This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/jp9BjnFD51Bo3qK5_Y27dIsMDjU.roa File: jp9BjnFD51Bo3qK5_Y27dIsMDjU.roa (raw, json) Hash identifier: jdS4LU2FyoYdTiOirX9aTcx/dIo5tfvKDWA+pl7TV2I= Subject key identifier: 8E:9F:41:8E:71:43:E7:50:68:DE:A2:B9:FD:8D:BB:74:8B:0C:0E:35 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14C3FAC5887C578714600A71E3D99E Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/jp9BjnFD51Bo3qK5_Y27dIsMDjU.roa Signing time: Fri 02 Jan 2026 14:20:25 +0000 ROA not before: Fri 02 Jan 2026 14:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 62.93.164.0/22 maxlen: 24 62.93.176.0/22 maxlen: 24 84.20.4.0/22 maxlen: 24 84.20.16.0/22 maxlen: 24 84.20.24.0/22 maxlen: 24 92.71.34.0/23 maxlen: 24 92.71.40.0/22 maxlen: 24 92.71.44.0/23 maxlen: 24 92.71.66.0/23 maxlen: 24 92.71.98.0/23 maxlen: 24 92.71.124.0/23 maxlen: 24 135.196.185.0/24 maxlen: 24 195.86.208.0/24 maxlen: 24 213.139.8.0/22 maxlen: 24 213.169.206.0/23 maxlen: 23 213.201.134.0/24 maxlen: 24 213.201.242.0/23 maxlen: 24 213.201.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c3:fa:c5:88:7c:57:87:14:60:0a:71:e3:d9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e9f418e7143e75068dea2b9fd8dbb748b0c0e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:f2:20:e4:cb:56:4a:99:73:f8:9a:81:99: 2f:20:5d:92:0d:46:70:2a:b4:12:be:da:44:55:33: 9f:31:63:be:24:e3:d3:d6:ab:0c:59:2f:73:4d:5b: f9:55:21:cd:ba:0b:1f:d4:66:a9:26:4b:7f:31:42: 35:ff:c5:c4:31:bd:4a:12:48:8f:d2:6f:48:bc:de: c4:39:5a:60:55:f0:8e:15:2f:f2:ff:6b:d9:99:2a: da:65:77:d3:69:5c:41:10:e3:d4:79:18:77:e0:6a: e8:16:93:fc:f7:82:d0:e9:5b:35:0c:7f:5c:c1:cf: 13:87:88:8c:70:8b:08:7f:21:27:fa:72:d7:88:4d: 7e:0c:f9:4e:4a:62:6e:89:6a:2f:8b:f1:58:37:e4: 7f:1a:b1:b3:fe:18:cf:2d:b1:09:e0:99:20:c2:9a: bc:ba:b9:9b:e6:78:f4:5c:11:4d:fb:d6:82:97:f4: 3f:5e:50:49:fe:22:f1:71:21:03:41:e1:79:d2:5f: e0:34:fa:38:62:9e:b6:39:83:e6:ad:31:25:64:69: ee:fc:c4:a1:a7:b6:92:5e:70:3f:ff:11:be:37:20: 17:8e:55:83:87:43:af:12:8d:98:c6:44:e2:ef:2d: f5:6e:40:d3:a0:d4:4a:05:db:8f:b3:ff:c2:05:18: 91:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9F:41:8E:71:43:E7:50:68:DE:A2:B9:FD:8D:BB:74:8B:0C:0E:35 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/jp9BjnFD51Bo3qK5_Y27dIsMDjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.93.164.0/22 62.93.176.0/22 84.20.4.0/22 84.20.16.0/22 84.20.24.0/22 92.71.34.0/23 92.71.40.0-92.71.45.255 