This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/JxSMfmZSqI3JsHq7y-Q3lsW7V_k.roa File: JxSMfmZSqI3JsHq7y-Q3lsW7V_k.roa (raw, json) Hash identifier: LqYFlCxZmCemaTuAC/WiD/gTuuU0Q9CM+YPDQviSwnI= Subject key identifier: 27:14:8C:7E:66:52:A8:8D:C9:B0:7A:BB:CB:E4:37:96:C5:BB:57:F9 Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8 Certificate serial: 019B7D5C2812B074CE1E441551D3BC6974D6 Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/JxSMfmZSqI3JsHq7y-Q3lsW7V_k.roa Signing time: Fri 02 Jan 2026 06:19:09 +0000 ROA not before: Fri 02 Jan 2026 06:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15547 IP address blocks: 31.31.48.0/20 maxlen: 20 77.242.160.0/20 maxlen: 20 78.155.0.0/19 maxlen: 19 81.13.128.0/17 maxlen: 17 81.88.176.0/20 maxlen: 20 81.88.176.0/21 maxlen: 21 86.111.128.0/20 maxlen: 20 92.62.176.0/20 maxlen: 20 92.240.96.0/19 maxlen: 19 95.215.60.0/22 maxlen: 22 178.157.84.0/22 maxlen: 22 178.237.80.0/20 maxlen: 20 185.17.108.0/22 maxlen: 22 185.17.176.0/22 maxlen: 22 185.44.196.0/22 maxlen: 22 185.50.220.0/22 maxlen: 22 185.55.216.0/22 maxlen: 22 185.84.208.0/22 maxlen: 22 188.239.160.0/20 maxlen: 20 192.162.24.0/22 maxlen: 22 194.12.16.0/20 maxlen: 20 195.162.160.0/22 maxlen: 22 195.162.164.0/23 maxlen: 23 195.162.167.0/24 maxlen: 24 195.162.168.0/21 maxlen: 21 195.162.176.0/20 maxlen: 20 213.221.128.0/19 maxlen: 19 213.230.52.0/22 maxlen: 22 213.230.56.0/21 maxlen: 21 213.238.0.0/19 maxlen: 19 217.79.192.0/20 maxlen: 20 2001:14a8::/32 maxlen: 32 2a02:26a0::/29 maxlen: 29 2a03:4380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:28:12:b0:74:ce:1e:44:15:51:d3:bc:69:74:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8 Validity Not Before: Jan 2 06:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27148c7e6652a88dc9b07abbcbe43796c5bb57f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2a:b8:a9:39:04:79:1b:4b:47:86:0d:86:5b: 5b:a7:a9:f0:33:b6:4d:5f:1a:8f:55:4f:5c:30:05: b8:1e:4e:ff:8e:ef:33:17:73:c2:d1:e5:aa:2a:82: 3b:41:11:a1:d5:73:25:81:42:6b:f3:a7:ca:95:f9: 1f:bf:e0:e1:34:60:e0:18:7b:f4:6a:07:80:0a:cb: 1a:8a:92:1a:66:ee:46:b4:20:6c:2d:17:f1:67:a3: ff:c8:14:17:41:22:94:9b:40:6a:a9:c0:6b:e2:9b: fb:4e:47:f0:19:68:8e:67:59:f7:54:5d:cf:5d:2c: 4c:ba:7b:67:f6:1c:d0:21:e1:02:fb:6c:d2:90:a3: 74:8e:03:4f:71:32:d9:73:1d:26:89:c2:31:c2:db: 6e:bb:6a:39:bf:05:97:8e:26:fa:65:c6:d7:9a:b0: 8a:0d:45:9b:a2:45:50:54:19:e9:77:ca:9e:45:d3: 70:7c:9f:75:4a:5e:fd:a1:2f:89:cc:e2:04:84:09: 0e:25:d7:4b:be:d9:4f:69:bb:a4:ef:fa:da:32:a0: af:8b:d0:eb:fd:a7:42:96:8c:0b:39:63:80:30:f7: d8:c8:5c:95:d3:20:30:24:a2:3c:c8:e0:26:05:bb: 04:14:85:5d:58:9a:f5:9a:30:50:1c:72:3f:ff:ad: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:14:8C:7E:66:52:A8:8D:C9:B0:7A:BB:CB:E4:37:96:C5:BB:57:F9 X509v3 Authority Key Identifier: keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/JxSMfmZSqI3JsHq7y-Q3lsW7V_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.48.0/20 77.242.160.0/20 78.155.0.0/19 81.13.128.0/17 81.88.176.0/20 86.111.128.0/20 92.62.176.0/20 92.240.96.0/19 