This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/j-4nIPBb-aq6CAJ-W9Awbtdt9qo.roa File: j-4nIPBb-aq6CAJ-W9Awbtdt9qo.roa (raw, json) Hash identifier: PgliSI3WojfBCbzjo5JeNJIiPKE+MF/2WuUVaa/wf3I= Subject key identifier: 8F:EE:27:20:F0:5B:F9:AA:BA:08:02:7E:5B:D0:30:6E:D7:6D:F6:AA Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Certificate serial: 019A7D457E0182C611DB3446E09ACFDFE071 Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/j-4nIPBb-aq6CAJ-W9Awbtdt9qo.roa Signing time: Thu 13 Nov 2025 12:51:37 +0000 ROA not before: Thu 13 Nov 2025 12:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48065 IP address blocks: 46.57.128.0/21 maxlen: 21 46.57.136.0/21 maxlen: 21 46.57.144.0/21 maxlen: 21 46.57.144.0/22 maxlen: 22 46.57.148.0/22 maxlen: 22 46.57.152.0/21 maxlen: 21 46.57.160.0/21 maxlen: 21 46.57.168.0/21 maxlen: 21 46.57.168.0/22 maxlen: 22 46.57.172.0/22 maxlen: 22 46.57.176.0/21 maxlen: 21 46.57.184.0/21 maxlen: 21 46.57.192.0/21 maxlen: 21 46.57.200.0/21 maxlen: 21 46.57.208.0/21 maxlen: 21 46.57.216.0/21 maxlen: 21 46.57.224.0/21 maxlen: 21 46.57.232.0/21 maxlen: 21 46.57.240.0/21 maxlen: 21 46.57.248.0/21 maxlen: 21 46.213.0.0/21 maxlen: 21 46.213.0.0/22 maxlen: 22 46.213.4.0/22 maxlen: 22 46.213.8.0/21 maxlen: 21 46.213.16.0/21 maxlen: 21 46.213.24.0/21 maxlen: 21 46.213.32.0/21 maxlen: 21 46.213.40.0/21 maxlen: 21 46.213.48.0/21 maxlen: 21 46.213.56.0/21 maxlen: 21 46.213.64.0/21 maxlen: 21 46.213.72.0/21 maxlen: 21 46.213.80.0/21 maxlen: 21 46.213.88.0/21 maxlen: 21 46.213.96.0/21 maxlen: 21 46.213.104.0/21 maxlen: 21 46.213.104.0/22 maxlen: 22 46.213.108.0/22 maxlen: 22 46.213.112.0/21 maxlen: 21 46.213.112.0/22 maxlen: 22 46.213.116.0/22 maxlen: 22 46.213.120.0/21 maxlen: 21 46.213.120.0/22 maxlen: 22 46.213.124.0/22 maxlen: 22 46.213.128.0/21 maxlen: 21 46.213.136.0/21 maxlen: 21 46.213.144.0/21 maxlen: 21 46.213.152.0/21 maxlen: 21 46.213.160.0/21 maxlen: 21 46.213.168.0/21 maxlen: 21 46.213.168.0/22 maxlen: 22 46.213.172.0/22 maxlen: 22 46.213.176.0/21 maxlen: 21 46.213.184.0/21 maxlen: 21 46.213.184.0/22 maxlen: 22 46.213.188.0/22 maxlen: 22 46.213.192.0/21 maxlen: 21 46.213.200.0/21 maxlen: 21 46.213.208.0/21 maxlen: 21 46.213.216.0/21 maxlen: 21 46.213.224.0/21 maxlen: 21 46.213.224.0/22 maxlen: 22 46.213.228.0/22 maxlen: 22 46.213.232.0/21 maxlen: 21 46.213.240.0/21 maxlen: 21 46.213.248.0/21 maxlen: 21 94.252.132.0/22 maxlen: 22 94.252.136.0/21 maxlen: 21 94.252.144.0/21 maxlen: 21 94.252.152.0/21 maxlen: 21 94.252.192.0/21 maxlen: 21 94.252.200.0/21 maxlen: 21 94.252.208.0/21 maxlen: 21 94.252.216.0/21 maxlen: 21 178.52.0.0/21 maxlen: 21 