This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/jjED_o84pmfAqHGfZ4W5FzMfdgQ.roa File: jjED_o84pmfAqHGfZ4W5FzMfdgQ.roa (raw, json) Hash identifier: g8fQ9HXrdjwXLWaeOVd7NIoIybhbQ6Vz//ncwHFTshk= Subject key identifier: 8E:31:03:FE:8F:38:A6:67:C0:A8:71:9F:67:85:B9:17:33:1F:76:04 Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6 Certificate serial: 019A57FC97F100028EEEF38DDFCDBFA6B1E0 Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/jjED_o84pmfAqHGfZ4W5FzMfdgQ.roa Signing time: Thu 06 Nov 2025 07:06:02 +0000 ROA not before: Thu 06 Nov 2025 07:06:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12479 IP address blocks: 62.32.128.0/17 maxlen: 24 62.32.128.0/19 maxlen: 24 62.32.160.0/19 maxlen: 24 62.32.192.0/19 maxlen: 24 62.32.192.0/20 maxlen: 24 62.32.208.0/20 maxlen: 24 62.32.224.0/19 maxlen: 24 83.231.0.0/17 maxlen: 24 83.231.0.0/19 maxlen: 24 83.231.32.0/23 maxlen: 24 83.231.40.0/24 maxlen: 24 83.231.41.0/24 maxlen: 24 83.231.42.0/24 maxlen: 24 83.231.43.0/24 maxlen: 24 83.231.48.0/21 maxlen: 24 83.231.56.0/21 maxlen: 24 83.231.64.0/18 maxlen: 24 185.124.28.0/22 maxlen: 24 212.169.128.0/17 maxlen: 24 213.143.32.0/19 maxlen: 19 213.143.32.0/24 maxlen: 24 213.143.36.0/22 maxlen: 24 213.143.44.0/22 maxlen: 24 213.143.48.0/22 maxlen: 24 213.143.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:57:fc:97:f1:00:02:8e:ee:f3:8d:df:cd:bf:a6:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6 Validity Not Before: Nov 6 07:06:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e3103fe8f38a667c0a8719f6785b917331f7604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:1c:3e:b9:d2:6b:00:6f:b6:f6:8c:4c:1d: 8d:a0:9e:e3:2e:6d:ea:b3:d8:ca:16:bc:25:23:af: 55:e0:50:f3:1e:9f:93:6f:f6:82:fd:54:8f:8f:19: 47:3e:8f:74:e4:cc:6d:ae:c5:40:30:c3:4b:0d:41: fa:39:1c:a1:80:a4:e4:c0:e5:4f:b9:09:a9:e5:50: 18:35:6f:c0:f3:9a:9d:f9:3a:a9:88:f8:54:76:8b: ce:a7:9a:b3:43:fe:ff:62:21:ea:aa:fe:fb:62:0f: a3:40:9b:86:2e:bb:05:a4:5d:84:88:cb:f8:0c:e3: 0e:b5:89:d1:57:de:ff:36:7d:b5:17:f7:b4:09:e1: a3:a9:ec:4e:e3:87:a6:5e:63:9b:6e:56:d7:2c:9a: a3:79:f6:f2:f1:d4:e3:27:fd:ef:1a:b9:b4:24:18: cc:ee:c6:fc:de:b4:1d:25:8d:80:a9:81:e3:5b:de: 4f:2b:07:bb:93:76:44:2f:05:8f:e6:47:f4:e7:1a: b1:50:af:2e:4e:5b:fc:e7:50:c7:aa:d9:ac:12:5f: 8b:5c:e8:68:8f:df:1c:f8:87:12:2a:43:2d:d5:d8: b6:c7:ea:9b:43:04:66:77:7e:36:15:22:d7:80:33: e2:38:a2:91:44:59:f0:1b:9b:53:a0:bc:c4:33:b4: 6a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:31:03:FE:8F:38:A6:67:C0:A8:71:9F:67:85:B9:17:33:1F:76:04 X509v3 Authority Key Identifier: keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/jjED_o84pmfAqHGfZ4W5FzMfdgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.32.128.0/17 83.231.0.0/17 185.124.28.0/22 212.169.128.0/17 213.143.32.0/19 Signature Algorithm: sha256WithRSAEncryption b1:0f:61:72:71:29:ac:45:ef:2e:2f:e0:00:b8:6b:4a:5b:50: 12:b1:53:bd:80:c5:39:b0:43:bc:06:97:8c:85:7a:8c:c0:f3: c1:b7:e9:15:ff:c1:e7:45:8d:4a:54:ff:5b:f4:a3:ce:24:5a: 7d:58:71:56:ba:12:ab:7d:7d:43:8a:70:c4:39:23:0a:89:70: 3e:07:6d:ca:85:8e:89:a2:72:13:42:f3:25:04:7c:ab:84:14: 13:57:15:82:41:f7:e1:77:74:3f:b4:b6:c4:db:c3:e9:80:d1: 74:28:82:7e:2b:a5:83:ac:7b:82:20:8c:b6:fa:54:c4:be:f0: 0e:2d:8f:9d:b6:d8:47:fe:53:52:b3:53:76:90:01:93:13:32: 24:e2:5e:ee:57:ee:22:43:71:01:85:da:32:79:9a:88:75:8e: 97:3d:1d:44:02:64:53:23:ad:e5:c2:2f:20:29:42:74:9e:c2: 9f:1b:27:55:3c:0f:10:a9:41:e2:4f:96:0f:08:f3:0e:2e:65: 5e:b4:6f:ad:e4:63:ca:e6:94:74:38:81:6b:21:30:a1:3e:6e: 81:a3:a2:df:12:1a:f3:a3:57:d0:28:af:7f:5a:ef:a2:9d:c5: ea:a7:33:30:7b:ab:d8:7c:d7:bd:f2:a6:d2:eb:8a:79:67:0c: 76:b5:e5:39 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZpX/JfxAAKO7vON382/prHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Njc4Y2EzNGMzYzYzNjVmYjYxNmE2NjA3NzE2MGE0OTRh NmU5ZDYwHhcNMjUxMTA2MDcwNjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTMxMDNmZThmMzhhNjY3YzBhODcxOWY2Nzg1YjkxNzMzMWY3NjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYkcPrnSawBvtvaMTB2NoJ7jLm3q s9jKFrwlI69V4FDzHp+Tb/aC/VSPjxlHPo905MxtrsVAMMNLDUH6ORyhgKTkwOVP uQmp5VAYNW/A85qd+TqpiPhUdovOp5qzQ/7/YiHqqv77Yg+jQJuGLrsFpF2EiMv4 DOMOtYnRV97/Nn21F/e0CeGjqexO44emXmObblbXLJqjefby8dTjJ/3vGrm0JBjM 7sb83rQdJY2AqYHjW95PKwe7k3ZELwWP5kf05xqxUK8uTlv851DHqtmsEl+LXOho j98c+IcSKkMt1di2x+qbQwRmd342FSLXgDPiOKKRRFnwG5tToLzEM7RqbwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFI4xA/6POKZnwKhxn2eFuRczH3YEMB8GA1UdIwQY MBaAFIhnjKNMPGNl+2FqZgdxYKSUpunWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQt Zjg1ZjcyMWZiMWI4LzEvampFRF9vODRwbWZBcUhHZlo0VzVGek1mZGdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQtZjg1ZjcyMWZiMWI4 LzEvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQHPiCAAwQH U+cAAwQCuXwcAwQH1KmAAwQF1Y8gMA0GCSqGSIb3DQEBCwUAA4IBAQCxD2FycSms Re8uL+AAuGtKW1ASsVO9gMU5sEO8BpeMhXqMwPPBt+kV/8HnRY1KVP9b9KPOJFp9 WHFWuhKrfX1DinDEOSMKiXA+B23KhY6JonITQvMlBHyrhBQTVxWCQffhd3Q/tLbE 28PpgNF0KIJ+K6WDrHuCIIy2+lTEvvAOLY+dtthH/lNSs1N2kAGTEzIk4l7uV+4i Q3EBhdoyeZqIdY6XPR1EAmRTI63lwi8gKUJ0nsKfGydVPA8QqUHiT5YPCPMOLmVe tG+t5GPK5pR0OIFrITChPm6Bo6LfEhrzo1fQKK9/Wu+incXqpzMwe6vYfNe98qbS 64p5Zwx2teU5 -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:39 2025 by rpki-client