This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/j9ww1jAwapmyeB5Mda6akaTrn0o.roa File: j9ww1jAwapmyeB5Mda6akaTrn0o.roa (raw, json) Hash identifier: UwM+UovIswrmaEoszqiNrb1qkN6U8QlTDAf/jDU0nmE= Subject key identifier: 8F:DC:30:D6:30:30:6A:99:B2:78:1E:4C:75:AE:9A:91:A4:EB:9F:4A Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31 Certificate serial: 019B7C80746D57CF37B3EE068134FC26AA54 Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/j9ww1jAwapmyeB5Mda6akaTrn0o.roa Signing time: Fri 02 Jan 2026 02:19:11 +0000 ROA not before: Fri 02 Jan 2026 02:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8473 IP address blocks: 5.150.192.0/18 maxlen: 18 37.123.128.0/18 maxlen: 18 46.59.0.0/17 maxlen: 17 62.63.192.0/18 maxlen: 18 79.136.0.0/17 maxlen: 17 79.136.72.0/22 maxlen: 22 81.170.128.0/17 maxlen: 17 82.196.96.0/19 maxlen: 19 85.24.128.0/17 maxlen: 17 91.132.176.0/22 maxlen: 22 94.254.0.0/17 maxlen: 17 98.128.0.0/16 maxlen: 16 109.228.128.0/18 maxlen: 18 176.10.128.0/17 maxlen: 17 178.174.128.0/17 maxlen: 17 185.9.60.0/22 maxlen: 22 185.57.4.0/22 maxlen: 22 185.90.176.0/22 maxlen: 22 195.178.160.0/19 maxlen: 19 212.85.64.0/19 maxlen: 19 212.116.64.0/19 maxlen: 19 213.80.96.0/19 maxlen: 19 213.80.120.0/24 maxlen: 24 213.80.125.0/24 maxlen: 24 213.136.32.0/19 maxlen: 19 213.164.192.0/19 maxlen: 19 217.27.160.0/19 maxlen: 19 217.27.164.0/23 maxlen: 23 217.31.160.0/19 maxlen: 19 2001:9b0::/29 maxlen: 29 2001:9b0::/32 maxlen: 32 2001:9b2::/34 maxlen: 34 2001:9b2:4000::/34 maxlen: 34 2001:9b2:c000::/34 maxlen: 34 2a02:508::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:74:6d:57:cf:37:b3:ee:06:81:34:fc:26:aa:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31 Validity Not Before: Jan 2 02:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fdc30d630306a99b2781e4c75ae9a91a4eb9f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:1e:86:77:af:30:d3:7a:e2:ac:14:8a:b1: e0:49:43:f4:55:7e:cd:3d:e1:72:da:84:15:cf:9d: 97:af:1a:fe:f5:11:87:bf:9f:db:a3:b5:45:d2:32: 96:d4:d3:06:fc:70:d4:75:1a:fe:8d:09:0c:7d:9c: 6d:56:83:5b:c6:30:04:ec:24:0d:1e:1c:e7:27:0f: 2d:96:64:9d:ca:a4:37:cc:79:05:c3:ed:ce:21:a6: 45:f8:f3:2a:93:50:88:c7:ec:9e:b0:1d:49:56:b7: 50:ee:4c:a4:5a:05:78:55:18:5a:67:df:59:8b:9d: b6:66:10:6f:65:df:22:59:16:71:c8:49:6b:73:6c: f3:cc:90:2c:19:ab:98:9a:38:52:63:68:d6:2f:23: ad:46:8e:32:94:89:bb:7a:bd:52:df:71:85:90:fd: 29:60:1f:3e:56:5e:12:d0:2a:93:98:41:e7:dd:07: f1:91:f3:07:61:79:9d:3e:7c:cc:ec:ad:58:da:14: 57:ee:b7:cc:07:1f:e3:ce:1e:cc:a7:c9:0b:82:13: 08:a8:14:71:23:11:ad:a1:45:29:7a:0c:0f:df:48: 3a:66:eb:5f:a8:e5:d0:30:43:2b:31:3c:6c:c2:f9: e5:ce:92:cb:6b:2d:25:3d:72:b9:6b:0c:d2:06:8c: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DC:30:D6:30:30:6A:99:B2:78:1E:4C:75:AE:9A:91:A4:EB:9F:4A X509v3 Authority Key Identifier: keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/j9ww1jAwapmyeB5Mda6akaTrn0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.150.192.0/18 37.123.128.0/18 46.59.0.0/17 62.63.192.0/18 79.136.0.0/17 