178.52.0.0/22 maxlen: 22 178.52.4.0/22 maxlen: 22 178.52.8.0/21 maxlen: 21 178.52.8.0/22 maxlen: 22 178.52.12.0/22 maxlen: 22 178.52.16.0/21 maxlen: 21 178.52.24.0/21 maxlen: 21 178.52.32.0/21 maxlen: 21 178.52.40.0/21 maxlen: 21 178.52.48.0/21 maxlen: 21 178.52.56.0/21 maxlen: 21 178.52.64.0/21 maxlen: 21 178.52.72.0/21 maxlen: 21 178.52.80.0/21 maxlen: 21 178.52.88.0/21 maxlen: 21 178.52.96.0/21 maxlen: 21 178.52.104.0/21 maxlen: 21 178.52.104.0/22 maxlen: 22 178.52.108.0/22 maxlen: 22 178.52.112.0/21 maxlen: 21 178.52.120.0/21 maxlen: 21 178.52.128.0/21 maxlen: 21 178.52.136.0/21 maxlen: 21 178.52.144.0/21 maxlen: 21 178.52.152.0/21 maxlen: 21 178.52.160.0/21 maxlen: 21 178.52.168.0/21 maxlen: 21 178.52.176.0/21 maxlen: 21 178.52.176.0/22 maxlen: 22 178.52.180.0/22 maxlen: 22 178.52.184.0/21 maxlen: 21 178.52.192.0/21 maxlen: 21 178.52.200.0/21 maxlen: 21 178.52.208.0/21 maxlen: 21 178.52.216.0/21 maxlen: 21 178.52.224.0/21 maxlen: 21 178.52.232.0/21 maxlen: 21 178.52.240.0/21 maxlen: 21 178.52.248.0/21 maxlen: 21 178.52.248.0/22 maxlen: 22 178.52.252.0/22 maxlen: 22 188.139.128.0/21 maxlen: 21 188.139.136.0/21 maxlen: 21 188.139.144.0/21 maxlen: 21 188.139.152.0/21 maxlen: 21 188.139.160.0/21 maxlen: 21 188.139.168.0/21 maxlen: 21 188.139.176.0/21 maxlen: 21 188.139.184.0/21 maxlen: 21 188.139.192.0/21 maxlen: 21 188.139.200.0/21 maxlen: 21 188.139.208.0/21 maxlen: 21 188.139.216.0/21 maxlen: 21 188.139.224.0/21 maxlen: 21 188.139.232.0/21 maxlen: 21 188.139.240.0/21 maxlen: 21 188.139.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:45:7e:01:82:c6:11:db:34:46:e0:9a:cf:df:e0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Validity Not Before: Nov 13 12:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8fee2720f05bf9aaba08027e5bd0306ed76df6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c3:7d:7a:30:43:d3:f8:18:2c:b2:04:99:51: c0:a7:80:1a:76:ff:7d:55:cb:d8:92:82:30:12:33: f5:07:97:d7:36:bf:d6:19:dd:f9:c6:de:15:fa:9e: af:0f:41:dc:d1:ea:88:ed:e1:90:03:f0:7a:9a:13: 86:25:4e:09:83:3c:73:d5:38:bc:e4:11:76:fc:6c: b7:9a:3f:39:c3:3a:4e:75:41:fa:c9:66:2c:e1:b2: 78:50:14:98:21:58:9b:c5:c6:5c:72:e6:03:02:3d: 8a:2d:4b:3a:ff:06:6b:9d:74:63:c0:3a:0c:49:de: 41:5d:16:e8:68:06:da:e8:9e:39:1f:71:c2:6e:dd: 58:d0:ad:90:ad:5b:7c:c4:01:9e:9d:e1:40:a0:49: 6e:43:dd:1a:c0:b3:02:87:46:33:55:8b:0a:5a:25: 76:c2:2e:18:20:92:f8:ad:2f:a8:bb:0f:39:52:70: 9e:89:45:9c:4f:37:54:ba:a6:78:ce:4e:f8:23:2f: 68:ab:32:07:2a:be:d8:38:12:2c:91:9e:ad:90:88: 62:3b:bc:78:5d:59:21:0b:da:47:40:3a:8e:16:ce: 8d:38:0b:f9:86:c9:24:a1:af:d3:51:db:95:8e:1f: 40:18:bd:d1:aa:7e:4b:9c:dc:73:2c:b9:47:24:a6: