This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jTlwgI-3XYaUn1_rZHQ009Gx-kI.roa File: jTlwgI-3XYaUn1_rZHQ009Gx-kI.roa (raw, json) Hash identifier: jN8rcSdN72xcZNW+HOa7NCpfOdaAarz/OKVLPdMUgqY= Subject key identifier: 8D:39:70:80:8F:B7:5D:86:94:9F:5F:EB:64:74:34:D3:D1:B1:FA:42 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA75E8B7062449FB6DDC6DBD9B249F7 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jTlwgI-3XYaUn1_rZHQ009Gx-kI.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15468 IP address blocks: 5.143.176.0/20 maxlen: 21 5.143.176.0/21 maxlen: 21 5.143.184.0/21 maxlen: 21 31.172.192.0/19 maxlen: 19 31.172.192.0/20 maxlen: 20 31.172.192.0/21 maxlen: 21 31.172.200.0/21 maxlen: 21 31.172.208.0/20 maxlen: 20 31.172.208.0/21 maxlen: 21 31.172.216.0/21 maxlen: 21 62.148.128.0/19 maxlen: 19 62.148.128.0/20 maxlen: 20 62.148.144.0/20 maxlen: 20 94.242.128.0/18 maxlen: 18 94.242.128.0/19 maxlen: 19 94.242.128.0/20 maxlen: 20 94.242.144.0/20 maxlen: 20 94.242.144.0/24 maxlen: 24 94.242.145.0/24 maxlen: 24 94.242.146.0/24 maxlen: 24 94.242.147.0/24 maxlen: 24 94.242.148.0/24 maxlen: 24 94.242.149.0/24 maxlen: 24 94.242.150.0/24 maxlen: 24 94.242.160.0/19 maxlen: 19 94.242.160.0/20 maxlen: 20 94.242.176.0/20 maxlen: 20 95.107.16.0/20 maxlen: 20 95.107.16.0/21 maxlen: 21 95.107.24.0/21 maxlen: 21 95.107.112.0/20 maxlen: 20 95.107.112.0/21 maxlen: 21 95.107.120.0/21 maxlen: 21 109.225.0.0/18 maxlen: 18 109.225.0.0/19 maxlen: 19 109.225.0.0/20 maxlen: 20 109.225.16.0/20 maxlen: 20 109.225.32.0/19 maxlen: 20 212.106.32.0/19 maxlen: 19 212.106.32.0/20 maxlen: 20 212.106.32.0/21 maxlen: 21 212.106.40.0/21 maxlen: 21 212.106.48.0/20 maxlen: 20 212.106.48.0/21 maxlen: 21 212.106.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5e:8b:70:62:44:9f:b6:dd:c6:db:d9:b2:49:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d3970808fb75d86949f5feb647434d3d1b1fa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:de:56:d5:77:92:3c:e5:2c:fb:d3:78:ba:72: 75:8d:9c:4a:f8:7e:01:a3:2f:27:8c:72:5c:a5:bd: b8:a0:07:19:88:09:05:59:bc:e4:2e:31:a2:26:62: 9f:51:c8:bd:5a:48:e8:11:7d:b4:3a:5d:1b:95:78: 74:a5:d3:63:3a:6c:ff:11:62:db:ee:62:82:46:38: 05:a4:cb:71:07:dc:21:c8:be:c9:d2:e5:e1:2e:b6: 63:7c:57:4d:d5:8d:23:1c:04:51:8e:aa:93:e3:b7: 58:46:7b:ab:e8:b3:11:27:9f:2b:d0:b4:bd:36:2b: e5:10:b2:5b:8b:b4:0c:8e:05:e8:ff:08:c5:8b:fa: c9:0e:b0:6c:a3:4d:9b:9e:9e:67:87:62:15:d1:71: 2d:e7:3f:e0:d0:d7:a6:bc:3b:a5:67:0c:50:92:a0: 23:fc:c8:fa:a5:22:65:8c:c9:2e:1b:70:dc:43:ba: 4b:d8:a3:2a:7e:f5:c1:7c:a0:ef:f0:ea:91:58:5d: fa:90:d6:d7:59:98:31:9b:91:ae:b7:db:4c:31:ad: 12:b1:0a:89:49:d5:7d:de:93:d4:f6:66:a7:e4:30: 