This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/JiEsZ1zOe46gzADySdG16eZ5Sjo.roa File: JiEsZ1zOe46gzADySdG16eZ5Sjo.roa (raw, json) Hash identifier: 0bq0qa1f8p4Ial4yz+WAIFxn5n2T06ajuz5dHOKo9Bg= Subject key identifier: 26:21:2C:67:5C:CE:7B:8E:A0:CC:00:F2:49:D1:B5:E9:E6:79:4A:3A Certificate issuer: /CN=fd261d45319e8375187436da44bf5b9adb044a7f Certificate serial: 019B7DCACF9B13A98FC473BC9DDA425AEC89 Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/JiEsZ1zOe46gzADySdG16eZ5Sjo.roa Signing time: Fri 02 Jan 2026 08:20:02 +0000 ROA not before: Fri 02 Jan 2026 08:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8758 IP address blocks: 31.24.8.0/21 maxlen: 24 37.46.144.0/22 maxlen: 24 77.74.96.0/21 maxlen: 24 80.89.208.0/20 maxlen: 24 83.150.0.0/18 maxlen: 24 84.254.80.0/20 maxlen: 24 84.254.96.0/20 maxlen: 24 87.239.200.0/21 maxlen: 24 88.218.24.0/22 maxlen: 24 91.84.64.0/19 maxlen: 24 95.143.48.0/20 maxlen: 24 109.70.112.0/21 maxlen: 24 109.70.115.0/24 maxlen: 24 109.70.116.0/22 maxlen: 24 125.3.64.0/19 maxlen: 24 145.40.192.0/19 maxlen: 24 155.2.224.0/19 maxlen: 24 157.143.0.0/17 maxlen: 24 178.22.104.0/21 maxlen: 24 178.250.130.0/23 maxlen: 24 185.109.164.0/22 maxlen: 24 185.160.244.0/22 maxlen: 24 185.203.132.0/22 maxlen: 24 188.137.160.0/20 maxlen: 24 194.31.128.0/23 maxlen: 24 194.246.118.0/23 maxlen: 24 212.25.0.0/19 maxlen: 24 217.22.128.0/20 maxlen: 24 217.71.240.0/20 maxlen: 24 217.150.224.0/20 maxlen: 24 2001:8e0::/29 maxlen: 48 2a00:10c0::/32 maxlen: 32 2a01:bd00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:cf:9b:13:a9:8f:c4:73:bc:9d:da:42:5a:ec:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=26212c675cce7b8ea0cc00f249d1b5e9e6794a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:c9:15:6e:86:7b:cb:ce:c8:b2:59:9a:67: 2e:42:68:d6:fe:7f:1f:71:72:1a:e3:48:c4:2c:e1: b0:26:26:e6:06:d0:1a:6e:dc:d4:88:e0:35:7a:08: 54:e4:39:fd:5c:93:22:0f:58:f9:0c:c1:d1:7c:44: 1a:e6:b4:14:bb:b7:c8:aa:0b:c6:37:f2:59:e8:cf: ac:af:b1:34:dc:b7:f0:b6:cb:89:aa:97:be:ef:72: e3:05:d1:1e:c8:4a:9d:b2:01:cc:03:7d:4b:89:03: 7d:7b:83:4a:9e:f8:42:5f:b7:60:84:7b:e4:32:64: 5d:9a:e2:e4:28:a8:8f:e4:d1:51:42:28:63:7c:03: 84:18:ef:6c:11:68:32:fc:ce:69:a8:6e:3e:76:31: 45:eb:f2:93:b1:24:a6:ff:1d:a9:7b:84:7d:7d:d7: ba:e4:87:66:76:05:f5:cb:89:15:fa:73:4b:8a:f7: fb:4a:e5:67:07:71:bc:a3:b8:18:3a:69:e6:c7:7e: f7:01:4a:15:80:fa:49:7b:a9:e8:56:6d:a8:e7:8d: 24:67:ee:94:60:3b:1a:9b:2f:92:72:a4:d5:52:22: 5b:cb:45:a4:4c:1c:57:8a:ef:0a:ab:12:3c:70:a7: 35:59:58:a3:5e:78:dc:e2:66:b0:2c:f6:be:97:9a: 8e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:21:2C:67:5C:CE:7B:8E:A0:CC:00:F2:49:D1:B5:E9:E6:79:4A:3A X509v3 Authority Key Identifier: keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/JiEsZ1zOe46gzADySdG16eZ5Sjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.8.0/21 37.46.144.0/22 77.74.96.0/21 80.89.208.0/20 83.150.0.0/18 84.254.80.0-84.254.111.255 87.239.200.0/21 88.218.24.0/22 91.84.64.0/19 95.143.48.0/20 