92.71.66.0/23 92.71.98.0/23 92.71.124.0/23 135.196.185.0/24 195.86.208.0/24 213.139.8.0/22 213.169.206.0/23 213.201.134.0/24 213.201.242.0/23 213.201.252.0/23 Signature Algorithm: sha256WithRSAEncryption 68:42:61:cc:ab:4d:c2:99:84:0f:05:0d:37:f8:4e:23:af:06: f8:bf:26:69:f2:50:c7:e5:30:b0:11:cb:ef:21:8a:75:79:19: a8:44:32:41:c2:d6:49:eb:bf:2b:f0:37:4d:c3:9b:a8:25:2d: 57:fe:21:2f:3d:3c:25:69:07:dc:68:ea:75:0a:a9:9a:4d:71: 7c:ef:73:b9:97:a7:29:af:6b:79:9f:82:48:40:3f:b1:fe:a8: 9b:74:e6:17:af:94:1e:8a:3e:de:fb:26:7f:da:21:10:4d:17: a2:a0:bf:92:b6:47:8c:da:9b:0f:09:06:73:ef:96:2c:09:fa: 6d:ef:60:17:cb:b0:76:4d:b1:64:74:26:03:7b:be:29:06:bf: 17:7d:31:05:a3:b2:e3:c9:23:55:8e:33:6d:7d:88:e2:ca:62: eb:e0:1e:74:01:2c:94:6c:ab:90:60:82:93:27:74:eb:a3:5c: 6f:d0:e2:79:86:12:58:95:30:c9:89:04:69:b2:42:0b:20:a1: 96:a1:e9:0c:7e:4e:7b:95:d0:f8:d7:3d:e9:fc:df:6b:73:a4: 88:0f:91:fc:e0:8b:ce:22:22:c0:1f:51:3e:51:3e:04:48:97: db:83:9f:01:7a:a0:e3:50:5b:57:4c:e2:95:1d:07:0d:d6:78: 34:b5:82:64 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZt/FMP6xYh8V4cUYApx49meMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTlmNDE4ZTcxNDNlNzUwNjhkZWEyYjlmZDhkYmI3NDhiMGMwZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ/yIOTLVkqZc/iagZkvIF2SDUZw KrQSvtpEVTOfMWO+JOPT1qsMWS9zTVv5VSHNugsf1GapJkt/MUI1/8XEMb1KEkiP 0m9IvN7EOVpgVfCOFS/y/2vZmSraZXfTaVxBEOPUeRh34GroFpP894LQ6Vs1DH9c wc8Th4iMcIsIfyEn+nLXiE1+DPlOSmJuiWovi/FYN+R/GrGz/hjPLbEJ4Jkgwpq8 urmb5nj0XBFN+9aCl/Q/XlBJ/iLxcSEDQeF50l/gNPo4Yp62OYPmrTElZGnu/MSh p7aSXnA//xG+NyAXjlWDh0OvEo2YxkTi7y31bkDToNRKBduPs//CBRiR7wIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFI6fQY5xQ+dQaN6iuf2Nu3SLDA41MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvanA5QmpuRkQ1MUJvM3FLNV9ZMjdkSXNNRGpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAj5dpAME Aj5dsAMEAlQUBAMEAlQUEAMEAlQUGAMEAVxHIjAMAwQDXEcoAwQBXEcsAwQBXEdC AwQBXEdiAwQBXEd8AwQAh8S5AwQAw1bQAwQC1YsIAwQB1anOAwQA1cmGAwQB1cny AwQB1cn8MA0GCSqGSIb3DQEBCwUAA4IBAQBoQmHMq03CmYQPBQ03+E4jrwb4vyZp 8lDH5TCwEcvvIYp1eRmoRDJBwtZJ678r8DdNw5uoJS1X/iEvPTwlaQfcaOp1Cqma TXF873O5l6cpr2t5n4JIQD+x/qibdOYXr5Qeij7e+yZ/2iEQTReioL+StkeM2psP CQZz75YsCfpt72AXy7B2TbFkdCYDe74pBr8XfTEFo7LjySNVjjNtfYjiymLr4B50 ASyUbKuQYIKTJ3Tro1xv0OJ5hhJYlTDJiQRpskILIKGWoekMfk57ldD41z3p/N9r c6SID5H84IvOIiLAH1E+UT4ESJfbg58BeqDjUFtXTOKVHQcN1ng0tYJk -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:48 2026 by rpki-client