This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/JiN8PiBQMRbhwwfYP31TY4I7csw.roa File: JiN8PiBQMRbhwwfYP31TY4I7csw.roa (raw, json) Hash identifier: h0TWFXGwNIH5C18gFdaIzCuKZqZvskN5p9wyN3nfeO8= Subject key identifier: 26:23:7C:3E:20:50:31:16:E1:C3:07:D8:3F:7D:53:63:82:3B:72:CC Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019AEBC641E8A315F787A292C1B2E5028088 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/JiN8PiBQMRbhwwfYP31TY4I7csw.roa Signing time: Thu 04 Dec 2025 23:50:30 +0000 ROA not before: Thu 04 Dec 2025 23:50:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137427 IP address blocks: 2.59.152.0/22 maxlen: 22 2.59.153.0/24 maxlen: 24 45.91.224.0/22 maxlen: 22 45.91.225.0/24 maxlen: 24 45.91.226.0/24 maxlen: 24 45.91.227.0/24 maxlen: 24 45.142.152.0/22 maxlen: 22 91.204.224.0/22 maxlen: 22 91.204.224.0/24 maxlen: 24 91.204.225.0/24 maxlen: 24 91.204.226.0/24 maxlen: 24 91.204.227.0/24 maxlen: 24 185.202.100.0/22 maxlen: 22 185.202.101.0/24 maxlen: 24 193.239.150.0/23 maxlen: 23 193.239.150.0/24 maxlen: 24 193.239.151.0/24 maxlen: 24 193.239.154.0/23 maxlen: 23 193.239.154.0/24 maxlen: 24 194.126.215.0/24 maxlen: 24 194.126.219.0/24 maxlen: 24 194.126.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:c6:41:e8:a3:15:f7:87:a2:92:c1:b2:e5:02:80:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Dec 4 23:50:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=26237c3e20503116e1c307d83f7d5363823b72cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:22:a0:d6:d4:27:2b:fe:3c:f5:a4:b7:23: b4:ae:a4:60:44:c2:47:58:f2:2e:23:98:d0:1f:46: 88:cd:dc:c1:30:93:de:2d:81:17:74:5a:88:a3:9a: 87:39:60:02:c7:ca:43:44:c7:da:6e:d6:bd:f1:4e: 95:98:4d:da:90:3e:15:5e:b1:59:3d:a0:d2:28:3a: 68:cf:16:40:d5:03:9b:69:00:c8:32:fd:d1:49:51: 85:c4:4e:b7:9d:4a:89:47:12:e0:fb:7a:25:39:61: 4d:db:17:27:01:db:d4:16:34:b9:30:af:ef:8f:0d: 64:f5:64:69:84:93:20:4b:2a:f1:50:c7:02:36:b1: bc:16:8c:04:c8:c9:12:1a:3c:ea:8c:f5:95:11:1c: e6:fd:62:f5:33:4a:24:07:4f:98:80:7c:f5:c5:33: 81:30:79:d7:4a:db:1b:b9:51:b4:a1:02:80:6c:d1: 3e:ac:cc:12:04:ab:16:cf:49:5e:09:cb:f6:56:03: eb:99:80:42:a6:09:50:c8:8e:1d:c7:3d:24:f8:77: 3f:b8:42:ff:db:f4:3a:2a:c2:f2:36:aa:cc:99:6c: 8e:5f:cc:1e:6f:9c:97:67:31:e8:ae:06:7e:b9:6a: 52:dd:9a:18:12:7b:99:07:bd:6b:24:98:24:a6:1a: 64:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:23:7C:3E:20:50:31:16:E1:C3:07:D8:3F:7D:53:63:82:3B:72:CC X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/JiN8PiBQMRbhwwfYP31TY4I7csw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.152.0/22 45.91.224.0/22 45.142.152.0/22 91.204.224.0/22 185.202.100.0/22 193.239.150.0/23 193.239.154.0/23 194.126.215.0/24 194.126.219.0/24 194.126.227.