This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/j5nMyhDkND_N1Ut4UNIil32kLZ0.roa File: j5nMyhDkND_N1Ut4UNIil32kLZ0.roa (raw, json) Hash identifier: UBj4OSufFBsr7TYpnQq+Obve4nAQx39q2B1z153K9mU= Subject key identifier: 8F:99:CC:CA:10:E4:34:3F:CD:D5:4B:78:50:D2:22:97:7D:A4:2D:9D Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590 Certificate serial: 019B7B36B55EDD18972E0A3F4998606A1CAA Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/j5nMyhDkND_N1Ut4UNIil32kLZ0.roa Signing time: Thu 01 Jan 2026 20:19:01 +0000 ROA not before: Thu 01 Jan 2026 20:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199484 IP address blocks: 37.75.8.0/21 maxlen: 24 185.28.0.0/22 maxlen: 24 185.40.72.0/22 maxlen: 22 185.40.72.0/24 maxlen: 24 185.40.73.0/24 maxlen: 24 185.40.74.0/24 maxlen: 24 185.40.75.0/24 maxlen: 24 185.81.236.0/22 maxlen: 24 185.153.248.0/22 maxlen: 22 185.153.248.0/24 maxlen: 24 185.153.249.0/24 maxlen: 24 185.153.250.0/24 maxlen: 24 185.153.251.0/24 maxlen: 24 185.155.148.0/24 maxlen: 24 185.155.149.0/24 maxlen: 24 195.142.0.0/22 maxlen: 24 195.142.104.0/21 maxlen: 24 195.142.132.0/22 maxlen: 24 195.142.152.0/22 maxlen: 22 195.142.152.0/24 maxlen: 24 195.142.184.0/24 maxlen: 24 195.142.193.0/24 maxlen: 24 195.142.194.0/24 maxlen: 24 195.155.96.0/24 maxlen: 24 195.155.97.0/24 maxlen: 24 195.155.98.0/24 maxlen: 24 195.155.99.0/24 maxlen: 24 2a07:89c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b5:5e:dd:18:97:2e:0a:3f:49:98:60:6a:1c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b467367967dc763349fd0b50e31f75b823028590 Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f99ccca10e4343fcdd54b7850d222977da42d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:42:78:0f:90:d0:dc:7e:da:0c:dd:ee:a1: e0:99:ce:e6:ff:35:5f:eb:80:ef:91:bb:17:93:e5: 66:08:9e:00:3a:0b:06:6b:db:8c:e6:7f:e3:a0:95: ba:0e:58:be:26:c5:68:a1:7a:29:f8:e9:0f:e2:0d: 7e:14:90:21:27:d4:48:47:9c:52:3c:e2:0d:66:05: bc:08:d2:3b:7b:00:bf:a1:8b:66:dc:0c:ee:14:b8: 4b:53:86:55:22:15:bb:e1:93:f0:37:e4:47:b8:44: a0:14:bf:17:16:4d:e3:f5:18:10:ab:bf:29:dd:58: 56:46:c1:ea:f8:5e:59:3e:f9:63:9e:66:fa:65:c9: 48:49:68:e9:0b:a2:d9:c4:e1:12:2e:b5:0d:9f:c9: 2b:ac:5e:86:d7:a5:ab:93:cd:fe:05:c8:1e:6d:00: c0:84:aa:6e:d4:b2:02:c6:e7:83:51:34:b0:db:cf: c9:f5:06:ad:0a:d3:63:b9:2c:75:b6:3d:45:55:a9: 6b:f6:20:4a:f5:cf:78:ba:93:e4:c1:f8:96:97:98: 19:df:d7:cb:8e:c4:ce:2e:fd:52:b3:ab:fa:03:f1: 5c:22:09:5a:ee:4a:04:fe:58:13:d6:e4:23:da:54: b3:23:b7:89:8b:65:2f:e7:0c:48:32:3e:5e:b7:c2: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:99:CC:CA:10:E4:34:3F:CD:D5:4B:78:50:D2:22:97:7D:A4:2D:9D X509v3 Authority Key Identifier: keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/j5nMyhDkND_N1Ut4UNIil32kLZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.8.0/21 