This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa File: nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa (raw, json) Hash identifier: bO16KmSqrJMMMxqy56go6I9tZ7emzSjvu3bgctCivCY= Subject key identifier: 9C:9E:CD:FD:00:2A:C1:36:40:65:D4:F4:62:44:94:A4:9C:8A:A8:F5 Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Certificate serial: 019B7D5C586CC2C311EEF79AA010A1E2C067 Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa Signing time: Fri 02 Jan 2026 06:19:22 +0000 ROA not before: Fri 02 Jan 2026 06:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208398 IP address blocks: 5.45.192.0/18 maxlen: 24 5.255.192.0/18 maxlen: 24 37.9.64.0/18 maxlen: 24 37.140.128.0/18 maxlen: 24 77.88.0.0/18 maxlen: 24 84.252.160.0/19 maxlen: 24 87.250.224.0/19 maxlen: 24 90.156.176.0/20 maxlen: 24 92.255.112.0/20 maxlen: 24 92.255.127.0/24 maxlen: 24 93.158.128.0/18 maxlen: 24 95.108.128.0/17 maxlen: 24 141.8.128.0/18 maxlen: 24 178.154.128.0/19 maxlen: 24 178.154.160.0/19 maxlen: 24 185.32.187.0/24 maxlen: 24 213.180.192.0/19 maxlen: 24 2a02:6b8::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:58:6c:c2:c3:11:ee:f7:9a:a0:10:a1:e2:c0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Validity Not Before: Jan 2 06:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c9ecdfd002ac1364065d4f4624494a49c8aa8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:99:bd:5a:68:4f:bb:55:c4:a7:92:82:4e: 0f:af:df:b4:db:56:6a:db:65:06:5e:6c:8c:dd:40: 10:7b:5f:04:00:98:4e:87:10:25:6c:95:2b:d2:aa: b4:78:91:4d:cc:cc:40:13:15:cc:99:b1:16:bf:2a: 36:36:57:c1:8b:20:24:93:22:84:6c:12:63:d2:27: b2:b6:3e:4b:67:66:4a:a5:23:f8:e2:95:89:b1:3c: 9b:a5:f2:36:c0:29:fc:b9:05:26:91:b1:b6:7f:57: 10:7d:19:07:d8:6b:3e:c4:1f:84:18:1d:0e:6e:da: 07:b5:9d:69:5a:e9:e3:1e:e9:ac:10:18:c1:d2:d0: 21:09:97:2a:e4:2a:a0:0b:01:e3:a3:a5:1e:71:49: ee:44:c4:1e:ae:d9:ac:85:12:89:47:81:d9:ed:3e: 82:21:1e:26:4f:04:b7:f6:df:05:a5:02:68:c7:94: 41:22:1e:d0:2c:24:5e:5a:a8:11:dc:86:b0:68:d2: d1:9e:3a:80:71:26:bc:90:b4:f5:09:39:df:1b:f1: 12:75:ef:0b:66:01:cb:77:c9:f1:9e:93:51:71:1d: 53:63:eb:11:05:4a:55:23:9c:5c:f7:c3:1e:b4:08: 76:59:5b:8b:a2:33:7f:21:a6:ff:88:b7:88:bc:e6: 54:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9E:CD:FD:00:2A:C1:36:40:65:D4:F4:62:44:94:A4:9C:8A:A8:F5 X509v3 Authority Key Identifier: keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/nJ7N_QAqwTZAZdT0YkSUpJyKqPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.192.0/18 5.255.192.0/18 37.9.64.0/18 37.140.128.0/18 77.88.0.0/18 84.252.160.0/19 87.250.224.0/19 