ff:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EE:27:20:F0:5B:F9:AA:BA:08:02:7E:5B:D0:30:6E:D7:6D:F6:AA X509v3 Authority Key Identifier: keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/j-4nIPBb-aq6CAJ-W9Awbtdt9qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.57.128.0/17 46.213.0.0/16 94.252.132.0-94.252.159.255 94.252.192.0/19 178.52.0.0/16 188.139.128.0/17 Signature Algorithm: sha256WithRSAEncryption 44:66:c2:09:9b:21:29:4d:ea:a8:09:17:88:ef:f3:7b:d6:29: 8f:ba:55:b9:b8:ef:f7:f0:44:b6:5e:77:0e:63:43:b9:a0:4f: cd:60:c7:54:84:cf:79:55:ce:08:77:a0:25:b6:8b:e6:ff:5a: 9a:17:45:08:65:67:59:4e:e9:81:fa:83:39:ee:24:28:d0:af: b6:92:c6:2d:23:ab:14:45:5b:81:44:28:51:6e:ce:83:a8:57: d4:b4:72:32:44:e0:16:38:b1:57:9b:56:8d:cf:14:aa:fa:f6: 3d:59:9a:64:32:96:c8:6f:de:32:bc:18:77:f4:19:eb:b7:b7: c5:86:fa:70:81:c7:72:2c:10:e3:e1:0f:c4:27:71:7f:4e:a3: 85:5f:5e:ec:fb:c6:44:8e:3a:04:52:0e:87:d8:73:a5:d2:74: 13:60:fa:b9:41:ab:06:32:a4:fa:ff:0c:89:0c:a7:ef:76:2e: b8:0d:3f:54:b3:cb:11:ce:de:4d:8e:2e:56:18:8a:45:64:f6: 11:40:5d:4e:1e:8b:e7:a5:a3:8f:2d:33:be:7b:c1:51:33:6a: 45:34:35:19:27:b7:0a:83:bb:56:b8:66:64:93:30:18:92:fe: 8d:00:ff:eb:07:2d:94:b5:2d:c1:05:7c:86:2a:58:94:6e:02: 26:4c:4e:77 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZp9RX4BgsYR2zRG4JrP3+BxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0 N2YwY2YwHhcNMjUxMTEzMTI1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmVlMjcyMGYwNWJmOWFhYmEwODAyN2U1YmQwMzA2ZWQ3NmRmNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8N9ejBD0/gYLLIEmVHAp4Aadv99 VcvYkoIwEjP1B5fXNr/WGd35xt4V+p6vD0Hc0eqI7eGQA/B6mhOGJU4Jgzxz1Ti8 5BF2/Gy3mj85wzpOdUH6yWYs4bJ4UBSYIVibxcZccuYDAj2KLUs6/wZrnXRjwDoM Sd5BXRboaAba6J45H3HCbt1Y0K2QrVt8xAGeneFAoEluQ90awLMCh0YzVYsKWiV2 wi4YIJL4rS+ouw85UnCeiUWcTzdUuqZ4zk74Iy9oqzIHKr7YOBIskZ6tkIhiO7x4 XVkhC9pHQDqOFs6NOAv5hskkoa/TUduVjh9AGL3Rqn5LnNxzLLlHJKb/8wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFI/uJyDwW/mquggCflvQMG7XbfaqMB8GA1UdIwQY MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt OGEwM2E3YzFmZTliLzEvai00bklQQmItYXE2Q0FKLVc5QXdidGR0OXFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQHLjmAAwMA LtUwDAMEAl78hAMEBV78gAMEBV78wAMDALI0AwQHvIuAMA0GCSqGSIb3DQEBCwUA A4IBAQBEZsIJmyEpTeqoCReI7/N71imPulW5uO/38ES2XncOY0O5oE/NYMdUhM95 Vc4Id6Altovm/1qaF0UIZWdZTumB+oM57iQo0K+2ksYtI6sURVuBRChRbs6DqFfU tHIyROAWOLFXm1aNzxSq+vY9WZpkMpbIb94yvBh39Bnrt7fFhvpwgcdyLBDj4Q/E J3F/TqOFX17s+8ZEjjoEUg6H2HOl0nQTYPq5QasGMqT6/wyJDKfvdi64DT9Us8sR zt5Nji5WGIpFZPYRQF1OHovnpaOPLTO+e8FRM2pFNDUZJ7cKg7tWuGZkkzAYkv6N AP/rBy2UtS3BBXyGKliUbgImTE53 -----END CERTIFICATE-----Generated at Sun Dec 7 07:33:40 2025 by rpki-client