This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/te3WMh-yrJFuEs-O68YZIgyPTj4.roa File: te3WMh-yrJFuEs-O68YZIgyPTj4.roa (raw, json) Hash identifier: PUYB4+IXFx4u1CgmVxG5cnaiyHUWZquRy6c28CZK2GY= Subject key identifier: B5:ED:D6:32:1F:B2:AC:91:6E:12:CF:8E:EB:C6:19:22:0C:8F:4E:3E Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463 Certificate serial: 019ACA160D61E0BF4F2147381EBB21A7DFEC Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/te3WMh-yrJFuEs-O68YZIgyPTj4.roa Signing time: Fri 28 Nov 2025 10:50:34 +0000 ROA not before: Fri 28 Nov 2025 10:50:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8193 IP address blocks: 5.133.120.0/22 maxlen: 22 45.150.24.0/22 maxlen: 22 83.222.6.0/23 maxlen: 23 84.54.64.0/19 maxlen: 19 84.54.66.0/23 maxlen: 23 84.54.70.0/23 maxlen: 23 84.54.70.0/24 maxlen: 24 84.54.71.0/24 maxlen: 24 84.54.72.0/23 maxlen: 23 84.54.72.0/24 maxlen: 24 84.54.73.0/24 maxlen: 24 84.54.76.0/23 maxlen: 23 84.54.78.0/23 maxlen: 23 84.54.80.0/23 maxlen: 23 84.54.84.0/23 maxlen: 23 84.54.86.0/23 maxlen: 23 84.54.90.0/23 maxlen: 23 84.54.92.0/23 maxlen: 23 84.54.94.0/23 maxlen: 23 84.54.96.0/20 maxlen: 20 84.54.103.0/24 maxlen: 24 84.54.104.0/24 maxlen: 24 84.54.112.0/24 maxlen: 24 84.54.115.0/24 maxlen: 24 84.54.116.0/23 maxlen: 23 84.54.118.0/23 maxlen: 23 84.54.118.0/24 maxlen: 24 84.54.120.0/23 maxlen: 23 84.54.122.0/23 maxlen: 23 86.62.0.0/22 maxlen: 22 86.62.1.0/24 maxlen: 24 87.192.224.0/22 maxlen: 22 89.104.102.0/24 maxlen: 24 89.223.3.0/24 maxlen: 24 89.249.60.0/22 maxlen: 22 89.249.62.0/24 maxlen: 24 89.249.63.0/24 maxlen: 24 90.156.160.0/24 maxlen: 24 90.156.161.0/24 maxlen: 24 90.156.162.0/24 maxlen: 24 90.156.163.0/24 maxlen: 24 90.156.164.0/24 maxlen: 24 90.156.165.0/24 maxlen: 24 90.156.166.0/24 maxlen: 24 90.156.167.0/24 maxlen: 24 90.156.192.0/21 maxlen: 21 93.188.80.0/21 maxlen: 21 93.188.84.0/22 maxlen: 22 94.230.228.0/22 maxlen: 22 94.230.228.0/24 maxlen: 24 94.230.229.0/24 maxlen: 24 94.230.230.0/24 maxlen: 24 94.230.231.0/24 maxlen: 24 109.94.174.0/24 maxlen: 24 109.94.175.0/24 maxlen: 24 185.4.160.0/22 maxlen: 22 185.203.236.0/22 maxlen: 22 185.203.236.0/24 maxlen: 24 185.203.237.0/24 maxlen: 24 194.93.24.0/22 maxlen: 22 198.163.192.0/20 maxlen: 20 198.163.192.0/23 maxlen: 23 198.163.192.0/24 maxlen: 24 198.163.193.0/24 maxlen: 24 198.163.194.0/23 maxlen: 23 198.163.194.0/24 maxlen: 24 198.163.195.0/24 maxlen: 24 198.163.196.0/24 maxlen: 24 198.163.197.0/24 maxlen: 24 198.163.198.0/24 maxlen: 24 198.163.199.0/24 maxlen: 24 198.163.200.0/24 maxlen: 24 198.163.201.0/24 maxlen: 24 198.163.202.0/24 maxlen: 24 198.163.203.0/24 maxlen: 24 213.206.60.0/22 maxlen: 22 213.206.60.0/24 maxlen: 24 213.206.61.0/24 maxlen: 24 213.206.62.0/24 maxlen: 24 213.206.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:16:0d:61:e0:bf:4f:21:47:38:1e:bb:21:a7:df:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463 Validity Not Before: Nov 28 10:50:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b5edd6321fb2ac916e12cf8eebc619220c8f4e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:35:4a:8f:25:e6:62:30:c7:12:b7:1c:2f: 27:81:af:49:d9:27:53:d9:c9:bc:79:0a:0b:6d:63: d4:50:24:05:48:a3:65:f0:c3:e6:da:1e:88:e2:c7: 1b:9f:a3:d8:9a:5b:4f:af:ee:62:41:ac:29:08:07: 5f:93:8c:eb:47:c7:60:a8:95:5e:e5:3c:c8:c2:87: d7:db:82:9d:6b:40:b1:e9:2d:93:d7:bc:de:3b:56: db:17:b9:f3:be:b3:5f:3f:84:f8:fe:de:c2:f0:83: 0c:f4:a2:ff:b8:67:07:f6:85:76:8e:68:83:90:b6: 