This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/J037jcIbssptRuiF7QThwckkgYA.roa File: J037jcIbssptRuiF7QThwckkgYA.roa (raw, json) Hash identifier: VzXGhtcRmbTMvgupmIWbk2ydVSdHNyFjivXfWRp24D8= Subject key identifier: 27:4D:FB:8D:C2:1B:B2:CA:6D:46:E8:85:ED:04:E1:C1:C9:24:81:80 Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Certificate serial: 019BE574B7E4CDC9DC5D3BECC66D54C43624 Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/J037jcIbssptRuiF7QThwckkgYA.roa Signing time: Thu 22 Jan 2026 11:26:30 +0000 ROA not before: Thu 22 Jan 2026 11:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 31.207.8.0/21 maxlen: 24 31.207.16.0/20 maxlen: 24 37.251.176.0/20 maxlen: 24 37.251.200.0/21 maxlen: 24 37.251.240.0/21 maxlen: 24 45.11.164.0/22 maxlen: 24 46.102.148.0/22 maxlen: 24 46.231.104.0/21 maxlen: 24 62.122.40.0/21 maxlen: 24 82.148.192.0/19 maxlen: 24 84.53.64.0/18 maxlen: 24 89.20.160.0/19 maxlen: 24 90.145.0.0/16 maxlen: 24 90.145.59.0/24 maxlen: 24 91.194.8.0/23 maxlen: 24 93.95.248.0/21 maxlen: 24 94.24.64.0/21 maxlen: 24 109.94.144.0/20 maxlen: 24 141.136.16.0/20 maxlen: 24 144.178.64.0/19 maxlen: 24 144.178.96.0/21 maxlen: 24 144.178.108.0/22 maxlen: 24 144.178.112.0/22 maxlen: 24 144.178.120.0/21 maxlen: 24 144.178.192.0/19 maxlen: 24 144.178.224.0/20 maxlen: 24 144.178.240.0/21 maxlen: 24 144.178.248.0/22 maxlen: 24 151.236.144.0/20 maxlen: 24 151.248.48.0/21 maxlen: 24 161.51.64.0/19 maxlen: 24 185.41.144.0/22 maxlen: 24 185.184.204.0/22 maxlen: 24 188.214.40.0/21 maxlen: 24 2a01:5620::/29 maxlen: 48 2a01:9bc0::/29 maxlen: 48 2a02:120::/29 maxlen: 48 2a02:fe8::/32 maxlen: 48 2a02:fe9::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:74:b7:e4:cd:c9:dc:5d:3b:ec:c6:6d:54:c4:36:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Validity Not Before: Jan 22 11:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=274dfb8dc21bb2ca6d46e885ed04e1c1c9248180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:35:06:b4:84:ef:d3:88:23:62:04:79:e6: d2:c4:d6:00:c8:13:4d:fd:7c:e1:32:4c:75:10:44: 0e:13:70:d5:74:81:a3:db:c8:d9:f2:12:b0:4e:6f: b6:92:01:6c:5f:be:4a:4e:40:f7:53:3f:23:49:d8: ab:a8:64:eb:f7:c2:23:f4:97:42:2e:53:94:1f:b6: fe:4d:b7:6b:24:5b:ce:46:53:67:b7:97:fe:f5:1d: 5d:a3:92:23:01:da:6b:4c:1c:5e:33:90:2d:23:63: 9c:39:4f:50:37:82:c9:0e:20:8b:e5:d7:7b:6f:6c: e7:6b:ed:3b:7c:73:89:a3:2d:eb:a7:4a:62:51:05: b8:5c:70:26:24:eb:46:b3:9e:6a:a4:60:4c:e1:93: 4d:64:b8:a2:b7:a1:b5:94:c0:da:8d:6d:3c:06:a6: bb:59:ac:7d:15:df:f8:38:fc:4f:f9:12:ad:35:86: 18:db:00:ab:20:cc:94:f3:b0:04:a7:7d:1a:8c:6d: 2f:04:11:b2:0f:98:e5:3d:c3:0c:c0:97:e6:63:3a: 71:3c:25:4d:70:fa:7c:31:f9:6e:43:21:25:10:f3: c3:42:f1:45:a6:81:09:07:01:00:43:20:1e:18:c1: ec:9d:90:65:45:b2:35:f1:a9:f9:ac:6f:22:89:32: b6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4D:FB:8D:C2:1B:B2:CA:6D:46:E8:85:ED:04:E1:C1:C9:24:81:80 X509v3 Authority Key Identifier: keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/J037jcIbssptRuiF7QThwckkgYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.207.8.0-31.207.31.255 37.251.176.0/20 37.251.200.0/21 37.251.240.0/21 45.11.164.0/22 46.102.148.0/22 