8d:75:d7:74:2d:85:0d:c9:da:9a:a2:2c:21:27:69: 8f:10:56:9d:05:9b:2c:0d:eb:76:01:96:b3:b8:0f: a2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:39:70:80:8F:B7:5D:86:94:9F:5F:EB:64:74:34:D3:D1:B1:FA:42 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jTlwgI-3XYaUn1_rZHQ009Gx-kI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.143.176.0/20 31.172.192.0/19 62.148.128.0/19 94.242.128.0/18 95.107.16.0/20 95.107.112.0/20 109.225.0.0/18 212.106.32.0/19 Signature Algorithm: sha256WithRSAEncryption 44:f9:5d:d7:e2:4c:8b:3b:cb:0d:a0:0e:84:6c:14:f9:e9:6c: c2:aa:f7:5a:2c:d8:de:bb:53:53:47:2a:86:20:e2:0a:bc:85: c1:fb:58:5b:0b:d9:fe:14:ac:3b:bb:d4:7f:f5:66:a6:5e:97: 14:8b:27:a4:00:c0:f4:11:d2:bb:9a:a8:75:5b:0a:91:7d:69: d9:e9:ab:ee:f4:ce:76:4f:7d:f5:91:2e:21:65:57:e1:12:f9: 3a:14:82:26:14:8f:2f:19:0f:f7:6b:ca:48:57:5d:21:5d:ec: 20:c6:99:1b:c6:e3:08:79:19:03:80:c0:f5:35:32:16:6f:60: da:9e:be:86:72:93:6d:f3:8d:0e:49:82:fe:65:25:09:52:31: 3d:0a:a1:4b:6e:c2:d9:6b:3c:a3:b8:9b:40:c9:2d:93:f7:3e: 3a:09:42:8a:72:7f:44:50:59:ce:54:46:42:25:ab:e4:67:51: 9d:cb:bd:06:8d:54:1e:4b:87:7f:49:02:eb:af:9a:79:6e:6b: a3:46:1c:ff:2b:da:49:71:08:4d:b6:f8:25:d5:5d:d7:a3:28: f1:5f:34:16:b5:8a:5e:72:55:d6:6a:b1:42:bc:27:1c:6c:a4: 2e:38:2a:84:57:b0:f4:04:56:35:a9:35:2e:76:6c:27:8f:20: 7b:96:5a:1f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt+p16LcGJEn7bdxtvZskn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDM5NzA4MDhmYjc1ZDg2OTQ5ZjVmZWI2NDc0MzRkM2QxYjFmYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi95W1XeSPOUs+9N4unJ1jZxK+H4B oy8njHJcpb24oAcZiAkFWbzkLjGiJmKfUci9WkjoEX20Ol0blXh0pdNjOmz/EWLb 7mKCRjgFpMtxB9whyL7J0uXhLrZjfFdN1Y0jHARRjqqT47dYRnur6LMRJ58r0LS9 NivlELJbi7QMjgXo/wjFi/rJDrBso02bnp5nh2IV0XEt5z/g0NemvDulZwxQkqAj /Mj6pSJljMkuG3DcQ7pL2KMqfvXBfKDv8OqRWF36kNbXWZgxm5Gut9tMMa0SsQqJ SdV93pPU9man5DCNddd0LYUNydqaoiwhJ2mPEFadBZssDet2AZazuA+iowIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFI05cICPt12GlJ9f62R0NNPRsfpCMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvalRsd2dJLTNYWWFVbjFfclpIUTAwOUd4LWtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQEBY+wAwQF H6zAAwQFPpSAAwQGXvKAAwQEX2sQAwQEX2twAwQGbeEAAwQF1GogMA0GCSqGSIb3 DQEBCwUAA4IBAQBE+V3X4kyLO8sNoA6EbBT56WzCqvdaLNjeu1NTRyqGIOIKvIXB +1hbC9n+FKw7u9R/9WamXpcUiyekAMD0EdK7mqh1WwqRfWnZ6avu9M52T331kS4h ZVfhEvk6FIImFI8vGQ/3a8pIV10hXewgxpkbxuMIeRkDgMD1NTIWb2Danr6GcpNt 840OSYL+ZSUJUjE9CqFLbsLZazyjuJtAyS2T9z46CUKKcn9EUFnOVEZCJavkZ1Gd y70GjVQeS4d/SQLrr5p5bmujRhz/K9pJcQhNtvgl1V3XoyjxXzQWtYpeclXWarFC vCccbKQuOCqEV7D0BFY1qTUudmwnjyB7llof -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:38 2026 by rpki-client