This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/r5AAElpvoRvsvqDIStvP7OwyqiY.roa File: r5AAElpvoRvsvqDIStvP7OwyqiY.roa (raw, json) Hash identifier: 5QwlL37mFb39gbIRkjIRN+81w2qi6CPjGZSoYRa8lhY= Subject key identifier: AF:90:00:12:5A:6F:A1:1B:EC:BE:A0:C8:4A:DB:CF:EC:EC:32:AA:26 Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a Certificate serial: 019B27DFB0BF9055AF379512A90B59339C46 Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/r5AAElpvoRvsvqDIStvP7OwyqiY.roa Signing time: Tue 16 Dec 2025 15:55:29 +0000 ROA not before: Tue 16 Dec 2025 15:55:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208677 IP address blocks: 31.40.248.0/23 maxlen: 23 37.18.8.0/23 maxlen: 23 37.18.10.0/24 maxlen: 24 37.18.22.0/24 maxlen: 24 37.18.72.0/23 maxlen: 23 37.18.100.0/23 maxlen: 23 37.18.102.0/24 maxlen: 24 37.18.107.0/24 maxlen: 24 37.18.108.0/22 maxlen: 22 37.18.112.0/23 maxlen: 23 37.18.114.0/24 maxlen: 24 37.18.115.0/24 maxlen: 24 37.18.116.0/22 maxlen: 22 37.18.120.0/23 maxlen: 23 37.18.122.0/24 maxlen: 24 37.44.196.0/23 maxlen: 23 37.44.198.0/24 maxlen: 24 37.230.139.0/24 maxlen: 24 37.230.179.0/24 maxlen: 24 37.230.180.0/23 maxlen: 23 37.230.180.0/24 maxlen: 24 37.230.184.0/23 maxlen: 23 37.230.186.0/24 maxlen: 24 37.230.192.0/21 maxlen: 21 37.230.224.0/24 maxlen: 24 37.230.233.0/24 maxlen: 24 45.9.24.0/22 maxlen: 22 45.89.224.0/22 maxlen: 22 45.132.176.0/22 maxlen: 22 45.136.146.0/23 maxlen: 23 45.151.30.0/23 maxlen: 23 45.155.204.0/23 maxlen: 23 46.16.36.0/24 maxlen: 24 46.243.141.0/24 maxlen: 24 46.243.142.0/23 maxlen: 23 46.243.172.0/24 maxlen: 24 46.243.201.0/24 maxlen: 24 46.243.205.0/24 maxlen: 24 46.243.206.0/24 maxlen: 24 46.243.226.0/23 maxlen: 23 46.243.244.0/23 maxlen: 23 46.253.132.0/24 maxlen: 24 62.233.43.0/24 maxlen: 24 82.202.136.0/21 maxlen: 21 82.202.156.0/22 maxlen: 22 84.54.56.0/22 maxlen: 22 85.208.85.0/24 maxlen: 24 85.208.86.0/23 maxlen: 23 85.208.209.0/24 maxlen: 24 85.208.210.0/23 maxlen: 23 85.209.149.0/24 maxlen: 24 85.209.150.0/23 maxlen: 23 85.235.82.0/23 maxlen: 24 85.235.83.0/24 maxlen: 24 87.242.84.0/22 maxlen: 22 87.242.88.0/21 maxlen: 21 87.242.100.0/22 maxlen: 22 87.242.116.0/22 maxlen: 22 87.242.120.0/21 maxlen: 21 88.218.65.0/24 maxlen: 24 88.218.66.0/23 maxlen: 23 89.232.160.0/21 maxlen: 21 89.232.168.0/22 maxlen: 22 89.232.176.0/22 maxlen: 22 91.224.86.0/23 maxlen: 23 94.139.252.0/22 maxlen: 22 