This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/JwW5igF2W5CG4b3gOB1N-4Tr5f0.roa File: JwW5igF2W5CG4b3gOB1N-4Tr5f0.roa (raw, json) Hash identifier: 5blYmQTQjzI334hh/BrW3VyFklzwSKOWMSe53enNbtY= Subject key identifier: 27:05:B9:8A:01:76:5B:90:86:E1:BD:E0:38:1D:4D:FB:84:EB:E5:FD Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab Certificate serial: 019B7F15BAE0E76D052C931345533E93650D Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/JwW5igF2W5CG4b3gOB1N-4Tr5f0.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58224 IP address blocks: 45.140.28.0/22 maxlen: 22 89.33.204.0/23 maxlen: 23 89.33.234.0/23 maxlen: 23 89.34.88.0/23 maxlen: 23 89.34.94.0/23 maxlen: 23 89.34.168.0/23 maxlen: 23 89.34.176.0/23 maxlen: 23 89.35.58.0/23 maxlen: 23 89.35.156.0/23 maxlen: 23 89.35.176.0/23 maxlen: 23 89.37.30.0/23 maxlen: 23 89.38.242.0/23 maxlen: 23 89.39.186.0/23 maxlen: 23 89.40.128.0/23 maxlen: 23 89.42.32.0/23 maxlen: 23 89.43.204.0/23 maxlen: 23 89.44.202.0/23 maxlen: 23 89.45.230.0/23 maxlen: 23 89.46.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ba:e0:e7:6d:05:2c:93:13:45:53:3e:93:65:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2705b98a01765b9086e1bde0381d4dfb84ebe5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:03:a2:7a:88:db:9e:ca:3d:bf:c9:15:ae: 51:05:08:13:9e:3f:f0:8e:3e:b2:1e:38:e4:e9:42: 68:38:26:02:ff:18:21:11:de:80:32:4a:7c:b5:64: e8:b0:68:dc:79:87:bd:d9:c5:dc:97:e7:cd:c6:3f: 44:a1:34:c7:41:21:27:78:6e:01:ea:d0:bd:3f:3f: 68:9f:9d:99:84:49:ab:ac:32:94:82:e4:76:21:80: 8e:e0:8c:b9:d1:96:6e:69:44:05:4e:cc:e7:7d:5c: e7:b0:29:cd:cc:bd:01:eb:7b:2d:5b:e0:c2:a8:60: 2f:62:50:d0:6f:3e:ee:cd:7e:b2:d5:10:3c:14:f6: 3f:96:85:a9:d6:ef:e0:8f:89:fc:fc:4a:7e:2a:e2: 6a:23:87:44:ae:f8:61:bd:ea:a3:1f:5e:ad:7b:00: 82:05:b3:54:68:6f:a6:7e:5e:f6:19:c1:43:7b:dd: e5:0a:fa:fd:0f:3b:9a:05:c9:38:1c:0e:71:d7:e8: 0f:96:ed:bc:2f:51:06:46:99:76:5c:56:7d:b4:b5: 33:ca:18:5f:ef:a3:d1:bf:c1:09:f3:f8:31:a9:a8: 90:2d:e4:99:4f:3f:c6:55:65:88:d9:a9:1f:c5:6a: ad:56:75:03:a3:9d:e0:3b:cd:25:ca:e2:c2:f2:84: cd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:05:B9:8A:01:76:5B:90:86:E1:BD:E0:38:1D:4D:FB:84:EB:E5:FD X509v3 Authority Key Identifier: keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/JwW5igF2W5CG4b3gOB1N-4Tr5f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.28.0/22 89.33.204.0/23 89.33.234.0/23 89.34.88.0/23 89.34.94.0/23 89.34.168.0/23 89.34.176.0/23 89.35.58.0/23 89.35.156.0/23 89.35.176.0/23 89.37.30.0/23 89.38.242.0/23 89.39.186.0/23 89.40.128.0/23 89.42.32.0/23 89.43.204.0/23 89.44.202.0/23 