This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/nJIWhXF5E_3OsKvezQcMuvFTje4.roa File: nJIWhXF5E_3OsKvezQcMuvFTje4.roa (raw, json) Hash identifier: ysclIta5Nb4QhQEFGOS+ZWWgIylyZJMATCIjNw5UY0s= Subject key identifier: 9C:92:16:85:71:79:13:FD:CE:B0:AB:DE:CD:07:0C:BA:F1:53:8D:EE Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB504F7F3311BA09F036A277A26BD1 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/nJIWhXF5E_3OsKvezQcMuvFTje4.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48159 IP address blocks: 2.176.128.0/17 maxlen: 17 2.177.0.0/16 maxlen: 16 2.182.0.0/16 maxlen: 24 2.182.128.0/21 maxlen: 21 2.185.0.0/16 maxlen: 16 2.185.0.0/20 maxlen: 20 2.185.18.0/24 maxlen: 24 2.185.40.0/21 maxlen: 21 2.185.88.0/22 maxlen: 22 2.185.160.0/19 maxlen: 19 2.185.164.0/24 maxlen: 24 2.188.0.0/24 maxlen: 24 2.188.1.0/24 maxlen: 24 2.188.22.0/24 maxlen: 24 2.188.28.0/24 maxlen: 24 2.188.64.0/21 maxlen: 21 2.188.76.0/24 maxlen: 24 2.188.179.0/24 maxlen: 24 2.188.184.0/24 maxlen: 24 2.188.185.0/24 maxlen: 24 2.188.187.0/24 maxlen: 24 2.189.40.0/23 maxlen: 23 2.189.42.0/23 maxlen: 23 2.189.42.0/24 maxlen: 24 2.189.42.16/29 maxlen: 29 2.189.42.24/30 maxlen: 30 2.189.42.28/30 maxlen: 30 2.189.42.36/30 maxlen: 30 2.189.42.40/30 maxlen: 30 2.189.42.48/29 maxlen: 29 2.189.42.64/30 maxlen: 30 2.189.43.0/24 maxlen: 24 2.189.56.0/24 maxlen: 24 2.189.58.0/24 maxlen: 24 2.189.68.0/24 maxlen: 24 2.189.72.0/24 maxlen: 24 2.189.79.96/29 maxlen: 29 2.189.187.0/24 maxlen: 24 2.189.188.0/25 maxlen: 25 2.189.188.128/25 maxlen: 25 2.191.0.0/16 maxlen: 16 78.38.0.0/16 maxlen: 24 78.38.160.0/19 maxlen: 19 78.38.243.0/24 maxlen: 24 78.38.246.0/24 maxlen: 24 78.38.248.0/24 maxlen: 24 78.38.250.0/24 maxlen: 24 78.38.251.0/24 maxlen: 24 78.38.254.0/24 maxlen: 24 78.39.0.0/16 maxlen: 24 78.39.40.0/24 maxlen: 24 78.39.43.0/24 maxlen: 24 78.39.46.0/24 maxlen: 24 78.39.47.0/24 maxlen: 24 78.39.48.0/24 maxlen: 24 78.39.49.0/24 maxlen: 24 78.39.50.0/24 maxlen: 24 78.39.51.0/24 maxlen: 24 78.39.53.0/24 maxlen: 24 78.39.54.0/24 maxlen: 24 78.39.55.0/24 maxlen: 24 78.39.56.0/24 maxlen: 24 78.39.57.0/24 maxlen: 24 78.39.58.0/24 maxlen: 24 78.39.59.0/24 maxlen: 24 78.39.62.0/23 maxlen: 24 78.39.149.0/24 maxlen: 24 78.39.150.0/24 maxlen: 24 78.39.151.0/24 maxlen: 24 78.39.153.0/24 maxlen: 24 78.39.155.0/24 maxlen: 24 78.39.156.0/24 maxlen: 24 78.39.240.0/24 maxlen: 24 80.191.0.0/16 maxlen: 16 80.191.56.0/24 maxlen: 24 217.218.0.0/16 maxlen: 24 217.218.67.0/24 maxlen: 24 217.219.0.0/16 maxlen: 24 217.219.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:50:4f:7f:33:11:ba:09:f0:36:a2:77:a2:6b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c921685717913fdceb0abdecd070cbaf1538dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:97:00:db:d3:a3:b5:fb:f8:85:92:1b:48: 58:f4:4f:d2:ca:c3:13:4c:93:91:3c:ee:cd:4b:dd: d1:60:64:e2:9d:8f:ba:b7:e9:f8:5c:18:20:ef:eb: 13:83:c3:7c:98:95:4c:a4:33:47:0a:88:8f:57:fb: ae:70:10:7b:5a:ff:89:33:08:42:96:55:c0:fb:95: c0:09:19:15:28:f6:9e:b9:37:22:36:e6:16:74:7d: 3f:68:32:e8:c1:2e:9b:2e:13:cd:9b:65:79:a7:f3: bd:bf:63:ec:f4:35:ab:5d:c1:ea:26:6b:df:b7:90: 44:a3:8d:b8:b5:26:1c:2b:2f:4d:04:48:e5:f5:83: 