185.28.0.0/22 185.40.72.0/22 185.81.236.0/22 185.153.248.0/22 185.155.148.0/23 195.142.0.0/22 195.142.104.0/21 195.142.132.0/22 195.142.152.0/22 195.142.184.0/24 195.142.193.0-195.142.194.255 195.155.96.0/22 IPv6: 2a07:89c0::/48 Signature Algorithm: sha256WithRSAEncryption 69:a7:f5:9d:c5:40:90:2b:16:5f:a2:48:67:5e:f5:b9:54:32: 1d:18:93:8c:ad:4f:d3:c7:77:99:a6:8b:1e:87:24:81:15:ea: de:e9:55:55:25:d6:4c:23:80:ae:75:60:24:79:92:09:c7:88: a5:3d:ed:cb:39:da:1f:12:10:96:91:be:c7:11:8e:23:7f:18: b9:e7:de:9e:b6:45:e0:4c:d1:cb:39:cf:60:41:59:88:7b:03: 6a:7c:d4:4c:4e:3f:6d:e7:ae:d8:c8:fe:1d:4a:d8:39:d3:e0: f9:1b:ff:72:46:37:31:bf:fa:86:6f:5b:6f:dc:89:c8:c6:55: eb:7c:82:b6:64:c0:f4:54:5d:29:e5:29:60:94:8e:3f:71:6c: 5a:90:25:7a:47:bf:fd:5f:ed:53:cc:0c:1d:c3:2e:c7:f6:a9: 4d:7a:33:0a:ca:33:2c:f4:a7:5b:b4:19:db:22:d6:d2:12:e8: cb:c6:5a:0b:67:e4:3c:dc:f0:98:be:e3:dd:09:d4:e5:69:6a: e3:bf:16:25:8e:2b:70:c4:c3:f3:a1:4f:71:a5:f5:75:60:16: 61:12:bc:65:c5:1c:cf:bf:20:cc:96:6e:ed:ad:ce:35:c6:70: c2:7a:c4:f2:22:ce:67:48:85:d9:d8:37:07:1d:17:59:f6:78: 40:80:8e:47 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISAZt7NrVe3RiXLgo/SZhgahyqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjczNjc5NjdkYzc2MzM0OWZkMGI1MGUzMWY3NWI4MjMw Mjg1OTAwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Zjk5Y2NjYTEwZTQzNDNmY2RkNTRiNzg1MGQyMjI5NzdkYTQyZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVpCeA+Q0Nx+2gzd7qHgmc7m/zVf 64DvkbsXk+VmCJ4AOgsGa9uM5n/joJW6Dli+JsVooXop+OkP4g1+FJAhJ9RIR5xS POINZgW8CNI7ewC/oYtm3AzuFLhLU4ZVIhW74ZPwN+RHuESgFL8XFk3j9RgQq78p 3VhWRsHq+F5ZPvljnmb6ZclISWjpC6LZxOESLrUNn8krrF6G16Wrk83+BcgebQDA hKpu1LICxueDUTSw28/J9QatCtNjuSx1tj1FValr9iBK9c94upPkwfiWl5gZ39fL jsTOLv1Ss6v6A/FcIgla7koE/lgT1uQj2lSzI7eJi2Uv5wxIMj5et8I1dQIDAQAB o4ICazCCAmcwHQYDVR0OBBYEFI+ZzMoQ5DQ/zdVLeFDSIpd9pC2dMB8GA1UdIwQY MBaAFLRnNnln3HYzSf0LUOMfdbgjAoWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kZmM0ZjItZWQ3ZC00NjEwLTg2MGMt YjgxMzczYzQwZGM5LzEvajVuTXloRGtORF9OMVV0NFVOSWlsMzJrTFowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kZmM0ZjItZWQ3ZC00NjEwLTg2MGMtYjgxMzczYzQwZGM5 LzEvdEdjMmVXZmNkak5KX1F0UTR4OTF1Q01DaFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wXAQCAAEwVgMEAyVLCAME ArkcAAMEArkoSAMEArlR7AMEArmZ+AMEAbmblAMEAsOOAAMEA8OOaAMEAsOOhAME AsOOmAMEAMOOuDAMAwQAw47BAwQAw47CAwQCw5tgMA8EAgACMAkDBwAqB4nAAAAw DQYJKoZIhvcNAQELBQADggEBAGmn9Z3FQJArFl+iSGde9blUMh0Yk4ytT9PHd5mm ix6HJIEV6t7pVVUl1kwjgK51YCR5kgnHiKU97cs52h8SEJaRvscRjiN/GLnn3p62 ReBM0cs5z2BBWYh7A2p81ExOP23nrtjI/h1K2DnT4Pkb/3JGNzG/+oZvW2/cicjG Vet8grZkwPRUXSnlKWCUjj9xbFqQJXpHv/1f7VPMDB3DLsf2qU16MwrKMyz0p1u0 Gdsi1tIS6MvGWgtn5Dzc8Ji+490J1OVpauO/FiWOK3DEw/OhT3Gl9XVgFmESvGXF HM+/IMyWbu2tzjXGcMJ6xPIizmdIhdnYNwcdF1n2eECAjkc= -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:08 2026 by rpki-client