90.156.176.0/20 92.255.112.0/20 93.158.128.0/18 95.108.128.0/17 141.8.128.0/18 178.154.128.0/18 185.32.187.0/24 213.180.192.0/19 IPv6: 2a02:6b8::/29 Signature Algorithm: sha256WithRSAEncryption 39:c0:df:9a:12:6f:6a:36:7e:76:a0:b4:b6:54:57:17:27:09: 2f:4d:3c:e4:8d:73:0f:c6:90:8b:24:56:5c:62:e3:51:64:40: f7:c4:36:6f:15:08:78:c1:5f:9c:d8:33:9e:5f:00:46:d7:d4: 70:e9:9d:47:81:7f:bf:20:a8:53:f6:e8:b3:15:ca:28:99:d1: 28:55:2c:23:6f:d4:2c:1b:9d:26:21:0e:e5:91:09:3c:9e:a2: 9a:2d:45:89:75:7f:e9:00:e5:be:ec:eb:99:56:8e:fa:4f:88: 2f:d0:29:fd:5a:31:e1:5e:3c:cd:1e:82:7e:48:b6:68:52:e5: e4:1d:33:94:26:dd:fa:48:37:a2:85:3b:d1:e9:79:9a:ae:43: 50:f4:b8:d0:f7:92:07:b2:43:40:aa:20:75:68:04:05:de:80: b7:59:c9:c2:09:47:55:50:b8:d0:6b:84:d3:64:da:7a:03:e4: 1d:2b:12:5b:9f:fa:28:2f:57:91:53:6b:fe:f9:1f:0b:a3:3d: 42:90:ad:3b:a1:ff:98:29:1a:55:8e:a4:da:a2:18:2a:d8:d1: 12:8d:8f:27:98:b6:ee:e5:46:48:0e:c8:b2:02:f0:8d:5a:4a: 69:a2:21:d1:91:e4:56:9e:be:20:99:53:a6:1a:99:8e:fe:2f: 57:97:c5:df -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt9XFhswsMR7veaoBCh4sBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1 NzgzNDIwHhcNMjYwMTAyMDYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzllY2RmZDAwMmFjMTM2NDA2NWQ0ZjQ2MjQ0OTRhNDljOGFhOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2OZvVpoT7tVxKeSgk4Pr9+021Zq 22UGXmyM3UAQe18EAJhOhxAlbJUr0qq0eJFNzMxAExXMmbEWvyo2NlfBiyAkkyKE bBJj0ieytj5LZ2ZKpSP44pWJsTybpfI2wCn8uQUmkbG2f1cQfRkH2Gs+xB+EGB0O btoHtZ1pWunjHumsEBjB0tAhCZcq5CqgCwHjo6UecUnuRMQertmshRKJR4HZ7T6C IR4mTwS39t8FpQJox5RBIh7QLCReWqgR3IawaNLRnjqAcSa8kLT1CTnfG/ESde8L ZgHLd8nxnpNRcR1TY+sRBUpVI5xc98MetAh2WVuLojN/Iab/iLeIvOZUAwIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFJyezf0AKsE2QGXU9GJElKSciqj1MB8GA1UdIwQY MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt MmNkOThlZTUzNTY5LzEvbko3Tl9RQXF3VFpBWmRUMFlrU1VwSnlLcVBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5 LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWgMEBgUtwAME BgX/wAMEBiUJQAMEBiWMgAMEBk1YAAMEBVT8oAMEBVf64AMEBFqcsAMEBFz/cAME Bl2egAMEB19sgAMEBo0IgAMEBrKagAMEALkguwMEBdW0wDANBAIAAjAHAwUDKgIG uDANBgkqhkiG9w0BAQsFAAOCAQEAOcDfmhJvajZ+dqC0tlRXFycJL0085I1zD8aQ iyRWXGLjUWRA98Q2bxUIeMFfnNgznl8ARtfUcOmdR4F/vyCoU/bosxXKKJnRKFUs I2/ULBudJiEO5ZEJPJ6imi1FiXV/6QDlvuzrmVaO+k+IL9Ap/Vox4V48zR6Cfki2 aFLl5B0zlCbd+kg3ooU70el5mq5DUPS40PeSB7JDQKogdWgEBd6At1nJwglHVVC4 0GuE02TaegPkHSsSW5/6KC9XkVNr/vkfC6M9QpCtO6H/mCkaVY6k2qIYKtjREo2P J5i27uVGSA7IsgLwjVpKaaIh0ZHkVp6+IJlTphqZjv4vV5fF3w== -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:33 2026 by rpki-client