This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jBQAiIsROr_1EhT-CUgcs1LWons.roa File: jBQAiIsROr_1EhT-CUgcs1LWons.roa (raw, json) Hash identifier: 5EZwJPgGgYgv1S0fp6gbiTUNZZ3hdIZnOjtYdZ3Wq2o= Subject key identifier: 8C:14:00:88:8B:11:3A:BF:F5:12:14:FE:09:48:1C:B3:52:D6:A2:7B Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B4BB9DC71319A176116F9E9198D191500 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jBQAiIsROr_1EhT-CUgcs1LWons.roa Signing time: Tue 23 Dec 2025 15:00:30 +0000 ROA not before: Tue 23 Dec 2025 15:00:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 83.219.99.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 91.92.67.0/24 maxlen: 24 91.92.248.0/21 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 194.31.222.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 212.73.149.0/24 maxlen: 24 212.87.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:b9:dc:71:31:9a:17:61:16:f9:e9:19:8d:19:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 23 15:00:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8c1400888b113abff51214fe09481cb352d6a27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:d4:60:eb:a5:82:f5:d0:b5:53:cd:d0:63: 23:e7:44:87:be:2c:a4:45:9c:90:49:6d:94:1e:cd: 1b:14:ed:81:3f:83:c8:48:68:65:f5:70:00:02:b6: 4c:93:a4:b4:ac:28:f5:cc:bb:e7:eb:1d:a8:03:d2: 02:be:22:05:c6:4a:f6:f7:85:44:7c:88:a7:82:3d: dd:46:71:d0:2c:4c:f4:0a:23:a0:5e:ae:20:4b:8c: 90:ad:c7:c9:ca:92:f8:07:29:f8:62:56:74:1a:6d: 17:d9:ab:71:ef:1d:c1:0c:6c:60:33:2c:b2:4a:8a: 3a:46:31:fa:8c:72:59:0c:c4:e3:3e:89:fa:fd:83: 09:0b:da:3b:bd:11:9c:0d:05:40:c1:f8:38:67:e3: 60:6a:e8:3b:ca:b6:13:6d:35:82:26:dd:6e:3e:60: dd:43:d8:97:ed:ec:29:50:7b:4a:fe:6b:5a:ab:5e: 68:6a:5b:c1:37:8c:b6:b6:5b:01:f6:c1:ae:bf:ec: 53:1a:39:b3:8f:0c:aa:32:17:d1:12:bb:b6:2b:61: 00:0e:c4:1c:d0:c5:c1:f5:10:1b:42:5b:cd:17:32: d8:f1:0f:1b:35:f6:4f:2a:6d:7d:45:00:82:53:29: a5:c5:2e:97:d6:d0:d5:f0:de:33:29:8a:fe:26:f2: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:14:00:88:8B:11:3A:BF:F5:12:14:FE:09:48:1C:B3:52:D6:A2:7B X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jBQAiIsROr_1EhT-CUgcs1LWons.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 83.219.99.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.121.60.0/23 87.121.132.0/22 87.121.165.0/24 91.92.67.0/24 91.92.248.0/21 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 185.222.160.0/24 193.25.216.0/24 194.31.222.0/24 194.55.186.0/24 194.169.175.0/24 212.73.149.0/24 212.87.204.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:c5:54:62:53:5e:34:4b:a7:64:97:b9:bb:93:36:6a:61:65: ba:d4:c1:36:0d:26:36:c4:a8:95:05:10:a1:a6:3e:13:3e:7f: 3b:f4:81:e5:06:40:ec:80:c4:71:5e:2d:b3:7a:06:6d:b3:3c: d3:50:94:e1:64:ce:ed:87:8d:2d:f9:d2:83:27:8a:f7:89:0e: fe:00:c9:ec:f4:2a:c9:a2:17:a1:98:2b:d4:b2:98:79:2d:c0: f6:f0:da:57:1f:f6:8d:47:c0:4d:b4:57:84:bc:c8:a6:ca:51: 98:59:1a:e7:27:5b:a0:15:e7:2f:d0:64:4e:42:7d:20:f0:61: 40:08:4a:90:4b:5a:8f:90:69:38:38:03:57:f5:f2:7b:dd:00: 10:4a:15:53:33:cb:27:07:51:f2:eb:7d:df:fc:f5:0b:92:d2: 3d:fe:5d:0c:56:e8:9f:ac:14:8b:d3:73:ec:6e:6e:6b:ca:b9: 15:17:6d:1a:00:e9:f5:b3:ff:31:1b:3c:ea:8d:19:f8:90:33: b1:7d:83:02:f0:73:c2:31:7a:75:2d:26:3e:5f:a9:01:ae:46: 89:4b:25:e8:75:2a:a8:3a:62:23:8d:6c:6a:18:88:dc:c4:ac: a5:fa:7b:97:98:3e:91:05:3e:3a:53:b5:6e:85:50:57:99:ef: 0c:b5:b1:f7 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZtLudxxMZoXYRb56RmNGRUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjIzMTUwMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzE0MDA4ODhiMTEzYWJmZjUxMjE0ZmUwOTQ4MWNiMzUyZDZhMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDHUYOulgvXQtVPN0GMj50SHviyk RZyQSW2UHs0bFO2BP4PISGhl9XAAArZMk6S0rCj1zLvn6x2oA9ICviIFxkr294VE fIingj3dRnHQLEz0CiOgXq4gS4yQrcfJypL4Byn4YlZ0Gm0X2atx7x3BDGxgMyyy Soo6RjH6jHJZDMTjPon6/YMJC9o7vRGcDQVAwfg4Z+Ngaug7yrYTbTWCJt1uPmDd Q9iX7ewpUHtK/mtaq15oalvBN4y2tlsB9sGuv+xTGjmzjwyqMhfREru2K2EADsQc 0MXB9RAbQlvNFzLY8Q8bNfZPKm19RQCCUymlxS6X1tDV8N4zKYr+JvL6yQIDAQAB o4ICnjCCApowHQYDVR0OBBYEFIwUAIiLETq/9RIU/glIHLNS1qJ7MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvakJRQWlJc1JPcl8xRWhULUNVZ2NzMUxXb25zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAt QuQDBAAtQucDBAAtWfcDBAAtjZ4DBABRoe4DBABT22MDBAFV2YIDBABXeFcDBABX eH4DBABXeKYDBAFXeTwDBAJXeYQDBABXeaUDBABbXEMDBANbXPgDBAFcd8QDBABc +TIDBABde20DBAC53qADBADBGdgDBADCH94DBADCN7oDBADCqa8DBADUSZUDBADU V8wwDQYJKoZIhvcNAQELBQADggEBACrFVGJTXjRLp2SXubuTNmphZbrUwTYNJjbE qJUFEKGmPhM+fzv0geUGQOyAxHFeLbN6Bm2zPNNQlOFkzu2HjS350oMniveJDv4A yez0KsmiF6GYK9SymHktwPbw2lcf9o1HwE20V4S8yKbKUZhZGucnW6AV5y/QZE5C fSDwYUAISpBLWo+QaTg4A1f18nvdABBKFVMzyycHUfLrfd/89QuS0j3+XQxW6J+s FIvTc+xubmvKuRUXbRoA6fWz/zEbPOqNGfiQM7F9gwLwc8IxenUtJj5fqQGuRolL Jeh1Kqg6YiONbGoYiNzErKX6e5eYPpEFPjpTtW6FUFeZ7wy1sfc= -----END CERTIFICATE-----Generated at Sun Dec 28 22:27:25 2025 by rpki-client