This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/jIciP85UIj70W740hLw1umDPl8U.roa File: jIciP85UIj70W740hLw1umDPl8U.roa (raw, json) Hash identifier: wrY0tv/GkQoOFiGmbPrfGkCZnbqrkkaA3u07XZ08OZM= Subject key identifier: 8C:87:22:3F:CE:54:22:3E:F4:5B:BE:34:84:BC:35:BA:60:CF:97:C5 Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F8422106F180AA7D17FA6397CDC7145 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/jIciP85UIj70W740hLw1umDPl8U.roa Signing time: Fri 02 Jan 2026 16:22:04 +0000 ROA not before: Fri 02 Jan 2026 16:22:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12430 IP address blocks: 5.224.0.0/15 maxlen: 15 31.4.0.0/16 maxlen: 24 37.222.0.0/15 maxlen: 24 46.24.0.0/14 maxlen: 14 46.25.0.0/21 maxlen: 21 46.25.60.0/22 maxlen: 22 46.136.0.0/16 maxlen: 16 47.58.0.0/16 maxlen: 16 47.59.0.0/16 maxlen: 16 47.60.0.0/16 maxlen: 16 47.61.0.0/16 maxlen: 16 47.62.0.0/16 maxlen: 16 47.63.0.0/16 maxlen: 16 62.87.0.0/17 maxlen: 24 77.208.0.0/14 maxlen: 24 77.224.0.0/13 maxlen: 13 87.124.192.0/18 maxlen: 18 87.125.0.0/16 maxlen: 24 87.235.0.0/16 maxlen: 16 89.6.0.0/15 maxlen: 15 93.113.16.0/21 maxlen: 21 94.248.64.0/18 maxlen: 18 95.60.0.0/14 maxlen: 14 95.60.32.0/21 maxlen: 21 148.56.0.0/16 maxlen: 16 159.147.0.0/16 maxlen: 16 178.57.128.0/18 maxlen: 18 178.139.0.0/16 maxlen: 22 188.84.0.0/14 maxlen: 14 188.86.112.0/22 maxlen: 22 188.211.228.0/22 maxlen: 22 193.125.0.0/16 maxlen: 16 194.220.0.0/16 maxlen: 16 212.73.32.0/19 maxlen: 24 212.145.0.0/16 maxlen: 16 212.166.128.0/17 maxlen: 23 217.130.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:22:10:6f:18:0a:a7:d1:7f:a6:39:7c:dc:71:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c87223fce54223ef45bbe3484bc35ba60cf97c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:18:6e:b2:52:61:01:a3:a1:2c:7d:97:25:87: b0:9c:3a:d0:0b:48:a8:53:fa:e2:8c:6f:71:fc:a1: b4:c4:0f:ba:d8:d0:39:6b:df:82:fe:7c:05:4a:71: fc:3f:04:a2:fa:97:d8:c2:eb:a9:5a:3c:2c:06:55: 87:93:cd:57:1c:5d:b8:12:50:77:1c:16:6c:cd:8c: 37:bf:9d:f2:a4:b2:24:fa:3e:e7:7b:3f:d8:af:84: 0f:d9:62:f8:9e:09:0e:f2:6c:ae:ea:70:ed:fe:48: c4:df:07:f8:9b:16:bd:79:b3:ae:fd:5d:ed:19:13: 19:4d:9f:e2:08:b3:13:35:24:21:ec:3b:8c:1b:c3: 44:65:67:f9:d4:f4:0d:5b:59:2c:f5:de:08:68:1f: 33:c7:80:f1:9e:d7:08:c8:52:23:0e:55:aa:c6:ed: ba:9c:ff:17:be:db:b8:91:ee:3f:c1:76:07:9e:f7: 2b:6b:5a:f9:ab:a0:1d:11:32:ed:08:19:46:cb:06: 3f:29:1d:06:31:ce:e0:9b:bf:df:ab:73:e5:ea:83: 09:40:49:90:21:c1:0a:df:41:06:5d:45:18:d6:98: e1:c9:aa:d7:be:a6:12:65:d5:84:5a:b9:4d:e6:62: 2c:40:fd:d4:f4:d6:ab:ef:68:68:73:7d:ce:3f:b6: 7f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:87:22:3F:CE:54:22:3E:F4:5B:BE:34:84:BC:35:BA:60:CF:97:C5 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/jIciP85UIj70W740hLw1umDPl8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.224.0.0/15 