89.45.230.0/23 89.46.44.0/23 Signature Algorithm: sha256WithRSAEncryption b8:75:18:51:8f:dc:62:04:19:2a:77:cf:33:9a:22:bf:b7:51: 15:29:88:22:63:97:54:85:97:bb:e3:44:76:cf:1a:3e:96:88: e3:2f:ab:84:5a:69:0a:30:23:1e:e7:1c:78:0b:46:eb:ab:fc: ca:25:18:2e:16:31:bc:12:68:c4:a7:ff:c0:ae:e6:f6:02:5d: 91:a2:c7:01:4e:28:9d:fa:46:9c:d3:e7:8c:84:74:78:2c:a7: 19:a9:ce:5a:e2:84:6c:89:af:f3:62:c3:5d:89:f9:3e:1b:47: f4:d9:f6:da:4f:75:67:f0:e4:49:01:57:6b:43:f9:86:da:99: e3:06:33:c0:84:d1:b3:78:99:61:a9:f2:02:b7:e7:4a:de:fb: 77:17:6f:42:5c:5a:bd:3b:4a:c4:76:8d:97:a2:52:6b:c6:14: bd:3e:63:1d:30:a8:01:fb:d2:9a:e9:36:3a:2b:1a:2b:99:a3: 0e:d7:34:fa:61:8e:70:26:ba:ed:33:00:74:f5:59:4d:ca:e3: 92:a0:52:11:96:9d:2b:5b:cf:6c:d9:a3:38:59:cc:a2:83:ac: 51:26:d6:c0:ae:aa:fd:d4:cd:6e:a2:45:4e:da:37:ba:70:d9: d9:45:dd:1f:cc:7c:f9:9e:6a:29:21:d5:e7:c3:f5:e8:5d:b7: db:2f:03:31 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZt/Fbrg520FLJMTRVM+k2UNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZmVkNGU3NzgyMDljM2NhZTkzZDRiNzZkMzUwNzA0NDYy YzNhYWIwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzA1Yjk4YTAxNzY1YjkwODZlMWJkZTAzODFkNGRmYjg0ZWJlNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAkDonqI257KPb/JFa5RBQgTnj/w jj6yHjjk6UJoOCYC/xghEd6AMkp8tWTosGjceYe92cXcl+fNxj9EoTTHQSEneG4B 6tC9Pz9on52ZhEmrrDKUguR2IYCO4Iy50ZZuaUQFTsznfVznsCnNzL0B63stW+DC qGAvYlDQbz7uzX6y1RA8FPY/loWp1u/gj4n8/Ep+KuJqI4dErvhhveqjH16tewCC BbNUaG+mfl72GcFDe93lCvr9DzuaBck4HA5x1+gPlu28L1EGRpl2XFZ9tLUzyhhf 76PRv8EJ8/gxqaiQLeSZTz/GVWWI2akfxWqtVnUDo53gO80lyuLC8oTNzQIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFCcFuYoBdluQhuG94DgdTfuE6+X9MB8GA1UdIwQY MBaAFOf+1Od4IJw8rpPUt201BwRGLDqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yMmEzYzctNmZlNS00OWUxLTkzNWQt OGJiODAxNTJhYjM0LzEvSndXNWlnRjJXNUNHNGIzZ09CMU4tNFRyNWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8yMmEzYzctNmZlNS00OWUxLTkzNWQtOGJiODAxNTJhYjM0 LzEvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAi2MHAME AVkhzAMEAVkh6gMEAVkiWAMEAVkiXgMEAVkiqAMEAVkisAMEAVkjOgMEAVkjnAME AVkjsAMEAVklHgMEAVkm8gMEAVknugMEAVkogAMEAVkqIAMEAVkrzAMEAVksygME AVkt5gMEAVkuLDANBgkqhkiG9w0BAQsFAAOCAQEAuHUYUY/cYgQZKnfPM5oiv7dR FSmIImOXVIWXu+NEds8aPpaI4y+rhFppCjAjHucceAtG66v8yiUYLhYxvBJoxKf/ wK7m9gJdkaLHAU4onfpGnNPnjIR0eCynGanOWuKEbImv82LDXYn5PhtH9Nn22k91 Z/DkSQFXa0P5htqZ4wYzwITRs3iZYanyArfnSt77dxdvQlxavTtKxHaNl6JSa8YU vT5jHTCoAfvSmuk2OisaK5mjDtc0+mGOcCa67TMAdPVZTcrjkqBSEZadK1vPbNmj OFnMooOsUSbWwK6q/dTNbqJFTto3unDZ2UXdH8x8+Z5qKSHV58P16F232y8DMQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:35 2026 by rpki-client