94.158.22.0/23 maxlen: 23 95.174.88.0/21 maxlen: 21 141.101.151.0/24 maxlen: 24 141.101.152.0/24 maxlen: 24 141.101.201.0/24 maxlen: 24 152.89.196.0/24 maxlen: 24 168.222.176.0/22 maxlen: 24 176.108.240.0/20 maxlen: 20 176.109.96.0/20 maxlen: 24 176.123.160.0/21 maxlen: 21 178.170.191.0/24 maxlen: 24 178.170.192.0/22 maxlen: 22 178.170.196.0/23 maxlen: 23 178.170.242.0/24 maxlen: 24 185.50.200.0/22 maxlen: 22 185.234.11.0/24 maxlen: 24 185.241.57.0/24 maxlen: 24 188.72.96.0/24 maxlen: 24 188.72.106.0/23 maxlen: 23 188.72.108.0/23 maxlen: 23 188.72.117.0/24 maxlen: 24 188.72.118.0/24 maxlen: 24 192.144.12.0/22 maxlen: 22 192.144.28.0/24 maxlen: 24 193.42.116.0/23 maxlen: 23 193.105.4.0/24 maxlen: 24 193.163.94.0/24 maxlen: 24 193.201.8.0/24 maxlen: 24 194.5.92.0/23 maxlen: 23 194.26.228.0/24 maxlen: 24 194.50.72.0/24 maxlen: 24 194.113.34.0/23 maxlen: 23 195.128.152.0/24 maxlen: 24 213.171.24.0/21 maxlen: 21 213.178.153.0/24 maxlen: 24 213.178.154.0/24 maxlen: 24 2a0c:2b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 15:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:df:b0:bf:90:55:af:37:95:12:a9:0b:59:33:9c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a Validity Not Before: Dec 16 15:55:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=af9000125a6fa11becbea0c84adbcfecec32aa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:d2:95:f6:50:20:75:93:79:01:32:bf:6f: 4a:1d:d2:83:1d:40:a3:00:63:08:c2:cf:2d:b1:07: 57:25:ce:77:97:33:a1:63:49:d2:7a:63:05:32:bf: f5:e3:82:b8:60:ad:6c:27:53:31:1b:b2:82:2e:0a: db:40:e3:3c:9b:0e:3b:2f:8a:e6:da:0e:ef:8a:03: a9:b1:fc:b6:3c:69:3f:85:37:4c:1e:07:1b:bd:06: 99:cb:b4:fc:a3:a4:97:74:ad:0c:cb:39:a2:ad:2d: e1:68:23:f1:0f:57:5e:92:20:46:e7:8e:06:03:c7: f7:51:51:f2:e9:43:8b:0e:85:1c:da:b3:c7:78:56: 68:e5:c7:85:a9:d7:7d:01:8a:aa:c5:22:45:59:f4: ee:cd:e4:21:e8:2c:10:ad:8d:81:0b:47:94:bd:ed: 28:9c:8b:17:e8:93:08:75:1c:98:0c:e3:53:56:83: f8:ae:3a:ef:5a:cf:dd:2a:9a:7d:c2:6f:69:7b:2a: e7:75:94:60:14:36:d8:82:f4:fb:76:4f:3a:dc:eb: 85:64:43:96:bc:b5:b6:3e:9b:d2:91:47:7a:62:24: bc:70:d4:15:6f:a7:40:8b:28:a0:48:c8:f5:2d:2f: 91:86:a6:e5:48:7e:25:f6:33:fa:d6:26:09:2a:d3: d2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:90:00:12:5A:6F:A1:1B:EC:BE:A0:C8:4A:DB:CF:EC:EC:32:AA:26 X509v3 Authority Key Identifier: keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/r5AAElpvoRvsvqDIStvP7OwyqiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.248.0/23 