9f:95:55:f0:ee:38:d6:5a:4e:4e:a0:1c:6e:f5:17: cd:3d:95:63:3f:ff:04:82:63:50:22:fc:43:61:ca: 79:0e:8a:53:60:aa:11:8b:55:8e:b0:a4:70:d2:9d: 3f:f5:d7:8c:17:d3:88:80:84:99:56:f8:c8:d8:c1: 76:7e:a1:01:21:17:8e:4d:9e:44:1e:41:a5:d5:b5: 88:51:4d:14:66:72:df:2f:e2:1b:56:15:b1:ce:f2: 1b:7b:81:4a:c7:14:90:f8:33:7d:bf:b9:8b:00:8b: ea:76:0c:0b:77:c3:fc:f9:ce:dd:79:04:33:b2:76: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:92:16:85:71:79:13:FD:CE:B0:AB:DE:CD:07:0C:BA:F1:53:8D:EE X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/nJIWhXF5E_3OsKvezQcMuvFTje4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.176.128.0-2.177.255.255 2.182.0.0/16 2.185.0.0/16 2.188.0.0/23 2.188.22.0/24 2.188.28.0/24 2.188.64.0/21 2.188.76.0/24 2.188.179.0/24 2.188.184.0/23 2.188.187.0/24 2.189.40.0/22 2.189.56.0/24 2.189.58.0/24 2.189.68.0/24 2.189.72.0/24 2.189.79.96/29 2.189.187.0-2.189.188.255 2.191.0.0/16 78.38.0.0/15 80.191.0.0/16 217.218.0.0/15 Signature Algorithm: sha256WithRSAEncryption 3a:94:eb:cb:d3:5a:50:39:b0:cf:02:6a:1f:61:fb:11:f4:ba: a3:36:09:66:f3:3e:6a:d6:c2:11:fa:f8:8d:f2:99:30:05:72: e2:d0:e8:cb:63:ac:7b:47:01:0c:82:cb:ef:65:55:c2:ba:8b: 89:61:ce:01:d5:c2:67:4b:e5:0c:e3:23:ab:ff:62:b5:70:50: cf:28:e2:57:fa:c9:66:55:af:bf:c6:49:26:ac:6b:11:6a:9b: 35:45:af:72:b5:11:ed:48:d2:67:86:59:90:2c:43:2a:b5:88: 30:81:1e:fc:4b:83:a6:6a:5f:d4:1f:d4:ab:ad:98:ac:62:7a: 79:ae:70:70:a5:db:1e:c6:23:a4:d3:fb:3e:45:c3:29:86:5d: ae:ba:ec:9c:38:12:77:51:c6:fe:38:a2:27:5b:66:82:a4:8f: 64:83:df:a7:e5:fb:4d:fd:16:07:2b:58:98:53:fb:f7:fd:e4: 40:12:50:2b:89:fb:a5:4b:b9:52:36:f8:8d:84:29:24:52:2d: 01:7d:c1:46:f5:d9:cc:0c:bd:7b:7f:5c:c7:e9:19:82:82:8d: 4b:d5:8d:39:c4:f4:92:1e:5e:b3:b9:81:78:a3:53:61:1c:cd: f9:78:68:d0:8e:b0:cf:46:c9:76:77:76:fa:cf:da:1d:d2:0c: f6:49:20:00 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt261BPfzMRugnwNqJ3omvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzkyMTY4NTcxNzkxM2ZkY2ViMGFiZGVjZDA3MGNiYWYxNTM4ZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf+XANvTo7X7+IWSG0hY9E/SysMT TJORPO7NS93RYGTinY+6t+n4XBgg7+sTg8N8mJVMpDNHCoiPV/uucBB7Wv+JMwhC llXA+5XACRkVKPaeuTciNuYWdH0/aDLowS6bLhPNm2V5p/O9v2Ps9DWrXcHqJmvf t5BEo424tSYcKy9NBEjl9YOflVXw7jjWWk5OoBxu9RfNPZVjP/8EgmNQIvxDYcp5 DopTYKoRi1WOsKRw0p0/9deMF9OIgISZVvjI2MF2fqEBIReOTZ5EHkGl1bWIUU0U ZnLfL+IbVhWxzvIbe4FKxxSQ+DN9v7mLAIvqdgwLd8P8+c7deQQzsnbIIwIDAQAB o4ICljCCApIwHQYDVR0OBBYEFJySFoVxeRP9zrCr3s0HDLrxU43uMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvbkpJV2hYRjVFXzNPc0t2ZXpRY011dkZUamU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4wCwME BwKwgAMDAQKwAwMAArYDAwACuQMEAQK8AAMEAAK8FgMEAAK8HAMEAwK8QAMEAAK8 TAMEAAK8swMEAQK8uAMEAAK8uwMEAgK9KAMEAAK9OAMEAAK9OgMEAAK9RAMEAAK9 SAMFAwK9T2AwDAMEAAK9uwMEAAK9vAMDAAK/AwMBTiYDAwBQvwMDAdnaMA0GCSqG SIb3DQEBCwUAA4IBAQA6lOvL01pQObDPAmofYfsR9LqjNglm8z5q1sIR+viN8pkw BXLi0OjLY6x7RwEMgsvvZVXCuouJYc4B1cJnS+UM4yOr/2K1cFDPKOJX+slmVa+/ xkkmrGsRaps1Ra9ytRHtSNJnhlmQLEMqtYgwgR78S4Omal/UH9SrrZisYnp5rnBw pdsexiOk0/s+RcMphl2uuuycOBJ3Ucb+OKInW2aCpI9kg9+n5ftN/RYHK1iYU/v3 /eRAElArifulS7lSNviNhCkkUi0BfcFG9dnMDL17f1zH6RmCgo1L1Y05xPSSHl6z uYF4o1NhHM35eGjQjrDPRsl2d3b6z9od0gz2SSAA -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:39 2026 by rpki-client