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:85:97:e2:63:fd:fd:e5:f5:6e:a8:5a:0e:5f:18:3d:54:15: f2:d6:9c:d7:b6:d1:55:7c:44:30:d1:4a:81:68:0d:ac:7d:41: 5a:4a:cc:76:07:18:69:8c:e5:db:81:93:7d:11:a2:cb:82:99: bb:dd:16:82:77:ba:71:19:af:ec:4f:93:52:cf:68:d4:d1:fe: 55:cb:83:d0:34:bc:d3:e9:74:bb:f3:41:04:51:8a:39:03:a0: 04:c0:a9:e5:5b:3f:7a:e7:51:42:cc:25:d4:82:8c:5e:2c:9e: a3:55:28:29:55:08:23:9f:98:ab:3a:b1:58:46:fc:2b:ef:98: fc:51:a5:ba:14:c3:4c:9a:ef:da:f1:b7:f8:2b:83:0b:11:26: 63:75:16:fe:2b:4f:69:ac:32:f6:2c:4a:a9:6a:60:b4:78:45: e6:5e:ed:d3:f5:ba:d5:5a:c1:ec:fb:13:be:45:6d:58:8b:ae: 2b:7f:58:cf:43:ac:b9:29:46:fc:34:5c:f1:77:83:19:51:2c: e8:3e:23:cf:53:3d:22:1b:e5:97:ad:4f:e6:c6:3b:9d:2e:76: 34:f9:8e:60:5d:99:d6:50:8d:77:f9:aa:ec:28:a6:9d:e2:c9: 4c:ad:ff:07:d1:15:20:bf:f4:5d:7b:8d:5e:e0:e3:2c:d2:bf: 55:82:05:26 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZrrxkHooxX3h6KSwbLlAoCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUxMjA0MjM1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjIzN2MzZTIwNTAzMTE2ZTFjMzA3ZDgzZjdkNTM2MzgyM2I3MmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv08ioNbUJyv+PPWktyO0rqRgRMJH WPIuI5jQH0aIzdzBMJPeLYEXdFqIo5qHOWACx8pDRMfabta98U6VmE3akD4VXrFZ PaDSKDpozxZA1QObaQDIMv3RSVGFxE63nUqJRxLg+3olOWFN2xcnAdvUFjS5MK/v jw1k9WRphJMgSyrxUMcCNrG8FowEyMkSGjzqjPWVERzm/WL1M0okB0+YgHz1xTOB MHnXStsbuVG0oQKAbNE+rMwSBKsWz0leCcv2VgPrmYBCpglQyI4dxz0k+Hc/uEL/ 2/Q6KsLyNqrMmWyOX8web5yXZzHorgZ+uWpS3ZoYEnuZB71rJJgkphpk1wIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFCYjfD4gUDEW4cMH2D99U2OCO3LMMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvSmlOOFBpQlFNUmJod3dmWVAzMVRZNEk3Y3N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCAjuYAwQC LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7XAwQAwn7bAwQA wn7jMA0GCSqGSIb3DQEBCwUAA4IBAQAOhZfiY/395fVuqFoOXxg9VBXy1pzXttFV fEQw0UqBaA2sfUFaSsx2BxhpjOXbgZN9EaLLgpm73RaCd7pxGa/sT5NSz2jU0f5V y4PQNLzT6XS780EEUYo5A6AEwKnlWz9651FCzCXUgoxeLJ6jVSgpVQgjn5irOrFY Rvwr75j8UaW6FMNMmu/a8bf4K4MLESZjdRb+K09prDL2LEqpamC0eEXmXu3T9brV WsHs+xO+RW1Yi64rf1jPQ6y5KUb8NFzxd4MZUSzoPiPPUz0iG+WXrU/mxjudLnY0 +Y5gXZnWUI13+arsKKad4slMrf8H0RUgv/Rde41e4OMs0r9VggUm -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:47 2025 by rpki-client