37.18.8.0-37.18.10.255 37.18.22.0/24 37.18.72.0/23 37.18.100.0-37.18.102.255 37.18.107.0-37.18.122.255 37.44.196.0-37.44.198.255 37.230.139.0/24 37.230.179.0-37.230.181.255 37.230.184.0-37.230.186.255 37.230.192.0/21 37.230.224.0/24 37.230.233.0/24 45.9.24.0/22 45.89.224.0/22 45.132.176.0/22 45.136.146.0/23 45.151.30.0/23 45.155.204.0/23 46.16.36.0/24 46.243.141.0-46.243.143.255 46.243.172.0/24 46.243.201.0/24 46.243.205.0-46.243.206.255 46.243.226.0/23 46.243.244.0/23 46.253.132.0/24 62.233.43.0/24 82.202.136.0/21 82.202.156.0/22 84.54.56.0/22 85.208.85.0-85.208.87.255 85.208.209.0-85.208.211.255 85.209.149.0-85.209.151.255 85.235.82.0/23 87.242.84.0-87.242.95.255 87.242.100.0/22 87.242.116.0-87.242.127.255 88.218.65.0-88.218.67.255 89.232.160.0-89.232.171.255 89.232.176.0/22 91.224.86.0/23 94.139.252.0/22 94.158.22.0/23 95.174.88.0/21 141.101.151.0-141.101.152.255 141.101.201.0/24 152.89.196.0/24 168.222.176.0/22 176.108.240.0/20 176.109.96.0/20 176.123.160.0/21 178.170.191.0-178.170.197.255 178.170.242.0/24 185.50.200.0/22 185.234.11.0/24 185.241.57.0/24 188.72.96.0/24 188.72.106.0-188.72.109.255 188.72.117.0-188.72.118.255 192.144.12.0/22 192.144.28.0/24 193.42.116.0/23 193.105.4.0/24 193.163.94.0/24 193.201.8.0/24 194.5.92.0/23 194.26.228.0/24 194.50.72.0/24 194.113.34.0/23 195.128.152.0/24 213.171.24.0/21 213.178.153.0-213.178.154.255 IPv6: 2a0c:2b80::/29 Signature Algorithm: sha256WithRSAEncryption 82:0c:18:62:ba:28:c9:57:6d:d5:9f:73:67:cd:79:bb:5d:16: 42:e5:c0:ec:2e:45:f1:51:4c:4d:bc:f9:c6:4f:4c:8b:4a:cf: a1:63:5e:c4:18:9e:3a:8a:cd:84:bc:37:45:b1:5a:f6:75:7b: 33:c6:a1:b9:61:65:f6:43:b1:92:e6:47:b6:72:73:13:a9:69: 97:71:64:d1:2e:da:15:0d:15:a6:62:4c:81:76:3e:86:d2:79: 7c:e3:27:8d:29:66:f8:0e:a9:d6:dd:21:cf:ba:a0:da:7a:43: f3:39:bc:2d:41:0a:a2:7e:26:5c:c2:d1:17:70:75:ee:af:55: ac:d7:9f:b1:fa:b1:61:60:e0:1e:d9:0c:7a:0b:ca:b5:ea:8d: 5c:86:2d:35:37:a3:ad:c4:80:9a:0b:c0:43:ff:91:5f:bb:a7: f8:b9:ea:cb:87:9a:66:64:a9:74:bb:2a:78:b2:51:06:2e:a4: 72:07:a9:b8:30:49:e4:78:20:ab:8c:06:5b:d0:b2:35:ec:b5: 88:30:e2:3b:cf:41:1f:e7:41:df:94:b9:63:37:82:16:42:7e: 8e:50:10:03:2b:d4:88:cd:ad:04:d6:54:13:70:73:6c:8a:7b: 94:c6:02:0e:c1:7e:cd:04:ca:84:a9:23:2a:8b:c4:a5:88:74: 3f:bf:e2:0d -----BEGIN CERTIFICATE----- MIIHaDCCBlCgAwIBAgISAZsn37C/kFWvN5USqQtZM5xGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTllMWYzZmU2OWI0ZWJkZmYwMmE5YTg1N2U3YzZjMmIy