03:1c:6b:c2:33:a8:8c:71:20:96:42:9b:ff:3a:69: 91:54:c3:e7:8e:6c:a4:de:3e:58:e4:05:d7:22:d1: 9e:62:fa:b1:53:c2:3e:a1:76:af:47:9a:13:a9:8f: 75:ba:fe:15:a5:bd:cf:69:ee:ef:20:91:8c:fc:be: b5:50:40:04:b7:4e:92:62:05:21:a9:57:d1:96:13: c0:2b:21:1c:47:64:66:b9:b2:16:f3:23:bb:df:18: 5c:dd:eb:f2:67:5a:6c:c8:f5:e6:60:60:38:a2:df: bb:a2:ab:b3:46:01:f4:ee:26:65:e3:03:b0:9c:52: 16:57:74:66:40:64:79:d0:b0:da:42:36:87:7e:78: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:ED:D6:32:1F:B2:AC:91:6E:12:CF:8E:EB:C6:19:22:0C:8F:4E:3E X509v3 Authority Key Identifier: keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/te3WMh-yrJFuEs-O68YZIgyPTj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.120.0/22 45.150.24.0/22 83.222.6.0/23 84.54.64.0-84.54.112.255 84.54.115.0-84.54.123.255 86.62.0.0/22 87.192.224.0/22 89.104.102.0/24 89.223.3.0/24 89.249.60.0/22 90.156.160.0/21 90.156.192.0/21 93.188.80.0/21 94.230.228.0/22 109.94.174.0/23 185.4.160.0/22 185.203.236.0/22 194.93.24.0/22 198.163.192.0/20 213.206.60.0/22 Signature Algorithm: sha256WithRSAEncryption 53:25:cb:cb:af:e9:3a:4c:84:1d:20:ba:1a:27:4e:c0:f6:0d: 25:a6:96:23:8f:2e:2d:f6:b6:e0:e1:3a:17:3a:d4:20:d9:79: a0:0f:e8:03:b1:7a:0b:b1:04:f8:b5:5f:7d:4b:6b:20:97:9f: 09:fa:ec:2c:a7:56:43:46:f7:9b:16:92:22:81:31:30:68:3e: 3a:61:2c:6b:1b:ad:df:23:1a:ff:b4:ff:d9:df:4f:d2:93:03: 0d:07:54:86:56:72:ad:c7:5e:7d:58:f5:44:ba:f8:2a:5f:10: 08:bc:c9:1e:6b:68:b8:7e:3e:7f:11:36:1e:b3:a2:6f:28:21: ca:af:2b:d3:c7:75:78:f3:41:7e:49:63:0b:3c:dc:bf:36:f0: da:87:90:4e:62:3a:53:30:76:33:c2:e2:ef:b5:c0:95:74:a0: f0:e5:5b:bf:3b:d1:9f:69:01:82:f9:53:79:df:20:70:b2:40: 50:d5:ac:aa:e8:e5:51:0a:23:2b:e2:c6:19:eb:2d:ce:b2:24: 88:b1:f7:35:48:50:7a:31:35:c7:cc:c6:e4:24:37:8a:b0:c1: 2f:42:4a:45:d5:ed:a7:81:3e:03:64:ad:d3:c4:b3:59:d1:7d: 5d:90:3d:24:25:48:7c:de:cc:94:c1:22:a8:9d:c4:7a:96:6a: 4c:31:6b:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZrKFg1h4L9PIUc4Hrshp9/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4 YzQ0NjMwHhcNMjUxMTI4MTA1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWVkZDYzMjFmYjJhYzkxNmUxMmNmOGVlYmM2MTkyMjBjOGY0ZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvM1So8l5mIwxxK3HC8nga9J2SdT 2cm8eQoLbWPUUCQFSKNl8MPm2h6I4scbn6PYmltPr+5iQawpCAdfk4zrR8dgqJVe 5TzIwofX24Kda0Cx6S2T17zeO1bbF7nzvrNfP4T4/t7C8IMM9KL/uGcH9oV2jmiD kLYDHGvCM6iMcSCWQpv/OmmRVMPnjmyk3j5Y5AXXItGeYvqxU8I+oXavR5oTqY91 uv4Vpb3Pae7vIJGM/L61UEAEt06SYgUhqVfRlhPAKyEcR2RmubIW8yO73xhc3evy Z1psyPXmYGA4ot+7oquzRgH07iZl4wOwnFIWV3RmQGR50LDaQjaHfnhgBQIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFLXt1jIfsqyRbhLPjuvGGSIMj04+MB8GA1UdIwQY MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct NzRkZTI1OGE3NmY4LzEvdGUzV01oLXlySkZ1RXMtTzY4WVpJZ3lQVGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4 LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBAIF hXgDBAItlhgDBAFT3gYwDAMEBlQ2QAMEAFQ2cDAMAwQAVDZzAwQCVDZ4AwQCVj4A AwQCV8DgAwQAWWhmAwQAWd8DAwQCWfk8AwQDWpygAwQDWpzAAwQDXbxQAwQCXubk AwQBbV6uAwQCuQSgAwQCucvsAwQCwl0YAwQExqPAAwQC1c48MA0GCSqGSIb3DQEB CwUAA4IBAQBTJcvLr+k6TIQdILoaJ07A9g0lppYjjy4t9rbg4ToXOtQg2XmgD+gD sXoLsQT4tV99S2sgl58J+uwsp1ZDRvebFpIigTEwaD46YSxrG63fIxr/tP/Z30/S kwMNB1SGVnKtx159WPVEuvgqXxAIvMkea2i4fj5/ETYes6JvKCHKryvTx3V480F+ SWMLPNy/NvDah5BOYjpTMHYzwuLvtcCVdKDw5Vu/O9GfaQGC+VN53yBwskBQ1ayq 6OVRCiMr4sYZ6y3OsiSIsfc1SFB6MTXHzMbkJDeKsMEvQkpF1e2ngT4DZK3TxLNZ 0X1dkD0kJUh83syUwSKoncR6lmpMMWuI -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:30 2025 by rpki-client