31.4.0.0/16 37.222.0.0/15 46.24.0.0/14 46.136.0.0/16 47.58.0.0-47.63.255.255 62.87.0.0/17 77.208.0.0/14 77.224.0.0/13 87.124.192.0-87.125.255.255 87.235.0.0/16 89.6.0.0/15 93.113.16.0/21 94.248.64.0/18 95.60.0.0/14 148.56.0.0/16 159.147.0.0/16 178.57.128.0/18 178.139.0.0/16 188.84.0.0/14 188.211.228.0/22 193.125.0.0/16 194.220.0.0/16 212.73.32.0/19 212.145.0.0/16 212.166.128.0/17 217.130.0.0/16 Signature Algorithm: sha256WithRSAEncryption 54:6e:e5:09:60:d9:11:8f:7b:dd:89:f3:7c:e0:c3:82:17:86: 06:a1:47:03:ba:eb:3b:24:e6:10:41:53:53:91:b8:73:95:3a: f5:1b:b0:16:74:8c:45:24:49:93:e5:3f:df:f9:a5:44:c3:6d: 3c:ab:47:bb:a6:39:5b:0a:a1:ff:48:bf:8a:60:f1:01:ac:3d: 81:6a:7a:aa:64:18:56:33:09:cb:79:29:ea:2c:1b:60:64:38: 74:23:ab:8a:ac:7b:46:38:4c:dd:75:a1:c3:46:a9:1c:28:77: 37:ba:0f:10:da:3d:91:4f:e9:fa:86:06:96:5c:d2:59:8b:8f: 4c:4f:4f:92:e1:73:31:12:df:08:67:9f:b6:66:19:ee:42:61: 7c:3b:19:a1:37:4a:38:22:8a:ee:89:96:f9:9e:4d:0c:f0:cf: ca:ff:5a:8c:9a:cc:18:92:9c:04:f7:e1:5b:73:73:24:3d:09: ee:e5:e1:06:a8:e2:03:c5:ef:6e:ff:9e:57:15:c2:0c:b2:40: 8c:da:d5:fe:17:52:0a:f8:8a:60:77:c2:ea:ce:a7:5e:cb:87: 82:80:59:b4:cc:a8:6f:d3:6d:74:26:f7:c1:11:13:4d:8b:31: 14:37:54:6f:4f:4f:93:e1:d3:0e:d8:89:0b:be:48:af:e6:63: 40:67:ae:49 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt/hCIQbxgKp9F/pjl83HFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yzg3MjIzZmNlNTQyMjNlZjQ1YmJlMzQ4NGJjMzViYTYwY2Y5N2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhhuslJhAaOhLH2XJYewnDrQC0io U/rijG9x/KG0xA+62NA5a9+C/nwFSnH8PwSi+pfYwuupWjwsBlWHk81XHF24ElB3 HBZszYw3v53ypLIk+j7nez/Yr4QP2WL4ngkO8myu6nDt/kjE3wf4mxa9ebOu/V3t GRMZTZ/iCLMTNSQh7DuMG8NEZWf51PQNW1ks9d4IaB8zx4DxntcIyFIjDlWqxu26 nP8Xvtu4ke4/wXYHnvcra1r5q6AdETLtCBlGywY/KR0GMc7gm7/fq3Pl6oMJQEmQ IcEK30EGXUUY1pjhyarXvqYSZdWEWrlN5mIsQP3U9Nar72hoc33OP7Z/hQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFIyHIj/OVCI+9Fu+NIS8Nbpgz5fFMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvakljaVA4NVVJajcwVzc0MGhMdzF1bURQbDhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBpAQCAAEwgZ0DAwEF 4AMDAB8EAwMBJd4DAwIuGAMDAC6IMAoDAwEvOgMDBi8AAwQHPlcAAwMCTdADAwNN 4DALAwQGV3zAAwMBV3wDAwBX6wMDAVkGAwQDXXEQAwQGXvhAAwMCXzwDAwCUOAMD AJ+TAwQGsjmAAwMAsosDAwK8VAMEArzT5AMDAMF9AwMAwtwDBAXUSSADAwDUkQME B9SmgAMDANmCMA0GCSqGSIb3DQEBCwUAA4IBAQBUbuUJYNkRj3vdifN84MOCF4YG oUcDuus7JOYQQVNTkbhzlTr1G7AWdIxFJEmT5T/f+aVEw208q0e7pjlbCqH/SL+K YPEBrD2BanqqZBhWMwnLeSnqLBtgZDh0I6uKrHtGOEzddaHDRqkcKHc3ug8Q2j2R T+n6hgaWXNJZi49MT0+S4XMxEt8IZ5+2ZhnuQmF8OxmhN0o4IoruiZb5nk0M8M/K /1qMmswYkpwE9+Fbc3MkPQnu5eEGqOIDxe9u/55XFcIMskCM2tX+F1IK+Ipgd8Lq zqdey4eCgFm0zKhv0210JvfBERNNizEUN1RvT0+T4dMO2IkLvkiv5mNAZ65J -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:07 2026 by rpki-client