NTMwMWEwHhcNMjUxMjE2MTU1NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjkwMDAxMjVhNmZhMTFiZWNiZWEwYzg0YWRiY2ZlY2VjMzJhYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDrSlfZQIHWTeQEyv29KHdKDHUCj AGMIws8tsQdXJc53lzOhY0nSemMFMr/144K4YK1sJ1MxG7KCLgrbQOM8mw47L4rm 2g7vigOpsfy2PGk/hTdMHgcbvQaZy7T8o6SXdK0MyzmirS3haCPxD1dekiBG544G A8f3UVHy6UOLDoUc2rPHeFZo5ceFqdd9AYqqxSJFWfTuzeQh6CwQrY2BC0eUve0o nIsX6JMIdRyYDONTVoP4rjrvWs/dKpp9wm9peyrndZRgFDbYgvT7dk863OuFZEOW vLW2PpvSkUd6YiS8cNQVb6dAiyigSMj1LS+RhqblSH4l9jP61iYJKtPSHQIDAQAB o4IEdDCCBHAwHQYDVR0OBBYEFK+QABJab6Eb7L6gyErbz+zsMqomMB8GA1UdIwQY MBaAFPkZ4fP+abTr3/AqmoV+fGwrJTAaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Sbmg4XzVwdE92ZjhDcWFoWDU4YkNzbE1Cby5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAz LWRhZDA0MjBiODVkMy8xL3I1QUFFbHB2b1J2c3ZxRElTdHZQN093eXFpWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjYvMWM5ODA5LTFmNjAtNDNjMi04MTAzLWRhZDA0MjBiODVk My8xLzEtUm5oOF81cHRPdmY4Q3FhaFg1OGJDc2xNQm8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwggKGBggrBgEFBQcBBwEB/wSCAnUwggJxMIICXgQCAAEw ggJWAwQBHyj4MAwDBAMlEggDBAAlEgoDBAAlEhYDBAElEkgwDAMEAiUSZAMEACUS ZjAMAwQAJRJrAwQAJRJ6MAwDBAIlLMQDBAAlLMYDBAAl5oswDAMEACXmswMEASXm tDAMAwQDJea4AwQAJea6AwQDJebAAwQAJebgAwQAJebpAwQCLQkYAwQCLVngAwQC LYSwAwQBLYiSAwQBLZceAwQBLZvMAwQALhAkMAwDBAAu840DBAQu84ADBAAu86wD BAAu88kwDAMEAC7zzQMEAC7zzgMEAS7z4gMEAS7z9AMEAC79hAMEAD7pKwMEA1LK iAMEAlLKnAMEAlQ2ODAMAwQAVdBVAwQDVdBQMAwDBABV0NEDBAJV0NAwDAMEAFXR lQMEA1XRkAMEAVXrUjAMAwQCV/JUAwQFV/JAAwQCV/JkMAwDBAJX8nQDBAdX8gAw DAMEAFjaQQMEAljaQDAMAwQFWeigAwQCWeioAwQCWeiwAwQBW+BWAwQCXov8AwQB Xp4WAwQDX65YMAwDBACNZZcDBACNZZgDBACNZckDBACYWcQDBAKo3rADBASwbPAD BASwbWADBAOwe6AwDAMEALKqvwMEAbKqxAMEALKq8gMEArkyyAMEALnqCwMEALnx OQMEALxIYDAMAwQBvEhqAwQBvEhsMAwDBAC8SHUDBAC8SHYDBALAkAwDBADAkBwD BAHBKnQDBADBaQQDBADBo14DBADByQgDBAHCBVwDBADCGuQDBADCMkgDBAHCcSID BADDgJgDBAPVqxgwDAMEANWymQMEANWymjANBAIAAjAHAwUDKgwrgDANBgkqhkiG 9w0BAQsFAAOCAQEAggwYYrooyVdt1Z9zZ815u10WQuXA7C5F8VFMTbz5xk9Mi0rP oWNexBieOorNhLw3RbFa9nV7M8ahuWFl9kOxkuZHtnJzE6lpl3Fk0S7aFQ0VpmJM gXY+htJ5fOMnjSlm+A6p1t0hz7qg2npD8zm8LUEKon4mXMLRF3B17q9VrNefsfqx YWDgHtkMegvKteqNXIYtNTejrcSAmgvAQ/+RX7un+Lnqy4eaZmSpdLsqeLJRBi6k cgepuDBJ5Hggq4wGW9CyNey1iDDiO89BH+dB35S5YzeCFkJ+jlAQAyvUiM2tBNZU E3BzbIp7lMYCDsF+zQTKhKkjKovEpYh0P7/iDQ== -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:50 2025 by rpki-client