81.170.128.0/17 82.196.96.0/19 85.24.128.0/17 91.132.176.0/22 94.254.0.0/17 98.128.0.0/16 109.228.128.0/18 176.10.128.0/17 178.174.128.0/17 185.9.60.0/22 185.57.4.0/22 185.90.176.0/22 195.178.160.0/19 212.85.64.0/19 212.116.64.0/19 213.80.96.0/19 213.136.32.0/19 213.164.192.0/19 217.27.160.0/19 217.31.160.0/19 IPv6: 2001:9b0::/29 2a02:508::/29 Signature Algorithm: sha256WithRSAEncryption 56:cd:7b:85:af:a3:f1:25:07:e6:d7:e7:c2:70:04:19:2e:bf: 16:9a:1d:36:ea:38:ae:80:f1:9d:33:f4:f2:84:df:bc:a5:95: fa:1e:07:64:e7:ab:29:ab:da:1a:e7:ef:0e:7c:75:30:b6:c5: f6:87:c0:2e:1e:3e:5c:cf:36:34:6c:cc:65:c5:be:f5:51:93: eb:77:09:0c:d8:4c:9f:3b:93:fc:85:df:87:e5:17:1f:5d:2b: 4d:ae:90:11:06:af:8e:2d:02:cb:4b:d0:6a:57:68:89:28:da: b2:4f:8f:93:b6:23:f9:3c:d5:1d:54:32:c0:57:64:2e:77:22: 26:d5:93:2b:87:39:38:83:b1:e2:85:8f:a5:33:be:09:78:e3: df:b8:b7:eb:b9:0f:28:e6:8f:88:1c:75:96:e1:38:37:de:da: fb:7a:a4:01:b4:1f:ed:90:68:81:16:89:98:9e:4e:1b:dd:d9: 64:f2:de:a5:34:e2:e1:64:9d:83:e0:9c:ec:08:f3:99:5f:53: 57:d6:0f:d7:3b:94:7c:1d:47:1d:32:78:25:64:70:c2:5d:81: 17:74:97:19:49:99:5d:5c:40:92:3d:c9:1a:bf:35:43:c1:03: 4b:99:45:ef:61:41:fb:e4:30:82:41:a2:50:f6:b1:9a:e3:9a: ec:93:24:02 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt8gHRtV883s+4GgTT8JqpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMjJmMjI5ZWRjMmYzMTRhMmZhNWVmMGQ3YWYxZGRkYjQ5 OWVhMzEwHhcNMjYwMTAyMDIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmRjMzBkNjMwMzA2YTk5YjI3ODFlNGM3NWFlOWE5MWE0ZWI5ZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmgehnevMNN64qwUirHgSUP0VX7N PeFy2oQVz52Xrxr+9RGHv5/bo7VF0jKW1NMG/HDUdRr+jQkMfZxtVoNbxjAE7CQN HhznJw8tlmSdyqQ3zHkFw+3OIaZF+PMqk1CIx+yesB1JVrdQ7kykWgV4VRhaZ99Z i522ZhBvZd8iWRZxyElrc2zzzJAsGauYmjhSY2jWLyOtRo4ylIm7er1S33GFkP0p YB8+Vl4S0CqTmEHn3QfxkfMHYXmdPnzM7K1Y2hRX7rfMBx/jzh7Mp8kLghMIqBRx IxGtoUUpegwP30g6ZutfqOXQMEMrMTxswvnlzpLLay0lPXK5awzSBozTKQIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFI/cMNYwMGqZsngeTHWumpGk659KMB8GA1UdIwQY MBaAFKMi8intwvMUovpe8NevHd20meoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgt NjVmODI0N2ZmYTkxLzEvajl3dzFqQXdhcG15ZUI1TWRhNmFrYVRybjBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9lZGZmYmItMTA4Mi00NDgyLThhMDgtNjVmODI0N2ZmYTkx LzEvb3lMeUtlM0M4eFNpLWw3dzE2OGQzYlNaNmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBnAQCAAEwgZUDBAYF lsADBAYle4ADBAcuOwADBAY+P8ADBAdPiAADBAdRqoADBAVSxGADBAdVGIADBAJb hLADBAde/gADAwBigAMEBm3kgAMEB7AKgAMEB7KugAMEArkJPAMEArk5BAMEArla sAMEBcOyoAMEBdRVQAMEBdR0QAMEBdVQYAMEBdWIIAMEBdWkwAMEBdkboAMEBdkf oDAUBAIAAjAOAwUDIAEJsAMFAyoCBQgwDQYJKoZIhvcNAQELBQADggEBAFbNe4Wv o/ElB+bX58JwBBkuvxaaHTbqOK6A8Z0z9PKE37yllfoeB2Tnqymr2hrn7w58dTC2 xfaHwC4ePlzPNjRszGXFvvVRk+t3CQzYTJ87k/yF34flFx9dK02ukBEGr44tAstL 0GpXaIko2rJPj5O2I/k81R1UMsBXZC53IibVkyuHOTiDseKFj6Uzvgl449+4t+u5 Dyjmj4gcdZbhODfe2vt6pAG0H+2QaIEWiZieThvd2WTy3qU04uFknYPgnOwI85lf U1fWD9c7lHwdRx0yeCVkcMJdgRd0lxlJmV1cQJI9yRq/NUPBA0uZRe9hQfvkMIJB olD2sZrjmuyTJAI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:19 2026 by rpki-client