This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JpkgkUBqb1oHuZj2E4R3E7kQPsg.roa File: JpkgkUBqb1oHuZj2E4R3E7kQPsg.roa (raw, json) Hash identifier: 5zHzPVI09O6YlxBJ+qzvB1Oln1+p9W0lbiy3h1EPIdc= Subject key identifier: 26:99:20:91:40:6A:6F:5A:07:B9:98:F6:13:84:77:13:B9:10:3E:C8 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B08B4DE80311251A529428787B9152F8F Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JpkgkUBqb1oHuZj2E4R3E7kQPsg.roa Signing time: Wed 10 Dec 2025 14:40:29 +0000 ROA not before: Wed 10 Dec 2025 14:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205463 IP address blocks: 2.56.108.0/24 maxlen: 24 2.56.109.0/24 maxlen: 24 45.81.113.0/24 maxlen: 24 45.81.115.0/24 maxlen: 24 45.88.136.0/24 maxlen: 24 45.88.139.0/24 maxlen: 24 45.94.170.0/24 maxlen: 24 45.132.181.0/24 maxlen: 24 45.151.3.0/24 maxlen: 24 77.83.37.0/24 maxlen: 24 85.209.120.0/24 maxlen: 24 193.57.41.0/24 maxlen: 24 194.15.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:b4:de:80:31:12:51:a5:29:42:87:87:b9:15:2f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Dec 10 14:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=26992091406a6f5a07b998f613847713b9103ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:49:d7:5b:40:50:ef:d3:ae:df:88:47:07:2b: c9:fe:a5:18:a3:d2:a0:ad:39:a8:5e:39:f0:1b:14: 9c:d9:03:d1:a9:84:3b:a2:e6:95:41:e0:4d:56:53: b2:af:69:04:f6:11:4d:9a:8f:49:b8:85:e5:3f:30: 64:e1:c1:87:74:33:e0:7b:06:8f:cd:a8:65:be:eb: 6b:95:56:05:c6:00:34:ca:f5:2f:35:79:a2:33:e3: 31:e8:00:66:fc:45:94:61:f1:b6:1f:77:d7:1e:92: 08:76:ca:7b:cc:e2:90:55:df:16:06:2d:5c:0e:8b: 19:b3:a3:42:ab:af:45:68:80:4b:f7:bb:7e:ab:1d: dd:37:ff:21:c0:2b:ee:68:b6:82:89:94:0a:0c:89: 0f:b1:c8:b7:55:18:0b:d0:16:16:a0:9e:69:f5:0f: 04:4c:04:1c:e1:07:5f:b9:e6:f9:6b:27:04:2b:ac: 6e:f7:73:ec:c6:ee:ae:60:63:07:b0:ca:89:52:59: b2:51:c5:52:94:e3:d4:b1:9d:7a:9c:a7:5e:61:a9: e4:8d:f7:a9:16:30:2c:61:0d:8a:58:01:4f:68:87: 90:fd:b6:75:56:ce:19:22:33:35:e4:05:dd:f5:44: cb:5b:07:99:09:e2:7c:ff:2e:c5:d5:6d:3c:13:6b: 7a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:99:20:91:40:6A:6F:5A:07:B9:98:F6:13:84:77:13:B9:10:3E:C8 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JpkgkUBqb1oHuZj2E4R3E7kQPsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.108.0/23 45.81.113.0/24 45.81.115.0/24 45.88.136.0/24 45.88.139.0/24 45.94.170.0/24 45.132.181.0/24 45.151.3.0/24 77.83.37.0/24 85.209.120.0/24 193.57.41.0/24 194.15.52.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:e9:27:ce:8d:1d:30:45:3a:5c:36:ce:32:52:0c:95:39:47: 8b:33:51:b0:08:f2:ef:c8:96:b0:d3:1e:2f:97:43:a1:d3:3d: d1:76:f6:dd:4a:1d:c7:f0:02:ab:d0:31:3e:a2:46:29:56:8b: dd:99:9a:9a:37:bd:11:ee:f3:9f:e6:93:87:3c:3f:3f:b1:a0: 19:4c:10:31:e7:61:62:88:7e:e8:ca:d5:74:17:29:02:12:c8: 80:46:c5:18:52:14:d8:41:cf:c7:1c:4d:09:a4:ee:4e:70:cc: 1f:68:b2:86:49:34:a3:69:76:78:55:0c:7b:3b:22:04:54:de: 61:b2:ae:16:42:0c:db:79:83:30:a8:0d:1a:31:eb:61:17:fe: 02:58:21:aa:0a:5c:bf:87:69:f6:c3:af:52:3c:e4:b2:3a:1e: 2a:90:57:cc:45:c4:96:40:fc:0e:30:f4:cc:5f:d9:28:b1:85: 01:64:55:f4:a8:5b:41:d7:41:f8:50:12:26:35:29:19:06:e5: 25:35:5a:83:7e:5c:c9:75:dd:77:b0:ea:10:14:87:52:f9:ef: 67:c2:6e:53:7c:6e:92:36:39:3b:b9:d1:f3:89:81:cf:92:79: 42:27:fe:f6:8b:e0:f7:1b:71:5f:63:8f:3f:93:75:c3:d7:2b: 64:05:e1:23 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZsItN6AMRJRpSlCh4e5FS+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMjEwMTQ0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjk5MjA5MTQwNmE2ZjVhMDdiOTk4ZjYxMzg0NzcxM2I5MTAzZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiknXW0BQ79Ou34hHByvJ/qUYo9Kg rTmoXjnwGxSc2QPRqYQ7ouaVQeBNVlOyr2kE9hFNmo9JuIXlPzBk4cGHdDPgewaP zahlvutrlVYFxgA0yvUvNXmiM+Mx6ABm/EWUYfG2H3fXHpIIdsp7zOKQVd8WBi1c DosZs6NCq69FaIBL97t+qx3dN/8hwCvuaLaCiZQKDIkPsci3VRgL0BYWoJ5p9Q8E TAQc4Qdfueb5aycEK6xu93Psxu6uYGMHsMqJUlmyUcVSlOPUsZ16nKdeYankjfep FjAsYQ2KWAFPaIeQ/bZ1Vs4ZIjM15AXd9UTLWweZCeJ8/y7F1W08E2t6JQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCaZIJFAam9aB7mY9hOEdxO5ED7IMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvSnBrZ2tVQnFiMW9IdVpqMkU0UjNFN2tRUHNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQBAjhsAwQA LVFxAwQALVFzAwQALViIAwQALViLAwQALV6qAwQALYS1AwQALZcDAwQATVMlAwQA VdF4AwQAwTkpAwQAwg80MA0GCSqGSIb3DQEBCwUAA4IBAQAc6SfOjR0wRTpcNs4y UgyVOUeLM1GwCPLvyJaw0x4vl0Oh0z3RdvbdSh3H8AKr0DE+okYpVovdmZqaN70R 7vOf5pOHPD8/saAZTBAx52FiiH7oytV0FykCEsiARsUYUhTYQc/HHE0JpO5OcMwf aLKGSTSjaXZ4VQx7OyIEVN5hsq4WQgzbeYMwqA0aMethF/4CWCGqCly/h2n2w69S POSyOh4qkFfMRcSWQPwOMPTMX9kosYUBZFX0qFtB10H4UBImNSkZBuUlNVqDflzJ dd13sOoQFIdS+e9nwm5TfG6SNjk7udHziYHPknlCJ/72i+D3G3FfY48/k3XD1ytk BeEj -----END CERTIFICATE-----Generated at Sun Dec 14 08:36:43 2025 by rpki-client