e4:cd: 0a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:72:39:BA:4E:B4:D4:23:FA:C8:45:70:F4:FD:37:C5:43:E7:BA:06 X509v3 Authority Key Identifier: keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/q3I5uk601CP6yEVw9P03xUPnugY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.0.0/21 80.91.216.0/24 91.208.32.0/24 103.199.232.0/22 146.19.176.0/24 185.21.180.0/22 185.22.160.0/22 185.87.172.0/22 185.155.102.0/24 185.201.196.0/22 185.230.16.0/23 185.230.19.0/24 185.235.10.0/24 185.241.63.0/24 IPv6: 2a03:3f00::/45 2a03:3f00:10::/48 2a03:3f00:17::/48 2a03:3f00:19::/48 2a03:3f00:31::/48 2a03:3f00:d8::/48 2a03:3f00:160::/46 2a03:3f00:172::/48 2a03:3f00:174::/47 2a03:3f00:180::/46 2a03:3f00:3e7::-2a03:3f00:3e8:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 99:d0:13:ee:c8:b6:ac:c1:3e:e1:ba:45:a7:27:db:1d:6a:92: cd:5f:ad:09:57:e5:89:cb:eb:ce:59:36:d2:21:c1:da:5e:70: d1:ce:eb:b3:e6:55:35:41:3d:ae:f8:a3:29:f1:c6:fe:95:60: 98:e7:ad:d5:56:3e:16:04:ef:59:f7:38:b5:1c:12:74:75:53: 3e:67:39:4a:55:f7:42:2e:f6:2e:10:a3:54:02:10:05:98:5a: 9c:5a:20:e5:9f:26:cf:5b:f7:22:7d:ee:94:35:40:b4:f9:f7: 7a:dd:a0:35:35:8e:d7:28:9e:b2:cd:dd:a9:a5:c5:16:d5:e2: ba:38:62:85:8b:5e:20:31:33:8e:79:16:33:a1:ed:67:7a:3e: 3a:9d:c6:26:79:2f:76:34:9b:cd:68:be:19:8d:33:ba:46:1d: 2b:d3:53:f3:42:d4:d4:f5:03:0d:af:6f:e1:dd:f7:5b:7e:fe: 49:54:f1:7b:fa:82:1c:67:9c:17:54:b0:b1:b9:1f:a2:b2:d9: 8e:f0:f5:70:25:95:f3:2f:cb:b4:7e:0b:c7:09:2e:2a:bc:34: f5:d2:ab:80:47:5d:a1:db:14:9b:b9:e4:50:d8:9d:f4:03:5d: 06:0e:83:b7:cf:72:63:a0:c3:e9:09:f3:d1:67:86:40:df:fe: e9:6c:e1:45 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZrEa5P17Arw5M54I1u+uQX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YjE4Zjk2YWFhMDM1NjdmMjJmYzAyYzQyYTY5MzU3MDg2 NTVhYTkwHhcNMjUxMTI3MDgyNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjcyMzliYTRlYjRkNDIzZmFjODQ1NzBmNGZkMzdjNTQzZTdiYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4u9u53hzSraom8DcujwC8F6RP9c iHYkIdQKvk263wZ4d5w9CUy53Dn+n7LRqespmkCfapHJ8PD0thqiwaLAutk/PHil 92VagFYhl4pmMfHP3Y1ANnpdMJYrg76k3C4/kNxnV/Z/EXrMKbBRlRrrNFgOx0ot aPHX6J8bkoLCEgfrc/9alRQoBCoN5/snvdY34CNZkdY/wNoLHeRITTR8i2lCigWF EP5yMv8ihQTF8uYpcOO4eGgL+xMnuiLHVySxpNVq2GvQpGQY4FpyjRUC/mT9wSB6 Oo1d3Bl/Pa/CumgUbENrskM8fu60no2sM/Ah61MYXJXl/PClNqGv5M0KzQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFKtyObpOtNQj+shFcPT9N8VD57oGMB8GA1UdIwQY MBaAFKSxj5aqoDVn8i/ALEKmk1cIZVqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2Ut YzY5NGYwZWFjYmE2LzEvcTNJNXVrNjAxQ1A2eUVWdzlQMDN4VVBudWdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2UtYzY5NGYwZWFjYmE2 LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jBaBAIAATBUAwQDHwMA AwQAUFvYAwQAW9AgAwQCZ8foAwQAkhOwAwQCuRW0AwQCuRagAwQCuVesAwQAuZtm AwQCucnEAwQBueYQAwQAueYTAwQAuesKAwQAufE/MHQEAgACMG4DBwMqAz8AAAAD BwAqAz8AABADBwAqAz8AABcDBwAqAz8AABkDBwAqAz8AADEDBwAqAz8AANgDBwIq Az8AAWADBwAqAz8AAXIDBwEqAz8AAXQDBwIqAz8AAYAwEgMHACoDPwAD5wMHACoD PwAD6DANBgkqhkiG9w0BAQsFAAOCAQEAmdAT7si2rME+4bpFpyfbHWqSzV+tCVfl icvrzlk20iHB2l5w0c7rs+ZVNUE9rvijKfHG/pVgmOet1VY+FgTvWfc4tRwSdHVT Pmc5SlX3Qi72LhCjVAIQBZhanFog5Z8mz1v3In3ulDVAtPn3et2gNTWO1yiess3d qaXFFtXiujhihYteIDEzjnkWM6HtZ3o+Op3GJnkvdjSbzWi+GY0zukYdK9NT80LU 1PUDDa9v4d33W37+SVTxe/qCHGecF1SwsbkforLZjvD1cCWV8y/LtH4LxwkuKrw0 9dKrgEddodsUm7nkUNid9ANdBg6Dt89yY6DD6Qnz0WeGQN/+6WzhRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:30:03 2025 by rpki-client