109.70.112.0/21 125.3.64.0/19 145.40.192.0/19 155.2.224.0/19 157.143.0.0/17 178.22.104.0/21 178.250.130.0/23 185.109.164.0/22 185.160.244.0/22 185.203.132.0/22 188.137.160.0/20 194.31.128.0/23 194.246.118.0/23 212.25.0.0/19 217.22.128.0/20 217.71.240.0/20 217.150.224.0/20 IPv6: 2001:8e0::/29 2a00:10c0::/32 2a01:bd00::/32 Signature Algorithm: sha256WithRSAEncryption 2a:93:61:77:b5:42:46:a0:45:d9:52:50:3c:27:f9:32:4f:56: 80:37:9f:da:8c:14:ae:c1:d5:e9:31:97:bc:62:06:9c:72:b4: 90:28:c9:24:2d:7e:a9:e9:a3:75:6f:b0:6c:c4:92:f9:c8:92: c7:48:9f:02:ab:c7:ba:20:36:d7:1f:cf:f9:4d:bc:77:68:48: cd:51:9f:f7:22:8b:ff:eb:c9:7f:52:88:7c:57:aa:37:10:80: e4:6a:e0:8e:50:a5:a5:c1:8a:31:9c:e6:c8:d4:df:c8:f4:7d: db:e9:44:f5:2d:2b:17:58:72:5f:6d:c5:85:51:20:57:3f:d8: 5e:1c:76:31:89:20:b3:d5:d9:d9:90:4d:e8:6e:23:b4:6b:29: 66:b5:b7:59:e2:97:fa:17:e3:c3:ec:d7:2c:7a:d7:5f:df:f1: 7a:88:62:d0:d7:5d:77:f4:b1:01:08:35:9e:58:3a:00:4f:54: d0:92:ba:22:01:21:c8:84:64:61:1d:b2:39:5b:08:d3:b5:fc: 19:27:06:f7:69:4e:f2:ec:fd:43:7a:b4:2b:c3:96:4d:c5:aa: 07:48:c2:d6:ff:cf:91:dd:40:87:79:41:f5:87:93:29:36:a4: db:e9:6f:da:6c:72:6f:7e:35:de:2c:01:bc:d8:3e:d6:23:ca: 39:a4:d1:7f -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgISAZt9ys+bE6mPxHO8ndpCWuyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMjYxZDQ1MzE5ZTgzNzUxODc0MzZkYTQ0YmY1YjlhZGIw NDRhN2YwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjIxMmM2NzVjY2U3YjhlYTBjYzAwZjI0OWQxYjVlOWU2Nzk0YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG3JFW6Ge8vOyLJZmmcuQmjW/n8f cXIa40jELOGwJibmBtAabtzUiOA1eghU5Dn9XJMiD1j5DMHRfEQa5rQUu7fIqgvG N/JZ6M+sr7E03LfwtsuJqpe+73LjBdEeyEqdsgHMA31LiQN9e4NKnvhCX7dghHvk MmRdmuLkKKiP5NFRQihjfAOEGO9sEWgy/M5pqG4+djFF6/KTsSSm/x2pe4R9fde6 5IdmdgX1y4kV+nNLivf7SuVnB3G8o7gYOmnmx373AUoVgPpJe6noVm2o540kZ+6U YDsamy+ScqTVUiJby0WkTBxXiu8KqxI8cKc1WVijXnjc4mawLPa+l5qO5wIDAQAB o4ICzzCCAsswHQYDVR0OBBYEFCYhLGdcznuOoMwA8knRtenmeUo6MB8GA1UdIwQY MBaAFP0mHUUxnoN1GHQ22kS/W5rbBEp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQt ZWI1MDkzYjIzMWMxLzEvSmlFc1oxek9lNDZnekFEeVNkRzE2ZVo1U2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQtZWI1MDkzYjIzMWMx LzEvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHkBggrBgEFBQcBBwEB/wSB1DCB0TCBsQQCAAEwgaoDBAMf GAgDBAIlLpADBANNSmADBARQWdADBAZTlgAwDAMEBFT+UAMEBFT+YAMEA1fvyAME AljaGAMEBVtUQAMEBF+PMAMEA21GcAMEBX0DQAMEBZEowAMEBZsC4AMEB52PAAME A7IWaAMEAbL6ggMEArltpAMEArmg9AMEArnLhAMEBLyJoAMEAcIfgAMEAcL2dgME BdQZAAMEBNkWgAMEBNlH8AMEBNmW4DAbBAIAAjAVAwUDIAEI4AMFACoAEMADBQAq Ab0AMA0GCSqGSIb3DQEBCwUAA4IBAQAqk2F3tUJGoEXZUlA8J/kyT1aAN5/ajBSu wdXpMZe8YgaccrSQKMkkLX6p6aN1b7BsxJL5yJLHSJ8Cq8e6IDbXH8/5Tbx3aEjN UZ/3Iov/68l/Uoh8V6o3EIDkauCOUKWlwYoxnObI1N/I9H3b6UT1LSsXWHJfbcWF USBXP9heHHYxiSCz1dnZkE3obiO0aylmtbdZ4pf6F+PD7Ncsetdf3/F6iGLQ1113 9LEBCDWeWDoAT1TQkroiASHIhGRhHbI5WwjTtfwZJwb3aU7y7P1DerQrw5ZNxaoH SMLW/8+R3UCHeUH1h5MpNqTb6W/abHJvfjXeLAG82D7WI8o5pNF/ -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:51 2026 by rpki-client