This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa File: jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa (raw, json) Hash identifier: nFOTFG+7OrEIpqu+RBWcBN5R7HeTDegtuQdJz0N3Rss= Subject key identifier: 8D:4E:54:EE:3A:A4:BD:23:89:0D:3B:5A:48:F1:0C:3D:59:98:0F:D0 Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb Certificate serial: 019B7D5D06D79734F79E00C0198713040FCD Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6697 IP address blocks: 37.44.64.0/18 maxlen: 21 37.45.0.0/16 maxlen: 21 37.212.0.0/14 maxlen: 23 82.209.192.0/18 maxlen: 24 86.57.128.0/17 maxlen: 24 93.84.0.0/15 maxlen: 24 178.120.0.0/13 maxlen: 24 185.152.136.0/22 maxlen: 24 194.158.192.0/19 maxlen: 24 2001:7f8:5a::/48 maxlen: 48 2a02:2208::/29 maxlen: 44 2a02:2208::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:06:d7:97:34:f7:9e:00:c0:19:87:13:04:0f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d4e54ee3aa4bd23890d3b5a48f10c3d59980fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:8b:0c:a3:e6:d5:20:81:33:bd:f9:f5:19: 3a:07:1c:23:9c:c8:27:40:e1:b9:a3:35:06:e6:7c: 81:39:85:b0:0b:0e:81:2a:c3:16:3d:c5:dc:dc:6c: fe:1f:49:4f:bc:04:a8:91:69:68:9f:9c:a4:74:41: a6:e2:bd:9d:97:79:b1:92:9b:e8:43:de:ed:e5:2d: 27:3f:39:78:86:1e:ec:e3:39:71:fe:0f:f1:2e:04: be:41:62:d0:ea:a7:be:70:36:88:74:5b:e3:60:73: d5:3e:1e:ec:8c:f4:af:95:51:d6:42:c1:b6:77:8e: 2c:86:f3:91:71:0c:25:14:8f:df:98:ba:e3:69:26: 22:b6:19:0e:6d:bb:ab:17:47:e2:ff:48:9b:71:2a: ce:79:04:2f:7a:1c:59:87:5b:50:c6:a8:93:f3:d3: b5:80:55:e2:52:25:7e:11:3a:62:d6:17:34:d5:4a: 8f:51:ed:e9:a4:58:ad:b7:50:f6:c5:2b:fc:ac:d1: 47:e7:05:c3:ef:ec:d5:75:2f:eb:71:cb:70:68:4b: c5:d3:13:fe:d3:23:d8:85:67:eb:36:65:25:27:07: f0:78:01:1d:51:41:f0:c4:07:b3:29:2b:ba:45:53: fe:bf:5a:37:02:3d:35:07:9c:99:3d:0f:80:73:f7: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4E:54:EE:3A:A4:BD:23:89:0D:3B:5A:48:F1:0C:3D:59:98:0F:D0 X509v3 Authority Key Identifier: keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.64.0/18 37.45.0.0/16 37.212.0.0/14 82.209.192.0/18 86.57.128.0/17 93.84.0.0/15 178.120.0.0/13 185.152.136.0/22 194.158.192.0/19 IPv6: 2001:7f8:5a::/48 2a02:2208::/29 Signature Algorithm: sha256WithRSAEncryption 73:61:f2:49:93:bd:35:84:5c:ee:fd:26:1b:bc:94:a0:43:90: 3e:b2:53:d6:b4:9e:40:00:58:03:e0:22:30:ab:be:b3:ca:21: 10:a5:e5:14:79:3a:89:5d:18:a9:ba:20:a5:79:9c:ca:bb:1b: 32:4b:ed:f5:d2:71:7e:d1:70:54:01:a9:e8:75:9e:65:62:19: bc:98:73:d7:38:11:bd:fa:7a:21:ed:f2:e1:3f:d6:11:29:b6: f6:4b:83:41:ef:71:cc:b7:62:dc:c2:a4:61:90:1d:af:08:41: f1:b2:c1:e3:fc:a6:81:ab:7d:11:96:7a:c3:12:c5:1f:ec:d5: b6:50:6f:93:02:b6:3c:54:ff:31:bd:3c:fe:50:64:e5:ef:49: 08:ae:10:e4:44:49:a7:4c:65:a3:ba:25:4d:85:f6:76:23:b0: 1d:27:59:7f:1f:30:42:87:9c:fe:d8:ad:42:b5:17:e0:31:6b: 4a:2c:e1:05:d0:ee:09:27:11:0f:ba:9a:17:9e:78:71:f2:ff: 51:b1:51:23:24:67:c1:c1:32:a6:0b:0b:72:82:d6:44:1e:59: 6e:1b:fb:ce:c4:96:86:33:1a:8c:5f:36:31:4b:1b:5f:55:97: 39:72:aa:59:c8:8e:f9:9b:fc:90:70:40:ed:46:02:dc:27:cc: 65:f7:8e:94 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt9XQbXlzT3ngDAGYcTBA/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiODgyY2Q2ZDE5NmFlMWY5Njg3MmFjYWU3ODMyMWJlN2E5 MmI4ZWIwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDRlNTRlZTNhYTRiZDIzODkwZDNiNWE0OGYxMGMzZDU5OTgwZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA6LDKPm1SCBM7359Rk6BxwjnMgn QOG5ozUG5nyBOYWwCw6BKsMWPcXc3Gz+H0lPvASokWlon5ykdEGm4r2dl3mxkpvo Q97t5S0nPzl4hh7s4zlx/g/xLgS+QWLQ6qe+cDaIdFvjYHPVPh7sjPSvlVHWQsG2 d44shvORcQwlFI/fmLrjaSYithkObburF0fi/0ibcSrOeQQvehxZh1tQxqiT89O1 gFXiUiV+ETpi1hc01UqPUe3ppFitt1D2xSv8rNFH5wXD7+zVdS/rcctwaEvF0xP+ 0yPYhWfrNmUlJwfweAEdUUHwxAezKSu6RVP+v1o3Aj01B5yZPQ+Ac/d8SQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFI1OVO46pL0jiQ07WkjxDD1ZmA/QMB8GA1UdIwQY MBaAFKuILNbRlq4flocqyueDIb56krjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTct OTUwYzE4MDU5NmQwLzEvalU1VTdqcWt2U09KRFR0YVNQRU1QVm1ZRDlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTctOTUwYzE4MDU5NmQw LzEvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjA4BAIAATAyAwQGJSxAAwMA JS0DAwIl1AMEBlLRwAMEB1Y5gAMDAV1UAwMDsngDBAK5mIgDBAXCnsAwFgQCAAIw EAMHACABB/gAWgMFAyoCIggwDQYJKoZIhvcNAQELBQADggEBAHNh8kmTvTWEXO79 Jhu8lKBDkD6yU9a0nkAAWAPgIjCrvrPKIRCl5RR5OoldGKm6IKV5nMq7GzJL7fXS cX7RcFQBqeh1nmViGbyYc9c4Eb36eiHt8uE/1hEptvZLg0Hvccy3YtzCpGGQHa8I QfGyweP8poGrfRGWesMSxR/s1bZQb5MCtjxU/zG9PP5QZOXvSQiuEORESadMZaO6 JU2F9nYjsB0nWX8fMEKHnP7YrUK1F+Axa0os4QXQ7gknEQ+6mheeeHHy/1GxUSMk Z8HBMqYLC3KC1kQeWW4b+87EloYzGoxfNjFLG19VlzlyqlnIjvmb/JBwQO1GAtwn zGX3jpQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:23 2026 by rpki-client