95.215.60.0/22 178.157.84.0/22 178.237.80.0/20 185.17.108.0/22 185.17.176.0/22 185.44.196.0/22 185.50.220.0/22 185.55.216.0/22 185.84.208.0/22 188.239.160.0/20 192.162.24.0/22 194.12.16.0/20 195.162.160.0-195.162.165.255 195.162.167.0-195.162.191.255 213.221.128.0/19 213.230.52.0-213.230.63.255 213.238.0.0/19 217.79.192.0/20 IPv6: 2001:14a8::/32 2a02:26a0::/29 2a03:4380::/32 Signature Algorithm: sha256WithRSAEncryption 90:ce:32:62:66:c3:29:c7:f8:bf:94:0d:d8:19:3c:8f:9c:b9: 96:f4:c4:3d:70:04:72:d5:01:55:fd:21:99:ee:42:72:c4:5e: cf:4b:bb:fe:04:e1:cd:82:29:46:25:17:90:f9:6f:21:0b:74: 92:d3:50:eb:fe:18:04:c2:62:c5:b2:64:cd:60:ba:7d:59:92: 5a:15:0d:f8:71:85:75:e7:c7:78:d0:6c:03:bc:10:f6:63:ef: 0b:a9:fc:dc:dd:4d:01:b8:85:de:11:e1:b6:e2:2b:7a:29:8f: 88:d3:c1:5b:e5:2a:b7:52:61:4c:42:ba:5e:f1:03:56:cb:ea: 89:bf:d0:f7:40:4b:49:5d:7f:bb:23:55:94:82:f8:b2:f4:f6: c6:f5:02:15:24:6d:4d:f1:0b:72:65:46:aa:8a:6f:ba:4c:06: f2:b3:34:37:fc:da:67:7c:f2:51:5d:7a:13:4b:e6:ea:96:fe: ea:fd:94:da:eb:a4:b7:4c:80:af:26:fa:86:13:7a:fa:63:20: 06:1c:bd:a9:1a:0d:3d:bc:c4:77:89:8b:ce:77:93:e7:99:30: 87:25:3b:96:74:d3:2e:77:c9:d4:d3:29:02:fb:75:2e:d0:c7: c1:d2:93:dd:6f:c9:dd:5e:5d:08:e4:ca:06:57:d8:cb:05:26: d0:9d:f6:af -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt9XCgSsHTOHkQVUdO8aXTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZTY3ZmNiMGJkYzYwMDFkOGNmNzA3M2M2NDllYjk4MTlm YzVlYjgwHhcNMjYwMTAyMDYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzE0OGM3ZTY2NTJhODhkYzliMDdhYmJjYmU0Mzc5NmM1YmI1N2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCq4qTkEeRtLR4YNhltbp6nwM7ZN XxqPVU9cMAW4Hk7/ju8zF3PC0eWqKoI7QRGh1XMlgUJr86fKlfkfv+DhNGDgGHv0 ageACssaipIaZu5GtCBsLRfxZ6P/yBQXQSKUm0BqqcBr4pv7TkfwGWiOZ1n3VF3P XSxMuntn9hzQIeEC+2zSkKN0jgNPcTLZcx0micIxwttuu2o5vwWXjib6ZcbXmrCK DUWbokVQVBnpd8qeRdNwfJ91Sl79oS+JzOIEhAkOJddLvtlPabuk7/raMqCvi9Dr /adClowLOWOAMPfYyFyV0yAwJKI8yOAmBbsEFIVdWJr1mjBQHHI//605JwIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFCcUjH5mUqiNybB6u8vkN5bFu1f5MB8GA1UdIwQY MBaAFLnmf8sL3GAB2M9wc8ZJ65gZ/F64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEt ZmE3MWFlMDVkYzNmLzEvSnhTTWZtWlNxSTNKc0hxN3ktUTNsc1c3Vl9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEtZmE3MWFlMDVkYzNm LzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHuBggrBgEFBQcBBwEB/wSB3jCB2zCBuwQCAAEwgbQDBAQf HzADBARN8qADBAVOmwADBAdRDYADBARRWLADBARWb4ADBARcPrADBAVc8GADBAJf 1zwDBAKynVQDBASy7VADBAK5EWwDBAK5EbADBAK5LMQDBAK5MtwDBAK5N9gDBAK5 VNADBAS876ADBALAohgDBATCDBAwDAMEBcOioAMEAcOipDAMAwQAw6KnAwQGw6KA AwQF1d2AMAwDBALV5jQDBAbV5gADBAXV7gADBATZT8AwGwQCAAIwFQMFACABFKgD BQMqAiagAwUAKgNDgDANBgkqhkiG9w0BAQsFAAOCAQEAkM4yYmbDKcf4v5QN2Bk8 j5y5lvTEPXAEctUBVf0hme5CcsRez0u7/gThzYIpRiUXkPlvIQt0ktNQ6/4YBMJi xbJkzWC6fVmSWhUN+HGFdefHeNBsA7wQ9mPvC6n83N1NAbiF3hHhtuIreimPiNPB W+Uqt1JhTEK6XvEDVsvqib/Q90BLSV1/uyNVlIL4svT2xvUCFSRtTfELcmVGqopv ukwG8rM0N/zaZ3zyUV16E0vm6pb+6v2U2uukt0yAryb6hhN6+mMgBhy9qRoNPbzE d4mLzneT55kwhyU7lnTTLnfJ1NMpAvt1LtDHwdKT3W/J3V5dCOTKBlfYywUm0J32 rw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:36 2026 by rpki-client