46.231.104.0/21 62.122.40.0/21 82.148.192.0/19 84.53.64.0/18 89.20.160.0/19 90.145.0.0/16 91.194.8.0/23 93.95.248.0/21 94.24.64.0/21 109.94.144.0/20 141.136.16.0/20 144.178.64.0-144.178.103.255 144.178.108.0-144.178.115.255 144.178.120.0/21 144.178.192.0-144.178.251.255 151.236.144.0/20 151.248.48.0/21 161.51.64.0/19 185.41.144.0/22 185.184.204.0/22 188.214.40.0/21 IPv6: 2a01:5620::/29 2a01:9bc0::/29 2a02:120::/29 2a02:fe8::/31 Signature Algorithm: sha256WithRSAEncryption 42:35:fb:d7:ca:10:14:c1:3a:19:63:80:75:4c:19:2a:5f:ba: 27:99:a2:26:34:bb:f3:1b:57:31:73:d9:01:9c:d2:37:5b:5c: fe:c6:66:e5:eb:5b:3f:f0:48:dd:1c:f1:02:8e:6d:c1:c2:fc: be:a3:18:42:1e:ac:77:3e:ba:81:bd:a1:30:a3:85:0f:1f:cd: 4c:bd:9f:22:7b:a6:a1:b3:1c:4e:34:51:a2:b5:00:b6:b4:d8: de:16:79:21:60:31:da:91:d8:a3:89:14:45:55:73:f8:3d:60: 20:ed:8b:7f:32:65:6d:89:1c:96:c6:59:d8:0b:87:e6:03:1a: 6d:eb:ec:64:87:7a:85:ef:64:c9:77:2f:18:1e:01:ca:aa:97: 87:19:ed:8d:7c:7e:29:3f:c3:18:7b:b9:c3:a1:22:35:4a:b9: 9d:0f:85:7e:88:ac:a7:a8:f7:b8:5f:c8:7c:fa:cd:25:a1:fa: d4:63:76:7b:4f:aa:24:03:3b:90:af:9f:98:35:e0:b3:fa:30: 49:65:13:e3:f2:51:35:9e:50:08:ac:b3:9d:f4:22:ab:fd:cc: c8:fa:28:0b:d6:de:36:e5:e7:e5:1e:bf:b8:85:64:ae:ed:cd: 7a:08:28:27:4a:fd:de:d5:5f:6d:e6:8e:ac:90:b4:81:32:c0: 5d:2a:42:f9 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZvldLfkzcncXTvsxm1UxDYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjU4MGUxOGFkNmZmOGRjOTQyYmU4ODNjMTZkZThiNzMx Zjk2MDUwHhcNMjYwMTIyMTEyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzRkZmI4ZGMyMWJiMmNhNmQ0NmU4ODVlZDA0ZTFjMWM5MjQ4MTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyns1BrSE79OII2IEeebSxNYAyBNN /XzhMkx1EEQOE3DVdIGj28jZ8hKwTm+2kgFsX75KTkD3Uz8jSdirqGTr98Ij9JdC LlOUH7b+TbdrJFvORlNnt5f+9R1do5IjAdprTBxeM5AtI2OcOU9QN4LJDiCL5dd7 b2zna+07fHOJoy3rp0piUQW4XHAmJOtGs55qpGBM4ZNNZLiit6G1lMDajW08Bqa7 Wax9Fd/4OPxP+RKtNYYY2wCrIMyU87AEp30ajG0vBBGyD5jlPcMMwJfmYzpxPCVN cPp8MfluQyElEPPDQvFFpoEJBwEAQyAeGMHsnZBlRbI18an5rG8iiTK23wIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFCdN+43CG7LKbUbohe0E4cHJJIGAMB8GA1UdIwQY MBaAFKhlgOGK1v+NyUK+iDwW3otzH5YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEt MjM2ZTkyZmM2YTU5LzEvSjAzN2pjSWJzc3B0UnVpRjdRVGh3Y2trZ1lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEtMjM2ZTkyZmM2YTU5 LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAgYIKwYBBQUHAQcBAf8EgfIwge8wgcgEAgABMIHBMAwD BAMfzwgDBAUfzwADBAQl+7ADBAMl+8gDBAMl+/ADBAItC6QDBAIuZpQDBAMu52gD BAM+eigDBAVSlMADBAZUNUADBAVZFKADAwBakQMEAVvCCAMEA11f+AMEA14YQAME BG1ekAMEBI2IEDAMAwQGkLJAAwQDkLJgMAwDBAKQsmwDBAKQsnADBAOQsngwDAME BpCywAMEApCy+AMEBJfskAMEA5f4MAMEBaEzQAMEArkpkAMEArm4zAMEA7zWKDAi BAIAAjAcAwUDKgFWIAMFAyoBm8ADBQMqAgEgAwUBKgIP6DANBgkqhkiG9w0BAQsF AAOCAQEAQjX718oQFME6GWOAdUwZKl+6J5miJjS78xtXMXPZAZzSN1tc/sZm5etb P/BI3RzxAo5twcL8vqMYQh6sdz66gb2hMKOFDx/NTL2fInumobMcTjRRorUAtrTY 3hZ5IWAx2pHYo4kURVVz+D1gIO2LfzJlbYkclsZZ2AuH5gMabevsZId6he9kyXcv GB4ByqqXhxntjXx+KT/DGHu5w6EiNUq5nQ+Ffoisp6j3uF/IfPrNJaH61GN2e0+q JAM7kK+fmDXgs/owSWUT4/JRNZ5QCKyznfQiq/3MyPooC9beNuXn5R6/uIVkru3N eggoJ0r93tVfbeaOrJC0gTLAXSpC+Q== -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:32 2026 by rpki-client